last executing test programs: 1m20.931801496s ago: executing program 3 (id=994): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x1, 0x1, 0x0, 0x0, 0x82680027, r1}) r2 = socket(0x10, 0x80003, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x400}) 1m20.892207338s ago: executing program 3 (id=995): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 1m20.650164652s ago: executing program 3 (id=998): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) r2 = syz_io_uring_setup(0x800531b, &(0x7f0000000400)={0x0, 0xfb82, 0x1, 0x2}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r1, 0x0, &(0x7f0000002080)={&(0x7f0000000540)=@xdp={0x2c, 0x1, 0x0, 0x33}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="0a087e61bf033e7df67707ef05b95a94b5ac650858c90d9e58d954bc8a1b7ef40539a343a06416df8cf4931fd064a665731ab8fde5477e905abfb5d6e7753b6db0f4c20f7a76a7b551639c8eb03177f20f6c52c17babd930a24776c5b9acdf7345dd1046dc00f5e63755e8661b15a0e778478fce63460d04c3", 0x79}, {&(0x7f0000000640)="0555894b4f65845ffb7150961b3286b56efb31c6d98cc097a235c820d0e2560ebe07a444b6853885d7b311168ec0439f5b43f1cca9fc4cbc4413853be56ff0c3771cd813b458fc2831fe37fd8dcdc8bb50ac2a069b919ebd68ed098669a9358e3faa255fcc", 0x65}, {&(0x7f00000006c0)="21353a720e9187869a8736cad0c448415ce78c8fa92379d5a48588d9ed86345fcabf4d46800fd0d4c90675e17abe9ae394e4b56f33aebbe3521a1dbdde723fbbb42d3ce1ec9d744ef4c1255013dcfaed33c30c97a328d92eb70c9b19af645059f36df922599b39c480c6614223061f53f8a5b5248de7dff3a1a544514175fbe89d93ff8e4a02edf08f6451c2f3b43deb", 0x90}, {&(0x7f00000004c0)="54e6426457e5726f6edfd7d0f7f72f76733c054b5a20adc9f3965af56ac31dafaf722ef0acc4167e391efba04a548f90be6d9354f4b86c93279d", 0x3a}, {&(0x7f0000000bc0)="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", 0xc00}, {&(0x7f0000001bc0)="09f1f74b7023b582bffbc8469fb6d8f1d2b7a8e577531bbeef8bb081b0cc25e20de51d20eff79b9188bfa22764863989a04c0eb1dc44ad14756ebcb91cd453841cbea023cfc3dcfaa716d46523ec7b00d81711bbbf232d64cdb3c3", 0x5b}], 0x6, &(0x7f0000001cc0)=[{0xac, 0x1, 0x70, "affe73909c0a969d8e65baff1a22041f96ca7c8c78d44d2786c923cc3aec0d4e7fc9112cc5572e46e83f6b58957cc7c8c66a257246aafa027bdedfc7b989e0b8b384811e536bc5d259109dbeb66514e67f0f505c66e845efd271b1b18f9a79e04465ffa6542e30f67a5867a73d6e39c39d5c1945387afcfee3fdc3e1e580560a10a433bd1ed70d591f17f848a95df18ab3408d306b78dec2bf2b3e139397ec"}, {0xa8, 0x0, 0x5c, "6e640f7fc5a67687dd36781d1397080b7c843ff6bce6524c963cd7d977d74aab38774912f08dbfb9b5bad17dbf1bee53ab99d39d05c4bf7dd54a712b56380d93f1becc33093df69a58e804ed0cf67bf09b484e694f72940335c16c91efab602adf219c7ed4e01255da87c24aafa32b4b5a7bc01263a073819f00a9557baa311331ed7f9ea13025b330a947f4744c5ae0e4ca5daf5e08c08eb9bc41"}, {0x88, 0x107, 0x7, "42ea342fa22ef76e78667633ce3280db4b9cfe92b2ed9233a42e917b8ea696c523d97cf7b55d38b02f668534c1119b043442429e9ad5b4b49c283b8163c0f2adaa888f09ec3ddb568f7a117aaadc1eb92a1a06264664c8b4e0a69e075e68268ba5057fa11360248b23afa2946a5381854d4d823784840b559b50"}, {0x8c, 0x29, 0xa76, "5ce696a1d893326d326161ffb06cdd88ee0e9c09ddd9d1d46d023cda3136a8984b423269e8799d0ab79d8714afa15ddfbb2be1507d0310fff469d9d7f926ead65f952674e4a283fc8f15ec631b6066a1181df23a7d0e9f9287acc2672c62f69361e9facf4195b05d5d7cfdc05bd10ef7ebad5cbc4816d08af8aebad958"}, {0x24, 0x10a, 0x9, "11e0799ae9a1481a7398fc41af5aaa55297322c8b67f277e"}, {0xd0, 0x119, 0xfffffffe, "bc620ef3b478f72def59345746ff36be217d628f3e9455dcc00282145d727ce19fa7aaf4416b76fa21ca074207fe19ed78d8f8f3622dc0eb030705bd54bb9b80d708ba9d93c4e74dffadb08bfb814b307ffb65698caba66155afc79f897149ba8c97333cda4d7149e165c49ee61023212aef7f7020da39b6c5f0ee071e33867ce6d1a40da7cb08d8e07056d382d4b11e1dba1de11fb1e7c8a3ca9a4cd7cee0b122a45f611f7186b3349d583dcd0dd408526e0c0074b523b7f9fae4e904b203fa74c0"}, {0x48, 0x1, 0x200, "4b6d564554fdce504b4b92f78a9d653a8331278454d742ff5c26a33f63c184a4e6441c092cd63870c34f5b54aba51d54dbe76da61de223d20ebd65b3"}], 0x3a4}, 0x0, 0x840, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x2, 0x4, 0x368, 0xffffffff, 0x1b4, 0x1b4, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, [], [], 'syz_tun\x00', 'vlan0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@unspec=@state={{0x24}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @mcast2, [], [], 'batadv_slave_0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@ipv6header={{0x24}, {0x0, 0xf0}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x280408c0}, 0x4040846) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') pread64(r8, &(0x7f00000002c0)=""/163, 0xa3, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r9, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x200) sendfile(r7, r7, 0x0, 0xf) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r10, 0x9) 1m19.734235622s ago: executing program 3 (id=1008): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 1m19.732384119s ago: executing program 3 (id=1009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="01000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000005c0)) 1m19.440524646s ago: executing program 3 (id=1011): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, '.yz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x46]}, 0x30) 1m19.378003154s ago: executing program 32 (id=1011): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, '.yz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x46]}, 0x30) 41.149081672s ago: executing program 2 (id=1270): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) r2 = syz_io_uring_setup(0x800531b, &(0x7f0000000400)={0x0, 0xfb82, 0x1, 0x2}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r1, 0x0, &(0x7f0000002080)={&(0x7f0000000540)=@xdp={0x2c, 0x1, 0x0, 0x33}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="0a087e61bf033e7df67707ef05b95a94b5ac650858c90d9e58d954bc8a1b7ef40539a343a06416df8cf4931fd064a665731ab8fde5477e905abfb5d6e7753b6db0f4c20f7a76a7b551639c8eb03177f20f6c52c17babd930a24776c5b9acdf7345dd1046dc00f5e63755e8661b15a0e778478fce63460d04c3", 0x79}, {0x0}, {&(0x7f00000006c0)="21353a720e9187869a8736cad0c448415ce78c8fa92379d5a48588d9ed86345fcabf4d46800fd0d4c90675e17abe9ae394e4b56f33aebbe3521a1dbdde723fbbb42d3ce1ec9d744ef4c1255013dcfaed33c30c97a328d92eb70c9b19af645059f36df922599b39c480c6614223061f53f8a5b5248de7dff3a1a544514175fbe89d93ff8e4a02edf08f6451c2f3b43debf3b72603", 0x94}, {&(0x7f00000004c0)="54e6426457e5726f6edfd7d0f7f72f76733c054b5a20adc9f3965af56ac31dafaf722ef0acc4167e391efba04a548f90be6d9354f4b86c93279d", 0x3a}, {&(0x7f0000000bc0)="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", 0xc00}, {&(0x7f0000001bc0)="09f1f74b7023b582bffbc8469fb6d8f1d2b7a8e577531bbeef8bb081b0cc25e20de51d20eff79b9188bfa22764863989a04c0eb1dc44ad14756ebcb91cd453841cbea023cfc3dcfaa716d46523ec7b00d81711bbbf232d64cdb3c3", 0x5b}], 0x6, &(0x7f0000001cc0)=[{0xac, 0x1, 0x70, "affe73909c0a969d8e65baff1a22041f96ca7c8c78d44d2786c923cc3aec0d4e7fc9112cc5572e46e83f6b58957cc7c8c66a257246aafa027bdedfc7b989e0b8b384811e536bc5d259109dbeb66514e67f0f505c66e845efd271b1b18f9a79e04465ffa6542e30f67a5867a73d6e39c39d5c1945387afcfee3fdc3e1e580560a10a433bd1ed70d591f17f848a95df18ab3408d306b78dec2bf2b3e139397ec"}, {0xa8, 0x0, 0x5c, "6e640f7fc5a67687dd36781d1397080b7c843ff6bce6524c963cd7d977d74aab38774912f08dbfb9b5bad17dbf1bee53ab99d39d05c4bf7dd54a712b56380d93f1becc33093df69a58e804ed0cf67bf09b484e694f72940335c16c91efab602adf219c7ed4e01255da87c24aafa32b4b5a7bc01263a073819f00a9557baa311331ed7f9ea13025b330a947f4744c5ae0e4ca5daf5e08c08eb9bc41"}, {0x88, 0x107, 0x7, "42ea342fa22ef76e78667633ce3280db4b9cfe92b2ed9233a42e917b8ea696c523d97cf7b55d38b02f668534c1119b043442429e9ad5b4b49c283b8163c0f2adaa888f09ec3ddb568f7a117aaadc1eb92a1a06264664c8b4e0a69e075e68268ba5057fa11360248b23afa2946a5381854d4d823784840b559b50"}, {0x8c, 0x29, 0xa76, "5ce696a1d893326d326161ffb06cdd88ee0e9c09ddd9d1d46d023cda3136a8984b423269e8799d0ab79d8714afa15ddfbb2be1507d0310fff469d9d7f926ead65f952674e4a283fc8f15ec631b6066a1181df23a7d0e9f9287acc2672c62f69361e9facf4195b05d5d7cfdc05bd10ef7ebad5cbc4816d08af8aebad958"}, {0x24, 0x10a, 0x9, "11e0799ae9a1481a7398fc41af5aaa55297322c8b67f277e"}, {0xd0, 0x119, 0xfffffffe, "bc620ef3b478f72def59345746ff36be217d628f3e9455dcc00282145d727ce19fa7aaf4416b76fa21ca074207fe19ed78d8f8f3622dc0eb030705bd54bb9b80d708ba9d93c4e74dffadb08bfb814b307ffb65698caba66155afc79f897149ba8c97333cda4d7149e165c49ee61023212aef7f7020da39b6c5f0ee071e33867ce6d1a40da7cb08d8e07056d382d4b11e1dba1de11fb1e7c8a3ca9a4cd7cee0b122a45f611f7186b3349d583dcd0dd408526e0c0074b523b7f9fae4e904b203fa74c0"}, {0x48, 0x1, 0x200, "4b6d564554fdce504b4b92f78a9d653a8331278454d742ff5c26a33f63c184a4e6441c092cd63870c34f5b54aba51d54dbe76da61de223d20ebd65b3"}], 0x3a4}, 0x0, 0x840, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x2, 0x4, 0x368, 0xffffffff, 0x1b4, 0x1b4, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, [], [], 'syz_tun\x00', 'vlan0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@unspec=@state={{0x24}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @mcast2, [], [], 'batadv_slave_0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@ipv6header={{0x24}, {0x0, 0xf0}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x280408c0}, 0x4040846) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') pread64(r8, &(0x7f00000002c0)=""/163, 0xa3, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r9, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x200) sendfile(r7, r7, 0x0, 0xf) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r10, 0x9) 40.298384312s ago: executing program 2 (id=1272): add_key$user(0x0, 0x0, &(0x7f0000000700)="df24ead320b4dae0859dec60eb0dcc2dc884fd6c88cfeb62ae4c2f2c8581d69df21eb01bc69da23bd57868b2a256c16da38c11e08c3c29dda7a9a5a5d8a838d233b2b0456e3f234c4631071ea196a961cbd82f7162017b5c3e0f63d49402245fc809837fef7fcd4e", 0x68, 0xfffffffffffffffe) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0xf29db7ae9ffd573e, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x800c000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000500)="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", 0x102, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r2], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 39.824229983s ago: executing program 2 (id=1285): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x5, 0x0, &(0x7f0000000540)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xd45da298eeb58485, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 39.461053749s ago: executing program 2 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 39.377907886s ago: executing program 2 (id=1280): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dsp(0xffffff9c, 0x0, 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r5, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x5409, 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000240)=0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65) sendmsg$IPSET_CMD_SWAP(r1, 0x0, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x28, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) 39.020502074s ago: executing program 2 (id=1282): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) r2 = syz_io_uring_setup(0x800531b, &(0x7f0000000400)={0x0, 0xfb82, 0x1, 0x2}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r1, 0x0, &(0x7f0000002080)={&(0x7f0000000540)=@xdp={0x2c, 0x1, 0x0, 0x33}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="0a087e61bf033e7df67707ef05b95a94b5ac650858c90d9e58d954bc8a1b7ef40539a343a06416df8cf4931fd064a665731ab8fde5477e905abfb5d6e7753b6db0f4c20f7a76a7b551639c8eb03177f20f6c52c17babd930a24776c5b9acdf7345dd1046dc00f5e63755e8661b15a0e778478fce63460d04c3", 0x79}, {&(0x7f0000000640)}, {&(0x7f00000006c0)="21353a720e9187869a8736cad0c448415ce78c8fa92379d5a48588d9ed86345fcabf4d46800fd0d4c90675e17abe9ae394e4b56f33aebbe3521a1dbdde723fbbb42d3ce1ec9d744ef4c1255013dcfaed33c30c97a328d92eb70c9b19af645059f36df922599b39c480c6614223061f53f8a5b5248de7dff3a1a544514175fbe89d93ff8e4a02edf08f6451c2f3b43debf3b72603", 0x94}, {&(0x7f00000004c0)="54e6426457e5726f6edfd7d0f7f72f76733c054b5a20adc9f3965af56ac31dafaf722ef0acc4167e391efba04a548f90be6d9354f4b86c93279d", 0x3a}, {&(0x7f0000000bc0)="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", 0xc00}, {&(0x7f0000001bc0)="09f1f74b7023b582bffbc8469fb6d8f1d2b7a8e577531bbeef8bb081b0cc25e20de51d20eff79b9188bfa22764863989a04c0eb1dc44ad14756ebcb91cd453841cbea023cfc3dcfaa716d46523ec7b00d81711bbbf232d64cdb3c3", 0x5b}], 0x6, &(0x7f0000001cc0)=[{0xac, 0x1, 0x70, "affe73909c0a969d8e65baff1a22041f96ca7c8c78d44d2786c923cc3aec0d4e7fc9112cc5572e46e83f6b58957cc7c8c66a257246aafa027bdedfc7b989e0b8b384811e536bc5d259109dbeb66514e67f0f505c66e845efd271b1b18f9a79e04465ffa6542e30f67a5867a73d6e39c39d5c1945387afcfee3fdc3e1e580560a10a433bd1ed70d591f17f848a95df18ab3408d306b78dec2bf2b3e139397ec"}, {0xa8, 0x0, 0x5c, "6e640f7fc5a67687dd36781d1397080b7c843ff6bce6524c963cd7d977d74aab38774912f08dbfb9b5bad17dbf1bee53ab99d39d05c4bf7dd54a712b56380d93f1becc33093df69a58e804ed0cf67bf09b484e694f72940335c16c91efab602adf219c7ed4e01255da87c24aafa32b4b5a7bc01263a073819f00a9557baa311331ed7f9ea13025b330a947f4744c5ae0e4ca5daf5e08c08eb9bc41"}, {0x88, 0x107, 0x7, "42ea342fa22ef76e78667633ce3280db4b9cfe92b2ed9233a42e917b8ea696c523d97cf7b55d38b02f668534c1119b043442429e9ad5b4b49c283b8163c0f2adaa888f09ec3ddb568f7a117aaadc1eb92a1a06264664c8b4e0a69e075e68268ba5057fa11360248b23afa2946a5381854d4d823784840b559b50"}, {0x8c, 0x29, 0xa76, "5ce696a1d893326d326161ffb06cdd88ee0e9c09ddd9d1d46d023cda3136a8984b423269e8799d0ab79d8714afa15ddfbb2be1507d0310fff469d9d7f926ead65f952674e4a283fc8f15ec631b6066a1181df23a7d0e9f9287acc2672c62f69361e9facf4195b05d5d7cfdc05bd10ef7ebad5cbc4816d08af8aebad958"}, {0x24, 0x10a, 0x9, "11e0799ae9a1481a7398fc41af5aaa55297322c8b67f277e"}, {0xd0, 0x119, 0xfffffffe, "bc620ef3b478f72def59345746ff36be217d628f3e9455dcc00282145d727ce19fa7aaf4416b76fa21ca074207fe19ed78d8f8f3622dc0eb030705bd54bb9b80d708ba9d93c4e74dffadb08bfb814b307ffb65698caba66155afc79f897149ba8c97333cda4d7149e165c49ee61023212aef7f7020da39b6c5f0ee071e33867ce6d1a40da7cb08d8e07056d382d4b11e1dba1de11fb1e7c8a3ca9a4cd7cee0b122a45f611f7186b3349d583dcd0dd408526e0c0074b523b7f9fae4e904b203fa74c0"}, {0x48, 0x1, 0x200, "4b6d564554fdce504b4b92f78a9d653a8331278454d742ff5c26a33f63c184a4e6441c092cd63870c34f5b54aba51d54dbe76da61de223d20ebd65b3"}], 0x3a4}, 0x0, 0x840, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x2, 0x4, 0x368, 0xffffffff, 0x1b4, 0x1b4, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, [], [], 'syz_tun\x00', 'vlan0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@unspec=@state={{0x24}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @mcast2, [], [], 'batadv_slave_0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@ipv6header={{0x24}, {0x0, 0xf0}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x280408c0}, 0x4040846) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') pread64(r8, &(0x7f00000002c0)=""/163, 0xa3, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r9, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x200) sendfile(r7, r7, 0x0, 0xf) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r10, 0x9) 38.972066325s ago: executing program 33 (id=1282): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) r2 = syz_io_uring_setup(0x800531b, &(0x7f0000000400)={0x0, 0xfb82, 0x1, 0x2}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r1, 0x0, &(0x7f0000002080)={&(0x7f0000000540)=@xdp={0x2c, 0x1, 0x0, 0x33}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="0a087e61bf033e7df67707ef05b95a94b5ac650858c90d9e58d954bc8a1b7ef40539a343a06416df8cf4931fd064a665731ab8fde5477e905abfb5d6e7753b6db0f4c20f7a76a7b551639c8eb03177f20f6c52c17babd930a24776c5b9acdf7345dd1046dc00f5e63755e8661b15a0e778478fce63460d04c3", 0x79}, {&(0x7f0000000640)}, {&(0x7f00000006c0)="21353a720e9187869a8736cad0c448415ce78c8fa92379d5a48588d9ed86345fcabf4d46800fd0d4c90675e17abe9ae394e4b56f33aebbe3521a1dbdde723fbbb42d3ce1ec9d744ef4c1255013dcfaed33c30c97a328d92eb70c9b19af645059f36df922599b39c480c6614223061f53f8a5b5248de7dff3a1a544514175fbe89d93ff8e4a02edf08f6451c2f3b43debf3b72603", 0x94}, {&(0x7f00000004c0)="54e6426457e5726f6edfd7d0f7f72f76733c054b5a20adc9f3965af56ac31dafaf722ef0acc4167e391efba04a548f90be6d9354f4b86c93279d", 0x3a}, {&(0x7f0000000bc0)="da088f71393f89fe0099e09d622c1960fa869c2bce81ed9acd9b4b6e4a3ad1b1964f96afecbbd9a44d45f1e0294397273a1279b6db8d3da378df347432313bfdc8e8e4fd50740d750dea35fd13151923b929f83841aa4403cae5403ebc3e318b4d5cd335a6e1de86a1534159bc2bbd2b970c9602f359e96ead0674189c840c9741053148a27ded4289ae2af05d6531c77f542813cc8dba50e1d53fe911049e88771dae5de6333f6c4aa268df563623ac9b94d7e4adfc3af9fea77d54b1aa3158689ebf770b0e5857fb96f8dd4f0a97b3f709e70bb88ca8d8719d7054b55e672ab6ad065ee97872fb4ee3bd43693e0f46cd5fac5fe1e920ff1816d8fae4f72c4391ca554a6a4c0799d1c9b26f2893ed3ab9c26eab86d9260245906744e37031dd2a47eba28057cc3dff52fa46e09bd0ede31c0504aa1d81b2310edc9315f2646809902038bd7fd1f429b0640c284347cabe0b8840404241b67159a779119951ff92a9ed70551abef95bc60d723cf33cbe58161723e2d0e879173f10aa46c6b226d5cc9bd5ad18b9b5190d9a954ed6f61b29c98bcbd0d947be07d1f086d7eaf4dbebf82acc985466a7d615350aa95f4b1e9848f178635c14b92ae585fdc40ca6565a56772affcab9186c3d623182ee8b1df5dcedb339315e6c33f5842ca15ba13bdcd1389f1853a5583dc2f763c2ae81c1c6f07186244bba96026e37b5e91f629c2eac534d05253b627414ff758de48676457ebae4aebc0efa4e0eb4a6274e966302f31755eeeb310b74b4fe471bb467290ca0bb28a8cbb2edeac94590a0d505930a93cc77339bc945c9af47fb8fb63cb8f79a4e8dcc11748a60bcd802122aa722d24e7dc27fca40415052f609a62bf94b852ed5bcf142b48c95a73557ac0da5d30eefc503debb7536bf09203aeeddedec394f837762ebbc31944e81cdc78ad4bf040ec6dc40de4f54a83ccf039cf10dae04e3306c77dd58318d1753f148daea987a6b7d985a41e2b50c6c3e412981383d63f1586b84e939661ee055ffb68f86cd2326258f302773e81b5ee5e191d222209005e5052cd2a4872e7cab08686037f8de754d58b963b704386b4e8eec0ccbfd31069100493f1f390af268b120be3dee1505f6c6f307130a9146ec03b0be028e6de9ffd0e196c4a3a8e409b3a583de1dd612ffa4a01ac701d1a80cafcfb01cd2f2b6f2ad61549ae25ca1aa2cf2bbf9cd834ce4b9dad3ab4653122c0096006560e541f9039ba5cd86d2b796da79d808239371d15514be80b4df8fed15f27cfa89f013f47020606ea6449b9d362c5245f67d598841f734dfe5e2f95aaa100f5492ca8d4e071f8295c1ae50b5e19dedf19f57f253868636d7b3f79a8a90e5859943af928f5f6842bbfaf51d178407dba80e0affc706833d9e5273b976a4d6adaaaf96aff2f66978e57bba0be4bdcb86ad0d19bad27d59937a7b9d63865568b37ed041d0edb1b4ce1de2eabe68129a92632653a93090ca03588b766d24ea9fabdc32cb02b82ff75174470015738d5f52f9df60a588172487ef0165a048cb622744a50d489923ef5ab1ca70085df5ce314d4b7f4504f8d39cb70ff65c17371178323f4c3d319376e9cef95408b9534f2c646754fc96e7efccb0413ad0ffb28ee10215c44e997921c6ab6a7d24208eeaf810051cbc8a270beaa638568b962cec690b3d90cce754536bbf3fa2bbfb6dd5b83126e1484fcdd25fc4e513a4595c0d963976ce2cae45c93ac36c5b2cf2369e8a58a73274966e1bdd787a0416580562f5c8e15e8e762af1406f33a1f5863d2eaa6daebd5d8b33d4b9cd8eb7890f80afd834b2f14926495bb2c40892f055cf2f524cf93cbe6847f397832a4f29ff9193d3d0c618ac14b4790369776ccc6cdb792579ff59f092e9576b3a8fa5e5f7046082728ae445abb5eac80e1d7d11a8b12b9a1f231a5ba05287a75fe935be964a029a2e7e5110464d37f2d6c1025e0d37f64e6747444203249a8af35f40410b691251bbd25054cc787eb36f59264484a5356dfed828c3f23a94e8c77d138ad3ef3e07cb02bc0f6aeb7ba5cc02d900b889e8e6368e8a7586c128feb11352cebb916e3a191667da4bea729fe5969daa7ed33416bacce89f82c20349efa2fb4942e5b3991349ba26e5b7ce8a84bd16a14c8458a7ec463ae6cf6d5ed025522dfb9f974d833d383b0b65aab56a7a7bde6d6bac6ea0788ca545d0ad803265bca31d813a54c895fb8ccc1ed18aae91794866ae076d3be2dac5dfb298f21856dd31e271428924d40faf4ce6fb623ce6f49b8aa3c28b0d908b44b6c204486544ab8103661064aa6a61f3080d5420a4894aa79ed031dc65c0822782a110518f7d4c2e2649ade3d2813249fd71fb760ed2f475b3cf6abb0c311b78d96cf1ff6eb5d4f96f10e7cc7a120c21c1e7e29445b337857080a2218c524a48c0073d8832b5c35ff037c9021a2683cbbb08fcabf6f8061b0c220abed2a16e12fec23bb623e120679c5c0cb5362b7f1a8119a389afb46cc71cd72dddc39e2f05454ef0a174c2da49adce39ee63e57d12213b22d91e10c80d2969754f7ea91e808ad8370a794f8e1f38c97843a71746b9548b99e8439ec1e995531fc4ad6fc770223a39af0329968fa06c10fc361d40683c0aa4d8614cf7d2b720a0edf6d2926c3b7fbbb42fcb9d7eaa0b539bc0c081d56b001eb60d6ed79cd6d39563b1a3a71f5b5000eca4ced873a7306305ac2cd92f3b361a14ba07e9199a01c3d25cd2da23dce7c866b09e77d96db82fed2e961560238e56b90e8b32e5a2203c81ec9d2d68c1146e89f42fe8f61cba823c4f0aa35b8e0d3e305ef3b7226c282e1869626bc5cfe0a3879f5638482775345c7aa5f2c2df7641ee267d0765ec419279b30f54430dbcae8c512cc7f69a0c1634a9c65a3f7030c9966e779cda0136b62024f16ff299e363218a326397c8bbd7af699511f9cb744bd7f010ed389e0cfe8efe73ffe63c178ee2d7e69a0a2b7b07b8d8f62aee55d909c433c13f37dc24c4b8e87c572738a96974feb379f3724f6e232a2e0e9dd2e535252faaaa0be95779f3134d65c7a51881501cc911f41d11275ef8ad2f733e2cdbaf7d1e163f21af9d9fe787f2b9e2d329326a9838cc8add8ae7a76b81260ad749054ca439027d2f433d7dbadacc2328d7bcfdba0d364bb384e6ec4d903675163512133ed787c64d97e8fdd23225fc9f5fceadab22de6b190b00999cab6837ca57b15993ccec179231408d951dcc2ed075afa3fb777775d30d0c8cc031162aef50f33f89b238773c2da287f30e1a46aeb9fc4b31d68d12cb38d146a8bc2bfa958f5919904d6fb9d379aa51d7a80fbb072b6fb810778995abc135ba7d8e81ffdfa03e9643adb6e15959ca5608fc6f3c467b7d860d0aec051512279d658f79635b828785c6c1a25ce79feccc49ae987609f0af75bdcae3d5629b200b5a06b9523e00c4efdeb2a7473dd5d4cdc01d52ad78dbded814aeb7ab31acd3bc28f02ec386ac8a7f616bf0ed2aca80ba39d8bca5c58c79d1ea23e40dd0cb04fdfe8f46cd42dee42ad456e409e116368a936dec867502dae1ecb17fb72a524414d6026e5c17b319d597c4bcdf2fec67d373bf88500030074fd16d39a4477f5fd6a3f6405b858a843bd6e01997b155f9aab928f32b99794523287fcef3f9787dad2a4f9d2885de18f0035343b540e3a233b16d8c0b9e1d2eb052d875e5ed2ff44f44998786fdf652ecc07564cb282575450ec19b3dae6cf16b5e3a48c3f88e0290b1476da006dce9f523e70c22bc3537180c58285dc67c0db9e85d895d33970881de427a0dc2e1e0bf62f669f0d4f099940a4043d0e121d8ab89e8dd224ff5aecbf7af732bb63c0f9f174b8adb70e99550145028d82cfbaa3ef854de3f5b4df5aec8d7aaa2dbebbc237cf60c3c86c4df5163c6355f4e92fbad3cc974f5313f0fe3b906ab19612580f9f82cd22e54c93acb068fe442854a1db20e644f996a1694d35599c9609a067dac89d3ea69e885fc19b1701a683342883e480d2ccd1c9741473bf09e0960ab8d83faaf451b8ae2764fdf504b3c87538cc312e1bf5cc0417c3edf1aa456634f76c27c3ef007162ebd896c10c758fcac9a4d6437eb37d935b1367625ec8b8ea2ac7a1d96b184f09b15f69fcc8d1b5903281bcbb0fad75b8d7cdfd53753bdec20969e0758165dd7dee8df29eefe8139329af137ec8c14b209aa17228b4023711fb71b5840ca367c194cb6c767ebbaa734c31caa0451a0ee9787fbdf8eb3845bb48070ff9ab1c5df481a3e5d614eb4938a6079ed5fcb6ed7a6cf39581d18735f1382d960e310b1cb060dd0010c", 