last executing test programs: 10m43.981535499s ago: executing program 32 (id=175): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x15, 0x0, &(0x7f0000000200)=0x2) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000002c0)=0xcd, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 9m3.077588943s ago: executing program 1 (id=498): sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f00000001c0)=0xc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x20000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c0, 0x0) r5 = signalfd4(r3, &(0x7f0000000240)={[0x5]}, 0x8, 0x80000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x1d, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @alu={0x4, 0x1, 0xb, 0x3, 0x8, 0xffffffffffffffc0, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x8, 0x9, 0x9, 0x8, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x7, 0x9, 0x2, 0x50, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @generic={0xff, 0x5, 0x9, 0xf37e}, @alu={0x7, 0x0, 0x9, 0x2, 0x8, 0x100, 0xffffffffffffffff}, @generic={0x7f, 0x6, 0xe, 0xe, 0x1ff}, @btf_id={0x18, 0x13, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0xb0b}, 0x14}}, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB="2c00000080002000003d", @ANYRESDEC=0x0]) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r10, &(0x7f0000000040)}, 0x20) 9m1.364567163s ago: executing program 1 (id=502): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) 9m0.422734374s ago: executing program 1 (id=506): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f00000001c0)='./file1\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0xc000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x4000000000000005}]}]}, 0x38}}, 0xc000) rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)='./bus\x00') 8m59.464080842s ago: executing program 1 (id=508): r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000400)={0x10, &(0x7f0000000340)={0x0, 0x17, 0x2, "5fa6"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x20, 0x767335f1b71adc8, 0x10, "ac5ddb2ffdb9715b263972593339a208"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r3, 0x3, 0x6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r0, r1, 0x0) 8m54.065822105s ago: executing program 1 (id=524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'nr0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4042000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@newchain={0x50, 0x64, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xb}, {0xd, 0x9}, {0xa, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x8004) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4850) 8m52.572586132s ago: executing program 1 (id=530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) 8m36.328570836s ago: executing program 33 (id=530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) 5m9.243365771s ago: executing program 3 (id=1456): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000018c0)=""/193, 0xc1, 0x0, 0x3, 0x2}}, 0x48) 5m7.943635569s ago: executing program 3 (id=1460): syz_emit_ethernet(0x6d, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000371100fe800000eeffffff00000000000000bbfe8000000000000000000000000000aa"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000090a010400000000000000000100000008000a40000000000900020073797a32000200000900010073797a3000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5m7.542343557s ago: executing program 3 (id=1463): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008004"]) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0xb, r3}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000000008000000a001300000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff00"/21], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r5, 0x5, 0x0, 0x0, @void, @value}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6012, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) 5m4.306072308s ago: executing program 3 (id=1482): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x6, 0xf1, 0x0, 0x0, @str='+\x00'}]}, 0x18}], 0x1}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) 5m2.921402432s ago: executing program 3 (id=1487): r0 = fanotify_init(0x0, 0x1) fanotify_mark(r0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000b00)='\x00') 5m2.41792914s ago: executing program 3 (id=1490): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000034c0)='qnx6\x00', 0x8202, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{0x0, 0x4}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000, 0x10}], 0x0, 0x4}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = io_uring_setup(0x29ea, &(0x7f0000000480)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080), 0x2) 4m46.026533413s ago: executing program 34 (id=1490): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000034c0)='qnx6\x00', 0x8202, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{0x0, 0x4}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000, 0x10}], 0x0, 0x4}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = io_uring_setup(0x29ea, &(0x7f0000000480)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080), 0x2) 2m55.69739546s ago: executing program 7 (id=2000): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1], [0xdc5]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf0a}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x28}}, 0x0) 2m54.432884514s ago: executing program 7 (id=2004): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m53.722286084s ago: executing program 7 (id=2010): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x26, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81"}}}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r1, 0x711}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) read(r0, &(0x7f0000000440)=""/230, 0xe6) 2m53.679153336s ago: executing program 6 (id=2011): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000840)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="401005"], 0x0, 0x0}) 2m53.105449388s ago: executing program 7 (id=2013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x288}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2}, 0x38) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x4c}}, 0x0) 2m53.013246188s ago: executing program 7 (id=2015): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000018c0)=""/193, 0xc1, 0x0, 0x3, 0x2}}, 0x48) 2m48.985948153s ago: executing program 6 (id=2032): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) 2m48.780706993s ago: executing program 7 (id=2034): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x2483, 0x0) r2 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2m48.72352955s ago: executing program 6 (id=2036): socket(0x10, 0x803, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[], &(0x7f0000000100)=""/162, 0x38, 0xa2, 0x100001, 0x3, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000540000006600000000000000160000000000000095000000000000000588c1910a141a2d8442e1e58a03af15a588de9fec2482ddccaa53367aa0c2cce06ec3ed2ddda31648bc25bca8633aed0c5c709c316a3a8304c48dc3f92a8b98212a4b4a12cf734ce2d72215c9dd918c6924f9f834c9f87033e7fd087437c591c4"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 2m48.206175823s ago: executing program 6 (id=2039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x7c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x5609, &(0x7f0000000000)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r5, 0x0, &(0x7f0000000280)=""/222}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 2m46.263637678s ago: executing program 6 (id=2042): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) mount$9p_fd(0x0, 0x0, 0x0, 0x4010, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x88, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x14) 2m45.33010167s ago: executing program 6 (id=2044): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000018c0)=""/193, 0xc1, 0x0, 0x3, 0x2}}, 0x48) 2m32.686869108s ago: executing program 35 (id=2034): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x2483, 0x0) r2 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2m29.237656681s ago: executing program 36 (id=2044): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000018c0)=""/193, 0xc1, 0x0, 0x3, 0x2}}, 0x48) 42.549703991s ago: executing program 9 (id=2484): sched_setscheduler(0x0, 0x2, 0x0) io_setup(0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000fc0)={@local, @broadcast, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x1, 0xd6f, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0xfa, 0x1, 0x0, 0x3, 0x7, 0x5}, 0x1, {0x1000}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x9, 0x1, 0x1, 0x1, 0x6, 0x10}, 0x2, {0x5d1, 0x40, 0x1, 0x15, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x1, "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"}}}}}}, 0x0) 41.675751346s ago: executing program 9 (id=2493): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x331f, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000000)={0xf, 0x400000000000, 0x25, 0x7, 0x0, r0, 0x0, 0x0, 0x40, 0x0, 0x2}]) 39.508813701s ago: executing program 9 (id=2497): syz_emit_ethernet(0x6d, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000371100fe800000eeffffff00000000000000bbfe8000000000000000000000000000aa"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30"], 0xec}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000090a010400000000000000000100000008000a40000000000900020073797a32000200000900010073797a3000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 39.320655755s ago: executing program 9 (id=2500): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 38.632982511s ago: executing program 9 (id=2503): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0205647, &(0x7f0000000240)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) recvmmsg(r5, &(0x7f00000044c0)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004780)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f0000004680)=""/87, 0x57}, {&(0x7f0000004700)=""/60, 0x3c}, {&(0x7f0000004740)=""/63, 0x3f}], 0x8, &(0x7f0000002800)=""/68, 0x44}, 0x8}, {{&(0x7f0000002880)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000002b00)=""/88, 0x58}, 0x2}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/152, 0x98}, {&(0x7f0000003cc0)=""/246, 0xf6}, {&(0x7f0000003dc0)=""/113, 0x71}, {&(0x7f0000003e40)=""/70, 0x46}], 0x5, &(0x7f0000003f40)=""/186, 0xba}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000004180)=""/193, 0xc1}, 0x8}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004280)=""/168, 0xa8}, {&(0x7f0000004340)=""/240, 0xf0}], 0x2, &(0x7f00000000c0)=""/13, 0xd}, 0x1c000}], 0x5, 0x121, &(0x7f0000004600)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000004640)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 36.567585568s ago: executing program 9 (id=2509): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 35.956952367s ago: executing program 37 (id=2509): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.753964046s ago: executing program 5 (id=2591): getpgid(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80201, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[], 