last executing test programs: 2m7.599397104s ago: executing program 0 (id=1326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) iopl(0x3) (async, rerun: 32) quotactl$Q_GETQUOTA(0xffffffff80000702, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xb4, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) 2m7.520140877s ago: executing program 0 (id=1327): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x8882, 0x0) (async, rerun: 64) r0 = getpid() (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x8000400) (async) sync_file_range(r1, 0x1, 0x7, 0x2) (async) syz_pidfd_open(r0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4004, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r2, r2], 0x0, 0x10, 0x37, @void, @value}, 0x94) r3 = openat$drirender128(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000340)={0x3, 0x9, {r0}, {0xee01}, 0x9, 0x1}) prlimit64(r4, 0x2, &(0x7f0000000140)={0xb, 0x8d}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async, rerun: 64) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) (async) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000180)=0x6) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r9) 2m7.519811743s ago: executing program 0 (id=1328): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='afs_edit_dir\x00'}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00"}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000ac0)=@raw=[@jmp, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x38}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], &(0x7f0000000440)='GPL\x00', 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)=[{0x1, 0x0, 0xf, 0x1}], 0x10, 0x7, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write(0xffffffffffffffff, &(0x7f0000000740)="fc0000001c000704ab5b2509b868030002ab087a0100000005481093210001c0f0030584250060100000000000031815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec1000000000000000b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239", 0xa6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, 0x0, &(0x7f0000000540), 0x6c, r4}, 0x38) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r5) r6 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@local, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe4) r8 = syz_open_dev$dmmidi(&(0x7f00000003c0), 0x2, 0x682041) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f00000006c0)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x3fffff28}, {"a0"}}}}}}}, 0x3b) sendmsg$unix(r1, &(0x7f00000008c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000340)="46d097e68cf2f92b0ee0d081fef743f3f9c5742730c14e692b3845b8b6491f3b11f4be202e572fd5fb5468604cc147408688ac178fa8d00c0e01d43096ee1e91d7106aab0174c02d68d4a537495d5b1bcc517ef6a35d719d6fa10a0648dc4ed6", 0x60}, {&(0x7f0000000540)="897c17a40e225f2e7a068780e12b3a1e29e9edc8aba4fe56f927efb6faa198644d5fa6c19cfe66445aef3654efb2b7ca15b90544f277be899062bc2ffc3b4e20e201ea9ff626a5ad803b46348a51293bdc40508153e4fb76d2f45214bb4543f276407a56efb02d9443c0638ebde50c185a48903004d01e9f24ff5dd6233d4ded0d1e1579f923d4d0ec4a3b2a84f9c76cac7787e7617e6facb773cd139762aa6ac8aa8f80b41fa0f9accb6a9628fd05b5997c48dde8b48a3c4981f26c2a9993245498fe0da700b1f3dfa6eb62db1d17eeb527c6a63b8ddc41fcd3507b04fee0", 0xdf}], 0x2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=0xee01, @ANYBLOB="140000000100000001000000", @ANYRES32=r2, @ANYRES32=r8], 0x40, 0x20000010}, 0x20048001) 2m7.04051672s ago: executing program 0 (id=1331): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x37, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119388f76a00000000072feb3014cd3ec8a755c1e1380081ffad000030e8d5000000010000001400000500242c", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x8e, &(0x7f00000001c0)}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x1, @mcast2, 0x320}, 0x1c, 0x0}}], 0x1, 0x4010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1f, 0x20000000, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) listen(r3, 0xfff) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close(r4) mount$bind(&(0x7f0000000300)='./file0/file0/file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) 2m6.980443366s ago: executing program 0 (id=1333): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async) write$6lowpan_enable(r0, &(0x7f0000000040)='0', 0x1) (async) ioctl$TIOCGPGRP(r0, 0x800c6803, &(0x7f0000000100)) 2m6.75069042s ago: executing program 0 (id=1335): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000005f0000000095ff0018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 2m6.704088936s ago: executing program 32 (id=1335): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000005f0000000095ff0018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 2.252477997s ago: executing program 3 (id=2455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000ff830000010000000c"], 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x4, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$vcsu(0xffffff9c, &(0x7f00000004c0), 0x200040, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x0, 0x0, {0x2b}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8001400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x168, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x84}, 0x4024) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0xb9, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, [@jmp={0x5, 0x0, 0x8, 0x5, 0x4, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x7fffffff, 0x17, &(0x7f0000000180)=""/23, 0x40f00, 0x32, '\x00', r1, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x9, 0xf0}, 0x10, r2, r3, 0x0, &(0x7f00000003c0)=[r4, r5, r12], 0x0, 0x10, 0x400, @void, @value}, 0x94) r13 = socket$packet(0x11, 0x1, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r13, 0x891a, &(0x7f00000001c0)={'veth0_macvtap\x00', {0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x17}}}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r14) sendmsg$DEVLINK_CMD_RATE_SET(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r15, @ANYBLOB="0107000000000000000052"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 2.087121447s ago: executing program 3 (id=2460): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000300)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0), 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x4002, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_null}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) 1.84087341s ago: executing program 3 (id=2461): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x1], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0xac, 0x3, 0x5, 0x0, 0x9, 0xd, 0x3b, 0x0, 0xc, 0xf1, 0x6, 0x3, 0x0, 0x7fffffff, 0xb, 0x4e, 0x3d, 0x2, 0xf, '\x00', 0x7, 0xc8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) r6 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x6}) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x40000000}, 0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) 1.397127538s ago: executing program 1 (id=2465): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./bus\x00', 0x6b76f27452643c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.288853957s ago: executing program 1 (id=2467): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a0b040000000000000000020000032c0004802800018007000100637400001c0022800500030001000000a9ab2575bdccae8fa00cbc5788ffcfa2080001400000001708000240000000130900010073797a2ddfdf000900020073797a3200000000160000001100010000000000000000000100000a000000004e4d3a93e8eadfea4d56955718280ad69d9c698780e9684252271402000000000000008f20853fada3fb334350747a8d0909e47581be79640414cd4bc34c"], 0x80}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = syz_open_dev$vcsn(&(0x7f0000000100), 0x905, 0x200002) getsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendto$inet(r7, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, 0x0, 0x4040004) openat$kvm(0xffffff9c, &(0x7f0000000240), 0x2a000, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc200009078000058a0114c9c940a4bdb67e26b2e7dc7ed1b6b722af9480980c3d67c5e87520dc5efeaa1acd87a3b6d2107e73a950930e338056e41ea73feb4ef40814e93d38169c6d1f3d554825d5e0a09000000000000002d1a35cdca019a16538d5a936a4d1c7b250b09c475779d93ed0137c74e6572ad66fd5e734148b3ee68a73831a368303e2e32f6d36a71d7dba59ad9843ef5d488d80b2f817be847e2bd2d8571748066e331e3da"], 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x5a1}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000003c0)=0x9c) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=@ipmr_delroute={0x2c, 0x19, 0x200, 0x70bd25, 0x25dfdbfb, {0x80, 0x20, 0x20, 0x40, 0xfc, 0x3, 0x0, 0x4, 0x800}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_PREFSRC={0x8, 0x7, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040040) 1.287660653s ago: executing program 1 (id=2469): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsopen(0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) creat(0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) r7 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) fcntl$addseals(r7, 0x409, 0x8) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) 1.048782293s ago: executing program 2 (id=2471): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x5, 0x1, 0x8, 0x8ee}]}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x2a}, @multicast2}, 0x8) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x1, 0x7fff, 0x460, {{0x2e, 0x4, 0x3, 0x0, 0xb8, 0x64, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0xf, 0xa, [@broadcast, @multicast1, @multicast1]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end, @end, @timestamp_addr={0x44, 0x54, 0x63, 0x1, 0x2, [{@remote, 0x9eed}, {@remote, 0xffff436b}, {@rand_addr=0x64010101, 0x5}, {@remote, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x25}, 0xfffffff1}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xffffffff}, {@remote, 0xd2df}, {@loopback, 0xea0}]}, @timestamp_prespec={0x44, 0x34, 0xf7, 0x3, 0x1, [{@private=0xa010101, 0x8}, {@multicast2, 0x5}, {@empty, 0x9}, {@private=0xa010100, 0x7}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x8000}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x74, 0x66, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6, 0xffff}, {0x15, 0xd}, {0xfff2, 0x6}}, [{0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x677}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x100}, 0x8000) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r5, 0x21, 0xc, &(0x7f0000000380)="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", 0x1000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x90, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x49, 0x27}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x90}}, 0x40000) sendmsg$nl_generic(r6, &(0x7f00000026c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002680)={&(0x7f0000001580)={0x10d0, 0x2b, 0x100, 0x70bd25, 0x25dfdbfe, {0x1c}, [@generic="7ccd4b4a10cf374d4652881561ee97d75826f4c9ee4c9933a9cea6b0a0a2e7b98dfdb105c36835798248f0bda95b15debd6f7d6ac890dad8550d428931d8854189efecb4f95869e2f91949ba00291af75431f15ab4667954bbfee43e7bcbf10b137c945fd7f0d67cc0aa9b08c8abc8d073e5f93332d411acb235f2a6586eb239146562cf2821f6ef4444d0a4de5cde2ea9719424a8812da69cdf2a0c83e7c3a5c0765b016e7cad084ffb6819482404f712c8ee63bd723548eb0fa5e1d810188bf8ada7b74bd776bb09a97263aee1fab0593868014b103869e40eb1392cd2100d669d1afbc31f832936d7a24c1166badc1786420de684e17a90a29f05d61a7ed0e0ca8ea1fbe18b0cf300a208f0e2742496a9d2535104b105aca00d04f2d41d81d3f4546e0b37c645f42188e6f266f4c6b3af55d8f410a646e40da1da663620076be7eb309fe88da395f8d913d057a1e5d9685f5545aee75c141997281c470a7dd2585a17bd7994bceffa93801022485d51f8fc184f57fd92229b458bf2e03fa24d60ba7ada2e5a9b513228b4ee265e5727aacefcf3252ac736fd4c65ab12803480f9bb9233190e8e66c265d4da8aae3e74207b339a2cec359327ce07d1ac5440f1eb6757f4c4a996e79eef9948cbda4b6ccfac83561b44181218c8c80523d8d817d07583d7d67ac7bdefc4b4441b894f3fc0a906bf43b04e05e5d4e0011ca1e07aa9655d24d1960b52cba7443c69d1e9232ac1d299cb4293371bf385bbf7e6c356f3ab9d75d1d0e28923aaae540461d412eb2a0a97f44327df5406f27942a5df78935adf8982cfe38c6eeefa0229a9f8074865909dcc819a716851235967491db224b270257dfc2eaf9d2ff916b31e63a3c721486456ad3e8a95ab3323f8dcd65a03fec08184d180da1258efe607befd12cacb830bb407afa893bb5a8d7467e847145ec7555c0724e080b84d8ec50ad46571536ff9ac6dca8d4a00e0a0cc95c2ba0980522370a8acdf2f2f97b2997cc825eb1e9a2c05705ccbda444807fb04eeb0cf9fd4a44d0b895ce3bda624e4528249abf41e05047d17a6e8fb489b07c14ac69ac217836c4bff496dff1c050513b4a9680c23d05a1a811bf7ac805555f5ca96cbe10daa0f874c3ca97fa167b6a73ffbbef5f6aeae3bb5f13a5cd6806512c8712ce7ed291b1d7aff81a01758341fbd66baa141636bfc5f862b73c51480f98ac295e9617129d9749b14704105ce8cdfc684780475d682a8cebca221cd3335f257f8352d802a9ca15f137c9d9a18be8f85b0dbf3d027cbb58d7becbe25060f2ae4fdfb6a6c99589ca882a78cb12e594050a669a4763cb91c3d78a8d5949943dc2dc08911e98e695dc421cb1103e829e6bbb722cfaa2102ca4825ba2177f23bc929e066f8c886a0c28ef38f336e65522c987fcc92f9cf144187a94868b8a518d27b053e27371492e3d90bbcd6d24a46366a41ce5d4370a2df261875d0c85a4605a011c000e879f0011f0b90f54b2fa06199424e3828ef279a65047184c5408ebe107142cccd2876f9a4b6efa0f20ab551881a33a631d969235fd362a133fa149a66cc18c513f9764f2a2e70b02fe6691db58468832cb4bc10908e9a2c38eb91e2d37122eed646b90ccc796af7262f0747dd8202cd21c4527cf66505f5e040f73623e09064759f0b58237c75efe8cfff17724a8e9937ed33ca05f9a500f4fa4b0c6503178e21726a68b96c71be89b3fce7a44f08ee6896ccf4f26f55ee09dfbf84e9ba77a3547ba1dddda114a12936ef4d94f46471add03648554a4e1ca8d64d9940f74721ef01f3f5c13ff7d72dc3797d44cf7437d4a4de202edaec5da2670d003fea94f2cdec1c820f56af286945226bf0bfabec0659d6bcdb645398f0501e51303816f2853378847d22ab966917c2d869048f48d04a401ce1a0fe8aa8b3547bec4b32b7137dd9b3915ef067a747afbd0373f0e8202d7b9246d7aec50524b000e896911293b401f9ba0f3001e2e02b8da1c868d09c12fbaa46294feb5c38f77973c5702be83f3e52fe967c5e2900fe5ef1c421f3cf72fe928397418a70e259c2ad5cab00c21162cfdf753aabcf80da1291dd078c64a31b39245b8e3ff2bea553dfd97c891905372b076f0def06c86f4435c4ad48cb1f312f59ca603aa83960d44b8f5fd00b056cdecbfcd6ff4b01179e40aa9bbd5da81d316e6a148b70719fa63ecee05dc53d02a241faebef45cc4ec8b761ba3f13d0b665a7ca77271ba50f4b4c56b77473a61b64b06b98c2fd437db7d0fdca10c29a74002ec68b633b81ea3ddda82cc65c632d19289e77d0d5eee9bfbdbba87627b55d00cb062eb9c1ed4c4fcfc374d862112f9b9dd7ccfaf5a6864a4236cfb902ba4e66fe2c94f542719f3bfee49535f9120ba06036c941f6118a8094a76ba20552629d266038b0593e9b652b098a34ed46c129c1f4477171d9ff0e4615dfd8b47f21f25d79a273966062ad83b3cbded21eb0e8b28f53b46efa0583d6e2a79d4d6c812e910d64ee30fefe9224c52922e7d77854accfb94809a850d21ed92996bd3fd071d870fdcafa960e7ca15838bd30c810d69ee0289d3f6d5844f546bc48f39231f51296e8f5cf055137822f050ebbb5ad9406bc6ba15d0af2a340b0c86544aaef71aefe8740984bddbdae171eb911b5903640259eb927b5ff2f0c52df006b3a835cf315fb1a38e2ee29a951ad766244376c567a2f98fee4593c0e7ab07a3238ce0b00f16fbd4b13f7b782592955ec7b3fcb89a9c3fd0c044909408e2c667f392fec415fc072f54a8c77cbc65f7e1fde05f3fc16c7dff708fc9ed81bf2ab6169d808006fb94c9522dae8a5d728728cb579dc028d7b8454c2ee0376ec8468f0cdc8f711027bafed66737948460d8fdd8bbe7fc40d6b8eef2e5def5746b9f995e66afbebee59292a626afd2fcad9eba7200eafe7131bcd4bd4a8a05aa8e49d614c0135322c1f1b5ce5c1371d72cfd64d2bbe39642086efbd3e4987fc3077d02eece5065e67f614dabddf3d339f80d36bb089bb6e85fdd242afea1e674ad57c622ee7fea054b10f2ac75c3dfdecafa53e6dddc556de0441e686aba68b6491c14619a9df36cea14b3d0d2fa593c6ee24214e9d7e7699b36d00c8cbc8b44d69ebef617b6d92140dff7ef74227b16c5489caad53588ab82f9660de094932733d86337cded0fa2bcf89cd4358cb624cf454bc900576e0cc6aaff31c6c1c1f74902a2ddb1c77089683bdf6f3feece80b217e7afc6e292ddb4371c178e60721b4e813e23f29e4e0fdbdc4cd8b9388f9e17aa73f560f2bef335fcb032a71b0130fa28e6bc9136b288987b22ead822c532587b7bb1134b4c485e18e1561689719c4101d42cf594f46c90fb6eebbd16e4c26535fa7a64191d518af00bc2b90fe175c353e133b22612b6c4ff869512c8b76a0080644720585dec9f2f07c820b5184ba35a3387062f05b3fd3d34638be2ed590724d76f3adb09ba26ffe562fb16f565c2b32ce11bf4b7cfdd94bb9de867adfd2077ba17f97bb9330ce34b47d264e79916dc0c34e0a466d85d268784f08b39be0ea9fca6be9354b2ac3ce6d2680674513c7268d8a9b05675089b5c3ead3ef7648c97da56da7a520cc948fc240fc3e7a1472a1b7aae8af88ee4d39bb4defb1ce803208f1e73226fba7ddb5cdc9296ca4eb8cdc10185e0f9ba980f5eddd1217883c822f44e4a615f9a40edb751cb1f918d88e7785840846b64035cff489dab1de2754eda9014e1e5db157ffe54cab28b5061fe84511a22d7f2f41da622729bfc8f148dd5f21ea0a7547399acc12f186345b3e695246a837b2fee44ed53dba29c3539083cff6a9c610e12f91128fbfba5e4d60a1395bfa0c1792b74abc356de40ed62f96e358cc2ed07ad01cfba3fceec4b54f69a9887d3810443ff8fb10ba233b2937ab2ea113612572c6b9ee23f693172da130b9744a1f03ed7501db9ccc142d3337e9752a09119e1bbe8a7e8eb2883ce034b9de21db39ba2ecb12860467adabcf9d3c4f0b037367b884ad18c59722250b066685d0b82d51cb30aaf926948cb99840496d158f3fdc055973115afa328b1867af0a605bafac7c6104ce730999053a560973f3ae3521fab1f647da90fc65c73a372cd2e62f1b1b76248a78d4a5092fad5f3e553d9260defa4505d4d83dce6b80b3a7728d1393fcfa67484f3f45abbb12fa7b87fa6dbd948cfab03ed5d4eed371d3522945ef8f20981e4ce3fe0ce1b1ac08487bedd024c79273754c348541441542d205baf89a20723a6d272f738ecdbb93dcae0e5c020335bc7a06623ede71cc6f1c90916ea1f9460df2ac51cc248a7a18246724e5c272eccb308d0c2270596606fa3576850f786777690408925b435bd53876dd6e6a88627f8fac53e13f1890618a595171f93a20fdfd207932030fabd1d16e05035715999ed17a8dda9f80bfced4091bf78f66bb1c5de549717a55960d1db1067c7b400c2344cab284ae77db0eb35ca236236e336d43378c5f7c98d02c1e5ff8e1d6f8d044eeb4e47990950cbe779d65d83ce0d3e82318eb6079509bc4984d8886b7a2d76f84fa48571d3a33977e83cdb1adf26380838bf0b4fc42c11ad4a147a2a1e71f7d6af80bb3120099f21aeaa86cff66a2f59b9f0bfd7789227464bc0f2f40d4bb3f4c5fad64cecc370dd984e6c05ae7510bfa352f26926ff49c65c557a250d18a589cb167b019852cb3741e733c7779bda8019e721bf9a0f0495ec7634700e094621b66f2cd47aaac055eb6afedb3a9805e8f4ad08f0a76c4be039dba77e3c0f40e20f3b49060a44064461b8e08f1cc16753a9d8eba0ed66a34f9dd1bba124df03aab106d8551af0f742ef8ebc0ab46529328ac785d544cb32a19b6d00aefa81c4b32db59b16a83fe55fcd68c4aac07a3c96a83409e11d1df79d306dc41de9553e5431e4a7779e000a524f4fd340219a6a5e38d944d927443a68a2cb9efac5ee8aa5b1487557b3779ededbad063be180ca9f53f9d14e3bf5fd847577c084afaaba7c973dcda68f73dc9e6f1cfa32c3a3c048e8ba4591fe0c6b295d4f1a354e6e10249cf091df9034246c5abb5e7c2e8efd73b9bbd4961c58d742f61ef97040aed32f43524b3600fe3c24f19bffe68721a028a4bd9819a023d88b46c13b1f0e866fb65f289ae00d7e5e04e940c5b7129cde6bb72bfd81bdabd64cb6b01517bdd98470247c0fe1474dd65696f632b3279c55a3fb3a3c8c9ac8548eb0b6655490ec6e23f7b8db775e4ae3d846b27c9450fa5196cab0e5dc11555d0c402dae45f45a57443f85edf1fd09fb383effd6ca79ab2b1ca8c8fc5cd0fed1d572b7178750f3deb70951242c46e83f6032c63dd5de0cc2ce1e77303ee4c63984de69ba75c8e5dfa5ddab82eaaef7dd776ac2fb8e91ee3cfbfb5d3552b04bcd5176f78864503aac0fed7e3c2935277453662869e95b867648d39830560bb1e16e80d4e57cee2665acf464ed049fbb8a85ed7cdeffea6ff88d100329c3d8283477e5e49ffd224b2676137afa84ed110170c9a2d6d9842f3603195181c1df5734ba5a6375d2cfb826a982322d85e478e31833fa779ca388599e57463ba9e04be3c2ccdb7630bc7dce1c03181ea7275b1e3ff9af919ffca6c562d100a972e3aa2b1db3ee30b89391ec60c203c6e01017a9beb530bcbb175bbe012d2b36cb6890598909ea910b998d45dc23712e074dc841c1542eb1cbfc7a26597e9f3668f78999dadd3375285792cff073b99dd86eca1606fda3048afff58c87d9e79ca", @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x1}, @nested={0xa8, 0x51, 0x0, 0x1, [@typed={0x76, 0x126, 0x0, 0x0, @binary="f05232fd7e62c378148fff3ddaa90bd1b8710c70db8b5c9a6d5b328fa9d3ffffdbe018eaa94ec9fcaedb9b937b4c6a394e02753a0e2841f30691ce881584a5ecfe3d82547a453d2f3bb31220603c38f75b8df9461cd3bd05556d849eecbbbd9372d7ac83b76b7ace0a28c4c982c70d55eccb"}, @generic="9ab31bedb0fe6550124bea0265c6d248b6bf0b6e131af146e89a54355720da39ccf95848bf664506eda487a9"]}, @typed={0xc, 0x31, 0x0, 0x0, @u64=0x401}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) (async) fstat64(r6, &(0x7f0000002700)) (async) r8 = openat$cuse(0xffffff9c, &(0x7f0000002780), 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000027c0)=0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002880)={0x0, "6161d55283403d7b00a666474dc9456c"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000003880)={{r8}, r9, 0x1a, @inherit={0x68, &(0x7f0000002800)={0x1, 0x4, 0x8d, 0x6, {0x22, 0x7, 0x7, 0x6, 0x5}, [0x7, 0x1ff, 0xa, 0x80000000]}}, @devid=r10}) (async) mount(&(0x7f0000004880)=@filename='./file0\x00', &(0x7f00000048c0)='./file0\x00', &(0x7f0000004900)='adfs\x00', 0x88004, &(0x7f0000004940)='{\x00') (async) ftruncate(r6, 