0xc00}, {&(0x7f0000001bc0)="09f1f74b7023b582bffbc8469fb6d8f1d2b7a8e577531bbeef8bb081b0cc25e20de51d20eff79b9188bfa22764863989a04c0eb1dc44ad14756ebcb91cd453841cbea023cfc3dcfaa716d46523ec7b00d81711bbbf232d64cdb3c3", 0x5b}], 0x6, &(0x7f0000001cc0)=[{0xac, 0x1, 0x70, "affe73909c0a969d8e65baff1a22041f96ca7c8c78d44d2786c923cc3aec0d4e7fc9112cc5572e46e83f6b58957cc7c8c66a257246aafa027bdedfc7b989e0b8b384811e536bc5d259109dbeb66514e67f0f505c66e845efd271b1b18f9a79e04465ffa6542e30f67a5867a73d6e39c39d5c1945387afcfee3fdc3e1e580560a10a433bd1ed70d591f17f848a95df18ab3408d306b78dec2bf2b3e139397ec"}, {0xa8, 0x0, 0x5c, "6e640f7fc5a67687dd36781d1397080b7c843ff6bce6524c963cd7d977d74aab38774912f08dbfb9b5bad17dbf1bee53ab99d39d05c4bf7dd54a712b56380d93f1becc33093df69a58e804ed0cf67bf09b484e694f72940335c16c91efab602adf219c7ed4e01255da87c24aafa32b4b5a7bc01263a073819f00a9557baa311331ed7f9ea13025b330a947f4744c5ae0e4ca5daf5e08c08eb9bc41"}, {0x88, 0x107, 0x7, "42ea342fa22ef76e78667633ce3280db4b9cfe92b2ed9233a42e917b8ea696c523d97cf7b55d38b02f668534c1119b043442429e9ad5b4b49c283b8163c0f2adaa888f09ec3ddb568f7a117aaadc1eb92a1a06264664c8b4e0a69e075e68268ba5057fa11360248b23afa2946a5381854d4d823784840b559b50"}, {0x8c, 0x29, 0xa76, "5ce696a1d893326d326161ffb06cdd88ee0e9c09ddd9d1d46d023cda3136a8984b423269e8799d0ab79d8714afa15ddfbb2be1507d0310fff469d9d7f926ead65f952674e4a283fc8f15ec631b6066a1181df23a7d0e9f9287acc2672c62f69361e9facf4195b05d5d7cfdc05bd10ef7ebad5cbc4816d08af8aebad958"}, {0x24, 0x10a, 0x9, "11e0799ae9a1481a7398fc41af5aaa55297322c8b67f277e"}, {0xd0, 0x119, 0xfffffffe, "bc620ef3b478f72def59345746ff36be217d628f3e9455dcc00282145d727ce19fa7aaf4416b76fa21ca074207fe19ed78d8f8f3622dc0eb030705bd54bb9b80d708ba9d93c4e74dffadb08bfb814b307ffb65698caba66155afc79f897149ba8c97333cda4d7149e165c49ee61023212aef7f7020da39b6c5f0ee071e33867ce6d1a40da7cb08d8e07056d382d4b11e1dba1de11fb1e7c8a3ca9a4cd7cee0b122a45f611f7186b3349d583dcd0dd408526e0c0074b523b7f9fae4e904b203fa74c0"}, {0x48, 0x1, 0x200, "4b6d564554fdce504b4b92f78a9d653a8331278454d742ff5c26a33f63c184a4e6441c092cd63870c34f5b54aba51d54dbe76da61de223d20ebd65b3"}], 0x3a4}, 0x0, 0x840, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x2, 0x4, 0x368, 0xffffffff, 0x1b4, 0x1b4, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, [], [], 'syz_tun\x00', 'vlan0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@unspec=@state={{0x24}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @mcast2, [], [], 'batadv_slave_0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@ipv6header={{0x24}, {0x0, 0xf0}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x280408c0}, 0x4040846) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') pread64(r8, &(0x7f00000002c0)=""/163, 0xa3, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r9, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x200) sendfile(r7, r7, 0x0, 0xf) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r10, 0x9) 6.229539793s ago: executing program 1 (id=1430): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r4, &(0x7f00000019c0)=""/97, 0x61) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, r8, 0x0, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000002060500000000211b0000361300000000000c000300686173a4bd60820005000400000000000400078005000500020000bc"], 0x34}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x2f) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x8000, @remote, 0x4}, 0x1c) close(r0) ioctl$SG_GET_LOW_DMA(r9, 0x227a, &(0x7f0000000100)) socket(0x2b, 0x1, 0x1) r10 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r10, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000000000000200000018"], 0x24}}], 0x1, 0x0) socket(0x2b, 0x1, 0x1) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 5.237529834s ago: executing program 1 (id=1433): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000001080)={0x6, 0x10, 0x2, 0x5, 0xfe, 0x9, 0x2, 0x7f, 0x1, 0x71, 0x4, 0x53, 0xb}, 0xe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x29) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) shutdown(r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1170, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 4.945497127s ago: executing program 4 (id=1434): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00') socket(0x1e, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xfffb, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x1, 0x3, 0x8, 0xad3f, 0x5, 0x6, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 4.817703129s ago: executing program 0 (id=1435): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="658c000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_procfs(r4, &(0x7f0000000040)='net/igmp\x00') timerfd_create(0x8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="880000000206010823000000000000000000000005000100060000000d000300686173683a6e65740000000005000400800000000900020073797a3100000000050005000a00000013000300686173683a6e65742c6966616365000014000780080013400000003708000640000000070500010007000000050004"], 0x88}}, 0x0) 4.214963064s ago: executing program 0 (id=1437): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r4, &(0x7f00000019c0)=""/97, 0x61) r7 = syz_genetlink_get_family_id$nfc(0x0, r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, r8, 0x0, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000002060500000000211b0000361300000000000c000300686173a4bd60820005000400000000000400078005000500020000bc"], 0x34}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x2f) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x8000, @remote, 0x4}, 0x1c) close(r0) ioctl$SG_GET_LOW_DMA(r9, 0x227a, &(0x7f0000000100)) socket(0x2b, 0x1, 0x1) r10 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r10, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000000000000200000018"], 0x24}}], 0x1, 0x0) socket(0x2b, 0x1, 0x1) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 3.907375573s ago: executing program 4 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x18}, 0x18) write$FUSE_ENTRY(r2, &(0x7f0000000380)={0x90}, 0x90) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x400) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000440)) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x6b, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x12, @multicast2}, '\x00\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0) fcntl$setlease(r5, 0x400, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.820315528s ago: executing program 0 (id=1439): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x24, 0x8, 0x6, 0x1, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f00000d0000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000240)=""/29) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d545499, 0x0, [0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x1000000000000, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.752858595s ago: executing program 4 (id=1440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x4, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000023c0)=""/241, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d3078163030303030303030303030303030372c0001da5280833471f915c7"]) read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) 3.172641375s ago: executing program 1 (id=1442): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x88901) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x40000, 0x2}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x1d, 0x3, 0x1) ioctl$SIOCSIFMTU(r8, 0x8931, &(0x7f0000000080)={'bridge0\x00'}) 2.990989288s ago: executing program 5 (id=1443): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a000000000000080800000000000000000000ff"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) epoll_create(0x400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) eventfd(0x0) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/246, 0xf6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002800000085000000070000009500000000000000e39f790748161e366643c5e0d3d382b7b80c2365e911b6ccf05b1e25fac5bd241e7f39d80ecde6d4c2e1b024b6aa5d3fa776ac09fe956192fa49663939826c4af17725a15f734eb2a4eae9b5b1efc52834a76c98ce512f39dc80d8061a00acd4b1b17c8d7985d9c4a13125aeca6369cf842ab2bd9a5bafe0f655d8e9b2d80a80296fe8cfeff0128e5c32babbf308f13f00000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @remote, @local}, 0xc) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/79, 0x4f}], 0x1, 0x0, 0x3) 2.625561237s ago: executing program 4 (id=1444): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x55}}], 0x1, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x4008af14, &(0x7f0000000040)) ftruncate(r4, 0x10002) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000002000000094"]) epoll_wait(r7, &(0x7f0000000100), 0x0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='objagg_obj_parent_assign\x00', r4, 0x0, 0x6}, 0x18) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x105100) socket(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f07c60000000000000081"], 0x1c}}, 0x0) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000440)={r9, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) 2.608445918s ago: executing program 0 (id=1445): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r4, &(0x7f00000019c0)=""/97, 0x61) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r6) sendmsg$NFC_CMD_DEV_UP(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, r7, 0x0, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000002060500000000211b0000361300000000000c000300686173a4bd60820005000400000000000400078005000500020000bc"], 0x34}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x2f) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x8000, @remote, 0x4}, 0x1c) close(r0) ioctl$SG_GET_LOW_DMA(r8, 0x227a, &(0x7f0000000100)) socket(0x2b, 0x1, 0x1) r9 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r9, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000000000000200000018"], 0x24}}], 0x1, 0x0) socket(0x2b, 0x1, 0x1) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 2.57122267s ago: executing program 5 (id=1446): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000180), 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) fcntl$setlease(r1, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1}) r8 = syz_open_dev$dri(0x0, 0x1f, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, 0x0) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r5, r6, 0x0, 0x8000fb00) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x398, 0x228, 0x228, 0xffffffff, 0x228, 0x0, 0x45c, 0x45c, 0xffffffff, 0x45c, 0x45c, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0x0, 'pim6reg\x00', 'dvmrp0\x00', {0x284867cb942d9816}, {}, 0xbc4f28a3537236dc}, 0xac030000, 0x9c, 0xd0, 0x0, {}, [@common=@addrtype={{0x2c}, {0x2}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @private=0xa010102, @icmp_id=0x66, @port=0x4e20}}}}, {{@uncond, 0x0, 0xb8, 0xec, 0x0, {}, [@common=@unspec=@state={{0x24}, {0x10}}, @common=@inet=@set2={{0x24}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @broadcast, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id, @port=0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00, 0xffffff00, 'virt_wifi0\x00', 'ipvlan1\x00', {0xff}, {}, 0x62, 0x2, 0x14}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @gre_key=0x81, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3f4) 2.229644278s ago: executing program 1 (id=1447): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r4, &(0x7f00000019c0)=""/97, 0x61) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r6) sendmsg$NFC_CMD_DEV_UP(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, r7, 0x0, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000002060500000000211b0000361300000000000c000300686173a4bd60820005000400000000000400078005000500020000bc"], 0x34}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x2f) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x8000, @remote, 0x4}, 0x1c) close(r0) ioctl$SG_GET_LOW_DMA(r8, 0x227a, &(0x7f0000000100)) socket(0x2b, 0x1, 0x1) r9 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r9, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000000000000200000018"], 0x24}}], 0x1, 0x0) socket(0x2b, 0x1, 0x1) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 2.031844159s ago: executing program 5 (id=1448): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1) sendmmsg$inet6(r3, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000014) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x4004880) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) r7 = accept4(r0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f00000000c0)=0x80, 0x4) recvmsg$kcm(r7, &(0x7f0000001440)={&(0x7f0000000000)=@caif=@util, 0x80, &(0x7f0000001340), 0x0, &(0x7f00000013c0)=""/83, 0x53}, 0x0) 1.985961229s ago: executing program 5 (id=1449): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/417, @ANYRES32=0x1, @ANYRES64, @ANYRES32, @ANYRESHEX], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000200000000000000000000000000000000000000bb25b08a8eb1e2737cb292b231efd1024685725488189c0693a8a4f60e1d758da49d2da484ef8bf627dcf70d66294d00"/88], 0x50) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000740)="87567f469905880b086471b3672d79865e53a5215d57eec1520016494a36e11f83bf25864509a531e191eba3778b8a12c42fb8c267b6312c972c46400a970b9d1ad00eb08bb732a71549b85157172722aaa655df6af03bd3152ae8816ff69cd9cbf5ea849a34134d3a55ac32fdeb67b01c5c2249350b9144574a2fa028fd29ed30f221d3aa9e34a931bbda2d61cc14aaec18763b9759503c19637f805d69fd5ccc8c243c8f6a1b2a063ca2795e1c81b16b7259d2462202cb28bed53ee16b7c19a1637fd1090f798e407728b353a45d4a88e21b82df03bb1aed574e", &(0x7f0000000480)=@buf="188330239587b6ec504dce23c61a22fa9604c474b8093738c9326e196b58297eb03284a744dd2db4919f76a5bc18bbde28ed34219b7045f37410b3b2b6280726f62a80bbdffa3aef94e6f1bf104ec1decda6572e84bbae5c9f975d3c7df489e2e94e6c2d98ed863105a37c17785bda4a120127f172149765e3781a017988401d9154d1990e560b67de50e69fe978c952383b5a3de9aa2ce8c4", 0x4}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) close(r6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0x6, 0x3}, {0x5, 0x4}, {0xfff1, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)) 1.659875546s ago: executing program 0 (id=1450): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0xfffffffe, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 1.659387844s ago: executing program 5 (id=1451): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6(0xa, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x400300, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.589844913s ago: executing program 4 (id=1452): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x61) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180)=0x3, 0x12) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 1.209368603s ago: executing program 1 (id=1453): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r4, &(0x7f00000019c0)=""/97, 0x61) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, r8, 0x0, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000002060500000000211b0000361300000000000c000300686173a4bd60820005000400000000000400078005000500020000bc"], 0x34}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x2f) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x8000, @remote, 0x4}, 0x1c) close(r0) ioctl$SG_GET_LOW_DMA(r9, 0x227a, &(0x7f0000000100)) socket(0x2b, 0x1, 0x1) r10 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r10, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000000000000200000018"], 0x24}}], 0x1, 0x0) socket(0x2b, 0x1, 0x1) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 685.424058ms ago: executing program 5 (id=1454): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000ef0db4ed344a824000"/69], 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0xf, 0x1, 0x2, 0x0, 0xe}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) syz_open_dev$loop(&(0x7f0000000340), 0x33, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e06020cf408ea10020ba5"], 0x9) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) 530.042245ms ago: executing program 0 (id=1455): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000500)="d5365ccb9057925e79183e7b52039eb03f625cdfdc2eea552c65b822c7d27c081c822cfd65f96874132270f88073badb2208176af8bccdf632f848635fa5760f2dfe60ecec1629fdbd1ce697b29349f0018669cb9df2c16cb90096a90e8e1bb9de3064c5f73f033c9ce338797f3a20c6535a28eadaed280e2a4efe0d9974f69f1ef4eecbf7810106f77a4b8d294adcb670ba61d59fee877bc5335e950ee8cd900a548ece63a4db0069901666c9bc7ef5832300492a3457ffe5555bb121b64b1d227b59655fa1ad", 0xc7}, {0x0}, {&(0x7f0000000640)="c0d4e1d52e0be6884b54f98eb645e739b8e8ea09a8007adb093403dd41a44c96d6c89d5411d2bf15b24dd191e5e452bae1aaefcc7e7b2b783cf1529aff0f68227f34", 0x42}, {&(0x7f0000000700)="e8e61aefdc9c1f3ad6f44383b156e9dfd68ab84a511f227408281e17a0d0ea942541ad4eb379a2205ed18d81feae13932fd401d1c5a2fdefcffcc48b29e71eb0fd7e0e5e764b7941c7523432887319e1cb5af779cbe3d587734b8008a44eb110861ba2d43754ba1ee9950458bad066fe82d70871fc157da50b25caf65cc7320079445611035af1e529276eb740ecfa7d8874f17207aedce6de16ce337e8bb49d5ca0d73edd95f96bb4c370e5713506b185603ee90e275140", 0xb8}, {&(0x7f00000007c0)="f58d", 0x2}], 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0xde, 0x8, 0x2, 0x4, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x10, 0x5, 0x682f}}) openat$null(0xffffff9c, &(0x7f0000000400), 