0x6c) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000080)="08008edf773c8000", 0xfd) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c0000040000001400"], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000000000/0x400000)=nil, 0x800000}) 10.571635844s ago: executing program 5 (id=2594): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 9.504478633s ago: executing program 5 (id=2600): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 9.249950176s ago: executing program 5 (id=2604): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x24000010, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1000004) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r6 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvfrom$inet(r0, &(0x7f00000002c0)=""/231, 0xfffffffffffffee2, 0x40000102, 0x0, 0x0) 8.174052061s ago: executing program 4 (id=2605): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f000009b000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) 7.426104026s ago: executing program 5 (id=2607): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000030400"/18, @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x4e24, 0x2, 'sed\x00', 0x0, 0xfffffffc}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 7.225539409s ago: executing program 5 (id=2608): socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x5416}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x20000}], 0x2) 6.5697682s ago: executing program 4 (id=2611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cd5c7a8ebae75169808e826e29f3bc164206b77843eb82c33beb3aab8562e5d825d7a095bdd1331dd51758c17d7b1b319524d6bae192739da867722301a612d69e171124f0ec93044498000fb3f7e95ffc6f51b61db7d0b66b0bf3cae1d50fc2a10e9bf5121da44f2ca55511b1359a953a79c3f6c3268933f4753363"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_process_exec\x00', r2}, 0x18) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f0000001e40)={0x9, 0xfff8, 0x10, @multicast, 'wg1\x00'}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) socket$netlink(0x10, 0x3, 0x12) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x4000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000200"/64], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x40) r8 = syz_open_dev$loop(&(0x7f0000000e40), 0x8, 0x800) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000e80)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffe, 0x0, 0x1, 0xe, 0x11, "b031064141db5f5030053ddbc6691ab405e35d799ce6e33b3bb3b3cdb3b0fbfbfc9674a20983907091a797183a4d6e4789fdf20e31d12f2ca5945fae2c8f7a45", "bff44ac186ba0deaf8d58ad7591cdc6d20be98f6a5ce6b4b156c36bdbfd158f0b8a59c850217c8506ddcedeb4758da919980b7b5e04bdc8aacd3165af316593b", "69b84f77d73c6f7d8c329386c03cfd13b445c2c3c0b1fcc4a35f23704b4b4675", [0xfffffffffffffffc, 0xc7]}}) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f0000000000)) 6.223191713s ago: executing program 2 (id=2613): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x600) socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x101ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 6.015372563s ago: executing program 8 (id=2614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'veth1_to_hsr\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x50, 0xfd, 0x0, 0x40000000}, {0x6, 0x5c, 0x0, 0x2}]}) write$ppp(r1, &(0x7f00000001c0), 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) shutdown(r0, 0x1) 5.921910378s ago: executing program 0 (id=2615): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x1000, &(0x7f0000001540)=""/4096}) 5.882927083s ago: executing program 4 (id=2616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000002000010400000000000000000a000000000000000000000014000300"], 0x30}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGABS0(r7, 0x80184540, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r9, 0x0, 0x40000}, 0x18) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000d32a2e04010040"]) socket$packet(0x11, 0x3, 0x300) 5.592250097s ago: executing program 0 (id=2617): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x11b5780f7c494cd7, 0x8000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) pipe(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) 5.489979068s ago: executing program 8 (id=2618): r0 = syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x400, 0x3, 0x4}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r3, 0x80284504, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x40}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x458, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6c}, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x1000}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x558ac59, 'syz0\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) 4.879100066s ago: executing program 0 (id=2619): syz_emit_ethernet(0x6d, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000371100fe800000eeffffff00000000000000bbfe8000000000000000000000000000aa"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30"], 0xec}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000090a010400000000000000000100000008000a40000000000900020073797a32000200000900010073797a3000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4.700317241s ago: executing program 2 (id=2620): socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x5416}}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_LK(r1, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x20000}], 0x2) 4.600995977s ago: executing program 0 (id=2621): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x0) stat(0x0, &(0x7f0000006200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000002e00)=[0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002a80)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0x17e2da3a21c697f1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r9]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000003600)='./file0\x00', &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000036c0), &(0x7f0000003700)=0x0, &(0x7f0000003740)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000640)="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", 0x2000, &(0x7f00000038c0)={&(0x7f0000000300)={0x50, 0x0, 0x3, {0x7, 0x29, 0x0, 0xffffffffa0000200, 0x1, 0x4849, 0x6, 0x0, 0x0, 0x0, 0x1, 0x9}}, &(0x7f0000000380)={0x18, 0x0, 0x5, {0xa}}, &(0x7f00000003c0)={0x18, 0x0, 0x1, {0x4}}, &(0x7f0000000580)={0x18, 0x0, 0x3ff, {0x3}}, &(0x7f00000005c0)={0x18, 0x0, 0x4, {0x8}}, &(0x7f0000002680)={0x28, 0x0, 0x5, {{0x5, 0xb}}}, &(0x7f00000026c0)={0x60, 0x0, 0x4, {{0x7e6, 0x9, 0x6c64, 0x401, 0x10001, 0xffffff45, 0x6}}}, &(0x7f0000002740)={0x18, 0x0, 0x6d5, {0x2}}, &(0x7f0000002780)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f00000027c0)={0x20, 0x0, 0x6, {0x0, 0x10}}, &(0x7f00000028c0)={0x78, 0xffffffffffffffda, 0x8, {0xa, 0x2, 0x0, {0x1, 0x7, 0x4, 0xd, 0x9, 0x307d, 0x81, 0x370, 0x6, 0x1000, 0x3, 0x0, 0xee01, 0x7ff, 0x5}}}, &(0x7f0000002980)={0x90, 0xfffffffffffffff5, 0x2, {0x3, 0x3, 0x4, 0x8000000000000000, 0x14, 0x5, {0x6, 0x4, 0x28, 0x3, 0x77, 0x7, 0x7, 0x3, 0x8, 0xa000, 0x0, 0x0, 0x0, 0xa, 0x2}}}, &(0x7f0000002a40)={0x10, 0x0, 0x624}, &(0x7f0000003980)={0x288, 0x0, 0x10001, [{{0x5, 0x1, 0x3, 0x9, 0xe37b, 0x7, {0x2, 0xfffffffffffffff9, 0x5, 0x8, 0xad6, 0x1, 0x7fff, 0x4, 0xfffffff7, 0xf3d9faa8727ce64f, 0x5, 0x0, 0x0, 0xfffffffb, 0x8}}, {0x5, 0xf, 0x1, 0x800, 'c'}}, {{0x6, 0x2, 0x2, 0x135d, 0x10000, 0x2, {0x4, 0x400, 0x100000000, 0x3, 0x40, 0x2, 0x100, 0x6, 0x1ff, 0x8000, 0x5, 0x0, r4, 0x7, 0x4}}, {0x2, 0xe60d, 0xf, 0x401, '!\x9b\xae!T\x9c\xe4\xac\x02\x00\x00T\x9d Q'}}, {{0x1, 0x2, 0x8, 0x9, 0x5, 0x3, {0x1, 0x9, 0x4, 0x5, 0x1000, 0x5, 0x2, 0x5, 0x7ff, 0xc000, 0x9, r5, r6, 0x58, 0xe}}, {0x1, 0x3ff, 0x0, 0x9}}, {{0x5, 0x1, 0x6, 0xffffffffffffffff, 0x800, 0x5, {0x2, 0x7, 0x3, 0x0, 0x5, 0x81, 0x9, 0xfffffe6e, 0x8001, 0xa000, 0x6, r7, r9, 0x9, 0x7fff}}, {0x3, 0x7, 0x0, 0x2}}]}, &(0x7f0000003500)={0xa0, 0xffffffffffffffd1, 0x2, {{0x5, 0x0, 0x9, 0xffffffffffff11c2, 0x2, 0x5, {0x0, 0x3, 0x4, 0x8001, 0x4, 0x9, 0x3, 0x3, 0xb, 0xc000, 0x2, 0x0, r11, 0x6678, 0x8}}, {0x0, 0x18}}}, &(0x7f00000035c0)={0x20, 0x0, 0x7, {0x10, 0x0, 0x6, 0x9}}, &(0x7f0000003780)={0x130, 0x0, 0x3, {0x3, 0x4000000, 0x0, '\x00', {0x100, 0x2, 0xfffffffffffffffb, 0x9, r12, r13, 0x8000, '\x00', 0x100000001, 0x7fe4, 0x3c, 0x0, {0x2, 0xfffffffa}, {0x9, 0x8}, {0x0, 0xffffff2b}, {0x1}, 0x9, 0xfff, 0x8, 0x4}}}}) getuid() lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000002800)=ANY=[], 0x4c, 0x0) 4.341837515s ago: executing program 4 (id=2622): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x18, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x4, 0x1a, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x0) 2.136941452s ago: executing program 2 (id=2623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='contention_begin\x00', r2}, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r1, 0x5170c560dce29b81, 0x8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) 1.936530963s ago: executing program 0 (id=2624): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee342", 0x64}, {&(0x7f0000000800)="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", 0x1bb}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573c6584c4afc55b3ff0a93509fe41aa0e8892c95ccad3e0435071aff78177e946cf231de4f389b695c5f49772b8abb6b88226fd4c2b0c57d47b98f2aa1b2ec38c4a97f3783023f04cdb380", 0x10f}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.93593928s ago: executing program 8 (id=2625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cd5c7a8ebae75169808e826e29f3bc164206b77843eb82c33beb3aab8562e5d825d7a095bdd1331dd51758c17d7b1b319524d6bae192739da867722301a612d69e171124f0ec93044498000fb3f7e95ffc6f51b61db7d0b66b0bf3cae1d50fc2a10e9bf5121da44f2ca55511b1359a953a79c3f6c3268933f4753363"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_process_exec\x00', r2}, 0x18) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f0000001e40)={0x9, 0xfff8, 0x10, @multicast, 'wg1\x00'}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) socket$netlink(0x10, 0x3, 0x12) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x4000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000200"/64], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x40) r8 = syz_open_dev$loop(&(0x7f0000000e40), 0x8, 0x800) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000e80)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffe, 0x0, 0x1, 0xe, 0x11, "b031064141db5f5030053ddbc6691ab405e35d799ce6e33b3bb3b3cdb3b0fbfbfc9674a20983907091a797183a4d6e4789fdf20e31d12f2ca5945fae2c8f7a45", "bff44ac186ba0deaf8d58ad7591cdc6d20be98f6a5ce6b4b156c36bdbfd158f0b8a59c850217c8506ddcedeb4758da919980b7b5e04bdc8aacd3165af316593b", "69b84f77d73c6f7d8c329386c03cfd13b445c2c3c0b1fcc4a35f23704b4b4675", [0xfffffffffffffffc, 0xc7]}}) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f0000000000)) 1.343756725s ago: executing program 2 (id=2626): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) chdir(&(0x7f0000000140)='./bus\x00') 1.05901785s ago: executing program 0 (id=2627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000800)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000001800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x102b}], 0x0, 0x0, 