0x9) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000004980)={0x3, {0x36, 0x10, 0xf, 0x3, 0x401}}) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000049c0)=0x2e4, 0x4) (async) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004a00)={r11}) ioctl$sock_qrtr_SIOCGIFADDR(r12, 0x8915, &(0x7f0000004a40)={'hsr0\x00'}) r13 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r13, 0x89ef, &(0x7f0000004a80)=0x4) (async) pipe(&(0x7f0000004ac0)) (async) sendmsg$nl_route_sched(r12, &(0x7f0000004c80)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004c40)={&(0x7f0000004b40)=@newqdisc={0xe0, 0x24, 0x10, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x10, 0xe}, {0xc, 0x8}, {0xffe2, 0xffe8}}, [@TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x7, 0x7ff, 0x9, 0x0, 0x3, 0x1, 0x3}}, {0xa, 0x2, [0x46, 0x1ff, 0x7]}}, {{0x1c, 0x1, {0x6, 0x10, 0x9, 0x3ff, 0x1, 0x2, 0x5, 0x3}}, {0xa, 0x2, [0x7, 0x53e, 0x6]}}, {{0x1c, 0x1, {0x4, 0x2, 0x4f21, 0xffffffff, 0x0, 0x7, 0xcd, 0x9}}, {0x16, 0x2, [0x46, 0x9, 0x5, 0xf32a, 0x5, 0x5, 0x100, 0x80, 0x6]}}, {{0x1c, 0x1, {0xb3, 0xff, 0x7ff, 0x239211dc, 0x2, 0x2, 0x5, 0x5}}, {0xe, 0x2, [0x100, 0x6, 0x7f, 0x7, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0xbd}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4040880}, 0x10) 1.048137071s ago: executing program 2 (id=2473): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x80) flock(r0, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0xe0fc, 0x4, 0x400000, 0x3a7}, &(0x7f0000000100), &(0x7f0000000200)) r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x1, 0x0, 0x0, r6, 0x1f000000}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000300)={0x0, &(0x7f0000000600)=[{}, {}, {}], r7, 0x0, '\x00', 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000240)={&(0x7f0000000080), &(0x7f0000000380), r7}) io_uring_enter(r4, 0x353, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x40406300, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r9 = socket$netlink(0x10, 0x3, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$KVM_RESET_DIRTY_RINGS(r12, 0x31e) ioctl$FS_IOC_RESVSP(r10, 0x402c5828, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x4000000, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) flock(r0, 0x6) flock(r0, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.006906386s ago: executing program 4 (id=2474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="580100002600f300000000000003ff001e000000", @ANYBLOB="0000000000004c681d980000640012800b000100697036746e6c000054000280060011004e2000001400030000000000000000000000ffff64010102060012004e20000014000200ff0200"/87], 0x158}}, 0x0) 1.006555582s ago: executing program 4 (id=2475): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400009e54000000000000000000000000000000000000008b3809aec0701768a9e301b130c68899b2bd025ee9da974e70692c0602c81a60d2b1c3feab59a6c3d5d3eb295cbc68e3575b75aba3c18af19a36a04ab1bafd555731ea5a55d1fa48d5e4dd8407516b7b33e6fd5f51de202adbefd458e00fe7657e3c5829581b8a26a71a01da68420f4aa921765e587a2d1453"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000003000000000000000600000067934000000000007b06fcff1000000018010000202078251a000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000bc0f000085000000060000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x71, &(0x7f0000000580)=""/113, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x3, 0xffff, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, r0], &(0x7f0000000480), 0x10, 0x9, @void, @value}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001800dd8d000000000000000002000000ff0000060000000008000700ac1414bb08001e006907000008000700ac1e010108000b00ffffffff08000500", @ANYBLOB='\b'], 0x60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r7, &(0x7f0000001640)=ANY=[], 0x1a3) write$binfmt_misc(r7, &(0x7f0000000000), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0x2def, 0x3ffd, 0x62ad2e714cb50de0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x0, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x9295, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r9, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r10, 0x400, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'veth0_to_team\x00', &(0x7f0000000480)=@ethtool_ringparam={0x10, 0x4, 0xf, 0xe, 0x124a, 0x8, 0x2, 0xa5c, 0x4a}}) 729.294874ms ago: executing program 3 (id=2476): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000056311bb00000000009500a505000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) close_range(r4, r0, 0x2) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r6}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r6, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000bc0), 0x8) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) poll(&(0x7f0000000280)=[{r1, 0x401}], 0x1, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xa0, &(0x7f0000000c40)=[@in6={0xa, 0x4e20, 0xda4, @local, 0x7}, @in6={0xa, 0x4e20, 0x7, @remote, 0x4000000}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4a20, 0x4, @private0, 0x7fd}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x2, @mcast1, 0x2}]}, &(0x7f0000000200)=0xc) shutdown(r1, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800168014000180100006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r10, 0x2}, &(0x7f0000000140)=0x8) 606.419446ms ago: executing program 2 (id=2477): r0 = openat$sndseq(0xffffff9c, &(0x7f00000001c0), 0x121800) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000003c0)={0x3a6b, 0x4, 0x0, 'queue1\x00', 0x3}) gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x28000040}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000044}, 0x4) waitid(0x2, r1, 0x0, 0x4, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000240)}, {0x0}], 0x2, 0x0, 0x80000001) ptrace(0x10, r3) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x80000000000}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe4) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008002700002400000000001190393c141400e000000100004e2000109078020000000000000079f7b742303f9fb7931a38"], 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000000)={0x8b40}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4995}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x41000004, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x10, 0x3, 0x90}, {0x3, 0x7f, 0x4, 0x7}]}) 518.986389ms ago: executing program 3 (id=2478): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x250940, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x250940, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFINDEX(r5, 0x400454da, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 518.561996ms ago: executing program 4 (id=2479): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0xa804) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000680)=ANY=[@ANYBLOB="0302cd08dfdaed393dc5ae7b8697ba63f47e015833cbdeb1ddcc07337359735d22066dcfcc1fa3b4b072008e83d28eb0a395"], 0xb, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x25) 378.6047ms ago: executing program 4 (id=2480): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) r1 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x4}) getpid() mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000ee5f91b837a7dc7465be808e4c3e8d62d5b4e1e5c89c977e06820c5b87ee9051a06a11e968194259282077de527a8cd2f6288842f83fe23381e8b04b8db", @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)={0x1, 0x7}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000000)={0x8, 'vlan0\x00', {'team0\x00'}, 0xda}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r6}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705fcff0700000085000000c50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 378.239589ms ago: executing program 2 (id=2481): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x6, 0x0, &(0x7f0000000140)="cb74445b7d4c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x4c) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000100)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0, 0x78, r8}) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8916, &(0x7f0000000000)) madvise(&(0x7f0000be1000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f0000c00000/0x1000)=nil, 0x1000, 0x16) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_open_dev$admmidi(0x0, 0x20, 0x0) 234.336405ms ago: executing program 1 (id=2482): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000005f0000000000009c18000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 234.121458ms ago: executing program 1 (id=2483): pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x0) keyctl$setperm(0x5, r2, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f00000002c0)={0x80000000, &(0x7f0000000280), 0x0}) r4 = openat$nmem0(0xffffff9c, 0x0, 0x4081, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000180)={0x0, 0x0, {0x7, 0x4, 0x3, 0x8}}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) io_setup(0x3, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x102) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) (async) write$sndseq(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x16) (async) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = openat$ttyprintk(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) close(r9) (async) ioctl$RTC_SET_TIME(r8, 0x4024700a, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) userfaultfd(0x80801) (rerun: 64) 148.277757ms ago: executing program 1 (id=2484): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f00000021c0)=""/4092, 0xffc, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x218101) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_disconnect(0xffffffffffffffff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000015f000/0x2000)=nil) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000240)='./file1\x00', 0xc0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000002240), 0x138, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) userfaultfd(0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x9, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000002300)={0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000001ba20000d1"]) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x154, 0x1bc, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cc) mkdirat(r3, &(0x7f0000002040)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000002340)={0x0, 0x0, 0x8, 0x2, 0xfffffffe}, &(0x7f0000000340), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000002280), 0x0) syz_open_procfs(0x0, &(0x7f00000022c0)='net/ip6_tables_targets\x00') 145.291175ms ago: executing program 4 (id=2485): read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x57) (async) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000080)={{r0}, "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"}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0xc4}}, './file0\x00'}) syz_open_pts(r2, 0x220800) (async) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000010c0)={0x2e, 0x4, 0x0, {0x5, 0x3, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000001140)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464ce, &(0x7f00000011c0)={r3, 0x5, 0xe0cf, 0x1, 0x2, [], [0x6, 0x1000, 0xec, 0xfffffffc], [0x401, 0x80, 0x2, 0x9ac], [0xffffffffffffffff, 0x8, 0x8, 0x2]}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001240)=0x0) connect(r1, &(0x7f0000001280)=@nfc={0x27, r4, 0x1, 0x1}, 0x80) r5 = syz_clone(0x102000, &(0x7f0000001300)="0e0b36e9f8c54559b6cf9df8e00ac71ce4eed0382c7d0982cb1f2e6fef45408d4b2d9824d209a8a78521aa1d62a4436733a2f133c94e3c1f084d0282961318376161e61b395593fcd1702d00d338692d71ab91aca7abefaa38295538dccba7912ed8d6c0a457b329aeb052d64b1548efeb0e7af205726642de2862e960f1846ac800c890c0a3", 0x86, &(0x7f00000013c0), &(0x7f0000001400), &(0x7f0000001440)="0576c1c83e71d6") prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x2, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000001480), r2) sendfile(r0, r1, &(0x7f00000014c0)=0x6, 0xff) (async) close(r0) (async) sched_setaffinity(r5, 0x8, &(0x7f0000001500)=0xe) (async) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000001540), 0x240000, 0x0) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000015c0)={0x4, &(0x7f0000001580)=[{0x1, 0x3, 0x0, 0x6}, {0x3ff, 0xf8, 0x3, 0x2}, {0x1, 0x8, 0x30, 0x9}, {0x0, 0x6, 0xda, 0x7}]}, 0x8) (async) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000a, 0x810, r2, 0x8000000) r8 = syz_io_uring_complete(r7) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000001600), 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000001640)='./file0\x00', 0x110) (async) bind$netlink(r8, &(0x7f0000001680)={0x10, 0x0, 0x25dfdbfe, 0x4}, 0xc) (async) sendto$inet6(r6, &(0x7f00000016c0)="19c7cdc29dc0bd3b94b9130fdbb6e704e5c8924fddf61b01cd3be0b02653426bcb7fa6d09916ec3c27a0ee5a7adea7b5f7fc511137d91a9457a4d5c1a9338371d4da1721cea796391056fe4d7df2529e09f88028fe565f01331911c2061f9e1dc01fbb3efc36c7158a75642b561eda10e209282965270fcee900cba2f501a2e19a62537dce2080bdace4d66a90e6eb5a4301ced4", 0x94, 0x24000080, &(0x7f0000001780)={0xa, 0x4e22, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async) r10 = openat$hwrng(0xffffff9c, &(0x7f00000017c0), 0x10000, 0x0) close_range(r10, r9, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)) 143.175767ms ago: executing program 3 (id=2486): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x80) flock(r0, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0xe0fc, 0x4, 0x400000, 0x3a7}, &(0x7f0000000100), &(0x7f0000000200)) r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x1, 0x0, 0x0, r6, 0x1f000000}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000300)={0x0, &(0x7f0000000600)=[{}, {}, {}], r7, 0x0, '\x00', 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000240)={&(0x7f0000000080), &(0x7f0000000380), r7}) io_uring_enter(r4, 0x353, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x40406300, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r9 = socket$netlink(0x10, 0x3, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$KVM_RESET_DIRTY_RINGS(r12, 0x31e) ioctl$FS_IOC_RESVSP(r10, 0x402c5828, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x4000000, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) flock(r0, 0x6) flock(r0, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 49.290804ms ago: executing program 2 (id=2487): timer_create(0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x260, 0x30, 0x8, 0x70bd2b, 0x0, {}, [{0x24c, 0x1, [@m_mirred={0x16c, 0x3, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x5, 0xe, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x3, 0x6, 0x1, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x3, 0x0, 0xffff7fff, 0x7fffffff}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x33, 0x1000000d, 0x0, 0x888f}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7ff, 0x7, 0x6425, 0xd3a9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x0, 0xfffffffc, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5, 0x1, 0x7467, 0x6}, 0x1}}]}, {0x5f, 0x6, "67aeae99d09fbefced31869ecbc6e94f63ac67ed57fda08333ce72da51b22d57b4b75819e53273aa3f708edaa926744c231b50ca76f2f6492aaf4e370213a24a2a99e1a45af6d8d17fe08b6343c0cb7a4f0f26e502c7f617f529f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xdc, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0xa5, 0x6, "9efa6e5d991b6f87ed4fb54c83f1aa6e4de4239de090ba07be1d00f65d9b96e9f0c3570e35af037c17d4921b102326b91f32de13f8af823b23136be065d25c146810f5187f8a289c154a757d506dba77d83057163d6e3cf7f5a46b476cd2e6e7baee63f2d4d4c99d6569f491a726f4d0f23848123fbbc12a5d5adc9a416184b2a68096d3f31d7bb0c4a6f7cd958b4dffd42a0d38fd66bb56e8091e3263a27a2495"}, {0xc}, {0xc}}}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000850}, 0x400c810) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$hpet(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x6802, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x403c5404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r1, 0x6, &(0x7f00000001c0)=0x5) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x102, 0x0, @mcast2}, 0x1c) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0xf, 0x1, 0x0, 0x5, 0x1, 0x63, [{0x3, 0x3, 0x1ff}]}]}, {0x0, [0x61, 0x2e, 0x30]}}, &(0x7f0000000040)=""/61, 0x35, 0x3d, 0x0, 0xa, 0x0, @void, @value}, 0x28) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4f549b, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x10001]}) 48.981161ms ago: executing program 4 (id=2488): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x8028cf313be5dcba, 0x10, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) semget$private(0x0, 0x207, 0x480) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002800000", 0x2c}, {&(0x7f0000000640)="9abe48978fc9d6d504d0c9f79768e69abc0d908c4b7714017340a5321e2091ace2f33de355e62b927a1ab681a738f2e4e6d33ce721479d3f68ea12ef5aeb17d903d95cddeb4e2754b78802e05f584c7ab407fc85efe9ab6d650e5eccd789e1e414ab7501f7fb6fd6404b0afab9d4c2078d1030121824daf273d8c33dae1bc50bf1d39fb4f04a10d235dd987de873824c5f97fc33c2e3fde23491dd6d53930ce1c914bc1cc17642dffa0933942972a97ea96b886ad243f6d5378f5d70d8379f5a316ec6c623a6a08674f92554652a32193775938997cb6b24d8355b79860057ea077f62b64ffbd9a886bf7ec98453e6a4792ea0882f8c1e1be8a4b699f4560545c55002fc6f2039736619ffb2c30f946ad7ca29bb4dc823c771b85d812e3f1bee51b20cd8e365a88fda649df477f1f3a1a7c60d0a4c875973658fe25ecb5d45e95dc7cb07f79b0dc0a78bff47ad5ccd5ab5dfc8ba2a8a48572c840fbc134628f698ac267d0eb5d52d37b1927ea10a15efbe12a926e22be39c4c6431b528fca59208b192939f1a4167d613d1fef58e30363112dcef611692353615a2bda0af0bdd5884045f748771b7c8ea5d82d31d048832995615bf68b51370d41a7e4db8cb3970066b6f9e9a55a7c8e41bff4a436ad7b0631250af307a0af8d0d72d7394421f4de5ac2918583f07d92c32d17098f20834ac2ba6bb39d504af6fe664be4e436ba30c885680d58a4ae70c680d553e15ac6c3d1f6b7a6ef99358c948a6c1b1db07c40d2a0b5c7b3c420ee63ee66117175b12ff259783f4cfa8bf5110b96e8417180cd8a413c23659033f8f1857e00df8de16041101a8166411c893af3f00b0596718fe76578301604d27f67ba625fae0e404293872f523b7496ddde4b09f33b7f7e3fcf6fe0d0ebe5eb603e5d8ed1ae18c654498b3db3c59aa51e8022ce90d6834108df0c73e886b49be39f60116ec2ac0e5540af3491ff4d6c526b6350bb5021933a79b4e102f3ff65f7bced45210bf5849a0188493798dc87f8b22ca1b104f5caa5018029bbf03afe7904dbfa0f5e1a2b74a196e0d153b7498b69986657c79bb1df1c9ed1dfe19d00de2040fd668ccedd62c775a9976aac1d9447d4045f499461a320443111bf56d8d7e1dadd1f4ca137c5796c2d7c8a015786a5fc5e7b9021eda74b575925d9d55683e1a940c55299046ac60d49fe05141a7f5280cade653bd2f19018121e18aca2ac846734e941b313242b9c41fa7c8d2058577aae640e8319710021cd89eb291ae0ad15ba292d45ebef0074386668123ed9961b13633043f54314c8f4fe8fc0036512fb088b6671e13d8481b5286e098cdcdf509473ee3c36c0cd218a81f4c2b8758a5573f21a5c12cdcce7e79f4cc8b5a9030f7d0f8a2c809db34b89ed5e063db518a18584c46806f863f7a192df439c5894eed6facd33927bbaa8df57ecd045ef6386ca46a05ab5573068955d21289a4286152c8a2a13df3429b16f4ee1d73a6f544c784b0cc49aa2c83b3738c25ee3d64ac9142131318f82981ae1a17d07941aa3bd05dd9c136cb061a71ae67614dc44ea2d9e350c0cd9dce03e0aa292b384e0f037e4bc392bffb4e847cf01b74e394736f08242a9ce03e5c4e163f5cead6b8446bd9c1fe9bfb31bca88511a74671e2bec33fe0b9aae1376303c979df69c0b305f042bf2e111b446533f4a6b3fac594e5903061e21e7f1c8a30cc1cb3d3078e48741a032723e7eda57fc83c6068ba086b08448af61988bd22dbdb8c3752828f40691e12b284080da18f0ff5f87f324cde7d7325c181560e5f4e7e028476b372bb8b64da996db88e31aef3acea54932b152b4422a6833853f0c217b895c8710473fcb36288faeadd0bc72f8f81b79cffc9c05fd8d30c769ac22f1e72773b0c7e8b234d8624b6cb6311978ec4568b692fda31a04cd795de2794f3376fc7376e30c85d7942b03d97f915289c5754eb057dcb504872e409acf1ff929698e5890161b12140fdef3d1838d41e25dfe0716241170a5392c31d766fe6313ae2aefdaeaffd53d0940949f18d9737a2aacb2111b6dc129e2812eb403446e655d5317e258eda59dfc57d1351c2d64e5074e485d98c06f35b5aec59baf8efc15866eef217c5dac6aad75f55d779c56662420d5b401bf0f19f5217f2d9395931def8f1f8b5847c8f052a8cdf942f567ba004e21c448067c5d2a3bd5cdac560495712f916dcebd06d6b65c767af15216e3c0b84212202356accac045004c612c4660470e593ed89e219ac1f547cfdda3c484b67b00096cd7993fa5a5ddd860d9e8d0c915aea5f6847d50a5283ea522e1d490a8151dc96911a261be4ed30da952b1d8b74c891fac193d5f83f2eb3d974b20523bdd3c7660e42635410073642b983393caf59b20d7ce8682c54fae87d8a57dfa243fcc2fd52d7372155d7e7bf9078e1ccd5046f21b95a5d61bbd1e78fb9c3d6704a141298fde37d09615d51ad10ec8eac5ebb3d1df8e0b559f6e88a77a074d2ffad60d4d58819a76482408c3a7c8edf41abce0f450c33b1cd6432363e6c4ed892f2b78d9b14acf0e8