0x4c0000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x40000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000002c0)={0x0, 0x0, 0x27f}) ioctl$sock_bt_hci(r5, 0x800448d3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) 397.784914ms ago: executing program 4 (id=1456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900030073797a300000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xe02, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 1 (id=1457): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, &(0x7f0000000a40)="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"}}, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045438, 0x300000000000000) timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x14ba82, 0x18) write$cgroup_int(r6, &(0x7f0000000000)=0xfe8e, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180)=0x2, &(0x7f00000000c0)=r4}, 0x20) kernel console output (not intermixed with test programs): ds [ 73.736993][ T1252] vhci_hcd: release socket [ 73.739646][ T1252] vhci_hcd: disconnect device [ 74.264557][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 74.329787][ T6513] mkiss: ax0: crc mode is auto. [ 75.947625][ T3552] cfg80211: failed to load regulatory.db [ 75.962543][ T5980] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 76.077475][ T6539] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 76.079489][ T6539] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.082530][ T6539] vhci_hcd vhci_hcd.0: Device attached [ 76.378500][ T64] vhci_hcd: vhci_device speed not set [ 76.386655][ T6552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.100'. [ 76.638496][ T6560] vlan2: entered promiscuous mode [ 76.640226][ T6560] vlan2: entered allmulticast mode [ 76.641817][ T6560] hsr_slave_1: entered allmulticast mode [ 76.783070][ T6542] vhci_hcd: connection closed [ 76.784277][ T1252] vhci_hcd: stop threads [ 76.787261][ T1252] vhci_hcd: release socket [ 76.791534][ T1252] vhci_hcd: disconnect device [ 76.859246][ T8] vhci_hcd: vhci_device speed not set [ 77.170641][ T6574] netlink: 39 bytes leftover after parsing attributes in process `syz.0.105'. [ 78.938508][ T1015] vhci_hcd: vhci_device speed not set [ 86.429977][ T6609] netlink: 44 bytes leftover after parsing attributes in process `syz.1.109'. [ 86.467236][ T6613] ax25_connect(): syz.3.111 uses autobind, please contact jreuter@yaina.de [ 86.964103][ T6626] siw: device registration error -23 [ 87.088153][ T6624] can0: slcan on ttyS3. [ 87.544179][ T6645] batman_adv: batadv0: Adding interface: ip6gretap1 [ 87.548097][ T6645] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.558288][ T6645] batman_adv: batadv0: Interface activated: ip6gretap1 [ 88.331310][ T6647] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 88.333263][ T6647] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 88.335633][ T6647] vhci_hcd vhci_hcd.0: Device attached [ 88.336021][ T6652] vhci_hcd: connection closed [ 88.345723][ T45] vhci_hcd: stop threads [ 88.349841][ T45] vhci_hcd: release socket [ 88.351291][ T45] vhci_hcd: disconnect device [ 88.499596][ T6646] syz.3.113 (6646): drop_caches: 2 [ 88.907912][ T6661] netlink: 32 bytes leftover after parsing attributes in process `syz.1.116'. [ 89.840022][ T3552] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 91.018457][ T6709] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 91.020396][ T6709] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.022715][ T6709] vhci_hcd vhci_hcd.0: Device attached [ 91.051270][ T6710] netlink: 'syz.0.123': attribute type 4 has an invalid length. [ 91.112442][ T6710] netlink: 'syz.0.123': attribute type 4 has an invalid length. [ 91.208466][ T3552] vhci_hcd: vhci_device speed not set [ 91.268441][ T3552] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 91.291867][ T6726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.125'. [ 91.749840][ T6714] vhci_hcd: connection reset by peer [ 91.751863][ T63] vhci_hcd: stop threads [ 91.753573][ T63] vhci_hcd: release socket [ 91.755147][ T63] vhci_hcd: disconnect device [ 96.380255][ T3552] vhci_hcd: vhci_device speed not set [ 96.697484][ T5944] Bluetooth: min 0 < 6 [ 96.736240][ T5944] Bluetooth: Unexpected start frame (len 18) [ 96.827072][ T5944] Bluetooth: Wrong link type (-71) [ 96.891121][ T6772] netlink: 'syz.3.139': attribute type 10 has an invalid length. [ 96.899852][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.902959][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.909702][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.911982][ T6772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.914704][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.916984][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.921657][ T6772] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 96.941141][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 96.943830][ T6772] bridge_slave_1: left allmulticast mode [ 96.945610][ T6772] bridge_slave_1: left promiscuous mode [ 96.947446][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.953076][ T6772] bridge_slave_0: left allmulticast mode [ 96.954803][ T6772] bridge_slave_0: left promiscuous mode [ 96.956560][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.977419][ T6772] bond0: (slave bridge0): Releasing backup interface [ 97.135696][ T6777] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.138302][ T6777] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.140913][ T6777] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.143401][ T6777] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.698492][ T6777] vxlan0: entered promiscuous mode [ 97.700550][ T6777] vxlan0: entered allmulticast mode [ 97.748611][ T6777] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.751895][ T6777] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.755113][ T6777] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.757647][ T6777] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.860047][ T6779] tipc: Started in network mode [ 97.861607][ T6779] tipc: Node identity 4, cluster identity 4711 [ 97.865018][ T6779] tipc: Node number set to 4 [ 98.171940][ T6791] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 98.173956][ T6791] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 98.176469][ T6791] vhci_hcd vhci_hcd.0: Device attached [ 98.432956][ T8] vhci_hcd: vhci_device speed not set [ 98.620624][ T6811] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.150' sets config #1 [ 98.675544][ T8] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 98.720646][ T5944] Bluetooth: hci2: command tx timeout [ 98.735295][ T6795] vhci_hcd: connection reset by peer [ 98.737364][ T11] vhci_hcd: stop threads [ 98.738758][ T11] vhci_hcd: release socket [ 98.740293][ T11] vhci_hcd: disconnect device [ 99.321934][ T39] audit: type=1326 audit(1735508298.711:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.1.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 99.329038][ T39] audit: type=1326 audit(1735508298.711:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.1.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 99.336878][ T39] audit: type=1326 audit(1735508298.711:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.1.164" exe="/syz-executor" sig=0 arch=40000003 syscall=287 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 99.344146][ T39] audit: type=1326 audit(1735508298.711:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.1.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 99.352114][ T39] audit: type=1326 audit(1735508298.711:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.1.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 99.635340][ T6868] ip6erspan0: entered promiscuous mode [ 100.044210][ T6888] lo speed is unknown, defaulting to 1000 [ 100.049883][ T6888] lo speed is unknown, defaulting to 1000 [ 100.052586][ T6888] lo speed is unknown, defaulting to 1000 [ 100.415897][ T6888] infiniband sz1: set active [ 100.417399][ T6888] infiniband sz1: added lo [ 100.426989][ T6188] lo speed is unknown, defaulting to 1000 [ 100.449065][ T6888] RDS/IB: sz1: added [ 100.450336][ T6888] smc: adding ib device sz1 with port count 1 [ 100.452205][ T6888] smc: ib device sz1 port 1 has pnetid [ 100.454994][ T6888] lo speed is unknown, defaulting to 1000 [ 100.466521][ T6188] lo speed is unknown, defaulting to 1000 [ 100.524141][ T6888] lo speed is unknown, defaulting to 1000 [ 100.601135][ T6888] lo speed is unknown, defaulting to 1000 [ 100.637052][ T6888] lo speed is unknown, defaulting to 1000 [ 100.673111][ T6888] lo speed is unknown, defaulting to 1000 [ 101.268573][ T6945] lo speed is unknown, defaulting to 1000 [ 101.276927][ T6951] usb usb8: usbfs: process 6951 (syz.1.193) did not claim interface 0 before use [ 101.311861][ T6944] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 101.313962][ T6944] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.316896][ T6944] vhci_hcd vhci_hcd.0: Device attached [ 101.433319][ T6956] netlink: 32 bytes leftover after parsing attributes in process `syz.2.190'. [ 101.628790][ T833] vhci_hcd: vhci_device speed not set [ 101.688446][ T6960] lo speed is unknown, defaulting to 1000 [ 101.688624][ T833] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 101.931960][ T6954] vhci_hcd: connection reset by peer [ 101.933978][ T92] vhci_hcd: stop threads [ 101.935334][ T92] vhci_hcd: release socket [ 101.936798][ T92] vhci_hcd: disconnect device [ 102.422380][ T6993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.806955][ T7009] lo speed is unknown, defaulting to 1000 [ 103.325157][ T7020] lo speed is unknown, defaulting to 1000 [ 103.375712][ T7022] netlink: 32 bytes leftover after parsing attributes in process `syz.3.212'. [ 103.678464][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.224'. [ 103.681228][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.224'. [ 103.818600][ T8] vhci_hcd: vhci_device speed not set [ 103.904267][ T7072] program syz.1.229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.919799][ T7072] loop6: detected capacity change from 0 to 524287999 [ 103.924180][ T7061] lo speed is unknown, defaulting to 1000 [ 103.926062][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.929824][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.933382][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.936996][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.940844][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.944409][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.951144][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.954673][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.957892][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.962465][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.966106][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.968979][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.971603][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.974428][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.976914][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.979724][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.982414][ T7072] ldm_validate_partition_table(): Disk read failed. [ 103.985222][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.988679][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.992092][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.994930][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.999720][ T7072] Dev loop6: unable to read RDB block 0 [ 104.002374][ T7072] loop6: unable to read partition table [ 104.004322][ T7072] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 104.130230][ T7082] capability: warning: `syz.2.235' uses deprecated v2 capabilities in a way that may be insecure [ 104.399299][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 104.401986][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 104.407498][ T7105] geneve2: entered promiscuous mode [ 104.409712][ T7105] geneve2: entered allmulticast mode [ 104.743218][ T7120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.250'. [ 104.841161][ T7134] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.256' sets config #-1 [ 105.321065][ T7143] lo speed is unknown, defaulting to 1000 [ 105.424213][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 105.567180][ T7165] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.667622][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 106.483373][ T7241] lo speed is unknown, defaulting to 1000 [ 106.778593][ T833] vhci_hcd: vhci_device speed not set [ 107.252021][ T7297] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 107.436924][ T7298] netlink: 32 bytes leftover after parsing attributes in process `syz.1.312'. [ 107.634441][ T7322] openvswitch: netlink: Flow key attr not present in new flow. [ 107.756802][ T7324] lo speed is unknown, defaulting to 1000 [ 108.164625][ T7341] netlink: 'syz.1.327': attribute type 7 has an invalid length. [ 108.356248][ T7353] program syz.2.330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.364327][ T7353] loop6: detected capacity change from 0 to 524287999 [ 108.368001][ T7353] ldm_validate_partition_table(): Disk read failed. [ 108.370708][ T7353] Dev loop6: unable to read RDB block 0 [ 108.373412][ T7353] loop6: unable to read partition table [ 108.383977][ T7353] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 108.953573][ T7382] nvme_fabrics: missing parameter 'transport=%s' [ 108.956741][ T7382] nvme_fabrics: missing parameter 'nqn=%s' [ 109.541727][ T7408] lo speed is unknown, defaulting to 1000 [ 110.226326][ T7423] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 110.228333][ T7423] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 110.233093][ T7423] vhci_hcd vhci_hcd.0: Device attached [ 110.709444][ T9] vhci_hcd: vhci_device speed not set [ 110.710961][ T7432] loop6: detected capacity change from 0 to 524287999 [ 110.713933][ C1] blk_print_req_error: 24 callbacks suppressed [ 110.713942][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.718647][ C1] buffer_io_error: 24 callbacks suppressed [ 110.718653][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.724182][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.726944][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.730293][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.733076][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.742048][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.744803][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.748163][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.751064][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.754101][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.757041][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.762419][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.765301][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.768003][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.771066][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.773621][ T7432] ldm_validate_partition_table(): Disk read failed. [ 110.773700][ T9] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 110.775806][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.780968][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.787120][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.790134][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.794763][ T7432] Dev loop6: unable to read RDB block 0 [ 110.803968][ T7432] loop6: unable to read partition table [ 110.806081][ T7432] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 110.850815][ T7435] netlink: 32 bytes leftover after parsing attributes in process `syz.3.357'. [ 110.938904][ T7426] vhci_hcd: connection reset by peer [ 110.956151][ T1252] vhci_hcd: stop threads [ 110.957546][ T1252] vhci_hcd: release socket [ 110.958971][ T1252] vhci_hcd: disconnect device [ 110.999573][ T7443] wg2: entered promiscuous mode [ 111.394747][ T7458] lo speed is unknown, defaulting to 1000 [ 111.538870][ T7460] lo speed is unknown, defaulting to 1000 [ 111.555526][ T7466] openvswitch: netlink: Flow key attr not present in new flow. [ 111.668727][ T7472] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.337640][ T7491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.340872][ T7491] IPv6: NLM_F_CREATE should be set when creating new route [ 112.441419][ T39] audit: type=1326 audit(1735508311.831:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7fc00000 [ 112.609832][ T7510] wg2: entered promiscuous mode [ 112.723322][ T7517] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 112.917558][ T7521] netlink: 32 bytes leftover after parsing attributes in process `syz.3.380'. [ 113.114450][ T39] audit: type=1326 audit(1735508312.501:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.370" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f96579 code=0x7fc00000 [ 113.126144][ T39] audit: type=1326 audit(1735508312.501:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7fc00000 [ 113.135379][ T39] audit: type=1326 audit(1735508312.501:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7fc00000 [ 113.144958][ T39] audit: type=1326 audit(1735508312.501:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7fc00000 [ 113.152792][ T39] audit: type=1326 audit(1735508312.501:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7fc00000 [ 113.159654][ T39] audit: type=1326 audit(1735508312.501:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7fc00000 [ 113.168003][ T39] audit: type=1326 audit(1735508312.501:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7fc00000 [ 113.177889][ T39] audit: type=1326 audit(1735508312.501:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7fc00000 [ 113.184692][ T39] audit: type=1326 audit(1735508312.501:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7fc00000 [ 113.830666][ T7529] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 113.853942][ T7551] batman_adv: batadv0: Adding interface: ip6gretap1 [ 113.856097][ T7551] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.866238][ T7551] batman_adv: batadv0: Interface activated: ip6gretap1 [ 114.261707][ T7566] usb usb4: usbfs: process 7566 (syz.2.394) did not claim interface 0 before use [ 114.266359][ T7566] usb usb4: usbfs: process 7566 (syz.2.394) did not claim interface 0 before use [ 114.469733][ T66] Bluetooth: hci2: command 0x0406 tx timeout [ 114.577547][ T7576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.396'. [ 114.698407][ T7586] netlink: 'syz.0.399': attribute type 10 has an invalid length. [ 114.701021][ T7586] netlink: 152 bytes leftover after parsing attributes in process `syz.0.399'. [ 115.028684][ T5944] Bluetooth: hci0: command 0x0401 tx timeout [ 115.293197][ T7602] lo speed is unknown, defaulting to 1000 [ 115.309217][ T5944] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 115.649672][ T7612] lo speed is unknown, defaulting to 1000 [ 115.864176][ T7620] syz.0.404 (7620): drop_caches: 2 [ 115.999154][ T9] vhci_hcd: vhci_device speed not set [ 116.514436][ T7634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.410'. [ 117.019232][ T7659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.413'. [ 117.626844][ T7671] lo speed is unknown, defaulting to 1000 [ 117.814878][ T7683] batman_adv: batadv0: Adding interface: ip6gretap1 [ 117.817820][ T7683] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.828547][ T7683] batman_adv: batadv0: Interface activated: ip6gretap1 [ 117.982390][ T7685] lo speed is unknown, defaulting to 1000 [ 118.433339][ T7703] netlink: 32 bytes leftover after parsing attributes in process `syz.0.423'. [ 119.186555][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 119.186570][ T39] audit: type=1326 audit(1735508318.571:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 