0x0}) 1.003409075s ago: executing program 8 (id=2628): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x11b5780f7c494cd7, 0x8000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) pipe(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) 357.708758ms ago: executing program 4 (id=2629): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) munlockall() fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x2}) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @rand_addr=0x64010102}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="010003007f00000100000000000000000000090000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 274.641584ms ago: executing program 8 (id=2630): syz_emit_ethernet(0x6d, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000371100fe800000eeffffff00000000000000bbfe8000000000000000000000000000aa"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30"], 0xec}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000090a010400000000000000000100000008000a40000000000900020073797a32000200000900010073797a3000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 273.520437ms ago: executing program 2 (id=2631): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$xdp(0x2c, 0x3, 0x0) 115.846567ms ago: executing program 8 (id=2632): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 34.012302ms ago: executing program 2 (id=2633): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r4}, 0x10) 0s ago: executing program 4 (id=2634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, 0x0, 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x1}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b8515cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4ea708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660f388106f34998460f1a6086da3f363e673e460fc77ebef2400fd6ee0f22c03e0fc75a8566470f3880649d050f3235004000000f30430f92c6", 0x3a}], 0x1, 0x44, 0x0, 0x0) kernel console output (not intermixed with test programs): yz [ 298.901548][ T837] usb 4-1: config 0 descriptor?? [ 298.942780][ T8716] veth0_vlan: entered promiscuous mode [ 298.959746][ T8716] veth1_vlan: entered promiscuous mode [ 298.989347][ T8716] veth0_macvtap: entered promiscuous mode [ 299.000984][ T8716] veth1_macvtap: entered promiscuous mode [ 299.036892][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.050416][ T9074] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 299.117710][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.152512][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.190753][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.236540][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.278186][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.349842][ T837] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 299.391992][ T837] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 299.463620][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.493015][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.506940][ T8716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.607102][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.470995][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.556417][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.566338][ C0] powermate: config urb returned -71 [ 300.584577][ C0] powermate: config urb returned -71 [ 300.591404][ C0] powermate: config urb returned -71 [ 300.597970][ C0] powermate: config urb returned -71 [ 300.604696][ T837] usb 4-1: USB disconnect, device number 10 [ 300.611847][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 300.657261][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.743321][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.837026][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.852282][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.864975][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.878109][ T8716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.896916][ T8716] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.907742][ T8716] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.918474][ T8716] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.929348][ T8716] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.771591][ T9151] netlink: 'syz.2.716': attribute type 21 has an invalid length. [ 301.821176][ T9151] netlink: 132 bytes leftover after parsing attributes in process `syz.2.716'. [ 302.005979][ T9151] siw: device registration error -23 [ 302.031461][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.049322][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.070509][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.090795][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.256031][ T5881] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 302.457637][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 303.304579][ T5881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.359561][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 303.402284][ T5881] usb 5-1: can't read configurations, error -71 [ 304.035859][ T9195] binder: BINDER_SET_CONTEXT_MGR already set [ 304.089432][ T9195] binder: 9194:9195 ioctl 4018620d 20000040 returned -16 [ 304.689746][ T9216] IPVS: length: 46 != 8 [ 305.740087][ T9225] overlayfs: failed to clone upperpath [ 307.270846][ T9249] binder: BINDER_SET_CONTEXT_MGR already set [ 307.278305][ T9249] binder: 9248:9249 ioctl 4018620d 20000040 returned -16 [ 308.214563][ T9267] netlink: 64 bytes leftover after parsing attributes in process `syz.4.743'. [ 309.390379][ T9288] binder: BINDER_SET_CONTEXT_MGR