490cfb1f60229753d8eaab8df582c9fac7a54980442985b87bb41e47f415f8617e5025d2f1fdfa745e07b0626b547c7f310d5da65522b95e84a231716afc07da2d7562dc4b583fcdc21a22bc2132532c6713ec0e35004b78612585ff8bac697c8e8ad6da1545d6dfd2f3564f92457dae15cfcb3ca1c4ba9f4210c75bba216ca805b6c8760892257d5ec95252895bc9870adb6b47da48478fc718898c3e1d353fc233227d71c2c7a7dab22c8a5acb19e75eecd1fce82dcf36b7da813b7102cd426a67c3e721505bbcfa4c76c4b93ee06c477a9526cc36cb6e1ec0fc55284c7379766d5771a8db5781fd5b10d22959aeb1ae73ce24721f39aa62bc84ec58ab5cc3b9a5677c25c2240911184667f4f3726efb9aced16eb0967bd9b177b18050dcb554829d38419c8f74aa9279f90e9fec58b755c9ea38533f07d09e23a1540ba794710a46b7d7341aab573a26ad01702794b9c2a5b957ec5d22ea079b8a81f4d6108941d84c588c13458e3d10556df61231e43ea0f84851515b00f4f68cb95ff182fe1a95dd0007c92a84d5fe503dd3cd8bfd81b3a2b351de8d2d5f6020cb1d5523e5e76278e66755d9e9b278f1d4142887c3ac85509abbcc49f8b649bda581e6fdd58fc7662705b843fe49d543cf46fb0c701e41379927731890c1b284071d92f1747dbc4fa906727bc8d0ce783d9079c7735eebe2c9887d9b7ebf5862a9607a038895325f9c54ec0faed2dd3d46b50c1795a1342140fc326e1e24b0434b72fdd3cc4d48dfbefd5df53716cf709235a9d39ddff93ead149c3cd57f680212b5036e99439046791795ead6dfe330d405d90bc6a849b305b0c60d62e4d53b5af25870a0b5e105dcee40360d9594900c4aef9db5d2c11d76de448ff9ad85046a655890820a1092f643c5af63b05762e036df228f5cc0ea00b9664dcdb647684d45aefa01605dfffbf31ea1a7501b82521f49bd36d1f5977932e0b6fe6eb2039e3d91b6129a879b96719a9f3c4e05dc02222ffccca0cb682be2a4fb54c5a590653cef00c2399449cabfa4d2e2e3143ce0d0a49dcddfc59697f0953a93515d0c9672d03bfa96db5ca4902f584eaa4ab32ec348d9f059921b8d6c8ba3e9300e4f4014f8777f588856729bb82dbb95e96a812bde444d62731415896c7cb6336cf8bc05ae1f40f550a21905969a98e551925bc167b1e267670266b3c2f8a75acb3cdb30c993b02e246e7629bad825a84cca2fcc60540a6f8750b6736a19e8854715e0e900431f530b03ba0552ef2272a693a357bd0fe64bf549e5354b954d8651ab6d87cb512dd613981e1a65bd87f36448d974d967bda619b5ec581508a842db9c77292fd2fe0f1e4d248c786ef40fc41ffab06f75f4b293cfece7cd9a9433dabf3cf4a42e16617ecc70f40d28d15316e26433c7ed8276db489ba94cd2314203e05936f48a842f57acfeecc97fec0c433121bef994e780e6761771d9280e9868f03415c11d68b7c0ba2046b089ecbf73de963b206895c090227ee6b348ee6d1af087141c52c109b11c1a8805344c84aca98835cc227e2bd8192a97a11559f048fbf3d6c5ef4714c7045652c271ca859812f1e8485e34e550646aa898d8fcd6ec973c2ca02da1524f454d1468a130b7f6da4a8abc9e221991b9185742276e8a75b949a7c6565276926f617b20217531b626b1479392f9768a1848e528c7a25d2fbe3a32e47a1d9eabf5a32c8e239e3cd3e8e666c6e5a5c02c942b691b721b79142f855240f18005458913b297304beb95bbf61c17348ad74c7f86d642dadf18bc6328122ec84de076d73bb94af4224cc556ffa3f32b5c7ac7d0dedea3c8ee9f0fe16fb2740b2e6e1b7de8b210167614756b1264118dbe3420eb9cc541054f914fd91a853be3a12a0a5be123b8962b02aafac12cb1e931879f480cb0c29885aa91421c5971c7b85a887ca95aefefbfa3a476be3bafb549d92f5471e1f6aca1d9d4d826ea5fc7b7bc3cc20023d6536ee5406ec21b71ed8f146765cfba901ed59cafb2dff9aafd9373bbabbfaff1da0dbf1dd07ab058a8beba78f9222373c87b416d92567ada44c01de4004202bd4d70ee285e8b9b86efeaa5ef62680e4676a8e651b3d1e6aae639b1c4e79a7e583de5c10db7864261273d754e2abf5e47e4b79c970243c16d440a9e6f6b99eb94c9ce436195d7017aeb6f6695622f51c2f237fee93c7f2f76f13a7bc8eb5d574c97d7b2be0a91de2869bec13e0765b54ca44951d4b15fb79228ef3d0090e0aaee13586674b40ce272be597d72a5042ef5ead82fe20331b5b6361889339e35d62fafa4c9dbb20016ed58479fd0a0ee8382fe872894d98b7f59186d0994509a216be36b15b76a134752f58748debaa9b36bc4c188d5c782df6d32f6403082edd4eedda2814638e8ac1b28286b8ce54360c44acb55bb10a73fa09fbd86bfcf4ce4943e4d14535f7a9fd80e2911824fa9dadbba245d85658a2bc827423aea", 0xe00}, {&(0x7f00000000c0)="26fc4bcf8b00c19cd0eed8a91f7c36de44eed2752c4d27ee2e10986d2b", 0x1d}, {&(0x7f0000000280)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d", 0x68}, {&(0x7f0000000200)}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b791e900ba3d654bb44d4402987f407bdbcefe93f535279d99bb839a1", 0x2d}, {&(0x7f00000004c0)="91f0807b6afddf80750c5a560c2081f08de8a721aa5e3cfd5a6bc6cabda994bf8693656d03e1ecd9d468f2d4bb42292991d19fba6097597c9e6f16fdcb2b551f2bfeaaf98a60bc01df68984cf336e2d257b29840e3adfa847b5f420ea7b5e4d1545ae88f63dfbb3ecdfa6633997cbaaa79e2ada80941ed932cbd7a0b11325041f526151f6be00828495864ad9f61c009821728b246b5957891caf322b4a8c97874073ecf48e0cde8e05ba00619d7d90907550d123307265ef06a5ba4a640b82641a834e2684781e4b3e0a93e8d25795a7949e0864c40b8396a01a59b509e34ef484c938c3a677a072a4fba", 0xeb}, {0x0}], 0x8}, 0x0) r5 = openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x300}]}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x5d) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x40, 0x3, 0x0, 0x46, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x2, 0x3}}) socket$inet6(0xa, 0x6, 0x0) listen(r5, 0x0) syz_io_uring_setup(0x2705, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000001440)) 0s ago: executing program 2 (id=2489): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYRES32], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0xc5000002) r3 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x308300, 0xdb, 0x2}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r7 = accept4$x25(r3, &(0x7f0000000000), &(0x7f0000000580)=0x12, 0x80000) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000400)=0x0) ioctl$SIOCX25SCUDMATCHLEN(r7, 0x89e7, &(0x7f0000000100)={0x67}) r9 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r9, 0xab0a, 0x1000101) ioctl$NBD_SET_SOCK(r9, 0xab00, r5) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000000000000000000000000000000000200000014000d00ac1e01010000040000000000000000ad"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_CLEAR_SOCK(r9, 0xab04) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYRESOCT=r6, @ANYRES32=r8], 0x14}}, 0x4040010) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000440)={0x1, r3}) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="c064ab1c", @ANYRES16=r11, @ANYBLOB="08002bbd7000ffdbdf250f00000034000280060002004e22000006000b0002000000060002004e2000000800080004000000080003000400000008000300000000000c000280060002004e200000"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x4000000) r12 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001800), 0x40000, 0x0) openat$kvm(0xffffff9c, &(0x7f00000003c0), 0x10003, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r12, 0x5321, 0x8) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): T11593] ieee80211_register_hw+0x2951/0x3fa0 [ 214.812226][T11593] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 214.813929][T11593] ? net_generic+0xea/0x2a0 [ 214.815271][T11593] ? lockdep_init_map_type+0x16d/0x7d0 [ 214.816872][T11593] ? rcu_is_watching+0x12/0xc0 [ 214.818263][T11593] ? trace_hrtimer_init+0x1a6/0x230 [ 214.819744][T11593] ? __hrtimer_init+0x106/0x2c0 [ 214.821150][T11593] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 214.822805][T11593] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 214.824548][T11593] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 214.826102][T11593] hwsim_new_radio_nl+0xb42/0x12b0 [ 214.827583][T11593] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.829172][T11593] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 214.831271][T11593] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 214.833387][T11593] genl_family_rcv_msg_doit+0x202/0x2f0 [ 214.834994][T11593] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 214.836765][T11593] ? genl_get_cmd+0x195/0x580 [ 214.838151][T11593] ? bpf_lsm_capable+0x9/0x10 [ 214.839517][T11593] ? security_capable+0x7e/0x260 [ 214.840956][T11593] ? ns_capable+0xd7/0x110 [ 214.842276][T11593] genl_rcv_msg+0x565/0x800 [ 214.843595][T11593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.845069][T11593] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.846695][T11593] ? __pfx___lock_acquire+0x10/0x10 [ 214.848190][T11593] netlink_rcv_skb+0x165/0x410 [ 214.849582][T11593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.851039][T11593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.852573][T11593] ? down_read+0xc9/0x330 [ 214.853826][T11593] ? __pfx_down_read+0x10/0x10 [ 214.855221][T11593] ? netlink_deliver_tap+0x1ae/0xca0 [ 214.856771][T11593] genl_rcv+0x28/0x40 [ 214.857943][T11593] netlink_unicast+0x53c/0x7f0 [ 214.859334][T11593] ? __pfx_netlink_unicast+0x10/0x10 [ 214.860858][T11593] ? __phys_addr_symbol+0x30/0x80 [ 214.862327][T11593] ? __check_object_size+0x488/0x710 [ 214.863856][T11593] netlink_sendmsg+0x8b8/0xd70 [ 214.865249][T11593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.866749][T11593] ____sys_sendmsg+0x9ae/0xb40 [ 214.868125][T11593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.869655][T11593] ? get_compat_msghdr+0x11b/0x170 [ 214.871132][T11593] ___sys_sendmsg+0x135/0x1e0 [ 214.872502][T11593] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.874015][T11593] ? __pfx_lock_release+0x10/0x10 [ 214.875483][T11593] ? trace_lock_acquire+0x14e/0x1f0 [ 214.877023][T11593] ? __fget_files+0x206/0x3a0 [ 214.878397][T11593] __sys_sendmsg+0x16e/0x220 [ 214.879767][T11593] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.881233][T11593] ? __ia32_sys_futex_time32+0x1da/0x460 [ 214.882761][T11593] __do_fast_syscall_32+0x73/0x120 [ 214.884050][T11593] do_fast_syscall_32+0x32/0x80 [ 214.885340][T11593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.887196][T11593] RIP: 0023:0xf7f15579 [ 214.888370][T11593] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 214.893798][T11593] RSP: 002b:00000000f502455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 214.896207][T11593] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000040 [ 214.898468][T11593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.900730][T11593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.902997][T11593] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 214.905273][T11593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.907555][T11593] [ 214.978936][T11571] can0 (unregistered): slcan off ptm0. [ 215.009117][ T5953] Bluetooth: hci0: command tx timeout [ 215.172054][T11609] program syz.1.1358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.174777][T11609] ata1.00: invalid transfer count 0 [ 215.420459][ T12] hsr_slave_0: left promiscuous mode [ 215.424851][ T12] hsr_slave_1: left promiscuous mode [ 215.426846][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.429778][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.433088][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.435325][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.458249][ T12] veth0_macvtap: left promiscuous mode [ 215.460002][ T12] veth1_vlan: left promiscuous mode [ 215.461537][ T12] veth0_vlan: left promiscuous mode [ 215.524079][ T12] pimreg2 (unregistering): left allmulticast mode [ 216.379092][ T12] team_slave_1 (unregistering): left promiscuous mode [ 216.390066][ T12] team0 (unregistering): Port device team_slave_1 removed [ 216.487240][ T12] team_slave_0 (unregistering): left promiscuous mode [ 216.491530][ T12] team0 (unregistering): Port device team_slave_0 removed [ 217.079449][ T5953] Bluetooth: hci0: command tx timeout [ 217.201380][T11661] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 217.250087][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 217.545776][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'. [ 218.777770][T11808] hfsplus: unable to find HFS+ superblock [ 219.159351][ T5953] Bluetooth: hci0: command tx timeout [ 219.193860][T11823] netlink: 'syz.3.1389': attribute type 2 has an invalid length. [ 219.197245][T11823] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 219.223232][ T5953] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 219.328412][T11833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1393'. [ 219.385398][T11830] ip6gretap0: entered promiscuous mode [ 220.062176][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 220.062188][ T40] audit: type=1326 audit(1737002779.091:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.3.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 220.073461][ T40] audit: type=1326 audit(1737002779.091:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.3.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7fc00000 [ 220.081600][ T40] audit: type=1326 audit(1737002779.091:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.3.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 220.089714][ T40] audit: type=1326 audit(1737002779.091:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.3.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 220.097616][ T40] audit: type=1326 audit(1737002779.091:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.3.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 220.105700][ T40] audit: type=1326 audit(1737002779.091:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.3.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 220.113655][ T40] audit: type=1326 audit(1737002779.091:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.3.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 220.131713][ T40] audit: type=1326 audit(1737002779.091:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.3.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 220.137233][ T40] audit: type=1326 audit(1737002779.091:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.3.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 220.142863][ T40] audit: type=1326 audit(1737002779.091:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.3.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 220.361351][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'. [ 220.640777][ T57] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 220.799011][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 220.805774][ T57] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 220.808631][ T57] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.813505][ T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.816463][ T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.821791][ T57] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.825762][ T57] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.828480][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.050805][ T57] usb 6-1: usb_control_msg returned -32 [ 221.052471][ T57] usbtmc 6-1:16.0: can't read capabilities [ 221.067348][T11919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1410'. [ 221.248963][ T5953] Bluetooth: hci0: command tx timeout [ 221.458315][T11925] netlink: 'syz.4.1412': attribute type 6 has an invalid length. [ 221.462093][T11925] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1412'. [ 221.474887][T11930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.707313][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1415'. [ 221.807774][T11948] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 221.813739][T11948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1416'. [ 221.854112][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1417'. [ 221.990890][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1420'. [ 222.379663][T11986] __nla_validate_parse: 1 callbacks suppressed [ 222.379674][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 222.400438][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 222.415294][T11991] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 222.417660][T11991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1426'. [ 223.302872][T12004] Bluetooth: MGMT ver 1.23 [ 223.305628][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 223.375435][ T8] usb 6-1: USB disconnect, device number 4 [ 223.637714][T12014] netlink: 'syz.2.1432': attribute type 10 has an invalid length. [ 223.932882][T12015] syz.2.1432 (12015): drop_caches: 2 [ 224.026960][T12014] bond0: (slave wlan1): Opening slave failed [ 224.035537][T12029] ip6gre0: entered allmulticast mode [ 224.066620][T12028] ip6gre0: left allmulticast mode [ 224.176053][T12040] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 224.184828][T12040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.199679][T12045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.201753][T12045] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 224.205197][T12045] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 224.502313][T12062] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 225.783062][T12112] Process accounting resumed [ 225.786814][T12112] 9pnet_fd: Insufficient options for proto=fd [ 225.791534][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 225.794191][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 226.921018][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 226.921029][ T40] audit: type=1326 audit(1737002785.941:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.930755][ T40] audit: type=1326 audit(1737002785.941:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.936921][ T40] audit: type=1326 audit(1737002785.941:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.944011][ T40] audit: type=1326 audit(1737002785.941:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.952251][ T40] audit: type=1326 audit(1737002785.951:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.960151][ T40] audit: type=1326 audit(1737002785.951:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.968282][ T40] audit: type=1326 audit(1737002785.951:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 227.115240][T12169] can0: slcan on ttyS3. [ 227.185167][T12176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1470'. [ 227.819385][T12161] can0 (unregistered): slcan off ttyS3. [ 227.832780][T12224] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1484'. [ 227.835480][T12224] openvswitch: netlink: Missing key (keys=40, expected=80) [ 227.839253][T12224] hsr_slave_0: left promiscuous mode [ 227.853307][T12224] hsr_slave_1: left promiscuous mode [ 228.189020][ T6006] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 228.360840][T12258] netfs: Couldn't get user pages (rc=-4) [ 228.448899][ T6006] usb 9-1: Using ep0 maxpacket: 8 [ 230.134563][T12338] fuse: Unknown parameter 'grou00000000000000000000' [ 230.306920][T12340] 9pnet: Unknown protocol version 9p2000. [ 230.417423][T12344] can: request_module (can-proto-5) failed. [ 230.892587][ T6006] usb 9-1: unable to get BOS descriptor or descriptor too short [ 230.896239][ T6006] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 230.898588][ T6006] usb 9-1: can't read configurations, error -71 [ 231.625280][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1513'. [ 231.713967][ T40] audit: type=1800 audit(1737003046.740:1073): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1514" name="cgroup.controllers" dev="9p" ino=40239575 res=0 errno=0 [ 232.153537][T12397] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 232.155993][T12397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1516'. [ 232.347794][T12399] wireguard0: entered promiscuous mode [ 232.349596][T12399] wireguard0: entered allmulticast mode [ 232.403443][T12402] bridge_slave_0: left allmulticast mode [ 232.405180][T12402] bridge_slave_0: left promiscuous mode [ 232.407023][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.414080][T12402] bridge_slave_1: left allmulticast mode [ 232.415947][T12402] bridge_slave_1: left promiscuous mode [ 232.419096][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.427214][T12402] bond0: (slave bond_slave_0): Releasing backup interface [ 232.451957][T12402] bond0: (slave bond_slave_1): Releasing backup interface [ 232.474894][T12402] team0: Port device team_slave_0 removed [ 232.483665][T12402] team0: Port device team_slave_1 removed [ 232.485767][T12402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.487942][T12402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.494093][T12402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.496261][T12402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.520996][T12403] team0: Mode changed to "broadcast" [ 232.524858][T12404] vlan0: entered promiscuous mode [ 232.548131][T12404] team0: Port device vlan0 added [ 232.557036][T12406] mkiss: ax0: crc mode is auto. [ 232.561344][T12402] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1518'. [ 232.564519][T12402] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1518'. [ 232.567267][ T57] IPVS: starting estimator thread 0... [ 