119.196869][ T39] audit: type=1326 audit(1735508318.571:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 119.204649][ T39] audit: type=1326 audit(1735508318.571:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.427" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 119.213064][ T39] audit: type=1326 audit(1735508318.571:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 119.222629][ T39] audit: type=1326 audit(1735508318.571:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 119.230670][ T39] audit: type=1326 audit(1735508318.581:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.427" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 119.238439][ T39] audit: type=1326 audit(1735508318.581:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 119.245973][ T39] audit: type=1326 audit(1735508318.581:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 119.359254][ T5944] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 119.362049][ T5944] Bluetooth: hci0: Injecting HCI hardware error event [ 119.366196][ T5944] Bluetooth: hci0: hardware error 0x00 [ 119.455406][ T7722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.428'. [ 119.870146][ T7739] netlink: 44 bytes leftover after parsing attributes in process `syz.3.432'. [ 120.007407][ T66] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 120.187829][ T7752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.434'. [ 120.321129][ T7754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.435'. [ 120.509162][ T7751] can0 (unregistered): slcan off ttyS3. [ 120.513176][ T7741] can0: slcan on ttyS3. [ 120.933144][ T66] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 121.078665][ T5980] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 121.230204][ T5980] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.233921][ T5980] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.239963][ T5980] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 121.243696][ T5980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.248806][ T5980] usb 8-1: config 0 descriptor?? [ 121.253651][ T5980] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 121.255853][ T5980] dvb-usb: bulk message failed: -22 (3/0) [ 121.266639][ T5980] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 121.271123][ T5980] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 121.273639][ T5980] usb 8-1: media controller created [ 121.276301][ T5980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.287851][ T5980] dvb-usb: bulk message failed: -22 (6/0) [ 121.290637][ T5980] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 121.295706][ T5980] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input7 [ 121.301592][ T7805] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 121.303670][ T5980] dvb-usb: schedule remote query interval to 150 msecs. [ 121.308666][ T5980] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 121.428503][ T5944] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 121.462003][ T7785] dvb-usb: bulk message failed: -22 (2/0) [ 121.476112][ T5980] dvb-usb: bulk message failed: -22 (1/0) [ 121.482305][ T5980] dvb-usb: error while querying for an remote control event. [ 121.490236][ T5980] usb 8-1: USB disconnect, device number 3 [ 121.572797][ T7805] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 121.577336][ T5980] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 121.609822][ T7823] netlink: 44 bytes leftover after parsing attributes in process `syz.0.450'. [ 122.093270][ T7825] can0 (unregistered): slcan off ttyS3. [ 122.108687][ T7829] can0: slcan on ttyS3. [ 122.364958][ T7860] netlink: 32 bytes leftover after parsing attributes in process `syz.3.452'. [ 122.642183][ T39] audit: type=1326 audit(1735508322.031:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.456" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x0 [ 123.145089][ T7882] lo speed is unknown, defaulting to 1000 [ 123.260957][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 123.279411][ T5944] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 123.282541][ T5944] Bluetooth: hci1: Injecting HCI hardware error event [ 123.285888][ T5944] Bluetooth: hci1: hardware error 0x00 [ 123.964792][ T7926] Bluetooth: MGMT ver 1.23 [ 124.090467][ T66] Bluetooth: hci2: unexpected event for opcode 0x0806 [ 124.142110][ T7936] ptrace attach of "/syz-executor exec"[5946] was attempted by "/syz-executor exec"[7936] [ 124.247766][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.486'. [ 124.290913][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.487'. [ 124.294812][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.487'. [ 125.358489][ T5944] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 125.485448][ T8028] input: syz0 as /devices/virtual/input/input8 [ 125.705570][ T8036] lo speed is unknown, defaulting to 1000 [ 126.106469][ T8055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.525'. [ 126.727977][ T8071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.527'. [ 126.785615][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.528'. [ 127.116571][ T8080] can0 (unregistered): slcan off ttyS3. [ 127.551364][ T8115] binder_alloc: binder_alloc_mmap_handler: 8114 200a0000-200a2000 already mapped failed -16 [ 127.616661][ T8120] netlink: 'syz.3.539': attribute type 21 has an invalid length. [ 127.844312][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 127.993763][ T8141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.545'. [ 128.561478][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.564064][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.566530][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.568933][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.571296][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.574411][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.577613][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.580920][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.584149][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.586637][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.589261][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.591883][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.594941][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.597345][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.599707][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.602416][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.605461][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.608603][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.612569][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.616145][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.619259][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.621869][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.628347][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.630794][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.633962][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.637450][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.640267][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.643250][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.646434][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.653644][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.659916][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.664405][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.666778][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.669479][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.672085][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.674997][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.677921][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.681909][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.684568][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.687078][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.690255][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.693490][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.696974][ T1485] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.706577][ T1485] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 128.804544][ T8175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.556'. [ 129.251170][ T8214] netlink: 32 bytes leftover after parsing attributes in process `syz.3.564'. [ 130.096661][ T8236] tmpfs: Bad value for 'mpol' [ 130.386260][ T8247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.573'. [ 130.518057][ T8248] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.521645][ T8248] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.524957][ T8248] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.528421][ T8248] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.531968][ T8248] vxlan0: entered promiscuous mode [ 130.534070][ T8248] vxlan0: entered allmulticast mode [ 130.539174][ T8248] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.542672][ T8248] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.546254][ T8248] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.549944][ T8248] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.602346][ T8249] tipc: Started in network mode [ 130.604097][ T8249] tipc: Node identity 4, cluster identity 4711 [ 130.606164][ T8249] tipc: Node number set to 4 [ 130.651263][ T8251] Bluetooth: MGMT ver 1.23 [ 130.837439][ T8259] program syz.1.576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.841677][ T8259] loop6: detected capacity change from 0 to 524287999 [ 130.843991][ C2] blk_print_req_error: 7 callbacks suppressed [ 130.843999][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.848706][ C2] buffer_io_error: 7 callbacks suppressed [ 130.848713][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.855250][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.858111][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.860837][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.863628][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.866172][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.869076][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.871741][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.874474][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.876975][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.880005][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.882615][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.885671][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.888266][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.892095][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.895443][ T8259] ldm_validate_partition_table(): Disk read failed. [ 130.898014][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.900962][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.904368][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.908206][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.912262][ T8259] Dev loop6: unable to read RDB block 0 [ 130.916437][ T8259] loop6: unable to read partition table [ 130.922197][ T8259] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 130.987273][ T8261] lo speed is unknown, defaulting to 1000 [ 131.409026][ T8281] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 131.677716][ T5359] udevd[5359]: worker [7818] terminated by signal 33 (Unknown signal 33) [ 131.682671][ T5359] udevd[5359]: worker [7818] failed while handling '/devices/pci0000:00/0000:00:1f.2/ata3/host2/target2:0:0/2:0:0:0/block/sr0' [ 131.833316][ T8337] binder: 8336:8337 ioctl 40046205 0 returned -22 [ 131.997752][ T8338] lo speed is unknown, defaulting to 1000 [ 132.047819][ T8345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.607'. [ 132.231173][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.233505][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.304072][ T8351] lo speed is unknown, defaulting to 1000 [ 132.391741][ T8357] program syz.3.609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.398107][ T8357] loop6: detected capacity change from 0 to 524287999 [ 132.404876][ T8357] ldm_validate_partition_table(): Disk read failed. [ 132.407334][ T8357] Dev loop6: unable to read RDB block 0 [ 132.411152][ T8357] loop6: unable to read partition table [ 132.413054][ T8357] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 132.830603][ T5944] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 132.834850][ T5944] CPU: 0 UID: 0 PID: 5944 Comm: kworker/u33:2 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 132.839554][ T5944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.844228][ T5944] Workqueue: hci2 hci_rx_work [ 132.846292][ T5944] Call Trace: [ 132.847728][ T5944] [ 132.849003][ T5944] dump_stack_lvl+0x16c/0x1f0 [ 132.851025][ T5944] sysfs_warn_dup+0x7f/0xa0 [ 132.853120][ T5944] sysfs_create_dir_ns+0x24d/0x2b0 [ 132.855420][ T5944] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 132.857821][ T5944] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.859875][ T5944] ? kobject_add_internal+0x12d/0x990 [ 132.862248][ T5944] ? do_raw_spin_unlock+0x172/0x230 [ 132.864529][ T5944] kobject_add_internal+0x2c8/0x990 [ 132.866738][ T5944] kobject_add+0x16f/0x240 [ 132.868703][ T5944] ? __pfx_kobject_add+0x10/0x10 [ 132.870907][ T5944] ? class_to_subsys+0x3e/0x160 [ 132.872609][ T5944] ? do_raw_spin_unlock+0x172/0x230 [ 132.874316][ T5944] ? kobject_put+0xab/0x5a0 [ 132.875993][ T5944] device_add+0x289/0x1a70 [ 132.877745][ T5944] ? __pfx_dev_set_name+0x10/0x10 [ 132.879565][ T5944] ? __pfx_device_add+0x10/0x10 [ 132.881540][ T5944] ? mgmt_send_event_skb+0x2f2/0x460 [ 132.883269][ T5944] hci_conn_add_sysfs+0x17e/0x230 [ 132.884963][ T5944] le_conn_complete_evt+0xfce/0x1d10 [ 132.886538][ T5944] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 132.888326][ T5944] ? __mutex_lock+0x1cc/0xa60 [ 132.889778][ T5944] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 132.891714][ T5944] ? skb_pull_data+0x166/0x210 [ 132.893249][ T5944] hci_le_meta_evt+0x2e2/0x5d0 [ 132.895140][ T5944] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 132.897598][ T5944] hci_event_packet+0x666/0x1190 [ 132.899088][ T5944] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 132.900751][ T5944] ? __pfx_hci_event_packet+0x10/0x10 [ 132.902970][ T5944] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 132.905828][ T5944] ? kfree_skbmem+0xae/0x1f0 [ 132.907612][ T5944] ? sk_skb_reason_drop+0x136/0x1a0 [ 132.909576][ T5944] hci_rx_work+0x2c5/0x16b0 [ 132.911541][ T5944] ? process_one_work+0x8bb/0x1b30 [ 132.913612][ T5944] process_one_work+0x958/0x1b30 [ 132.915122][ T5944] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 132.917351][ T5944] ? __pfx_process_one_work+0x10/0x10 [ 132.919448][ T5944] ? rcu_is_watching+0x12/0xc0 [ 132.921344][ T5944] ? assign_work+0x1a0/0x250 [ 132.923114][ T5944] worker_thread+0x6c8/0xf00 [ 132.925054][ T5944] ? __kthread_parkme+0x148/0x220 [ 132.927058][ T5944] ? __pfx_worker_thread+0x10/0x10 [ 132.928679][ T5944] kthread+0x2c1/0x3a0 [ 132.929952][ T5944] ? _raw_spin_unlock_irq+0x23/0x50 [ 132.931638][ T5944] ? __pfx_kthread+0x10/0x10 [ 132.933117][ T5944] ret_from_fork+0x45/0x80 [ 132.934516][ T5944] ? __pfx_kthread+0x10/0x10 [ 132.935992][ T5944] ret_from_fork_asm+0x1a/0x30 [ 132.937509][ T5944] [ 132.938530][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.941801][ T5944] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 132.945922][ T5944] Bluetooth: hci2: failed to register connection device [ 133.338650][ T8383] IPv6: addrconf: prefix option has invalid lifetime [ 133.607974][ T8396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.623'. [ 133.899305][ T1485] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 133.916722][ T8418] relay: one or more items not logged [item size (56) > sub-buffer size (42)] [ 134.028568][ T7124] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 134.049241][ T1485] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 134.062250][ T1485] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.066374][ T1485] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.072147][ T1485] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.076773][ T1485] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.080697][ T1485] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.085564][ T1485] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.091008][ T1485] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.094741][ T1485] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.102562][ T1485] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.112843][ T1485] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.116653][ T1485] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.121317][ T1485] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.126679][ T1485] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.130556][ T1485] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.135368][ T1485] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.139480][ T1485] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.143500][ T1485] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.148598][ T1485] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.152488][ T1485] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.156985][ T1485] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.161912][ T1485] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.165589][ T1485] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.169344][ T1485] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.173143][ T1485] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.177125][ T1485] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 134.180092][ T1485] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 134.182863][ T1485] usb 6-1: Product: syz [ 134.184298][ T1485] usb 6-1: Manufacturer: syz [ 134.185909][ T1485] usb 6-1: SerialNumber: syz [ 134.188134][ T8426] netlink: 32 bytes leftover after parsing attributes in process `syz.0.634'. [ 134.191653][ T1485] usb 6-1: config 0 descriptor?? [ 134.198540][ T7124] usb 8-1: Using ep0 maxpacket: 16 [ 134.198730][ T1485] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 134.205024][ T7124] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 134.209805][ T7124] usb 8-1: config 0 has no interface number 0 [ 134.213840][ T7124] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.222341][ T7124] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.232418][ T7124] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 134.237704][ T7124] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 134.245037][ T7124] usb 8-1: Product: syz [ 134.246718][ T7124] usb 8-1: SerialNumber: syz [ 134.249873][ T7124] usb 8-1: config 0 descriptor?? [ 134.254140][ T7124] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 134.257538][ T7124] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input9 [ 134.461556][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 134.465906][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 134.468318][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 134.470718][ T7124] usb 8-1: USB disconnect, device number 4 [ 134.470800][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 134.474977][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 134.481975][ T7124] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 134.931666][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.635'. [ 135.015902][ T8438] can0: slcan on ptm0. [ 135.066035][ T8446] kAFS: unable to lookup cell ' /dev/ttyHS 506 0-255 serial [ 135.066035][ T8446] ttyprintk /dev/ttyprintk 5 3 console [ 135.066035][ T8446] ttynull /dev/ttynull 235 0 console [ 135.066035][ T8446] nozomi_tty /dev/noz 236 0-255 serial [ 