already set [ 309.452722][ T9288] binder: 9285:9288 ioctl 4018620d 20000040 returned -16 [ 310.807228][ T9312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.758'. [ 311.305930][ T9331] sctp: [Deprecated]: syz.5.763 (pid 9331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.305930][ T9331] Use struct sctp_sack_info instead [ 313.490358][ T9355] lo speed is unknown, defaulting to 1000 [ 313.551727][ T9370] loop2: detected capacity change from 0 to 7 [ 313.613440][ T7675] Dev loop2: unable to read RDB block 7 [ 313.660604][ T7675] loop2: unable to read partition table [ 313.667569][ T7675] loop2: partition table beyond EOD, truncated [ 313.699819][ T9370] Dev loop2: unable to read RDB block 7 [ 313.719301][ T9370] loop2: unable to read partition table [ 313.794074][ T9370] loop2: partition table beyond EOD, truncated [ 313.826434][ T9370] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 315.168350][ T9409] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 315.290464][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 315.290480][ T29] audit: type=1804 audit(1736730053.126:150): pid=9394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.779" name="/newroot/166/file1" dev="fuse" ino=1 res=1 errno=0 [ 315.388413][ T29] audit: type=1800 audit(1736730053.126:151): pid=9394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.779" name="/" dev="fuse" ino=1 res=0 errno=0 [ 316.089579][ T9355] geneve0: entered promiscuous mode [ 316.157073][ T9355] geneve0: entered allmulticast mode [ 316.663432][ T9433] loop2: detected capacity change from 0 to 7 [ 316.678217][ T9433] Dev loop2: unable to read RDB block 7 [ 316.685044][ T9433] loop2: unable to read partition table [ 316.761146][ T9433] loop2: partition table beyond EOD, truncated [ 316.922259][ T9433] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 318.116053][ T9472] syz.2.803: attempt to access beyond end of device [ 318.116053][ T9472] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 318.156089][ T9472] EXT4-fs (nbd2): unable to read superblock [ 318.482140][ T9477] binder: BINDER_SET_CONTEXT_MGR already set [ 318.489512][ T9477] binder: 9476:9477 ioctl 4018620d 20000040 returned -16 [ 318.618820][ T9485] loop2: detected capacity change from 0 to 7 [ 318.631378][ T9485] Dev loop2: unable to read RDB block 7 [ 318.642982][ T9485] loop2: unable to read partition table [ 318.649953][ T9485] loop2: partition table beyond EOD, truncated [ 318.782141][ T9485] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 319.058457][ T9492] xt_l2tp: invalid flags combination: c [ 320.289020][ T9509] netlink: 'syz.6.816': attribute type 4 has an invalid length. [ 320.312239][ T9509] netlink: 'syz.6.816': attribute type 4 has an invalid length. [ 320.989075][ T9517] binder: BINDER_SET_CONTEXT_MGR already set [ 321.045721][ T9517] binder: 9516:9517 ioctl 4018620d 20000040 returned -16 [ 322.566306][ T9538] xt_connbytes: Forcing CT accounting to be enabled [ 322.577031][ T9538] Cannot find add_set index 0 as target [ 322.722893][ T9537] loop2: detected capacity change from 0 to 7 [ 322.739738][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.881286][ T9537] Dev loop2: unable to read RDB block 7 [ 322.926617][ T9537] loop2: unable to read partition table [ 323.049671][ T9537] loop2: partition table beyond EOD, truncated [ 323.384608][ T9537] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 324.404720][ T5839] Bluetooth: hci3: command 0x041b tx timeout [ 327.561640][ T9607] loop2: detected capacity change from 0 to 7 [ 327.612144][ T9607] Dev loop2: unable to read RDB block 7 [ 327.641888][ T9607] loop2: unable to read partition table [ 327.822407][ T9607] loop2: partition table beyond EOD, truncated [ 327.830363][ T9607] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 328.648857][ T29] audit: type=1326 audit(1736730065.708:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 328.859166][ T29] audit: type=1326 audit(1736730065.754:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 329.085849][ T9633] x_tables: ip_tables: osf match: only valid for protocol 6 [ 329.810316][ T29] audit: type=1326 audit(1736730065.754:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 329.992891][ T29] audit: type=1326 audit(1736730065.754:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 330.140283][ T9640] loop2: detected capacity change from 0 to 7 [ 330.148652][ T29] audit: type=1326 audit(1736730065.754:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 330.176509][ T9640] Dev loop2: unable to read RDB block 7 [ 331.336956][ T9640] loop2: unable to read partition table [ 331.344396][ T9640] loop2: partition table beyond EOD, truncated [ 331.354434][ T9640] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 331.535577][ T29] audit: type=1326 audit(1736730065.754:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 331.565679][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 331.632764][ T29] audit: type=1326 audit(1736730065.754:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 331.744824][ T29] audit: type=1326 audit(1736730065.754:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 331.858793][ T29] audit: type=1326 audit(1736730065.754:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 331.859562][ T9650] xt_connbytes: Forcing CT accounting to be enabled [ 331.894040][ T9650] Cannot find add_set index 0 as target [ 331.958828][ T29] audit: type=1326 audit(1736730065.754:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 332.786552][ T9675] trusted_key: syz.2.866 sent an empty control message without