232.567398][T12402] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 232.674631][T12411] IPVS: using max 40 ests per chain, 96000 per kthread [ 233.080728][T12432] netlink: 'syz.4.1525': attribute type 4 has an invalid length. [ 233.090910][T12432] netlink: 'syz.4.1525': attribute type 4 has an invalid length. [ 234.601533][T12474] /dev/sr0: Can't open blockdev [ 234.607494][T12488] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 234.611051][T12488] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.663952][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 234.784537][T12504] netlink: 'syz.4.1541': attribute type 10 has an invalid length. [ 234.788594][T12504] bond0: (slave wlan1): Opening slave failed [ 235.097553][T12513] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 235.100108][T12513] netlink: 'syz.1.1548': attribute type 2 has an invalid length. [ 235.112155][T12514] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1548'. [ 235.131814][T12517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1549'. [ 235.135920][T12517] netlink: 'syz.3.1549': attribute type 10 has an invalid length. [ 235.146442][T12517] hsr_slave_0: entered promiscuous mode [ 235.148134][T12517] hsr_slave_0: entered allmulticast mode [ 235.154223][T12517] team0: Port device hsr_slave_0 added [ 235.771810][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 236.429883][T12560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1563'. [ 236.517895][T12564] @: renamed from vlan0 (while UP) [ 236.559571][T12567] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1565'. [ 236.563400][T12567] netlink: 'syz.4.1565': attribute type 1 has an invalid length. [ 236.592307][T12567] sg_write: process 173 (syz.4.1565) changed security contexts after opening file descriptor, this is not allowed. [ 236.882479][T12583] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 236.970437][T12587] netlink: 'syz.1.1572': attribute type 3 has an invalid length. [ 236.972719][T12587] netlink: 'syz.1.1572': attribute type 2 has an invalid length. [ 237.090479][T12598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1574'. [ 237.835762][T12607] tmpfs: Bad value for 'mpol' [ 237.967875][ T40] audit: type=1326 audit(1737003052.990:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 237.980158][ T40] audit: type=1326 audit(1737003053.010:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 237.991728][ T40] audit: type=1326 audit(1737003053.010:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 237.999559][ T40] audit: type=1326 audit(1737003053.010:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 238.006607][ T40] audit: type=1326 audit(1737003053.010:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 238.015615][ T40] audit: type=1326 audit(1737003053.010:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 238.024723][ T40] audit: type=1326 audit(1737003053.020:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 238.033901][ T40] audit: type=1326 audit(1737003053.020:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 238.042812][ T40] audit: type=1326 audit(1737003053.020:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 238.051065][ T40] audit: type=1326 audit(1737003053.020:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 238.175042][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 238.177768][T12611] openvswitch: netlink: Flow actions attr not present in new flow. [ 238.710931][ T5953] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 239.079223][T12650] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1587'. [ 239.566854][T12636] Process accounting resumed [ 239.655394][T12667] validate_nla: 1 callbacks suppressed [ 239.655412][T12667] netlink: 'syz.3.1591': attribute type 10 has an invalid length. [ 240.129284][ T6666] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 240.157316][T12697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.278904][ T6666] usb 6-1: Using ep0 maxpacket: 8 [ 240.284526][ T6666] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.287538][ T6666] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 240.295125][ T6666] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.297924][ T6666] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 240.304266][ T6666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.320336][ T6666] hub 6-1:1.0: bad descriptor, ignoring hub [ 240.322204][ T6666] hub 6-1:1.0: probe with driver hub failed with error -5 [ 240.329174][ T6666] cdc_wdm 6-1:1.0: skipping garbage [ 240.330718][ T6666] cdc_wdm 6-1:1.0: skipping garbage [ 240.332460][ T6666] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 240.382737][T12707] program syz.4.1599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.486971][T12726] fuse: Unknown parameter 'f:bDfd' [ 240.630300][ T5991] usb 6-1: USB disconnect, device number 5 [ 240.760701][T12758] netlink: 'syz.2.1608': attribute type 1 has an invalid length. [ 240.767417][T12758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1608'. [ 240.788119][T12756] netlink: 'syz.3.1603': attribute type 10 has an invalid length. [ 240.826918][T12768] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1610'. [ 240.833204][T12769] netlink: 'syz.4.1609': attribute type 1 has an invalid length. [ 240.969049][ T5991] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 240.979402][T12775] Invalid logical block size (1) [ 241.140594][ T5991] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.144456][ T5991] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 241.147110][ T5991] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.151142][ T5991] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 241.154205][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.158633][ T5991] hub 6-1:1.0: bad descriptor, ignoring hub [ 241.160686][ T5991] hub 6-1:1.0: probe with driver hub failed with error -5 [ 241.163290][ T5991] cdc_wdm 6-1:1.0: skipping garbage [ 241.164905][ T5991] cdc_wdm 6-1:1.0: skipping garbage [ 241.166493][ T5991] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 241.467542][T12802] loop9: detected capacity change from 0 to 7 [ 241.477240][ T5991] usb 6-1: USB disconnect, device number 6 [ 241.482695][T12802] Dev loop9: unable to read RDB block 7 [ 241.484787][T12802] loop9: unable to read partition table [ 241.487215][T12802] loop9: partition table beyond EOD, truncated [ 241.490563][T12802] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 241.490563][T12802] ) failed (rc=-5) [ 241.602031][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 241.859405][T12814] netlink: 'syz.2.1622': attribute type 1 has an invalid length. [ 241.862427][T12814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1622'. [ 241.975215][T12818] netlink: 'syz.1.1623': attribute type 1 has an invalid length. [ 241.977525][T12818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1623'. [ 242.151478][T12824] FAULT_INJECTION: forcing a failure. [ 242.151478][T12824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.155228][T12824] CPU: 3 UID: 0 PID: 12824 Comm: syz.2.1625 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 242.158281][T12824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.161343][T12824] Call Trace: [ 242.162316][T12824] [ 242.163167][T12824] dump_stack_lvl+0x16c/0x1f0 [ 242.164502][T12824] should_fail_ex+0x497/0x5b0 [ 242.165856][T12824] _copy_from_user+0x2e/0xd0 [ 242.167148][T12824] get_compat_msghdr+0xa8/0x170 [ 242.168837][T12824] ? __pfx_get_compat_msghdr+0x10/0x10 [ 242.171029][T12824] ___sys_sendmsg+0x1b0/0x1e0 [ 242.172944][T12824] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.175016][T12824] ? __pfx_lock_release+0x10/0x10 [ 242.177015][T12824] ? trace_lock_acquire+0x14e/0x1f0 [ 242.179039][T12824] ? __fget_files+0x206/0x3a0 [ 242.180943][T12824] __sys_sendmsg+0x16e/0x220 [ 242.182679][T12824] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.184477][T12824] __do_fast_syscall_32+0x73/0x120 [ 242.186386][T12824] do_fast_syscall_32+0x32/0x80 [ 242.188127][T12824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.190347][T12824] RIP: 0023:0xf7f17579 [ 242.191857][T12824] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 242.198327][T12824] RSP: 002b:00000000f504555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 242.201311][T12824] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000200001c0 [ 242.204200][T12824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.207194][T12824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.210268][T12824] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 242.213371][T12824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.216493][T12824] [ 242.626730][T12833] netlink: 'syz.2.1626': attribute type 4 has an invalid length. [ 242.647986][T12833] netlink: 'syz.2.1626': attribute type 4 has an invalid length. [ 242.702485][T12841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1629'. [ 242.834851][T12856] netlink: 'syz.1.1633': attribute type 1 has an invalid length. [ 242.839177][T12856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1633'. [ 243.153821][T12867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1636'. [ 243.165512][T12869] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1637'. [ 243.168731][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1637'. [ 243.830602][T12900] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 243.830910][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 243.830920][ T40] audit: type=1326 audit(1737003058.860:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.2.1645" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x0 [ 243.870271][T12900] netlink: 'syz.4.1644': attribute type 10 has an invalid length. [ 243.878257][T12900] syz_tun: entered promiscuous mode [ 244.248887][T12936] evm: overlay not supported [ 244.415619][T12958] bridge0: entered promiscuous mode [ 245.825137][T13008] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 245.827578][T13008] __nla_validate_parse: 2 callbacks suppressed [ 245.827586][T13008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1665'. [ 246.234876][T13010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1666'. [ 246.563951][T13023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1670'. [ 246.889077][T13040] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 246.895256][T13040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1674'. [ 246.936400][T13035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.942880][T13035] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 246.954009][T13035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.959006][T13035] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 246.963648][T13035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.965515][T13035] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 247.002780][T13035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 247.007633][T13035] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 247.748916][T13064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1679'. [ 247.815751][T13069] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.818259][T13069] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.820845][T13069] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.823507][T13069] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.825452][T13065] overlayfs: failed to resolve './bus': -2 [ 247.826268][T13069] vxlan1: entered promiscuous mode [ 247.829962][T13069] vxlan1: entered allmulticast mode [ 247.834540][T13069] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.837024][T13069] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.839480][T13069] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.841860][T13069] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.053346][T13086] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 248.055655][T13086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1688'. [ 248.388504][T13099] netlink: 'syz.3.1691': attribute type 10 has an invalid length. [ 248.410011][T13099] netlink: 'syz.3.1691': attribute type 1 has an invalid length. [ 248.413176][T13099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1691'. [ 248.491255][T13102] xt_policy: output policy not valid in PREROUTING and INPUT [ 249.119044][T13122] netlink: 'syz.3.1700': attribute type 1 has an invalid length. [ 249.123457][T13122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1700'. [ 249.292210][ T40] audit: type=1326 audit(1737003064.320:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.3.1702" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 249.395192][T13131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1702'. [ 249.551558][T13135] Cannot find set identified by id 0 to match [ 249.645865][T13141] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 249.648384][T13141] netlink: 'syz.1.1706': attribute type 2 has an invalid length. [ 250.049699][T13155] 9pnet_virtio: no channels available for device syz [ 250.743282][T13175] fuse: Bad value for 'group_id' [ 250.744797][T13175] fuse: Bad value for 'group_id' [ 250.971750][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1720'. [ 250.974281][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1720'. [ 250.980121][T13187] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 250.983133][T13187] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 250.985618][T13187] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 250.988016][T13187] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 251.001282][T13187] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1720'. [ 251.003928][T13187] netlink: zone id is out of range [ 251.005331][T13187] netlink: zone id is out of range [ 251.006719][T13187] netlink: zone id is out of range [ 251.008163][T13187] netlink: zone id is out of range [ 251.013207][T13187] netlink: get zone limit has 8 unknown bytes [ 251.058897][ T57] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 251.097741][T13200] IPv6: sit1: Disabled Multicast RS [ 251.208837][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 251.211322][ T57] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.213772][ T57] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.216232][ T57] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.219328][ T57] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.222551][ T57] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.224849][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.352456][T13205] overlayfs: failed to clone upperpath [ 251.431526][ T57] usb 9-1: usb_control_msg returned -32 [ 251.433020][ T57] usbtmc 9-1:16.0: can't read capabilities [ 251.555447][T13215] bridge_slave_0: left allmulticast mode [ 251.557140][T13215] bridge_slave_0: left promiscuous mode [ 251.559116][T13215] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.562417][T13215] bridge_slave_1: left allmulticast mode [ 251.564207][T13215] bridge_slave_1: left promiscuous mode [ 251.565877][T13215] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.570369][T13215] bond0: (slave bond_slave_0): Releasing backup interface [ 251.574114][T13215] bond0: (slave bond_slave_1): Releasing backup interface [ 251.577582][T13215] team_slave_0: left promiscuous mode [ 251.586914][T13215] team0: Port device team_slave_0 removed [ 251.588978][T13215] team_slave_1: left promiscuous mode [ 251.594484][T13215] team0: Port device team_slave_1 removed [ 251.597194][T13215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.600463][T13215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.605874][T13216] syz.1.1728: attempt to access beyond end of device [ 251.605874][T13216] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 252.092668][ T4269] usb 9-1: USB disconnect, device number 4 [ 252.841695][T13248] hfs: can't find a HFS filesystem on dev sr0 [ 252.979744][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 253.851037][T11912] Bluetooth: hci4: Frame reassembly failed (-84) [ 253.854449][T13283] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 254.600485][T13308] random: crng reseeded on system resumption [ 255.081633][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.083738][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.088623][T13335] xt_TCPMSS: Only works on TCP SYN packets [ 255.878946][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 255.878964][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 257.514858][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880591dcc00: rx timeout, send abort [ 257.518860][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880591dcc00: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 257.592911][T13405] ISOFS: Unable to identify CD-ROM format. [ 258.051736][T13418] fuse: Bad value for 'fd' [ 258.200404][T13427] netdevsim netdevsim1: Direct firmware load for . [ 258.200404][T13427] failed with error -2 [ 258.211455][T13427] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 258.211455][T13427] [ 258.265264][T13432] tracefs: Unknown parameter '0x0000000000000000' [ 258.290802][ T40] audit: type=1800 audit(1737003073.320:1092): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1786" name="file0" dev="9p" ino=40239472 res=0 errno=0 [ 258.483379][T13444] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 259.058058][T13459] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000 [ 259.196006][T13471] 9pnet_fd: Insufficient options for proto=fd [ 259.385451][T13482] netlink: 'syz.1.1797': attribute type 1 has an invalid length. [ 259.387797][T13482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1797'. [ 259.407406][T13484] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 260.127348][T13500] input: syz1 as /devices/virtual/input/input17 [ 260.139097][ T6666] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 260.144459][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 260.298950][ T6666] usb 9-1: Using ep0 maxpacket: 32 [ 260.301717][ T6666] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.304853][ T6666] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.307704][ T6666] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 260.310464][ T6666] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.314335][ T6666] usb 9-1: config 0 descriptor?? [ 260.470918][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1806'. [ 260.505667][T13510] netlink: 'syz.1.1805': attribute type 1 has an invalid length. [ 260.508391][T13510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1805'. [ 260.702589][ T6666] usbhid 9-1:0.0: can't add hid device: -71 [ 260.704423][ T6666] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 260.712268][ T6666] usb 9-1: USB disconnect, device number 5 [ 260.759806][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 261.103072][T13531] dvmrp0: entered allmulticast mode [ 261.124946][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1812'. [ 261.127531][T13531] netlink: 'syz.4.1812': attribute type 1 has an invalid length. [ 261.616619][T13568] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1821'. [ 261.623660][T13568] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 261.625970][T13568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1821'. [ 261.848713][T13577] ISOFS: Unable to identify CD-ROM format. [ 262.710793][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'. [ 262.841460][T13615] tipc: Started in network mode [ 262.842886][T13615] tipc: Node identity 8aa99e62e425, cluster identity 4711 [ 262.846834][T13615] tipc: Enabled bearer , priority 0 [ 263.167145][T13617] tipc: Disabling bearer [ 263.506791][T13636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1839'. [ 264.155671][T13655] IPv6: sit1: Disabled Multicast RS [ 264.179172][T13657] sp0: Synchronizing with TNC [ 264.185611][T13657] sp0: Found TNC [ 264.488948][T13658] nbd2: detected capacity change from 0 to 67108884 [ 264.503250][ T5962] block nbd2: Send control failed (result -89) [ 264.505308][ T5962] block nbd2: Request send failed, requeueing [ 264.513009][ T5953] block nbd2: Receive control failed (result -32) [ 264.514713][ T26] block nbd2: Dead connection, failed to find a fallback [ 264.520344][ T26] block nbd2: shutting down sockets [ 264.522981][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.525777][ T26] buffer_io_error: 2 callbacks suppressed [ 264.525785][ T26] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.532621][ T5962] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.535291][ T5962] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.538222][ T5962] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.541468][ T5962] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.543736][ T5962] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.546239][ T5962] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.548534][ T5962] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.554963][ T5962] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.557521][ T5962] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.560586][ T5962] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.562843][ T5962] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.565452][ T5962] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.567654][ T5962] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.570332][ T5962] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.573757][ T5962] ldm_validate_partition_table(): Disk read failed. [ 264.575666][ T5962] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.578169][ T5962] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.580476][ T5962] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.582901][ T5962] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.585129][ T5962] Dev nbd2: unable to read RDB block 0 [ 264.588444][ T5962] nbd2: unable to read partition table [ 264.940900][T13671] ldm_validate_partition_table(): Disk read failed. [ 264.943237][T13671] Dev nbd2: unable to read RDB block 0 [ 264.946509][T13671] nbd2: unable to read partition table [ 264.951537][ T5962] ldm_validate_partition_table(): Disk read failed. [ 264.953653][ T5962] Dev nbd2: unable to read RDB block 0 [ 264.955565][ T5962] nbd2: unable to read partition table [ 264.972730][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 264.976386][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554441, location=33554441 [ 264.990560][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554185, location=33554185 [ 264.998878][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554440, location=33554440 [ 265.001777][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554184, location=33554184 [ 265.007460][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554439, location=33554439 [ 265.011226][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554183, location=33554183 [ 265.015212][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554291, location=33554291 [ 265.029081][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554035, location=33554035 [ 265.032814][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554289, location=33554289 [ 265.036203][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554033, location=33554033 [ 265.041378][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 265.046786][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 265.050712][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220 [ 265.053698][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964 [ 265.056722][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219 [ 265.069027][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963 [ 265.081092][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218 [ 265.084016][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962 [ 265.087355][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070 [ 265.091817][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814 [ 265.095231][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068 [ 265.098635][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812 [ 265.110213][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 265.113632][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 265.116286][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609 [ 265.119431][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353 [ 265.122685][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608 [ 265.126392][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352 [ 265.129955][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607 [ 265.133579][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351 [ 265.136512][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459 [ 265.139462][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203 [ 265.142431][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457 [ 265.145429][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201 [ 265.148398][T13671] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 265.151316][T13671] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 265.346483][T13683] __nla_validate_parse: 1 callbacks suppressed [ 265.346494][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 265.608842][ T58] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 265.758972][ T58] usb 9-1: Using ep0 maxpacket: 16 [ 265.769114][ T58] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 265.778846][ T58] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.785496][ T58] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.788131][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.791586][ T58] usb 9-1: Product: syz [ 265.795418][ T58] usb 9-1: Manufacturer: ж [ 265.796743][ T58] usb 9-1: SerialNumber: syz [ 265.969541][T13703] random: crng reseeded on system resumption [ 266.014337][ T58] usb 9-1: 0:2 : does not exist [ 266.020017][ T58] usb 9-1: USB disconnect, device number 6 [ 266.072427][T13704] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 266.241422][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.393988][T13714] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1857'. [ 266.496885][T13717] input: syz1 as /devices/virtual/input/input18 [ 266.516418][T13717] tracefs: Bad value for 'uid' [ 266.517853][T13717] tracefs: Bad value for 'uid' [ 266.555740][T13719] netlink: 'syz.4.1859': attribute type 1 has an invalid length. [ 266.563471][T13719] bond1: entered promiscuous mode [ 266.565107][T13719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.576763][T13719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.580806][T13719] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 266.583858][T13719] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 266.587365][T13719] bond1: (slave ip6gre1): making interface the new active one [ 266.589629][T13719] ip6gre1: entered promiscuous mode [ 266.592587][T13719] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 266.631616][T13727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 266.725240][T13733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.730357][T13733] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 266.791404][ T40] audit: type=1326 audit(1737003081.810:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 266.797373][ T40] audit: type=1326 audit(1737003081.810:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 266.809764][ T40] audit: type=1326 audit(1737003081.810:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 266.819802][ T40] audit: type=1326 audit(1737003081.820:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 266.834629][ T40] audit: type=1326 audit(1737003081.820:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 266.841644][ T40] audit: type=1326 audit(1737003081.820:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 266.848428][ T40] audit: type=1326 audit(1737003081.820:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 266.866991][ T40] audit: type=1326 audit(1737003081.820:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 266.876540][ T40] audit: type=1326 audit(1737003081.820:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 266.887663][ T40] audit: type=1326 audit(1737003081.820:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 267.079026][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1863'. [ 267.109504][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'. [ 267.978208][T13804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 268.000817][T13806] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 268.006601][T13806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1878'. [ 268.169296][ T58] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 268.242729][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'. [ 268.320814][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 268.324523][ T58] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 268.326650][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.330178][ T58] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.334280][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.337459][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.343272][ T58] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 268.345331][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.348517][ T58] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.352464][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.355577][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.359846][T13826] netlink: 'syz.4.1883': attribute type 6 has an invalid length. [ 268.359894][ T58] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 268.362085][T13826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1883'. [ 268.364101][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.364118][ T58] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.376152][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.379392][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.384583][ T58] usb 6-1: string descriptor 0 read error: -22 [ 268.386350][ T58] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 268.391060][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.402067][ T58] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 268.677784][ T5991] usb 6-1: USB disconnect, device number 7 [ 269.239057][T13843] sctp: [Deprecated]: syz.4.1886 (pid 13843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.239057][T13843] Use struct sctp_sack_info instead [ 269.421547][T13842] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 269.424490][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 269.743020][T13851] netlink: 'syz.2.1888': attribute type 1 has an invalid length. [ 269.800802][T13853] syzkaller0: entered promiscuous mode [ 269.802534][T13853] syzkaller0: entered allmulticast mode [ 271.530709][T13886] overlayfs: failed to clone upperpath [ 271.613760][T13887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.023682][T13896] fuse: Bad value for 'group_id' [ 272.032002][T13896] fuse: Bad value for 'group_id' [ 272.592839][T13913] netlink: 'syz.4.1901': attribute type 9 has an invalid length. [ 272.657666][T13904] __nla_validate_parse: 1 callbacks suppressed [ 272.657701][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'. [ 272.992329][T13918] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 274.946023][T13979] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 274.948257][T13979] UDF-fs: Scanning with blocksize 2048 failed [ 275.079064][T13979] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 275.081250][T13979] UDF-fs: Scanning with blocksize 4096 failed [ 275.432004][T13997] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1924'. [ 275.712597][T14005] tipc: Enabled bearer , priority 7 [ 275.714849][T14005] : renamed from syzkaller0 [ 275.717773][T14005] tipc: Disabling bearer [ 276.152226][T14032] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 276.154583][T14032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1933'. [ 276.157488][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 276.361953][T14039] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 276.708825][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 277.118832][ T9] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 277.121972][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.125089][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.127870][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 277.178838][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 277.181491][ T9] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 277.183762][ T9] usb 9-1: Manufacturer: syz [ 277.189240][ T9] usb 9-1: config 0 descriptor?? [ 277.415023][T14057] [U] V3Fپ"S/4:XTZWTLW= [ 277.427516][T14064] [U] J"E:" [ 277.597334][ T9] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 277.611692][ T9] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 277.621077][ T9] appleir 0003:05AC:8243.0007: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 277.862009][ T9] usb 9-1: USB disconnect, device number 7 [ 278.242929][T14078] netlink: 'syz.3.1944': attribute type 1 has an invalid length. [ 278.245298][T14078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1944'. [ 278.405954][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 278.405965][ T40] audit: type=1326 audit(1737003093.430:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.4.1946" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x0 [ 278.420596][T11912] Bluetooth: hci4: Frame reassembly failed (-84) [ 278.811482][T14106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1952'. [ 278.908259][T14111] netlink: 'syz.2.1953': attribute type 1 has an invalid length. [ 278.910628][T14111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1953'. [ 279.678089][T14129] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 279.835177][T14144] netlink: 'syz.3.1959': attribute type 9 has an invalid length. [ 279.900467][T14146] netlink: 'syz.3.1960': attribute type 10 has an invalid length. [ 279.903693][T14146] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1960'. [ 279.908715][T14146] overlayfs: missing 'workdir' [ 279.963873][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1962'. [ 279.971783][T14151] 8021q: adding VLAN 0 to HW filter on device bond3 [ 280.111968][T14163] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1965'. [ 280.143373][T14165] tipc: Enabling of bearer rejected, failed to enable media [ 280.320360][ T40] audit: type=1326 audit(1737003095.350:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.3.1967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 280.329192][ T40] audit: type=1326 audit(1737003095.360:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.3.1967" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7fc00000 [ 280.337576][ T40] audit: type=1326 audit(1737003095.360:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.3.1967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 280.385187][T14181] /dev/nullb0: Can't lookup blockdev [ 280.438988][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 280.443905][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 280.982222][T14207] wg1: left promiscuous mode [ 280.988248][T14207] bond1: left promiscuous mode [ 281.534414][T14220] trusted_key: encrypted_key: insufficient parameters specified [ 281.625119][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 282.228909][ T40] audit: type=1800 audit(1737003097.250:1111): pid=14236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1985" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 283.792931][T14269] bond0: entered promiscuous mode [ 283.794435][T14269] bond_slave_0: entered promiscuous mode [ 283.796087][T14269] bond_slave_1: entered promiscuous mode [ 283.849778][T14272] overlayfs: upper fs does not support tmpfile. [ 283.867216][ T40] audit: type=1800 audit(1737003098.890:1112): pid=14264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1992" name="bus" dev="overlay" ino=879 res=0 errno=0 [ 283.927858][T14278] netlink: 'syz.1.1995': attribute type 1 has an invalid length. [ 283.930426][T14278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1995'. [ 284.644030][T14306] binder: 14305:14306 ioctl c0306201 200002c0 returned -14 [ 284.649633][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2003'. [ 284.847744][T14312] netlink: 'syz.3.2006': attribute type 1 has an invalid length. [ 284.850341][T14312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2006'. [ 285.445540][ T40] audit: type=1326 audit(1737003100.470:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.4.2011" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x0 [ 285.667291][T14335] syz_tun: left promiscuous mode [ 285.671877][T14335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.802469][T14345] netlink: 'syz.1.2015': attribute type 1 has an invalid length. [ 285.804988][T14345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2015'. [ 285.983743][T14353] syz.4.2018: attempt to access beyond end of device [ 285.983743][T14353] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 285.988687][T14353] syz.4.2018: attempt to access beyond end of device [ 285.988687][T14353] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 286.333462][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'. [ 286.336795][T14365] Invalid logical block size (85) [ 286.587933][T14372] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2022'. [ 286.600549][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'. [ 286.600917][T14372] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2022'. [ 286.740978][T14385] binder: BINDER_SET_CONTEXT_MGR already set [ 286.742918][T14385] binder: 14384:14385 ioctl 4018620d 20000100 returned -16 [ 286.745050][T14385] binder: BINDER_SET_CONTEXT_MGR already set [ 286.746678][T14385] binder: 14384:14385 ioctl 4018620d 20000100 returned -16 [ 286.752737][T14385] binder: BINDER_SET_CONTEXT_MGR already set [ 286.755450][T14385] binder: 14384:14385 ioctl 4018620d 20000100 returned -16 [ 286.757592][T14385] binder: BINDER_SET_CONTEXT_MGR already set [ 286.762410][T14386] binder: BINDER_SET_CONTEXT_MGR already set [ 286.764130][T14386] binder: 14384:14386 ioctl 4018620d 200001c0 returned -16 [ 286.766216][T14385] binder: 14384:14385 ioctl 4018620d 20000100 returned -16 [ 286.768308][T14385] binder: BINDER_SET_CONTEXT_MGR already set [ 286.770300][T14385] binder: 14384:14385 ioctl 4018620d 20000100 returned -16 [ 286.859704][ T5951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.862584][ T5951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.865228][ T5951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.866057][T14392] overlayfs: upper fs does not support tmpfile. [ 286.871791][ T5951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.888472][ T5951] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.892386][ T5951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.901532][ T5953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.904225][ T5953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.906397][ T5953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.915703][ T5953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.917905][ T5953] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.922411][ T5953] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.018951][T14391] chnl_net:caif_netlink_parms(): no params data found [ 287.049026][T14402] netlink: 'syz.2.2029': attribute type 1 has an invalid length. [ 287.053155][T14402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2029'. [ 287.081935][T14391] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.084135][T14391] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.096556][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.098731][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.100965][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.104345][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.106485][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.108615][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.109341][T14391] bridge_slave_0: entered allmulticast mode [ 287.112588][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.114777][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.116940][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.120529][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.122912][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.123811][T14391] bridge_slave_0: entered promiscuous mode [ 