135.066035][ T8446] serial /dev/ttyS 4 64-95 serial [ 135.066035][ T8446] gsmtty /dev/gsmtty 237 0-255 serial [ 135.066035][ T8446] pty_slave /dev/pts 136 0-1048575 pty' [ 136.468942][ C1] usb 6-1: yurex_control_callback - control failed: -2 [ 136.472029][ T9] usb 6-1: USB disconnect, device number 5 [ 136.476439][ T9] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 136.869256][ T8502] lo speed is unknown, defaulting to 1000 [ 137.524619][ T8531] netlink: 'syz.3.671': attribute type 1 has an invalid length. [ 138.118555][ T8437] can0 (unregistered): slcan off ptm0. [ 138.974288][ T8579] lo speed is unknown, defaulting to 1000 [ 139.175931][ T8586] lo speed is unknown, defaulting to 1000 [ 139.373701][ T8598] netlink: 136 bytes leftover after parsing attributes in process `syz.0.684'. [ 139.398627][ T8588] /dev/sr0: Can't open blockdev [ 139.412770][ T8600] netlink: 168 bytes leftover after parsing attributes in process `syz.0.686'. [ 139.639099][ T8590] /dev/sr0: Can't open blockdev [ 139.969847][ T8635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.698'. [ 140.002712][ T8638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.004996][ T8638] IPv6: NLM_F_CREATE should be set when creating new route [ 140.038452][ T8630] lo speed is unknown, defaulting to 1000 [ 140.712726][ T8665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.707'. [ 141.001485][ T8671] syz_tun: entered allmulticast mode [ 141.005114][ T8670] syz_tun: left allmulticast mode [ 141.681328][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 142.160971][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'. [ 142.196374][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 142.224988][ T8709] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 142.295508][ T8721] netlink: 32 bytes leftover after parsing attributes in process `syz.1.726'. [ 142.414240][ T8725] netlink: 32 bytes leftover after parsing attributes in process `syz.0.731'. [ 142.951274][ T8737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.736'. [ 143.041588][ T8745] lo speed is unknown, defaulting to 1000 [ 143.631146][ T8772] netlink: 'syz.2.747': attribute type 12 has an invalid length. [ 143.759283][ T8783] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 144.556846][ T8812] lo speed is unknown, defaulting to 1000 [ 144.672305][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 144.805123][ T8838] __nla_validate_parse: 4 callbacks suppressed [ 144.805137][ T8838] netlink: 32 bytes leftover after parsing attributes in process `syz.3.765'. [ 144.902976][ T8844] netlink: 32 bytes leftover after parsing attributes in process `syz.1.769'. [ 146.343035][ T8885] netlink: 188 bytes leftover after parsing attributes in process `syz.2.782'. [ 146.346986][ T8885] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 146.439892][ T8887] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 146.733667][ T8912] syzkaller1: entered promiscuous mode [ 146.735965][ T8912] syzkaller1: entered allmulticast mode [ 146.883257][ T8910] netlink: 32 bytes leftover after parsing attributes in process `syz.2.785'. [ 147.641612][ T8931] lo speed is unknown, defaulting to 1000 [ 147.758723][ T8945] netlink: 'syz.3.801': attribute type 4 has an invalid length. [ 147.796082][ T8945] netlink: 'syz.3.801': attribute type 4 has an invalid length. [ 149.175103][ T8986] loop2: detected capacity change from 0 to 7 [ 149.178812][ T8986] Dev loop2: unable to read RDB block 7 [ 149.181138][ T8986] loop2: unable to read partition table [ 149.183410][ T8986] loop2: partition table beyond EOD, truncated [ 149.185337][ T8986] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 149.189196][ T8981] lo speed is unknown, defaulting to 1000 [ 149.204110][ T8988] netlink: 188 bytes leftover after parsing attributes in process `syz.1.817'. [ 149.207660][ T8988] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 149.527644][ T39] audit: type=1326 audit(1735508348.911:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.1.826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7fc00000 [ 149.872529][ T9035] netlink: 32 bytes leftover after parsing attributes in process `syz.1.830'. [ 150.051924][ T9041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.835'. [ 150.350902][ T9056] program syz.0.840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.355700][ T9056] loop6: detected capacity change from 0 to 524287999 [ 150.358104][ C1] blk_print_req_error: 24 callbacks suppressed [ 150.358112][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.364517][ C1] buffer_io_error: 24 callbacks suppressed [ 150.364529][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.370719][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.373740][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.376471][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.379747][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.383194][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.386099][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.389337][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.392191][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.394898][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.397755][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.401257][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.404038][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.406558][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.409457][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.411931][ T9056] ldm_validate_partition_table(): Disk read failed. [ 150.414169][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.417749][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.420460][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.423306][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.426148][ T9056] Dev loop6: unable to read RDB block 0 [ 150.429612][ T9056] loop6: unable to read partition table [ 150.431507][ T9056] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 150.586290][ T9059] lo speed is unknown, defaulting to 1000 [ 150.979686][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 151.011313][ T9076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.847'. [ 151.604398][ T9117] lo speed is unknown, defaulting to 1000 [ 151.726588][ T9125] lo speed is unknown, defaulting to 1000 [ 152.130013][ T9140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.871'. [ 152.503194][ T9163] program syz.3.879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.432689][ T9195] ======================================================= [ 153.432689][ T9195] WARNING: The mand mount option has been deprecated and [ 153.432689][ T9195] and is ignored by this kernel. Remove the mand [ 153.432689][ T9195] option from the mount to silence this warning. [ 153.432689][ T9195] ======================================================= [ 153.812385][ T9207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.897'. [ 153.915307][ T9221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.898'. [ 154.729555][ T56] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 154.839349][ T9244] netlink: 352 bytes leftover after parsing attributes in process `syz.0.907'. [ 154.898835][ T56] usb 8-1: unable to get BOS descriptor or descriptor too short [ 154.901500][ T56] usb 8-1: no configurations [ 154.903012][ T56] usb 8-1: can't read configurations, error -22 [ 155.030302][ T9247] netlink: 32 bytes leftover after parsing attributes in process `syz.0.908'. [ 155.078571][ T1015] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 155.228504][ T1015] usb 6-1: Using ep0 maxpacket: 16 [ 155.232525][ T1015] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 155.238266][ T1015] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 155.242325][ T1015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.247309][ T1015] usb 6-1: config 0 descriptor?? [ 155.252646][ T1015] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 155.465248][ T5344] bcm5974 6-1:0.0: could not read from device [ 155.471682][ T1015] bcm5974 6-1:0.0: could not read from device [ 155.478141][ T5344] bcm5974 6-1:0.0: could not read from device [ 155.484337][ T1015] input: failed to attach handler mousedev to device input10, error: -5 [ 155.491467][ T1015] usb 6-1: USB disconnect, device number 6 [ 155.491649][ T5344] bcm5974 6-1:0.0: could not read from device [ 155.601802][ T9258] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 155.876479][ T9265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.914'. [ 156.747798][ T9295] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 156.752170][ T9295] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 156.794488][ T9301] sg_write: data in/out 39330/17 bytes for SCSI command 0x8-- guessing data in; [ 156.794488][ T9301] program syz.2.925 not setting count and/or reply_len properly [ 156.821432][ T9302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.923'. [ 157.842355][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 157.858467][ T3552] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 157.998436][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 158.001670][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.004914][ T9] usb 5-1: config 7 has an invalid interface number: 244 but max is 0 [ 158.007530][ T9] usb 5-1: config 7 has no interface number 0 [ 158.011236][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=2a.4e [ 158.014124][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.016701][ T9] usb 5-1: Product: syz [ 158.018052][ T9] usb 5-1: Manufacturer: syz [ 158.018483][ T3552] usb 8-1: Using ep0 maxpacket: 8 [ 158.019940][ T9] usb 5-1: SerialNumber: syz [ 158.023520][ T3552] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.027678][ T3552] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.033032][ T3552] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.036997][ T3552] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.041742][ T3552] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.045175][ T3552] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.150481][ T9359] trusted_key: syz.1.948 sent an empty control message without MSG_MORE. [ 158.233142][ T9] mdc800 5-1:7.244: probe fails -> wrong Interface [ 158.240734][ T9] usb 5-1: USB disconnect, device number 4 [ 158.261044][ T3552] usb 8-1: GET_CAPABILITIES returned 0 [ 158.262874][ T3552] usbtmc 8-1:16.0: can't read capabilities [ 158.464083][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.467860][ T1015] usb 8-1: USB disconnect, device number 7 [ 158.580477][ T9374] lo speed is unknown, defaulting to 1000 [ 158.805897][ T9378] lo speed is unknown, defaulting to 1000 [ 159.058546][ T56] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.219630][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 159.225931][ T56] usb 5-1: config 0 has no interfaces? [ 159.230244][ T56] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.236947][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.250802][ T56] usb 5-1: config 0 descriptor?? [ 159.477238][ T56] usb 5-1: USB disconnect, device number 5 [ 160.371966][ T9439] netlink: 32 bytes leftover after parsing attributes in process `syz.3.970'. [ 160.427000][ T9444] lo speed is unknown, defaulting to 1000 [ 160.433774][ T9448] kernel profiling enabled (shift: 9) [ 161.238583][ T6004] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 161.268422][ T9466] lo speed is unknown, defaulting to 1000 [ 161.361540][ T6188] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 161.388514][ T6004] usb 5-1: Using ep0 maxpacket: 32 [ 161.391601][ T6004] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.394826][ T6004] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.399010][ T6004] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 161.401836][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.406394][ T6004] usb 5-1: config 0 descriptor?? [ 161.411935][ T6004] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 161.528437][ T6188] usb 8-1: Using ep0 maxpacket: 8 [ 161.532638][ T6188] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.536723][ T6188] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.539803][ T6188] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.543225][ T6188] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.548493][ T6188] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.551273][ T6188] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.761524][ T6188] usb 8-1: usb_control_msg returned -32 [ 161.764818][ T6188] usbtmc 8-1:16.0: can't read capabilities [ 162.641749][ T9492] netlink: 'syz.1.981': attribute type 1 has an invalid length. [ 162.826299][ T9503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.983'. [ 163.691151][ T9505] netlink: 32 bytes leftover after parsing attributes in process `syz.1.985'. [ 164.008736][ T1015] usb 5-1: USB disconnect, device number 6 [ 164.048438][ T9511] netfs: Couldn't get user pages (rc=-14) [ 164.122852][ T1485] usb 8-1: USB disconnect, device number 8 [ 164.728513][ T9527] nbd3: detected capacity change from 0 to 12 [ 164.737367][ T9532] block nbd3: Send control failed (result -89) [ 164.742239][ T9532] block nbd3: Request send failed, requeueing [ 164.752481][ T66] block nbd3: Receive control failed (result -32) [ 164.760398][ T8917] block nbd3: Dead connection, failed to find a fallback [ 164.763491][ T8917] block nbd3: shutting down sockets [ 164.765870][ T8917] blk_print_req_error: 7 callbacks suppressed [ 164.765880][ T8917] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.772835][ T8917] buffer_io_error: 7 callbacks suppressed [ 164.772846][ T8917] Buffer I/O error on dev nbd3, logical block 0, async page read [ 164.779271][ T9532] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.782243][ T9532] Buffer I/O error on dev nbd3, logical block 0, async page read [ 164.784979][ T9532] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.787765][ T9532] Buffer I/O error on dev nbd3, logical block 0, async page read [ 164.790492][ T9532] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.793424][ T9532] Buffer I/O error on dev nbd3, logical block 0, async page read [ 164.795934][ T9532] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.798822][ T9532] Buffer I/O error on dev nbd3, logical block 0, async page read [ 164.801181][ T9532] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.803913][ T9532] Buffer I/O error on dev nbd3, logical block 0, async page read [ 164.806290][ T9532] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.809153][ T9532] Buffer I/O error on dev nbd3, logical block 0, async page read [ 164.811581][ T9532] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.814360][ T9532] Buffer I/O error on dev nbd3, logical block 0, async page read [ 164.816901][ T9532] ldm_validate_partition_table(): Disk read failed. [ 164.819144][ T9532] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.822003][ T9532] Buffer I/O error on dev nbd3, logical block 0, async page read [ 164.824402][ T9532] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.827199][ T9532] Buffer I/O error on dev nbd3, logical block 0, async page read [ 164.829792][ T9532] Dev nbd3: unable to read RDB block 0 [ 164.831622][ T9532] nbd3: unable to read partition table [ 164.833438][ T9532] nbd3: partition table beyond EOD, truncated [ 164.837232][ T6628] ldm_validate_partition_table(): Disk read failed. [ 164.839670][ T6628] Dev nbd3: unable to read RDB block 0 [ 164.841561][ T6628] nbd3: unable to read partition table [ 164.843375][ T6628] nbd3: partition table beyond EOD, truncated [ 164.846581][ T6628] ldm_validate_partition_table(): Disk read failed. [ 164.849186][ T6628] Dev nbd3: unable to read RDB block 0 [ 164.851818][ T6628] nbd3: unable to read partition table [ 164.853681][ T6628] nbd3: partition table beyond EOD, truncated [ 165.066834][ T9540] 9pnet_fd: Insufficient options for proto=fd [ 165.615960][ T9555] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1001'. [ 165.898773][ T9576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1004'. [ 165.954700][ T39] audit: type=1326 audit(1735508365.341:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.2.1007" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f96579 code=0x0 [ 166.336666][ T9586] netlink: 'syz.1.1010': attribute type 5 has an invalid length. [ 166.388219][ T9589] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 166.525471][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.533728][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.537988][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.542034][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.545434][ T5944] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.547966][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.622465][ T9594] lo speed is unknown, defaulting to 1000 [ 166.707743][ T9594] chnl_net:caif_netlink_parms(): no params data found [ 166.760484][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.762709][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.764907][ T9594] bridge_slave_0: entered allmulticast mode [ 166.767128][ T9594] bridge_slave_0: entered promiscuous mode [ 166.770461][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.772649][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.774810][ T9594] bridge_slave_1: entered allmulticast mode [ 166.777011][ T9594] bridge_slave_1: entered promiscuous mode [ 166.804098][ T9594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.811248][ T9594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.856288][ T9594] team0: Port device team_slave_0 added [ 166.860405][ T9594] team0: Port device team_slave_1 added [ 166.882336][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.884460][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.894544][ T9594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.898512][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.900832][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.908538][ T9594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.944379][ T9594] hsr_slave_0: entered promiscuous mode [ 166.946733][ T9594] hsr_slave_1: entered promiscuous mode [ 166.950620][ T9594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.953800][ T9594] Cannot create hsr debugfs directory [ 166.984452][ T9613] lo speed is unknown, defaulting to 1000 [ 167.050330][ T9594] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.056177][ T9594] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.061785][ T9594] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.069150][ T9594] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.083363][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.086244][ T9594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.089361][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.092040][ T9594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.124241][ T9594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.132769][ T216] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.136869][ T216] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.151327][ T9594] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.168064][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.171040][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.175864][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.178727][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.271924][ T9594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.368115][ T9594] veth0_vlan: entered promiscuous mode [ 167.374173][ T9594] veth1_vlan: entered promiscuous mode [ 167.393292][ T9594] veth0_macvtap: entered promiscuous mode [ 167.396524][ T9594] veth1_macvtap: entered promiscuous mode [ 167.403804][ T9594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.406956][ T9594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.412141][ T9594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.415469][ T9594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.418700][ T9594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.421852][ T9594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.424842][ T9594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.427928][ T9594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.432774][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.438329][ T9594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.442196][ T9594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.445501][ T9594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.448998][ T9594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.452347][ T9594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.455466][ T9594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.458464][ T9594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.462135][ T9594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.467227][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.473686][ T9594] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.477206][ T9594] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.484246][ T9594] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.486884][ T9594] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.519656][ T9631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1019'. [ 167.637697][ T39] audit: type=1800 audit(1735508367.021:38): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1021" name="bus" dev="overlay" ino=1344 res=0 errno=0 [ 168.201994][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.212459][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.224026][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.226786][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.424547][ T9671] block device autoloading is deprecated and will be removed. [ 168.505989][ T9675] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 168.658489][ T66] Bluetooth: hci3: command tx timeout [ 168.751504][ T9683] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1032'. [ 169.158212][ T9701] binder: 9700:9701 ioctl c0306201 20000480 returned -22 [ 169.467426][ T9712] lo speed is unknown, defaulting to 1000 [ 169.597841][ T9714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1041'. [ 169.898586][ T9732] binder: 9731:9732 ioctl c0306201 20000940 returned -22 [ 170.044469][ T9737] syz_tun: entered allmulticast mode [ 170.047143][ T9738] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1046'. [ 170.072201][ T9737] syz_tun (unregistering): left allmulticast mode [ 170.387908][ T216] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 8 [ 170.500171][ T9747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1051'. [ 170.708527][ T66] Bluetooth: hci3: command tx timeout [ 171.254073][ T39] audit: type=1800 audit(1735508370.641:39): pid=9772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1058" name="/" dev="9p" ino=2 res=0 errno=0 [ 171.888942][ T9793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1066'. [ 171.903126][ T9767] lo speed is unknown, defaulting to 1000 [ 172.257674][ T9808] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1068'. [ 172.565674][ T9812] Invalid ELF header type: 3 != 1 [ 172.740694][ T9815] input: syz1 as /devices/virtual/input/input12 [ 172.789366][ T66] Bluetooth: hci3: command tx timeout [ 172.804310][ T9817] program syz.1.1072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.809416][ T9817] loop6: detected capacity change from 0 to 524287999 [ 172.811777][ C0] blk_print_req_error: 40 callbacks suppressed [ 172.811786][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.816630][ C0] buffer_io_error: 40 callbacks suppressed [ 172.816636][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.821241][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.824058][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.828695][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.831559][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.834576][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.838427][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.841227][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.844175][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.846897][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.850021][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.854517][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.857473][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.860338][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.863322][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.865837][ T9817] ldm_validate_partition_table(): Disk read failed. [ 172.868113][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.870976][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.873609][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.876355][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.879373][ T9817] Dev loop6: unable to read RDB block 0 [ 172.882352][ T9817] loop6: unable to read partition table [ 172.884631][ T9817] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 173.576881][ T9829] lo speed is unknown, defaulting to 1000 [ 173.838580][ T9841] syz_tun: entered allmulticast mode [ 173.843632][ T9841] syz_tun: left allmulticast mode [ 173.967820][ T9839] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1079'. [ 174.083613][ T9857] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1081'. [ 174.769920][ T9849] dccp_close: ABORT with 28 bytes unread [ 174.833964][ T9867] netlink: 'syz.2.1085': attribute type 21 has an invalid length. [ 174.837309][ T9867] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1085'. [ 174.841549][ T9867] netlink: 'syz.2.1085': attribute type 4 has an invalid length. [ 174.844733][ T9867] netlink: 'syz.2.1085': attribute type 3 has an invalid length. [ 174.848019][ T9867] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1085'. [ 174.878514][ T66] Bluetooth: hci3: command tx timeout [ 175.286224][ T9886] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1092'. [ 175.814117][ T9898] syzkaller0: entered promiscuous mode [ 175.815914][ T9898] syzkaller0: entered allmulticast mode [ 176.005794][ T9896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1094'. [ 176.034413][ T9907] input: syz1 as /devices/virtual/input/input13 [ 177.344372][ T9919] syz_tun: entered allmulticast mode [ 177.347555][ T9917] syz_tun: left allmulticast mode [ 177.480203][ T9925] md2: using deprecated bitmap file support [ 177.482002][ T9925] md2: error: bitmap file must be a regular file [ 177.488758][ T9930] program syz.4.1102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.493951][ T9930] loop6: detected capacity change from 0 to 524287999 [ 177.509753][ T9930] ldm_validate_partition_table(): Disk read failed. [ 177.514515][ T9930] Dev loop6: unable to read RDB block 0 [ 177.527341][ T9930] loop6: unable to read partition table [ 177.529363][ T9930] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 177.621368][ T9932] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1104'. [ 177.675516][ T9947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1106'. [ 178.477712][ T9959] Process accounting resumed [ 178.478025][ T66] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 178.508638][ T9964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.645878][ T9975] lo speed is unknown, defaulting to 1000 [ 179.420805][ T9987] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1118'. [ 179.571328][T10005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1120'. [ 179.589047][T10006] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1119'. [ 180.514584][T10020] lo speed is unknown, defaulting to 1000 [ 180.562761][T10023] bridge_slave_1: left allmulticast mode [ 180.564747][T10023] bridge_slave_1: left promiscuous mode [ 180.568005][T10023] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.076704][T10040] binder_alloc: 10038: binder_alloc_buf size 16384 failed, no address space [ 181.080886][T10040] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 181.251437][T10051] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 181.775161][T10052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.995935][T10065] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1138'. [ 182.027334][T10073] syz.1.1140[10073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.027383][T10073] syz.1.1140[10073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.031261][T10073] syz.1.1140[10073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.351467][ T39] audit: type=1326 audit(1735508894.744:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 182.375630][ T39] audit: type=1326 audit(1735508894.744:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 182.388568][ T39] audit: type=1326 audit(1735508894.744:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 182.396388][ T39] audit: type=1326 audit(1735508894.744:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 182.404639][ T39] audit: type=1326 audit(1735508894.744:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 182.413039][ T39] audit: type=1326 audit(1735508894.744:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 182.421520][ T39] audit: type=1326 audit(1735508894.744:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 182.429754][ T39] audit: type=1326 audit(1735508894.744:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 182.437658][ T39] audit: type=1326 audit(1735508894.744:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 182.446105][ T39] audit: type=1326 audit(1735508894.744:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 182.834936][T10097] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1149'. [ 182.912054][ T66] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 183.572268][T10127] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 183.778688][T10131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1157'. [ 184.192576][T10146] lo speed is unknown, defaulting to 1000 [ 184.212757][T10149] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1159'. [ 184.633331][T10157] lo speed is unknown, defaulting to 1000 [ 184.813664][T10161] lo speed is unknown, defaulting to 1000 [ 185.126094][T10172] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1165'. [ 185.368141][T10189] program syz.1.1169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.375975][T10189] loop6: detected capacity change from 0 to 524287999 [ 185.381660][ C2] blk_print_req_error: 24 callbacks suppressed [ 185.381670][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.387587][ C2] buffer_io_error: 24 callbacks suppressed [ 185.387597][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.393260][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.396202][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.398679][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.402379][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.405668][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.408472][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.411024][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.413884][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.416360][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.419171][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.421718][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.424665][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.428598][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.432026][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.435032][T10189] ldm_validate_partition_table(): Disk read failed. [ 185.442277][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.445104][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.451162][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.454971][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.461154][T10189] Dev loop6: unable to read RDB block 0 [ 185.463732][T10189] loop6: unable to read partition table [ 185.465991][T10189] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 185.795596][T10196] lo speed is unknown, defaulting to 1000 [ 185.991826][ C2] vcan0: j1939_tp_rxtimer: 0xffff88806fa2fc00: rx timeout, send abort [ 186.342870][ T66] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 186.495555][ C2] vcan0: j1939_tp_rxtimer: 0xffff88806fa2fc00: abort rx timeout. Force session deactivation [ 187.109957][T10238] program syz.4.1183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.115457][T10238] loop6: detected capacity change from 0 to 524287999 [ 187.123435][T10238] ldm_validate_partition_table(): Disk read failed. [ 187.126660][T10238] Dev loop6: unable to read RDB block 0 [ 187.131800][T10238] loop6: unable to read partition table [ 187.134190][T10238] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 187.798926][T10241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1184'. [ 188.478487][ T6004] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 188.630027][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.633909][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.637404][ T6004] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 188.647908][ T6004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.649408][T10261] lo speed is unknown, defaulting to 1000 [ 188.652478][ T6004] usb 9-1: config 0 descriptor?? [ 188.915914][T10275] program syz.0.1194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.921010][T10275] loop6: detected capacity change from 0 to 524287999 [ 188.925005][T10275] ldm_validate_partition_table(): Disk read failed. [ 188.927659][T10275] Dev loop6: unable to read RDB block 0 [ 188.930835][T10275] loop6: unable to read partition table [ 188.932768][T10275] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 189.069252][ T6004] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 189.072075][ T6004] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 189.082709][ T6004] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.0003/input/input15 [ 189.099892][ T6004] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 189.440624][ T6004] usb 9-1: USB disconnect, device number 2 [ 191.976077][T10330] lo speed is unknown, defaulting to 1000 [ 192.300583][T10344] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1212'. [ 192.304289][T10344] 0·X: renamed from hsr0 (while UP) [ 192.307780][T10344] 0·X: entered allmulticast mode [ 192.310088][T10344] hsr_slave_0: entered allmulticast mode [ 192.312143][T10344] hsr_slave_1: entered allmulticast mode [ 192.314464][T10344] A link change request failed with some changes committed already. Interface c0·X may have been left with an inconsistent configuration, please check. [ 192.384147][T10345] program syz.2.1210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.397676][T10371] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.680195][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.682281][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.048120][T10392] lo speed is unknown, defaulting to 1000 [ 195.638528][T10426] usb 2-1: USB disconnect, device number 2 [ 195.826220][T10428] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 195.952197][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 195.955542][T10430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.958274][T10430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.963275][T10430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.966787][T10430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.976019][T10430] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 195.978990][T10430] batman_adv: batadv0: Removing interface: ip6gretap1 [ 196.256444][T10443] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 196.259346][T10443] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 196.259663][T10443] vhci_hcd vhci_hcd.0: Device attached [ 196.415069][T10439] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1233'. [ 196.441395][ T6004] vhci_hcd: vhci_device speed not set [ 196.498478][ T6004] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 197.152569][ T5944] block nbd4: Receive control failed (result -32) [ 197.152667][ T66] block nbd4: Receive control failed (result -32) [ 197.202303][T10449] block nbd4: shutting down sockets [ 197.376412][T10444] vhci_hcd: connection reset by peer [ 197.392202][ T12] vhci_hcd: stop threads [ 197.393548][ T12] vhci_hcd: release socket [ 197.412479][ T12] vhci_hcd: disconnect device [ 198.163320][T10466] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1240'. [ 198.925179][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 198.944973][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 198.947726][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 199.305746][T10492] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 201.578575][ T6004] vhci_hcd: vhci_device speed not set [ 203.218510][ T6035] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 203.371389][ T6035] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.374937][ T6035] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 203.380305][ T6035] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.383207][ T6035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.385754][ T6035] usb 6-1: Product: syz [ 203.387059][ T6035] usb 6-1: Manufacturer: syz [ 203.388642][ T6035] usb 6-1: SerialNumber: syz [ 203.775163][T10568] program syz.4.1267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.870847][ T5944] Bluetooth: hci2: hardware error 0x00 [ 204.553234][ T39] kauditd_printk_skb: 56 callbacks suppressed [ 204.553245][ T39] audit: type=1326 audit(1735508916.944:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10573 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 204.569904][ T39] audit: type=1326 audit(1735508916.964:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10573 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 204.576769][ T39] audit: type=1326 audit(1735508916.964:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10573 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 204.584098][ T39] audit: type=1326 audit(1735508916.964:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10573 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 204.591549][ T39] audit: type=1326 audit(1735508916.964:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10573 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 205.225332][T10588] lo speed is unknown, defaulting to 1000 [ 205.567372][ T6035] cdc_mbim 6-1:1.0: bind() failure [ 205.570653][ T6035] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 205.572760][ T6035] cdc_ncm 6-1:1.1: bind() failure [ 205.578792][ T6035] usb 6-1: USB disconnect, device number 7 [ 205.783930][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 205.786672][T10600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.789212][T10600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.796764][T10600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.799446][T10600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.908814][ T5944] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 206.214507][T10611] siw: device registration error -23 [ 206.959668][ T6004] IPVS: starting estimator thread 0... [ 206.962887][T10627] tipc: Started in network mode [ 206.966691][T10627] tipc: Node identity ac1414aa, cluster identity 4711 [ 206.973618][T10627] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 206.975955][T10627] tipc: Enabled bearer , priority 10 [ 206.999515][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.005100][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.007919][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.012611][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.015138][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.017414][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.059099][T10628] IPVS: using max 37 ests per chain, 88800 per kthread [ 207.109814][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.201941][T10630] lo speed is unknown, defaulting to 1000 [ 207.259001][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.398499][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.538511][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.593872][T10630] chnl_net:caif_netlink_parms(): no params data found [ 207.678453][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.768839][ T39] audit: type=1326 audit(1735508920.164:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.0.