MSG_MORE. [ 332.859520][ T9678] netlink: 'syz.4.865': attribute type 2 has an invalid length. [ 332.870409][ T9678] netlink: 'syz.4.865': attribute type 1 has an invalid length. [ 332.880095][ T9678] netlink: 132 bytes leftover after parsing attributes in process `syz.4.865'. [ 333.789098][ T9696] netlink: 24 bytes leftover after parsing attributes in process `syz.6.872'. [ 334.947478][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 334.947496][ T29] audit: type=1326 audit(1736730071.601:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4777385d29 code=0x7ffc0000 [ 334.971267][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.877'. [ 335.025020][ T9717] netlink: 108 bytes leftover after parsing attributes in process `syz.3.877'. [ 335.200522][ T9719] xt_connbytes: Forcing CT accounting to be enabled [ 335.213627][ T9719] Cannot find del_set index 1 as target [ 335.540255][ T29] audit: type=1326 audit(1736730071.610:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4777384690 code=0x7ffc0000 [ 335.568435][ T29] audit: type=1326 audit(1736730071.610:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4777387557 code=0x7ffc0000 [ 335.596376][ T29] audit: type=1326 audit(1736730071.610:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4777385d29 code=0x7ffc0000 [ 335.623332][ T29] audit: type=1326 audit(1736730071.610:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4777387557 code=0x7ffc0000 [ 335.650755][ T29] audit: type=1326 audit(1736730071.610:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f477738498a code=0x7ffc0000 [ 335.677871][ T29] audit: type=1326 audit(1736730071.610:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4777385d29 code=0x7ffc0000 [ 335.704598][ T29] audit: type=1326 audit(1736730071.610:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4777385d29 code=0x7ffc0000 [ 335.731290][ T29] audit: type=1326 audit(1736730071.610:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4777387bbc code=0x7ffc0000 [ 335.758334][ T29] audit: type=1326 audit(1736730071.610:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4777387af4 code=0x7ffc0000 [ 339.272829][ T9770] ceph: No mds server is up or the cluster is laggy [ 339.337004][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 339.358544][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 339.449685][ T5848] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 344.633962][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.910'. [ 344.993991][ T9865] misc userio: The device must be registered before sending interrupts [ 345.155241][ T5884] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 345.946516][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 347.002105][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.014550][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.433526][ T5884] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 347.446962][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.463252][ T5884] usb 3-1: Product: syz [ 347.678500][ T9892] netlink: get zone limit has 8 unknown bytes [ 348.098166][ T5884] usb 3-1: Manufacturer: syz [ 348.103809][ T5884] usb 3-1: SerialNumber: syz [ 348.143668][ T9894] binder: BINDER_SET_CONTEXT_MGR already set [ 348.162324][ T5884] usb 3-1: config 0 descriptor?? [ 348.169562][ T9894] binder: 9893:9894 ioctl 4018620d 20000040 returned -16 [ 348.196331][ T5884] usb 3-1: can't set config #0, error -71 [ 348.260386][ T5884] usb 3-1: USB disconnect, device number 11 [ 348.358083][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 349.940973][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 349.950435][ T837] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 350.981582][ T5883] usb 7-1: Using ep0 maxpacket: 8 [ 350.988395][ T837] usb 3-1: Using ep0 maxpacket: 8 [ 350.996923][ T837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.010336][ T837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.034332][ T837] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 351.045639][ T5883] usb 7-1: unable to get BOS descriptor or descriptor too short [ 351.057442][ T837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.067536][ T5883] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 351.079221][ T837] usb 3-1: config 0 descriptor?? [ 351.085558][ T5883] usb 7-1: can't read configurations, error -71 [ 351.150462][ T9942] binder: BINDER_SET_CONTEXT_MGR already set [ 351.420016][ T9942] binder: 9940:9942 ioctl 4018620d 20000040 returned -16 [ 351.539542][ T837] usbhid 3-1:0.0: can't add hid device: -71 [ 351.558133][ T837] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 351.618484][ T837] usb 3-1: USB disconnect, device number 12 [ 351.751477][ T9967] netlink: get zone limit has 8 unknown bytes [ 352.225035][ T9982] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 354.886380][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'. [ 355.288502][T10016] binder: BINDER_SET_CONTEXT_MGR already set [ 355.327142][T10016] binder: 10015:10016 ioctl 4018620d 20000040 returned -16 [ 356.767496][T10044] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 358.933232][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.6.965'. [ 358.958964][T10059] netlink: 108 bytes leftover after parsing attributes in process `syz.6.965'. [ 359.938014][T10071] misc userio: No port type given on /dev/userio [ 359.943332][T10073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.946517][T10071] misc userio: The device must be registered before sending interrupts [ 360.767233][T10090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.975'. [ 361.724672][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 361.724689][ T29] audit: type=1326 audit(1736730096.651:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.6.