287.124985][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.127692][T14391] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.129604][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.131341][T14391] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.134344][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.136778][T14391] bridge_slave_1: entered allmulticast mode [ 287.138951][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.140954][T14391] bridge_slave_1: entered promiscuous mode [ 287.142958][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.147479][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.149880][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.153050][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.155256][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.157491][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.161256][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.163387][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.166379][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.168733][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.171232][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.173483][T14391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.173558][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.177284][T14391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.178273][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.183839][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.185994][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.188121][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.190655][ T5991] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.193551][ T5991] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [sy] on syz0 [ 287.215921][T14391] team0: Port device team_slave_0 added [ 287.220528][T14391] team0: Port device team_slave_1 added [ 287.238188][T14391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.241213][T14391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.248369][T14391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.259350][T14391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.261338][T14391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.271165][T14391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.310554][T14391] hsr_slave_0: entered promiscuous mode [ 287.313111][T14391] hsr_slave_1: entered promiscuous mode [ 287.315182][T14391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.317391][T14391] Cannot create hsr debugfs directory [ 287.442657][T14391] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.517166][T14391] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.571104][T14391] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.623456][T14391] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.737354][T14391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 287.740927][T14391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 287.745181][T14391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 287.748556][T14391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 287.790656][T14391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.797548][T14391] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.802997][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.805128][T11903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.812709][T11911] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.814887][T11911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.875597][T14426] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 287.903930][T14391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.923467][T14391] veth0_vlan: entered promiscuous mode [ 287.928242][T14391] veth1_vlan: entered promiscuous mode [ 287.939513][T14391] veth0_macvtap: entered promiscuous mode [ 287.943099][T14391] veth1_macvtap: entered promiscuous mode [ 287.953511][T14391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.958817][T14391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.962241][T14391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.967072][T14391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.971141][T14391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.974498][T14391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.977973][T14391] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.980982][T14391] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.983508][T14391] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.986024][T14391] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.995532][T14430] overlayfs: upper fs does not support tmpfile. [ 288.025683][T11910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.027953][T11910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.039454][T11910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.041758][T11910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.235338][T14452] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 288.244769][T14452] CIFS mount error: No usable UNC path provided in device string! [ 288.244769][T14452] [ 288.248656][T14452] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 288.279860][T14459] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2045'. [ 288.280304][T14456] overlayfs: upper fs does not support tmpfile. [ 288.328453][T14464] fuse: Bad value for 'fd' [ 288.419225][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 288.559031][ T25] usb 8-1: device descriptor read/64, error -71 [ 288.593470][T14478] sctp: [Deprecated]: syz.1.2051 (pid 14478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.593470][T14478] Use struct sctp_sack_info instead [ 288.808903][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 288.948869][ T25] usb 8-1: device descriptor read/64, error -71 [ 289.009003][ T5951] Bluetooth: hci4: command tx timeout [ 289.069014][ T25] usb usb8-port1: attempt power cycle [ 289.297542][T14490] tipc: Started in network mode [ 289.300126][T14490] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 289.302565][T14490] tipc: Enabled bearer , priority 0 [ 289.366035][T14497] overlayfs: upper fs does not support tmpfile. [ 289.428920][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 289.449290][ T25] usb 8-1: device descriptor read/8, error -71 [ 289.708882][ T25] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 289.729499][ T25] usb 8-1: device descriptor read/8, error -71 [ 289.839291][ T25] usb usb8-port1: unable to enumerate USB device [ 290.195242][T14533] overlayfs: upper fs does not support tmpfile. [ 290.339789][ T57] tipc: Node number set to 11578026 [ 290.526109][T14540] siw: device registration error -23 [ 290.940004][ T6666] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 291.079159][ T5951] Bluetooth: hci4: command tx timeout [ 291.080607][ T6666] usb 7-1: device descriptor read/64, error -71 [ 291.270195][T14559] overlayfs: upper fs does not support tmpfile. [ 291.318856][ T6666] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 291.448936][ T6666] usb 7-1: device descriptor read/64, error -71 [ 291.561320][ T6666] usb usb7-port1: attempt power cycle [ 291.908960][ T6666] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 291.929263][ T6666] usb 7-1: device descriptor read/8, error -71 [ 292.178959][ T6666] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 292.199923][ T6666] usb 7-1: device descriptor read/8, error -71 [ 292.309215][ T6666] usb usb7-port1: unable to enumerate USB device [ 292.451047][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'. [ 292.454086][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2080'. [ 292.457220][T14581] netlink: 'syz.1.2080': attribute type 14 has an invalid length. [ 292.459902][T14581] netlink: 'syz.1.2080': attribute type 13 has an invalid length. [ 292.494333][T14586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.497192][T14586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.555813][T14593] overlayfs: upper fs does not support tmpfile. [ 293.058652][T14599] can0: slcan on ttyS3. [ 293.075744][T11902] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 293.160939][ T5951] Bluetooth: hci4: command tx timeout [ 293.161954][T14597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2086'. [ 293.293778][T14621] Invalid source name [ 293.294981][T14621] UBIFS error (pid: 14621): cannot open "./file0", error -22 [ 293.629937][T14595] can0 (unregistered): slcan off ttyS3. [ 293.846059][T14648] overlayfs: upper fs does not support tmpfile. [ 293.893979][ T40] audit: type=1326 audit(1737003108.920:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14652 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 293.900378][ T40] audit: type=1326 audit(1737003108.920:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14652 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 293.906608][ T40] audit: type=1326 audit(1737003108.920:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14652 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 293.916460][ T40] audit: type=1326 audit(1737003108.930:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14652 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 293.924515][ T40] audit: type=1326 audit(1737003108.930:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 293.933753][ T40] audit: type=1326 audit(1737003108.940:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14652 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 293.947945][ T40] audit: type=1326 audit(1737003108.940:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14652 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 293.954266][ T40] audit: type=1326 audit(1737003108.940:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14652 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 293.960964][ T40] audit: type=1326 audit(1737003108.940:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14652 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 293.967124][ T40] audit: type=1326 audit(1737003108.940:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 294.473824][T14671] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 294.476391][T14671] overlayfs: missing 'lowerdir' [ 294.735460][T14674] syzkaller0: entered promiscuous mode [ 294.737078][T14674] syzkaller0: entered allmulticast mode [ 294.907721][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2102'. [ 294.946420][T14682] overlayfs: upper fs does not support tmpfile. [ 295.146828][T14691] macvlan1: entered promiscuous mode [ 295.150306][T14691] macvlan1: left promiscuous mode [ 295.248911][ T5951] Bluetooth: hci4: command tx timeout [ 295.518948][ T5956] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 295.690791][ T5956] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 295.693147][ T5956] usb 7-1: config 0 has no interface number 0 [ 295.695358][ T5956] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.698690][ T5956] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 295.702406][ T5956] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 295.705903][ T5956] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 295.711879][ T5956] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 295.715263][ T5956] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 295.719356][ T5956] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 295.722633][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.729236][ T5956] usb 7-1: config 0 descriptor?? [ 295.731281][T14701] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.733398][T14701] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.768943][ T5956] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 296.385663][ T9] usb 7-1: USB disconnect, device number 11 [ 296.388570][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 296.982412][T14715] overlayfs: upper fs does not support tmpfile. [ 297.016591][T14717] MINIX-fs: blocksize too small for device [ 297.203162][T14725] could not allocate digest TFM handle sha256-mb [ 297.256283][T14725] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.511380][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 297.766400][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 298.295273][T14758] overlayfs: upper fs does not support tmpfile. [ 298.515105][T14763] netlink: 'syz.3.2125': attribute type 2 has an invalid length. [ 298.526411][T14763] : entered promiscuous mode [ 298.995148][T14791] overlayfs: upper fs does not support tmpfile. [ 299.255512][T14796] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 299.258241][T14796] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 300.118911][ T5953] Bluetooth: hci4: command 0x0405 tx timeout [ 300.851367][T14823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2141'. [ 300.860263][T14823] netlink: 'syz.4.2141': attribute type 1 has an invalid length. [ 300.955644][T14830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2142'. [ 300.958257][T14830] tipc: Invalid UDP bearer configuration [ 300.958275][T14830] tipc: Enabling of bearer rejected, failed to enable media [ 301.756765][T14848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.799368][T14856] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 302.450291][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ecdb800: rx timeout, send abort [ 302.454159][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067b8a000: rx timeout, send abort [ 302.456616][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ecdb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 302.460772][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888067b8a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 302.993669][T14902] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 303.191179][T14904] netlink: 'syz.4.2163': attribute type 10 has an invalid length. [ 303.193619][T14904] tipc: Resetting bearer [ 303.199516][T14904] tipc: Resetting bearer [ 303.202887][T14904] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.206574][T14904] tipc: Resetting bearer [ 303.209104][T14904] tipc: Resetting bearer [ 303.239357][T14904] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 303.240225][T14906] loop6: detected capacity change from 0 to 524287999 [ 303.383643][T14917] overlayfs: upper fs does not support tmpfile. [ 303.743949][T14932] bridge0: port 3(syz_tun) entered blocking state [ 303.746029][T14932] bridge0: port 3(syz_tun) entered disabled state [ 303.875005][T14932] syz_tun: entered allmulticast mode [ 303.879960][T14932] syz_tun: entered promiscuous mode [ 303.882411][T14932] bridge0: port 3(syz_tun) entered blocking state [ 303.884299][T14932] bridge0: port 3(syz_tun) entered forwarding state [ 303.918155][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 304.532950][T14965] overlayfs: upper fs does not support tmpfile. [ 304.687210][ T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 304.843747][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.846933][ T25] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 304.849838][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.855321][ T25] usb 8-1: config 0 descriptor?? [ 304.919022][T14971] siw: device registration error -23 [ 305.063547][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 305.065448][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 305.071626][ T25] usb 8-1: USB disconnect, device number 6 [ 305.255828][T14983] veth0_vlan: entered allmulticast mode [ 305.314138][T14983] veth0_vlan: left promiscuous mode [ 305.316112][T14983] veth0_vlan: entered promiscuous mode [ 305.405779][T14995] overlayfs: upper fs does not support tmpfile. [ 305.425013][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2186'. [ 305.430073][T14997] syz.1.2186: attempt to access beyond end of device [ 305.430073][T14997] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 305.434919][T14997] SQUASHFS error: Failed to read block 0x0: -5 [ 305.437115][T14997] unable to read squashfs_super_block [ 305.508546][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 305.508673][ T40] audit: type=1326 audit(1737003120.530:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.2.2190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 305.529701][ T40] audit: type=1326 audit(1737003120.530:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.2.2190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 305.535996][ T40] audit: type=1326 audit(1737003120.530:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.2.2190" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 305.542439][ T40] audit: type=1326 audit(1737003120.530:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.2.2190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 305.548674][ T40] audit: type=1326 audit(1737003120.530:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.2.2190" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 305.554845][ T40] audit: type=1326 audit(1737003120.530:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.2.2190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 305.561953][ T40] audit: type=1326 audit(1737003120.530:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.2.2190" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 305.568664][ T40] audit: type=1326 audit(1737003120.530:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.2.2190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 305.574957][ T40] audit: type=1326 audit(1737003120.530:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.2.2190" exe="/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 305.581237][ T40] audit: type=1326 audit(1737003120.530:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.2.2190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 305.791704][T15016] tipc: Cannot configure node identity twice [ 306.286751][T15022] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 306.518898][ T5951] Bluetooth: hci4: command 0x0405 tx timeout [ 306.529608][T15029] overlayfs: upper fs does not support tmpfile. [ 306.975574][T15063] netlink: 'syz.3.2205': attribute type 10 has an invalid length. [ 306.983291][T15063] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.483424][ T6006] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 307.565321][T15071] overlayfs: failed to resolve './file0': -2 [ 307.638816][ T6006] usb 8-1: Using ep0 maxpacket: 8 [ 307.641533][ T6006] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.644493][ T6006] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 307.647227][ T6006] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 307.652019][ T6006] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 307.655571][ T6006] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 307.658331][ T6006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.665324][ T6006] hub 8-1:1.0: bad descriptor, ignoring hub [ 307.667156][ T6006] hub 8-1:1.0: probe with driver hub failed with error -5 [ 307.670024][ T6006] cdc_wdm 8-1:1.0: skipping garbage [ 307.671695][ T6006] cdc_wdm 8-1:1.0: skipping garbage [ 307.674063][ T6006] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 307.676052][ T6006] cdc_wdm 8-1:1.0: Unknown control protocol [ 307.865679][T15063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2205'. [ 308.379378][ T58] usb 8-1: USB disconnect, device number 7 [ 308.381667][T15063] cdc_wdm 8-1:1.0: Error autopm - -16 [ 308.529265][ T58] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 308.681533][ T58] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.685775][ T58] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 308.689434][ T58] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 308.692598][ T58] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 308.695159][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.699508][T15104] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 308.702197][ T58] hub 8-1:1.0: bad descriptor, ignoring hub [ 308.703929][ T58] hub 8-1:1.0: probe with driver hub failed with error -5 [ 308.706150][ T58] cdc_wdm 8-1:1.0: skipping garbage [ 308.707642][ T58] cdc_wdm 8-1:1.0: skipping garbage [ 308.711990][ T58] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 308.713711][ T58] cdc_wdm 8-1:1.0: Unknown control protocol [ 308.765853][T15125] overlayfs: failed to resolve './file0': -2 [ 