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 207.784635][ T39] audit: type=1326 audit(1735508920.164:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.0.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 207.797949][ T39] audit: type=1326 audit(1735508920.164:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.0.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 207.805380][ T39] audit: type=1326 audit(1735508920.164:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.0.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 207.812563][ T39] audit: type=1326 audit(1735508920.164:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.0.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 207.818488][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.844476][T10630] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.846648][T10630] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.849347][T10630] bridge_slave_0: entered allmulticast mode [ 207.851713][T10630] bridge_slave_0: entered promiscuous mode [ 207.854568][T10630] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.857713][T10630] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.862138][T10630] bridge_slave_1: entered allmulticast mode [ 207.864446][T10630] bridge_slave_1: entered promiscuous mode [ 207.885354][T10630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.892972][T10630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.916034][T10630] team0: Port device team_slave_0 added [ 207.921163][T10630] team0: Port device team_slave_1 added [ 207.940035][T10630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.942228][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.953061][T10630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.957155][T10630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.958465][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.959996][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.970244][T10630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.995470][T10630] hsr_slave_0: entered promiscuous mode [ 207.997876][T10630] hsr_slave_1: entered promiscuous mode [ 208.001773][T10630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.004256][T10630] Cannot create hsr debugfs directory [ 208.110882][ T6004] tipc: Node number set to 2886997162 [ 208.248443][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 208.488987][T10630] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 208.495751][T10630] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 208.502105][T10630] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.507334][T10630] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 208.518556][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 208.565947][T10630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.585614][T10630] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.592831][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.595671][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.605324][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.608288][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.628493][ T7124] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 208.655211][T10672] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1292'. [ 208.702377][T10630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.789687][ T7124] usb 6-1: Using ep0 maxpacket: 8 [ 208.793507][ T7124] usb 6-1: unable to get BOS descriptor or descriptor too short [ 208.795794][T10630] veth0_vlan: entered promiscuous mode [ 208.797533][ T7124] usb 6-1: config 7 has an invalid interface number: 244 but max is 0 [ 208.803039][ T7124] usb 6-1: config 7 has no interface number 0 [ 208.805140][T10630] veth1_vlan: entered promiscuous mode [ 208.806479][ T7124] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=2a.4e [ 208.810364][ T7124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.812911][ T7124] usb 6-1: Product: syz [ 208.814180][ T7124] usb 6-1: Manufacturer: syz [ 208.815594][ T7124] usb 6-1: SerialNumber: syz [ 208.816320][T10630] veth0_macvtap: entered promiscuous mode [ 208.824569][T10630] veth1_macvtap: entered promiscuous mode [ 208.834231][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.837489][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.841700][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.844902][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.848075][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.851504][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.857602][T10630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.864583][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.868335][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.872580][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.875811][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.880515][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.883587][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.887276][T10630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.892236][T10630] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.894967][T10630] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.898245][T10630] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.901885][T10630] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.944224][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.946703][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.955269][ T216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.959586][ T216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.029104][ T5944] Bluetooth: hci0: command tx timeout [ 209.054861][ T7124] mdc800 6-1:7.244: probe fails -> wrong Interface [ 209.058499][ T7124] usb 6-1: USB disconnect, device number 8 [ 209.294359][T10692] lo speed is unknown, defaulting to 1000 [ 210.058581][ T7124] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 210.220181][ T7124] usb 6-1: Using ep0 maxpacket: 16 [ 210.225188][ T7124] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.228334][ T7124] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 210.232566][ T7124] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.358831][ T7124] usb 6-1: config 0 descriptor?? [ 210.775798][T10718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1300'. [ 210.903100][ T5944] block nbd5: Receive control failed (result -32) [ 210.908470][ T66] block nbd5: Receive control failed (result -32) [ 210.963128][T10720] block nbd5: shutting down sockets [ 211.109211][ T66] Bluetooth: hci0: command tx timeout [ 211.232252][T10727] program syz.5.1303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.263968][T10727] loop6: detected capacity change from 0 to 524287999 [ 211.267333][ C1] blk_print_req_error: 41 callbacks suppressed [ 211.267343][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.272897][ C1] buffer_io_error: 41 callbacks suppressed [ 211.272905][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.278059][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.280908][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.284475][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.288291][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.294655][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.297507][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.300252][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.303064][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.306054][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.309051][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.312712][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.315494][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.319002][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.321887][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.324392][T10727] ldm_validate_partition_table(): Disk read failed. [ 211.326763][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.329853][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.333988][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.336955][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.341682][T10727] Dev loop6: unable to read RDB block 0 [ 211.344458][T10727] loop6: unable to read partition table [ 211.346397][T10727] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 212.158513][ C2] net_ratelimit: 3 callbacks suppressed [ 212.158530][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 212.235468][T10743] syzkaller0: entered promiscuous mode [ 212.237467][T10743] syzkaller0: entered allmulticast mode [ 212.637651][ T9] usb 6-1: USB disconnect, device number 9 [ 212.954534][T10748] siw: device registration error -23 [ 213.188530][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 213.215969][ T66] Bluetooth: hci0: command tx timeout [ 214.242250][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 214.418109][T10766] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1312'. [ 214.471871][ T5944] block nbd0: Receive control failed (result -32) [ 214.471875][ T66] block nbd0: Receive control failed (result -32) [ 214.527439][T10758] block nbd0: shutting down sockets [ 215.268484][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 215.268506][ T5944] Bluetooth: hci0: command tx timeout [ 215.307119][T10780] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1315'. [ 215.830516][T10797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1318'. [ 216.308537][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 217.018289][T10813] ptrace attach of "/syz-executor exec"[10630] was attempted by "/syz-executor exec"[10813] [ 217.190053][T10817] block nbd1: Device being setup by another task [ 217.197075][ T5944] block nbd1: Receive control failed (result -32) [ 217.258153][T10812] block nbd1: shutting down sockets [ 217.348471][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 217.519043][T10825] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1323'. [ 217.718585][ T3552] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 217.889750][ T3552] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.893256][ T3552] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 217.900250][ T3552] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.903109][ T3552] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.905551][ T3552] usb 10-1: Product: syz [ 217.907075][ T3552] usb 10-1: Manufacturer: syz [ 217.918196][ T3552] usb 10-1: SerialNumber: syz [ 218.366800][ T66] Bluetooth: hci0: hardware error 0x00 [ 218.398676][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 219.428438][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 220.079947][ T3552] cdc_mbim 10-1:1.0: bind() failure [ 220.084505][ T3552] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 220.086581][ T3552] cdc_ncm 10-1:1.1: bind() failure [ 220.098777][ T3552] usb 10-1: USB disconnect, device number 2 [ 220.388509][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 220.468450][ T66] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 220.478458][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 220.538451][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 220.541283][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.544227][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.547948][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.551534][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.555588][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.559694][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.767525][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 220.769863][ T8] usbtmc 5-1:16.0: can't read capabilities [ 220.801693][T10872] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1336'. [ 221.073724][T10866] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 221.077067][ T8] usb 5-1: USB disconnect, device number 7 [ 221.085220][T10866] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 221.518451][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 222.548471][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 222.872691][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 222.875827][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 222.879569][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 223.180127][T10910] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1350'. [ 223.227937][T10912] netlink: 'syz.0.1351': attribute type 21 has an invalid length. [ 223.230376][T10912] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1351'. [ 223.233362][T10912] netlink: 'syz.0.1351': attribute type 4 has an invalid length. [ 223.235735][T10912] netlink: 'syz.0.1351': attribute type 3 has an invalid length. [ 223.237945][T10912] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1351'. [ 223.331427][T10917] team0: Device gtp0 is of different type [ 223.428503][ T5944] Bluetooth: hci3: command 0x0405 tx timeout [ 223.588474][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 224.363215][T10930] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1357'. [ 224.550588][T10932] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1356'. [ 224.628425][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 225.668531][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 225.916063][T10963] program syz.1.1367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.920022][T10963] ata1.00: invalid transfer count 0 [ 226.098455][ T6035] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 226.248431][ T6035] usb 9-1: Using ep0 maxpacket: 8 [ 226.251277][ T6035] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.254703][ T6035] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 226.257832][ T6035] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.263297][ T6035] usb 9-1: config 0 descriptor?? [ 226.332248][T10968] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 226.447892][T10970] lo speed is unknown, defaulting to 1000 [ 226.473795][ T6035] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 226.540466][T10970] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 226.542511][ T9] IPVS: starting estimator thread 0... [ 226.648441][T10973] IPVS: using max 37 ests per chain, 88800 per kthread [ 226.708421][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 226.748149][T10979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1371'. [ 227.060779][ T9] usb 9-1: USB disconnect, device number 3 [ 227.169582][ T45] IPVS: stop unused estimator thread 0... [ 227.731678][T11009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1377'. [ 227.742985][T11017] Bluetooth: MGMT ver 1.23 [ 227.748427][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 228.788418][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 228.807227][T11029] lo speed is unknown, defaulting to 1000 [ 229.828453][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 230.211868][T11069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1391'. [ 230.868419][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 231.908440][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 232.686525][T11107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.948419][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 233.988558][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 234.409823][T11160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1409'. [ 234.594315][T11159] lo speed is unknown, defaulting to 1000 [ 235.028428][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.464289][T11176] mmap: syz.4.1414 (11176) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 236.068493][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 236.283255][T11190] syz.5.1416: attempt to access beyond end of device [ 236.283255][T11190] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 236.288174][T11190] syz.5.1416: attempt to access beyond end of device [ 236.288174][T11190] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 236.297881][T11190] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 236.301825][T11190] syz.5.1416: attempt to access beyond end of device [ 236.301825][T11190] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 236.308829][T11190] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 236.314363][T11190] syz.5.1416: attempt to access beyond end of device [ 236.314363][T11190] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 236.318845][T11190] syz.5.1416: attempt to access beyond end of device [ 236.318845][T11190] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 236.325103][T11190] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 236.331904][T11190] syz.5.1416: attempt to access beyond end of device [ 236.331904][T11190] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 236.337771][T11190] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 236.348297][T11190] syz.5.1416: attempt to access beyond end of device [ 236.348297][T11190] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 236.349892][T11194] input: syz0 as /devices/virtual/input/input17 [ 236.353818][T11190] syz.5.1416: attempt to access beyond end of device [ 236.353818][T11190] nbd5: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 236.360593][T11190] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 236.371724][T11190] syz.5.1416: attempt to access beyond end of device [ 236.371724][T11190] nbd5: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 236.376141][T11190] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 236.385449][T11190] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 236.418597][T11185] nbd5: detected capacity change from 0 to 20 [ 236.424979][ T6628] block nbd5: Send control failed (result -89) [ 236.427482][ T6628] block nbd5: Request send failed, requeueing [ 236.441012][ T66] block nbd5: Receive control failed (result -32) [ 236.441059][ T52] block nbd5: Dead connection, failed to find a fallback [ 236.445706][ T52] block nbd5: shutting down sockets [ 236.447165][ T52] blk_print_req_error: 7 callbacks suppressed [ 236.447173][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.452501][ T52] buffer_io_error: 7 callbacks suppressed [ 236.452508][ T52] Buffer I/O error on dev nbd5, logical block 0, async page read [ 236.456348][ T6628] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.461294][ T6628] Buffer I/O error on dev nbd5, logical block 0, async page read [ 236.463733][ T6628] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.466767][ T6628] Buffer I/O error on dev nbd5, logical block 0, async page read [ 236.471031][ T6628] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.473531][ T6628] Buffer I/O error on dev nbd5, logical block 0, async page read [ 236.475739][ T6628] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.478274][ T6628] Buffer I/O error on dev nbd5, logical block 0, async page read [ 236.480660][ T6628] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.483117][ T6628] Buffer I/O error on dev nbd5, logical block 0, async page read [ 236.485281][ T6628] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.500502][ T6628] Buffer I/O error on dev nbd5, logical block 0, async page read [ 236.503342][ T6628] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.506250][ T6628] Buffer I/O error on dev nbd5, logical block 0, async page read [ 236.509281][ T6628] ldm_validate_partition_table(): Disk read failed. [ 236.511590][ T6628] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.514471][ T6628] Buffer I/O error on dev nbd5, logical block 0, async page read [ 236.517126][ T6628] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.520577][ T6628] Buffer I/O error on dev nbd5, logical block 0, async page read [ 236.525769][ T6628] Dev nbd5: unable to read RDB block 0 [ 236.528677][ T6628] nbd5: unable to read partition table [ 236.531430][ T6628] nbd5: partition table beyond EOD, truncated [ 236.549020][ T6628] ldm_validate_partition_table(): Disk read failed. [ 236.552282][ T6628] Dev nbd5: unable to read RDB block 0 [ 236.554054][ T6628] nbd5: unable to read partition table [ 236.555863][ T6628] nbd5: partition table beyond EOD, truncated [ 236.686004][T11202] program syz.4.1419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.715678][T11202] loop6: detected capacity change from 0 to 524287999 [ 236.729670][T11202] ldm_validate_partition_table(): Disk read failed. [ 236.733408][T11202] Dev loop6: unable to read RDB block 0 [ 236.736584][T11202] loop6: unable to read partition table [ 236.738709][T11202] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 236.854600][T11205] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1420'. [ 237.118457][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 237.964597][T11216] syz.5.1422 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 238.141994][T11226] netlink: 'syz.5.1425': attribute type 4 has an invalid length. [ 238.148634][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 238.750509][T11234] wg2: left promiscuous mode [ 239.188514][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 239.738294][T11251] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1430'. [ 240.093879][T11264] program syz.0.1432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.101420][T11264] loop6: detected capacity change from 0 to 524287999 [ 240.104939][T11264] ldm_validate_partition_table(): Disk read failed. [ 240.108815][T11264] Dev loop6: unable to read RDB block 0 [ 240.111475][T11264] loop6: unable to read partition table [ 240.113817][T11264] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 240.238459][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.268499][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.403156][T11281] netlink: 'syz.5.1436': attribute type 10 has an invalid length. [ 241.464578][T11282] netlink: 'syz.5.1436': attribute type 10 has an invalid length. [ 241.465166][T11281] team0: Port device netdevsim0 added [ 241.481257][T11282] team0: Port device netdevsim0 removed [ 241.484134][T11282] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 241.541264][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1435'. [ 241.693025][T11285] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1437'. [ 242.003296][T11293] overlayfs: failed to resolve './file1': -2 [ 242.308452][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 242.825920][T11309] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1443'. [ 243.358421][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 243.377535][T11324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1445'. [ 243.416714][T11326] program syz.4.1444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.425159][T11326] loop6: detected capacity change from 0 to 524287999 [ 243.427798][ C1] blk_print_req_error: 59 callbacks suppressed [ 243.427807][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.432510][ C1] buffer_io_error: 59 callbacks suppressed [ 243.432516][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.437945][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.440743][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.443598][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.446772][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.451166][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.453940][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.457207][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.460338][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.463971][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.466704][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.478714][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.482608][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.487651][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.490421][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.496067][T11326] ldm_validate_partition_table(): Disk read failed. [ 243.558076][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.561616][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.591649][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.595246][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.602203][T11326] Dev loop6: unable to read RDB block 0 [ 243.629938][T11326] loop6: unable to read partition table [ 243.631996][T11326] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 243.831137][T11338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1447'. [ 243.876820][T11337] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 243.879793][T11337] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 244.001765][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1449'. [ 244.388431][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.115113][T11351] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1453'. [ 245.428539][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.871105][T11372] [ 245.871918][T11372] ====================================================== [ 245.874075][T11372] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 245.876213][T11372] 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 Not tainted [ 245.879099][T11372] ------------------------------------------------------ [ 245.882219][T11372] syz.1.1457/11372 is trying to acquire lock: [ 245.884134][T11372] ffff888068be9968 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x132/0x4f0 [ 245.887153][T11372] [ 245.887153][T11372] but task is already holding lock: [ 245.889422][T11372] ffff888068be99f8 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 245.892375][T11372] [ 245.892375][T11372] which lock already depends on the new lock. [ 245.892375][T11372] [ 245.895512][T11372] [ 245.895512][T11372] the existing dependency chain (in reverse order) is: [ 245.898182][T11372] [ 245.898182][T11372] -> #5 (&q->sysfs_dir_lock){+.+.}-{4:4}: [ 245.900546][T11372] __mutex_lock+0x19b/0xa60 [ 245.902111][T11372] blk_mq_sysfs_unregister_hctxs+0x92/0x2d0 [ 245.904033][T11372] __blk_mq_update_nr_hw_queues+0x93f/0x1460 [ 245.905977][T11372] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 245.907806][T11372] nbd_start_device+0x15b/0xd70 [ 245.909421][T11372] nbd_ioctl+0x21a/0xfd0 [ 245.910867][T11372] compat_blkdev_ioctl+0x2f7/0x750 [ 245.912564][T11372] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 245.914327][T11372] __do_fast_syscall_32+0x73/0x120 [ 245.916021][T11372] do_fast_syscall_32+0x32/0x80 [ 245.917640][T11372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.919693][T11372] [ 245.919693][T11372] -> #4 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 245.922257][T11372] blk_mq_submit_bio+0x1fb6/0x24c0 [ 245.923949][T11372] __submit_bio+0x384/0x540 [ 245.925473][T11372] submit_bio_noacct_nocheck+0x698/0xd70 [ 245.927313][T11372] submit_bio_noacct+0x93a/0x1e20 [ 245.929047][T11372] block_read_full_folio+0x812/0xa50 [ 245.930730][T11372] filemap_read_folio+0xc6/0x2a0 [ 245.932399][T11372] filemap_get_pages+0x155f/0x1be0 [ 245.934136][T11372] filemap_read+0x3ca/0xd70 [ 245.935704][T11372] blkdev_read_iter+0x187/0x480 [ 245.937425][T11372] vfs_read+0x87f/0xbe0 [ 245.938835][T11372] ksys_read+0x12b/0x250 [ 245.940321][T11372] do_syscall_64+0xcd/0x250 [ 245.941890][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.943970][T11372] [ 245.943970][T11372] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 245.946511][T11372] down_read+0x9a/0x330 [ 245.947929][T11372] filemap_fault+0x62c/0x2820 [ 245.949531][T11372] __do_fault+0x10a/0x490 [ 245.951044][T11372] do_pte_missing+0xebd/0x3e00 [ 245.952652][T11372] __handle_mm_fault+0x103c/0x2a40 [ 245.954341][T11372] handle_mm_fault+0x3fa/0xaa0 [ 245.955994][T11372] __get_user_pages+0x8d9/0x3b50 [ 245.957671][T11372] populate_vma_page_range+0x27f/0x3a0 [ 245.959526][T11372] __mm_populate+0x1d6/0x380 [ 245.961121][T11372] do_mlock+0x40a/0x7d0 [ 245.962549][T11372] __ia32_sys_mlock+0x57/0x80 [ 245.964100][T11372] __do_fast_syscall_32+0x73/0x120 [ 245.965830][T11372] do_fast_syscall_32+0x32/0x80 [ 245.967450][T11372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.969541][T11372] [ 245.969541][T11372] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 245.971881][T11372] __might_fault+0x11b/0x190 [ 245.973459][T11372] _copy_from_user+0x29/0xd0 [ 245.975059][T11372] __blk_trace_setup+0xa8/0x180 [ 245.976681][T11372] blk_trace_setup+0x47/0x70 [ 245.978259][T11372] sg_ioctl+0x7a3/0x26b0 [ 245.979715][T11372] compat_ptr_ioctl+0x6b/0xa0 [ 245.981311][T11372] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 245.983067][T11372] __do_fast_syscall_32+0x73/0x120 [ 245.984779][T11372] do_fast_syscall_32+0x32/0x80 [ 245.986411][T11372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.988452][T11372] [ 245.988452][T11372] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 245.990806][T11372] __mutex_lock+0x19b/0xa60 [ 245.992323][T11372] blk_register_queue+0x13c/0x4f0 [ 245.993977][T11372] add_disk_fwnode+0x785/0x1300 [ 245.995596][T11372] brd_alloc.isra.0+0x50a/0x7c0 [ 245.997210][T11372] brd_init+0x12b/0x1d0 [ 245.998626][T11372] do_one_initcall+0x128/0x630 [ 246.000288][T11372] kernel_init_freeable+0x58f/0x8b0 [ 246.002123][T11372] kernel_init+0x1c/0x2b0 [ 246.003699][T11372] ret_from_fork+0x45/0x80 [ 246.005184][T11372] ret_from_fork_asm+0x1a/0x30 [ 246.006863][T11372] [ 246.006863][T11372] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 246.009255][T11372] __lock_acquire+0x249e/0x3c40 [ 246.010965][T11372] lock_acquire.part.0+0x11b/0x380 [ 246.012777][T11372] __mutex_lock+0x19b/0xa60 [ 246.014433][T11372] blk_register_queue+0x132/0x4f0 [ 246.016271][T11372] add_disk_fwnode+0x785/0x1300 [ 246.017980][T11372] md_alloc+0x393/0x1030 [ 246.019488][T11372] md_probe+0x6e/0xd0 [ 246.020943][T11372] blk_request_module+0x115/0x1e0 [ 246.022677][T11372] blkdev_get_no_open+0x7a/0xe0 [ 246.024420][T11372] bdev_file_open_by_dev+0x6b/0x210 [ 246.026133][T11372] swsusp_check+0x78/0x410 [ 246.027634][T11372] software_resume+0x6d/0x400 [ 246.029208][T11372] resume_store+0x249/0x460 [ 246.030716][T11372] kobj_attr_store+0x55/0x80 [ 246.032251][T11372] sysfs_kf_write+0x117/0x170 [ 246.033806][T11372] kernfs_fop_write_iter+0x33d/0x500 [ 246.035576][T11372] vfs_write+0x5ae/0x1150 [ 246.037045][T11372] ksys_write+0x12b/0x250 [ 246.038505][T11372] __do_fast_syscall_32+0x73/0x120 [ 246.040195][T11372] do_fast_syscall_32+0x32/0x80 [ 246.041813][T11372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.043861][T11372] [ 246.043861][T11372] other info that might help us debug this: [ 246.043861][T11372] [ 246.046881][T11372] Chain exists of: [ 246.046881][T11372] &q->sysfs_lock --> &q->q_usage_counter(io)#54 --> &q->sysfs_dir_lock [ 246.046881][T11372] [ 246.051164][T11372] Possible unsafe locking scenario: [ 246.051164][T11372] [ 246.053446][T11372] CPU0 CPU1 [ 246.055049][T11372] ---- ---- [ 246.056647][T11372] lock(&q->sysfs_dir_lock); [ 246.058060][T11372] lock(&q->q_usage_counter(io)#54); [ 246.060415][T11372] lock(&q->sysfs_dir_lock); [ 246.062583][T11372] lock(&q->sysfs_lock); [ 246.063884][T11372] [ 246.063884][T11372] *** DEADLOCK *** [ 246.063884][T11372] [ 246.066278][T11372] 8 locks held by syz.1.1457/11372: [ 246.067835][T11372] #0: ffff888000d530b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 246.070523][T11372] #1: ffff888043e9a420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 246.073030][T11372] #2: ffff888023c6d488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 246.075612][T11372] #3: ffff88801b7e4b48 (kn->active#73){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 246.078588][T11372] #4: ffffffff8dc80d08 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x63/0x400 [ 246.081655][T11372] #5: ffffffff8e8b8b88 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x29/0x1e0 [ 246.084587][T11372] #6: ffffffff8f62a648 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x1030 [ 246.087188][T11372] #7: ffff888068be99f8 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 246.090190][T11372] [ 246.090190][T11372] stack backtrace: [ 246.091937][T11372] CPU: 1 UID: 0 PID: 11372 Comm: syz.1.1457 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 246.095100][T11372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.098277][T11372] Call Trace: [ 246.099284][T11372] [ 246.100184][T11372] dump_stack_lvl+0x116/0x1f0 [ 246.101623][T11372] print_circular_bug+0x41c/0x610 [ 246.103140][T11372] check_noncircular+0x31a/0x400 [ 246.104643][T11372] ? __pfx_check_noncircular+0x10/0x10 [ 246.106328][T11372] ? kernfs_add_one+0x39d/0x520 [ 246.107792][T11372] ? lockdep_lock+0xc6/0x200 [ 246.109180][T11372] ? __pfx_lockdep_lock+0x10/0x10 [ 246.110683][T11372] ? up_write+0x1b2/0x520 [ 246.112006][T11372] __lock_acquire+0x249e/0x3c40 [ 246.113468][T11372] ? __pfx___lock_acquire+0x10/0x10 [ 246.115025][T11372] ? sysfs_add_file_mode_ns+0x227/0x3b0 [ 246.116688][T11372] lock_acquire.part.0+0x11b/0x380 [ 246.118217][T11372] ? blk_register_queue+0x132/0x4f0 [ 246.119790][T11372] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 246.121465][T11372] ? rcu_is_watching+0x12/0xc0 [ 246.122914][T11372] ? trace_lock_acquire+0x14e/0x1f0 [ 246.124483][T11372] ? blk_register_queue+0x132/0x4f0 [ 246.126059][T11372] ? lock_acquire+0x2f/0xb0 [ 246.127427][T11372] ? blk_register_queue+0x132/0x4f0 [ 246.128976][T11372] __mutex_lock+0x19b/0xa60 [ 246.130311][T11372] ? blk_register_queue+0x132/0x4f0 [ 246.131824][T11372] ? kernfs_get+0x1f/0x30 [ 246.133110][T11372] ? kobject_add_internal+0x54e/0x990 [ 246.134728][T11372] ? blk_register_queue+0x132/0x4f0 [ 246.136329][T11372] ? __pfx___mutex_lock+0x10/0x10 [ 246.137839][T11372] ? kobject_add+0x17c/0x240 [ 246.139239][T11372] ? blk_register_queue+0x132/0x4f0 [ 246.140777][T11372] blk_register_queue+0x132/0x4f0 [ 246.142215][T11372] add_disk_fwnode+0x785/0x1300 [ 246.143685][T11372] md_alloc+0x393/0x1030 [ 246.144965][T11372] md_probe+0x6e/0xd0 [ 246.146168][T11372] ? __pfx_md_probe+0x10/0x10 [ 246.147531][T11372] blk_request_module+0x115/0x1e0 [ 246.149045][T11372] blkdev_get_no_open+0x7a/0xe0 [ 246.150520][T11372] bdev_file_open_by_dev+0x6b/0x210 [ 246.152194][T11372] swsusp_check+0x78/0x410 [ 246.153590][T11372] software_resume+0x6d/0x400 [ 246.155114][T11372] resume_store+0x249/0x460 [ 246.156530][T11372] ? __pfx_resume_store+0x10/0x10 [ 246.158058][T11372] ? __pfx_resume_store+0x10/0x10 [ 246.159655][T11372] kobj_attr_store+0x55/0x80 [ 246.161135][T11372] ? __pfx_kobj_attr_store+0x10/0x10 [ 246.162850][T11372] sysfs_kf_write+0x117/0x170 [ 246.164375][T11372] kernfs_fop_write_iter+0x33d/0x500 [ 246.166024][T11372] ? __pfx_sysfs_kf_write+0x10/0x10 [ 246.167584][T11372] vfs_write+0x5ae/0x1150 [ 246.168907][T11372] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 246.170655][T11372] ? __pfx___mutex_lock+0x10/0x10 [ 246.172327][T11372] ? __pfx_vfs_write+0x10/0x10 [ 246.173844][T11372] ksys_write+0x12b/0x250 [ 246.175221][T11372] ? __pfx_ksys_write+0x10/0x10 [ 246.176744][T11372] __do_fast_syscall_32+0x73/0x120 [ 246.178330][T11372] do_fast_syscall_32+0x32/0x80 [ 246.179899][T11372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.181915][T11372] RIP: 0023:0xf7fe8579 [ 246.183192][T11372] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 246.189193][T11372] RSP: 002b:00000000f511555c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 246.191916][T11372] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000000 [ 246.194424][T11372] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.196935][T11372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.199325][T11372] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 246.201933][T11372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.204428][T11372] [ 246.468440][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 246.688843][T11372] PM: Image not found (code -6) [ 246.824928][ T45] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.893328][ T45] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.012468][ T45] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.092633][ T45] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.245551][ T45] bridge_slave_1: left allmulticast mode [ 247.247376][ T45] bridge_slave_1: left promiscuous mode [ 247.249293][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.252031][ T45] bridge_slave_0: left allmulticast mode [ 247.253869][ T45] bridge_slave_0: left promiscuous mode [ 247.255657][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.335744][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.340586][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.343882][ T45] bond0 (unregistering): Released all slaves [ 247.721779][ T45] hsr_slave_0: left promiscuous mode [ 247.724079][ T45] hsr_slave_1: left promiscuous mode [ 247.726979][ T45] veth1_macvtap: left promiscuous mode [ 247.729290][ T45] veth0_macvtap: left promiscuous mode [ 247.731347][ T45] veth1_vlan: left promiscuous mode [ 247.733220][ T45] veth0_vlan: left promiscuous mode [ 247.919008][ T45] team0 (unregistering): Port device team_slave_1 removed [ 247.959430][ T45] team0 (unregistering): Port device team_slave_0 removed [ 255.109690][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 21:40:45 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffc90003ec0000 RDX=1ffff920007d7e2a RSI=ffffc90003ebf0e8 RDI=ffffc90003ebf158 RBP=ffffc90003ebf1a8 RSP=ffffc90003ebf058 R8 =ffffc90003ebf14c R9 =ffffffff90ada4de R10=ffffc90003ebf118 R11=0000000000004914 R12=ffffc90003ebf168 R13=ffffc90003ebf118 R14=ffffc90003ebf118 R15=ffffc90003ebf110 RIP=ffffffff8148fc5a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f46e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73e3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85143435 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc90007116f80 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000020 R14=ffffffff851433d0 R15=0000000000000000 RIP=ffffffff8514345f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000007714e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080800000000 0000000c00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002b2264 RBX=0000000000000002 RCX=ffffffff8b1a4819 RDX=ffffed10056c6fee RSI=ffffffff8bb17080 RDI=ffffffff81702ed9 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901ce550 R15=0000000000000000 RIP=ffffffff8b1a5bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ff03601000 CR3=000000004fb58000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002bd08c RBX=0000000000000003 RCX=ffffffff8b1a4819 RDX=ffffed10056e6fee RSI=ffffffff8bb17080 RDI=ffffffff81702ed9 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901ce550 R15=0000000000000000 RIP=ffffffff8b1a5bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd4c0c4bc8 CR3=0000000073e9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000