309.017262][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2220'. [ 309.068942][ T6006] usb 8-1: USB disconnect, device number 8 [ 309.353120][T15162] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2227'. [ 309.355760][T15162] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2227'. [ 309.358367][T15162] netlink: 'syz.2.2227': attribute type 6 has an invalid length. [ 309.379418][T15162] netlink: 'syz.2.2227': attribute type 5 has an invalid length. [ 309.384124][T15162] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2227'. [ 309.906090][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'. [ 309.912829][T15182] IPVS: Error joining to the multicast group [ 310.089941][T15188] syzkaller1: entered promiscuous mode [ 310.091703][T15188] syzkaller1: entered allmulticast mode [ 310.156724][T15188] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 311.282454][T15225] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2242'. [ 311.482489][T15230] netlink: 'syz.3.2244': attribute type 1 has an invalid length. [ 311.717926][T15249] sp0: Synchronizing with TNC [ 311.929116][ T8] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 311.948431][T15263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2255'. [ 312.079569][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 312.087815][ T8] usb 9-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.093269][ T8] usb 9-1: config 1 interface 0 has no altsetting 0 [ 312.098087][ T8] usb 9-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.40 [ 312.103832][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.106343][ T8] usb 9-1: Product: syz [ 312.108538][T15280] netdevsim netdevsim3: Direct firmware load for . [ 312.108538][T15280] failed with error -2 [ 312.116388][ T8] usb 9-1: Manufacturer: syz [ 312.117965][ T8] usb 9-1: SerialNumber: syz [ 312.122990][T15280] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 312.122990][T15280] [ 312.388850][ T58] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 312.539236][ T58] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 312.542203][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.544748][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.547830][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 312.553192][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.555780][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.559577][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 312.562821][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.566143][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.569402][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 312.572008][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.574587][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.577684][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 312.580379][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.583319][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.586401][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 312.589307][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.591846][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.594921][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 312.597522][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.600145][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.603210][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 312.606880][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.609521][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.612592][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 312.616047][ T58] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 312.618676][ T58] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 312.621117][ T58] usb 6-1: Product: syz [ 312.622338][ T58] usb 6-1: Manufacturer: syz [ 312.623695][ T58] usb 6-1: SerialNumber: syz [ 312.626017][ T58] usb 6-1: config 0 descriptor?? [ 312.631365][ T58] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 312.737532][T15296] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 312.872788][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2264'. [ 312.902355][ C2] usb 6-1: yurex_control_callback - control failed: -71 [ 312.908036][ T58] usb 6-1: USB disconnect, device number 8 [ 312.912302][ T58] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 313.031833][T15300] syz_tun: entered allmulticast mode [ 313.034486][T15300] syz_tun: left allmulticast mode [ 313.154152][T15314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2268'. [ 314.120739][ T58] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 314.313225][ T58] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 314.316651][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 314.320208][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 314.324374][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.328613][ T58] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.331423][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.370791][ T58] usb 7-1: config 0 descriptor?? [ 314.373264][T15319] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 314.580439][T15319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.583221][T15319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.585886][T15319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.588405][T15319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.591218][T15319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.593793][T15319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.597110][T15319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.601649][T15319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.604217][T15319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.607237][T15319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.613338][ T58] usbhid 7-1:0.0: can't add hid device: -32 [ 314.615129][ T58] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 314.813415][T15331] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2272'. [ 314.883042][T15345] veth0_to_team: entered promiscuous mode [ 314.884880][T15345] veth0_to_team: entered allmulticast mode [ 314.991322][ T8] usbhid 9-1:1.0: can't add hid device: -71 [ 314.993131][ T8] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 314.996246][ T8] usb 9-1: USB disconnect, device number 8 [ 315.291888][T15349] sctp: [Deprecated]: syz.3.2277 (pid 15349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.291888][T15349] Use struct sctp_sack_info instead [ 315.448585][T15363] overlayfs: failed to resolve './file1': -2 [ 315.515840][T15368] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2284'. [ 315.518863][T15368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'. [ 315.557243][T15371] netlink: 'syz.3.2285': attribute type 27 has an invalid length. [ 315.624492][T15377] syz.3.2285: attempt to access beyond end of device [ 315.624492][T15377] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 315.630279][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'. [ 315.632074][T15377] syz.3.2285: attempt to access beyond end of device [ 315.632074][T15377] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 315.632968][T15366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2279'. [ 315.645046][T15371] bridge0: port 3(syz_tun) entered disabled state [ 315.656170][T15371] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.659347][T15371] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.756820][T15371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.767166][T15371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.839569][T15371] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.842363][T15371] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.844994][T15371] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.847607][T15371] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.888303][T15375] sp0: Synchronizing with TNC [ 316.002498][T15387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2288'. [ 316.008445][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 316.008511][ T40] audit: type=1326 audit(1737003131.030:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15386 comm="syz.3.2288" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x0 [ 316.264545][T15392] afs: Unknown parameter 'dynM@!3cO' [ 316.438483][T15398] bridge0: port 1(hsr_slave_1) entered blocking state [ 316.440646][T15398] bridge0: port 1(hsr_slave_1) entered disabled state [ 316.442814][T15398] hsr_slave_1: entered allmulticast mode [ 316.445077][T15398] hsr_slave_1: left allmulticast mode [ 316.524173][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.564548][ T25] usb 7-1: USB disconnect, device number 12 [ 316.616773][T15404] overlayfs: failed to resolve './file1': -2 [ 317.132225][T15436] overlayfs: failed to resolve './file1': -2 [ 317.198798][T15442] netlink: 'syz.3.2305': attribute type 11 has an invalid length. [ 317.271262][T15447] xt_TPROXY: Can be used only with -p tcp or -p udp [ 317.841932][ T40] audit: type=1804 audit(1737003132.874:1232): pid=15454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2306" name="/newroot/224/bus/bus" dev="overlay" ino=1273 res=1 errno=0 [ 317.850669][T15454] Invalid ELF header magic: != ELF [ 317.923976][ T40] audit: type=1326 audit(1737003132.954:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15458 comm="syz.4.2308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 317.932055][ T40] audit: type=1326 audit(1737003132.954:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15458 comm="syz.4.2308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 317.938186][ T40] audit: type=1326 audit(1737003132.964:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15458 comm="syz.4.2308" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 317.946291][ T40] audit: type=1326 audit(1737003132.964:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15458 comm="syz.4.2308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 317.954246][ T40] audit: type=1326 audit(1737003132.964:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15458 comm="syz.4.2308" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 317.962441][ T40] audit: type=1326 audit(1737003132.974:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15458 comm="syz.4.2308" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 317.968490][ T40] audit: type=1326 audit(1737003132.974:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15458 comm="syz.4.2308" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f155a7 code=0x7ffc0000 [ 317.974722][ T40] audit: type=1326 audit(1737003132.974:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15458 comm="syz.4.2308" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 318.087052][T15463] CIFS mount error: No usable UNC path provided in device string! [ 318.087052][T15463] [ 318.090111][T15463] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 318.100000][T15466] overlayfs: failed to resolve './file1': -2 [ 319.156427][T15509] overlayfs: failed to resolve './file1': -2 [ 319.242952][T15506] bridge1: entered allmulticast mode [ 320.025625][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2328'. [ 320.031567][T15529] netlink: 'syz.4.2328': attribute type 1 has an invalid length. [ 320.033850][T15529] netlink: 'syz.4.2328': attribute type 2 has an invalid length. [ 320.328208][T15543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.335787][T15543] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 321.034455][T15570] overlayfs: failed to resolve './file1': -2 [ 321.037074][T15567] program syz.1.2338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.079885][T15569] raw_sendmsg: syz.4.2340 forgot to set AF_INET. Fix it! [ 321.159085][T15565] nbd3: detected capacity change from 0 to 22 [ 321.172157][T15580] block nbd3: shutting down sockets [ 321.179423][ C0] blk_print_req_error: 79 callbacks suppressed [ 321.179434][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.183848][ C0] buffer_io_error: 39 callbacks suppressed [ 321.183854][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.189023][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.191838][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.195776][ T5962] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.199694][ T5962] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.202211][ T5962] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.204778][ T5962] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.207193][ T5962] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.210010][ T5962] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.212372][ T5962] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.214955][ T5962] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.217495][ T5962] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.220528][ T5962] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.222827][ T5962] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.225425][ T5962] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.227618][ T5962] ldm_validate_partition_table(): Disk read failed. [ 321.232482][ T5962] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.235792][ T5962] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.240701][ T5962] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.244383][ T5962] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.247225][ T5962] Dev nbd3: unable to read RDB block 0 [ 321.253402][ T5962] nbd3: unable to read partition table [ 321.255210][ T5962] nbd3: partition table beyond EOD, truncated [ 321.260446][ T5962] ldm_validate_partition_table(): Disk read failed. [ 321.262686][ T5962] Dev nbd3: unable to read RDB block 0 [ 321.264592][ T5962] nbd3: unable to read partition table [ 321.266443][ T5962] nbd3: partition table beyond EOD, truncated [ 321.707235][T15598] netlink: 'syz.3.2349': attribute type 29 has an invalid length. [ 321.709718][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2349'. [ 321.721342][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2349'. [ 321.723922][T15598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2349'. [ 321.726550][T15598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2349'. [ 322.849631][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2359'. [ 322.852221][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2359'. [ 322.860476][T15633] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 322.877179][T15636] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 322.877179][T15636] program syz.2.2360 not setting count and/or reply_len properly [ 322.887112][T15636] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 322.887112][T15636] program syz.2.2360 not setting count and/or reply_len properly [ 323.010870][T15638] 9pnet_fd: Insufficient options for proto=fd [ 323.061448][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2364'. [ 323.064513][T15652] netlink: 'syz.2.2364': attribute type 25 has an invalid length. [ 323.075608][T15652] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.078664][T15652] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.081396][T15652] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.084004][T15652] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.209208][ T9] IPVS: starting estimator thread 0... [ 323.309367][T15657] IPVS: using max 40 ests per chain, 96000 per kthread [ 323.882969][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 324.079450][T15678] netlink: 'syz.1.2373': attribute type 21 has an invalid length. [ 324.197148][ T40] kauditd_printk_skb: 582 callbacks suppressed [ 324.197157][ T40] audit: type=1326 audit(1737003139.224:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15681 comm="syz.3.2375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 324.198825][ T8967] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 324.202064][ T40] audit: type=1326 audit(1737003139.234:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15681 comm="syz.3.2375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 324.219366][ T40] audit: type=1326 audit(1737003139.244:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15681 comm="syz.3.2375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 324.225699][ T40] audit: type=1326 audit(1737003139.244:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15681 comm="syz.3.2375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 324.235939][ T40] audit: type=1326 audit(1737003139.244:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15681 comm="syz.3.2375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 324.245965][ T40] audit: type=1326 audit(1737003139.244:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15681 comm="syz.3.2375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 324.252377][ T40] audit: type=1326 audit(1737003139.244:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15681 comm="syz.3.2375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 324.259066][ T40] audit: type=1326 audit(1737003139.244:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15681 comm="syz.3.2375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 324.268649][ T40] audit: type=1326 audit(1737003139.244:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15681 comm="syz.3.2375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 324.274927][ T40] audit: type=1326 audit(1737003139.244:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15681 comm="syz.3.2375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 324.328913][ T8967] usb 7-1: device descriptor read/64, error -71 [ 324.578984][ T8967] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 324.709197][ T8967] usb 7-1: device descriptor read/64, error -71 [ 324.827323][ T8967] usb usb7-port1: attempt power cycle [ 325.036493][T15691] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.086271][T15698] tty tty2: ldisc open failed (-12), clearing slot 1 [ 325.141423][T15691] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.188928][ T8967] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 325.209817][ T8967] usb 7-1: device descriptor read/8, error -71 [ 325.251567][T15691] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.321352][T15691] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.410085][T15691] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.416948][T15691] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.422555][T15691] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.427125][T15691] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.470155][ T8967] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 325.499278][ T8967] usb 7-1: device descriptor read/8, error -71 [ 325.579254][T15715] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.619534][ T8967] usb usb7-port1: unable to enumerate USB device [ 325.632300][T15715] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.634211][T15716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2381'. [ 325.696014][T15720] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 325.697948][T15720] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 325.700157][T15720] vhci_hcd vhci_hcd.0: Device attached [ 325.704695][T15722] vhci_hcd: connection closed [ 325.705849][T11908] vhci_hcd: stop threads [ 325.708515][T11908] vhci_hcd: release socket [ 325.710190][T11908] vhci_hcd: disconnect device [ 325.713391][T15715] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.791092][T15715] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.197074][T15760] netlink: 'syz.2.2384': attribute type 10 has an invalid length. [ 327.205677][T15760] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 328.024922][T15767] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.2388'. [ 328.027641][T15767] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.2388'. [ 328.047103][T15768] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.2388'. [ 328.049848][T15768] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.2388'. [ 330.082478][T15807] netlink: 'syz.1.2398': attribute type 9 has an invalid length. [ 330.086497][T15807] netlink: 170936 bytes leftover after parsing attributes in process `syz.1.2398'. [ 330.179435][T15715] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.202182][T15715] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.216012][T15715] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.233088][T15715] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.258965][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'. [ 330.287056][T15814] netlink: 308 bytes leftover after parsing attributes in process `syz.3.2401'. [ 330.822759][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2404'. [ 331.363542][T15846] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2410'. [ 331.461619][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2412'. [ 331.597221][T15857] team0: Port device @ removed [ 331.598864][ T25] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 331.604672][T15857] bond1: (slave ip6gre1): Releasing backup interface [ 331.606681][T15857] ip6gre1: left promiscuous mode [ 331.701810][ T40] kauditd_printk_skb: 156 callbacks suppressed [ 331.701820][ T40] audit: type=1326 audit(1737003146.734:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 331.721375][ T40] audit: type=1326 audit(1737003146.734:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 331.727795][ T40] audit: type=1326 audit(1737003146.744:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 331.734598][ T40] audit: type=1326 audit(1737003146.744:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 331.741748][ T40] audit: type=1326 audit(1737003146.744:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 331.748273][ T40] audit: type=1326 audit(1737003146.744:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 331.754500][ T40] audit: type=1326 audit(1737003146.754:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 331.761542][ T40] audit: type=1326 audit(1737003146.754:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 331.767616][ T40] audit: type=1326 audit(1737003146.754:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 331.767831][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.774255][ T40] audit: type=1326 audit(1737003146.754:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 331.777131][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.788446][ T25] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 331.791492][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.795431][ T25] usb 8-1: config 0 descriptor?? [ 331.831861][ T5987] kernel read not supported for file /video7 (pid: 5987 comm: kworker/3:4) [ 331.997282][T15879] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2420'. [ 332.003925][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 332.009240][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 332.019961][ T25] usb 8-1: USB disconnect, device number 9 [ 332.243032][T15887] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 332.253577][T15888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 332.425659][T15917] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2429'. [ 332.425780][T15915] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 332.450880][T15920] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2431'. [ 332.502859][T15918] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 332.506007][T15918] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2427'. [ 333.216729][T15943] syzkaller0: entered promiscuous mode [ 333.218520][T15943] syzkaller0: entered allmulticast mode [ 333.529632][T15955] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2440'. [ 333.588154][T15957] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2441'. [ 334.287543][T15978] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2445'. [ 335.520258][T15991] syzkaller0: entered promiscuous mode [ 335.526741][T15991] syzkaller0: entered allmulticast mode [ 335.673091][T16005] netlink: 'syz.4.2449': attribute type 1 has an invalid length. [ 335.675496][T16005] netlink: 'syz.4.2449': attribute type 3 has an invalid length. [ 337.093720][T16012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 337.117527][T16002] __nla_validate_parse: 1 callbacks suppressed [ 337.117538][T16002] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2450'. [ 337.144980][T16006] bond0: (slave bond_slave_0): Releasing backup interface [ 337.182829][T16006] bond0: (slave bond_slave_1): Releasing backup interface [ 337.187763][T16006] team0: Port device team_slave_0 removed [ 337.191209][T16006] team0: Port device team_slave_1 removed [ 337.193032][T16006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.196414][T16006] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.208648][T16006] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.211230][T16006] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.213752][T16006] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.224533][T16006] team0: Port device geneve0 removed [ 337.226977][T16006] bond0: (slave wlan1): Releasing backup interface [ 337.331555][T16036] nft_compat: unsupported protocol 0 [ 337.537037][T16050] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 337.686935][T16044] siw: device registration error -23 [ 338.178185][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'. [ 338.268048][T16083] block nbd4: shutting down sockets [ 338.464021][T16105] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2474'. [ 338.506588][T16108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2475'. [ 338.551434][T16109] siw: device registration error -23 [ 338.567970][T16110] loop9: detected capacity change from 0 to 7 [ 338.572844][T16110] Dev loop9: unable to read RDB block 7 [ 338.574565][T16110] loop9: unable to read partition table [ 338.576486][T16110] loop9: partition table beyond EOD, truncated [ 338.578324][T16110] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 338.578324][T16110] ) failed (rc=-5) [ 338.584121][T16110] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 338.826804][T16112] sctp: [Deprecated]: syz.3.2476 (pid 16112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.826804][T16112] Use struct sctp_sack_info instead [ 338.838086][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2476'. [ 339.031817][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 339.031828][ T40] audit: type=1804 audit(1737003154.054:2033): pid=16125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2479" name="/newroot/271/bus/bus" dev="overlay" ino=1542 res=1 errno=0 [ 339.239696][T16137] No control pipe specified [ 339.454092][T16158] siw: device registration error -23 [ 339.699241][T16168] netlink: 'syz.4.2488': attribute type 10 has an invalid length. [ 339.703030][T16168] netlink: 'syz.4.2488': attribute type 10 has an invalid length. [ 339.709810][T16165] [ 339.710599][T16165] ====================================================== [ 339.712582][T16165] WARNING: possible circular locking dependency detected [ 339.714601][T16165] 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 Not tainted [ 339.717235][T16165] ------------------------------------------------------ [ 339.720326][T16165] syz.2.2489/16165 is trying to acquire lock: [ 339.722072][T16165] ffff888023bc7170 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 339.725033][T16165] [ 339.725033][T16165] but task is already holding lock: [ 339.727468][T16165] ffff888023bc6c40 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 339.731798][T16165] [ 339.731798][T16165] which lock already depends on the new lock. [ 339.731798][T16165] [ 339.735455][T16165] [ 339.735455][T16165] the existing dependency chain (in reverse order) is: [ 339.738022][T16165] [ 339.738022][T16165] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 339.740461][T16165] blk_mq_submit_bio+0x1fb6/0x24c0 [ 339.742073][T16165] __submit_bio+0x384/0x540 [ 339.743791][T16165] submit_bio_noacct_nocheck+0x698/0xd70 [ 339.745877][T16165] submit_bio_noacct+0x93a/0x1e20 [ 339.747699][T16165] mpage_readahead+0x41d/0x590 [ 339.749500][T16165] read_pages+0x1a8/0xdc0 [ 339.750933][T16165] page_cache_ra_unbounded+0x3dc/0x750 [ 339.752727][T16165] force_page_cache_ra+0x24b/0x340 [ 339.754335][T16165] page_cache_sync_ra+0x110/0x9c0 [ 339.755918][T16165] filemap_get_pages+0xd7b/0x1be0 [ 339.757493][T16165] filemap_read+0x3ca/0xd70 [ 339.758921][T16165] blkdev_read_iter+0x187/0x480 [ 339.760446][T16165] vfs_read+0x87f/0xbe0 [ 339.761851][T16165] ksys_read+0x12b/0x250 [ 339.763568][T16165] do_syscall_64+0xcd/0x250 [ 339.765013][T16165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.766841][T16165] [ 339.766841][T16165] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 339.769686][T16165] down_read+0x9a/0x330 [ 339.771042][T16165] page_cache_ra_unbounded+0x173/0x750 [ 339.772769][T16165] page_cache_ra_order+0x8f2/0xc80 [ 339.774664][T16165] filemap_fault+0x1a8a/0x2820 [ 339.776723][T16165] __do_fault+0x10a/0x490 [ 339.778149][T16165] do_pte_missing+0x99f/0x3e00 [ 339.779659][T16165] __handle_mm_fault+0x103c/0x2a40 [ 339.781326][T16165] handle_mm_fault+0x3fa/0xaa0 [ 339.782847][T16165] __get_user_pages+0x8d9/0x3b50 [ 339.784436][T16165] __gup_longterm_locked+0x5ff/0x1870 [ 339.786139][T16165] pin_user_pages+0x13f/0x160 [ 339.787634][T16165] xdp_umem_create+0x73c/0x1270 [ 339.789176][T16165] xsk_setsockopt+0x7e7/0xac0 [ 339.790674][T16165] do_sock_setsockopt+0x222/0x480 [ 339.792249][T16165] __sys_setsockopt+0x1a0/0x230 [ 339.793796][T16165] __ia32_sys_setsockopt+0xbc/0x160 [ 339.795438][T16165] __do_fast_syscall_32+0x73/0x120 [ 339.797052][T16165] do_fast_syscall_32+0x32/0x80 [ 339.798582][T16165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.800522][T16165] [ 339.800522][T16165] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 339.802683][T16165] __might_fault+0x11b/0x190 [ 339.804152][T16165] _copy_from_user+0x29/0xd0 [ 339.805643][T16165] __blk_trace_setup+0xa8/0x180 [ 339.807171][T16165] blk_trace_setup+0x47/0x70 [ 339.808636][T16165] sg_ioctl+0x7a3/0x26b0 [ 339.810028][T16165] compat_ptr_ioctl+0x6b/0xa0 [ 339.811514][T16165] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 339.813169][T16165] __do_fast_syscall_32+0x73/0x120 [ 339.814782][T16165] do_fast_syscall_32+0x32/0x80 [ 339.816318][T16165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.818259][T16165] [ 339.818259][T16165] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 339.820464][T16165] __mutex_lock+0x19b/0xa60 [ 339.821905][T16165] blk_register_queue+0x13c/0x4f0 [ 339.823483][T16165] add_disk_fwnode+0x785/0x1300 [ 339.825035][T16165] brd_alloc.isra.0+0x50a/0x7c0 [ 339.826566][T16165] brd_init+0x12b/0x1d0 [ 339.827915][T16165] do_one_initcall+0x128/0x630 [ 339.829435][T16165] kernel_init_freeable+0x58f/0x8b0 [ 339.831054][T16165] kernel_init+0x1c/0x2b0 [ 339.832558][T16165] ret_from_fork+0x45/0x80 [ 339.834280][T16165] ret_from_fork_asm+0x1a/0x30 [ 339.836353][T16165] [ 339.836353][T16165] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 339.838577][T16165] __lock_acquire+0x249e/0x3c40 [ 339.840103][T16165] lock_acquire.part.0+0x11b/0x380 [ 339.841705][T16165] __mutex_lock+0x19b/0xa60 [ 339.843141][T16165] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 339.845008][T16165] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 339.846728][T16165] nbd_start_device+0x15b/0xd70 [ 339.848257][T16165] nbd_ioctl+0x21a/0xfd0 [ 339.849736][T16165] compat_blkdev_ioctl+0x2f7/0x750 [ 339.851889][T16165] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 339.853816][T16165] __do_fast_syscall_32+0x73/0x120 [ 339.855473][T16165] do_fast_syscall_32+0x32/0x80 [ 339.857023][T16165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.858969][T16165] [ 339.858969][T16165] other info that might help us debug this: [ 339.858969][T16165] [ 339.861897][T16165] Chain exists of: [ 339.861897][T16165] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#51 [ 339.861897][T16165] [ 339.866066][T16165] Possible unsafe locking scenario: [ 339.866066][T16165] [ 339.868164][T16165] CPU0 CPU1 [ 339.869708][T16165] ---- ---- [ 339.871219][T16165] lock(&q->q_usage_counter(io)#51); [ 339.872760][T16165] lock(mapping.invalidate_lock#2); [ 339.874962][T16165] lock(&q->q_usage_counter(io)#51); [ 339.877198][T16165] lock(&q->sysfs_lock); [ 339.878432][T16165] [ 339.878432][T16165] *** DEADLOCK *** [ 339.878432][T16165] [ 339.880713][T16165] 4 locks held by syz.2.2489/16165: [ 339.882205][T16165] #0: ffff888023d8b198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 339.884843][T16165] #1: ffff888023d8b0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 339.887879][T16165] #2: ffff888023bc6c40 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 339.891194][T16165] #3: ffff888023bc6c78 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 339.894603][T16165] [ 339.894603][T16165] stack backtrace: [ 339.896295][T16165] CPU: 0 UID: 0 PID: 16165 Comm: syz.2.2489 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 339.899357][T16165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 339.902400][T16165] Call Trace: [ 339.903353][T16165] [ 339.904223][T16165] dump_stack_lvl+0x116/0x1f0 [ 339.905583][T16165] print_circular_bug+0x41c/0x610 [ 339.907027][T16165] check_noncircular+0x31a/0x400 [ 339.908452][T16165] ? __pfx_check_noncircular+0x10/0x10 [ 339.910079][T16165] ? save_trace+0x42/0xa10 [ 339.911373][T16165] ? add_lock_to_list+0x17d/0x390 [ 339.911484][T16169] syz.2.2489: attempt to access beyond end of device [ 339.911484][T16169] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 339.912827][T16165] __lock_acquire+0x249e/0x3c40 [ 339.912843][T16165] ? __pfx___lock_acquire+0x10/0x10 [ 339.912852][T16165] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 339.912865][T16165] ? stack_depot_save_flags+0x36d/0x9e0 [ 339.917644][T16169] syz.2.2489: attempt to access beyond end of device [ 339.917644][T16169] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 339.918874][T16165] lock_acquire.part.0+0x11b/0x380 [ 339.918891][T16165] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 339.918903][T16165] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 339.918913][T16165] ? rcu_is_watching+0x12/0xc0 [ 339.918925][T16165] ? trace_lock_acquire+0x14e/0x1f0 [ 339.920798][T16169] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 339.922382][T16165] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 339.922398][T16165] ? lock_acquire+0x2f/0xb0 [ 339.922407][T16165] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 339.922418][T16165] __mutex_lock+0x19b/0xa60 [ 339.924114][T16169] syz.2.2489: attempt to access beyond end of device [ 339.924114][T16169] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 339.927698][T16165] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 339.927718][T16165] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 339.927730][T16165] ? __pfx___mutex_lock+0x10/0x10 [ 339.929875][T16169] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 339.930970][T16165] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 339.930984][T16165] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 339.930996][T16165] ? lock_acquire.part.0+0x11b/0x380 [ 339.960731][T16165] ? __mutex_trylock_common+0xea/0x250 [ 339.962301][T16165] ? __pfx___mutex_trylock_common+0x10/0x10 [ 339.964022][T16165] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 339.965656][T16165] ? rcu_is_watching+0x12/0xc0 [ 339.967025][T16165] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 339.968857][T16165] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 339.970484][T16165] ? __pfx___mutex_lock+0x10/0x10 [ 339.971924][T16165] ? lockdep_hardirqs_on+0x7c/0x110 [ 339.973428][T16165] ? __mutex_lock+0x1cc/0xa60 [ 339.974797][T16165] ? nbd_ioctl+0x151/0xfd0 [ 339.976085][T16165] ? __pfx___mutex_lock+0x10/0x10 [ 339.977535][T16165] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 339.979103][T16165] nbd_start_device+0x15b/0xd70 [ 339.980501][T16165] ? bpf_lsm_capable+0x9/0x10 [ 339.981849][T16165] nbd_ioctl+0x21a/0xfd0 [ 339.983061][T16165] ? __pfx_nbd_ioctl+0x10/0x10 [ 339.984436][T16165] ? __pfx_lock_release+0x10/0x10 [ 339.985882][T16165] ? trace_lock_acquire+0x14e/0x1f0 [ 339.987371][T16165] ? __pfx_nbd_ioctl+0x10/0x10 [ 339.988743][T16165] compat_blkdev_ioctl+0x2f7/0x750 [ 339.990205][T16165] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 339.991867][T16165] ? __fget_files+0x206/0x3a0 [ 339.993234][T16165] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 339.994835][T16165] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 339.996360][T16165] __do_fast_syscall_32+0x73/0x120 [ 339.997835][T16165] do_fast_syscall_32+0x32/0x80 [ 339.999207][T16165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.001004][T16165] RIP: 0023:0xf7f17579 [ 340.002163][T16165] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 340.007603][T16165] RSP: 002b:00000000f504555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 340.009975][T16165] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ab03 [ 340.012204][T16165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.014489][T16165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.016752][T16165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.018991][T16165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.021250][T16165] [ 340.024953][T16169] syz.2.2489: attempt to access beyond end of device [ 340.024953][T16169] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 340.028690][T16169] syz.2.2489: attempt to access beyond end of device [ 340.028690][T16169] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 340.033116][T16169] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 340.034821][T16152] program syz.1.2484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.035982][T16169] syz.2.2489: attempt to access beyond end of device [ 340.035982][T16169] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 340.042283][T16169] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 340.047036][T16169] syz.2.2489: attempt to access beyond end of device [ 340.047036][T16169] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 340.051401][T16169] syz.2.2489: attempt to access beyond end of device [ 340.051401][T16169] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 340.055319][T16169] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 340.058053][T16169] syz.2.2489: attempt to access beyond end of device [ 340.058053][T16169] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 340.061762][T16169] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 340.064442][T16169] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 340.110691][T16161] block nbd2: shutting down sockets VM DIAGNOSIS: 03:52:50 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145e25 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc90006227000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=000000000000006e R14=ffffffff85145dc0 R15=0000000000000000 RIP=ffffffff85145e4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2d3029 CR3=000000005caea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080000 Opmask01=00000000fffffff8 Opmask02=0000000004000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeea781620 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a6f6e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000c42dac RBX=0000000000000001 RCX=ffffffff8b1a8889 RDX=ffffed10056a6fee RSI=ffffffff8bb17240 RDI=ffffffff81703079 RBP=ffffed10039dc910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000001 R12=0000000000000001 R13=ffff88801cee4880 R14=ffffffff901cf6d0 R15=0000000000000000 RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000021000000 CR3=0000000076a64000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000046ec94 RBX=0000000000000002 RCX=ffffffff8b1a8889 RDX=ffffed10056c6fee RSI=ffffffff8bb17240 RDI=ffffffff81703079 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901cf6d0 R15=0000000000000000 RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032ef6ffc CR3=0000000076a64000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888076a8e070 RCX=ffffffff89338d5d RDX=ffff8880627ec880 RSI=ffffffff89338d67 RDI=0000000000000006 RBP=ffff888023641b00 RSP=ffffc900005f8b78 R8 =0000000000000006 R9 =000000000001c9c3 R10=0000000000000000 R11=ffff88802b73fcc0 R12=000000000001c9c3 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff89338d67 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3895cf CR3=0000000076a64000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000