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe26d85d29 code=0x7ffc0000 [ 361.787449][ T29] audit: type=1326 audit(1736730096.688:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.6.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe26d85d29 code=0x7ffc0000 [ 361.822565][T10107] netlink: 24 bytes leftover after parsing attributes in process `syz.6.983'. [ 362.079145][T10107] netlink: 108 bytes leftover after parsing attributes in process `syz.6.983'. [ 362.098867][ T29] audit: type=1326 audit(1736730096.697:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.6.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe26d84690 code=0x7ffc0000 [ 363.164099][ T29] audit: type=1326 audit(1736730096.697:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.6.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efe26d87557 code=0x7ffc0000 [ 363.607374][T10117] xt_l2tp: invalid flags combination: c [ 364.890775][ T29] audit: type=1326 audit(1736730096.697:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.6.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe26d85d29 code=0x7ffc0000 [ 364.918322][ T29] audit: type=1326 audit(1736730096.697:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.6.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efe26d87557 code=0x7ffc0000 [ 364.990388][ T29] audit: type=1326 audit(1736730096.697:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.6.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efe26d8498a code=0x7ffc0000 [ 365.116319][T10122] misc userio: No port type given on /dev/userio [ 365.127082][ T29] audit: type=1326 audit(1736730096.697:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.6.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe26d85d29 code=0x7ffc0000 [ 365.339327][T10122] misc userio: The device must be registered before sending interrupts [ 365.351950][ T29] audit: type=1326 audit(1736730096.697:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.6.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe26d85d29 code=0x7ffc0000 [ 365.539719][T10129] Cannot find del_set index 1 as target [ 365.690712][T10134] netlink: 20 bytes leftover after parsing attributes in process `syz.5.991'. [ 365.717386][ T29] audit: type=1326 audit(1736730096.707:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.6.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efe26d87bbc code=0x7ffc0000 [ 366.590173][T10154] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1000'. [ 366.607586][T10154] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1000'. [ 367.234663][T10160] fuse: Bad value for 'fd' [ 367.278429][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 367.278444][ T29] audit: type=1800 audit(1736730101.851:284): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1002" name="file1" dev="tmpfs" ino=887 res=0 errno=0 [ 367.537711][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 368.789107][T10190] xt_connbytes: Forcing CT accounting to be enabled [ 368.798197][T10190] Cannot find del_set index 1 as target [ 369.216588][ T29] audit: type=1326 audit(1736730103.657:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 369.243649][ T29] audit: type=1326 audit(1736730103.657:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e66d84690 code=0x7ffc0000 [ 369.270817][ T29] audit: type=1326 audit(1736730103.657:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2e66d87557 code=0x7ffc0000 [ 369.298553][ T29] audit: type=1326 audit(1736730103.657:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 369.325913][ T29] audit: type=1326 audit(1736730103.657:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2e66d87557 code=0x7ffc0000 [ 369.353060][ T29] audit: type=1326 audit(1736730103.657:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e66d8498a code=0x7ffc0000 [ 369.379859][ T29] audit: type=1326 audit(1736730103.657:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 369.406847][ T29] audit: type=1326 audit(1736730103.657:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66d85d29 code=0x7ffc0000 [ 369.462542][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1015'. [ 369.475344][ T29] audit: type=1326 audit(1736730103.891:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2e66d87bbc code=0x7ffc0000 [ 369.511765][T10195] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1015'. [ 369.758939][T10207] binder: BINDER_SET_CONTEXT_MGR already set [ 369.766578][T10207] binder: 10206:10207 ioctl 4018620d 20000040 returned -16 [ 371.711046][T10233] insert transport fail, errno -7 [ 372.238997][T10237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1029'. [ 372.249875][T10237] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1029'. [ 372.408074][T10244] lo speed is unknown, defaulting to 1000 [ 373.389464][T10257] netlink: 'syz.2.1033': attribute type 9 has an invalid length. [ 373.454716][T10260] binder: BINDER_SET_CONTEXT_MGR already set [ 373.486678][T10260] binder: 10259:10260 ioctl 4018620d 20000040 returned -16 [ 376.301305][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 376.301323][ T29] audit: type=1326 audit(1736730110.289:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff734385d29 code=0x7ffc0000 [ 376.337133][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 376.379253][ T29] audit: type=1326 audit(1736730110.289:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff734385d29 code=0x7ffc0000 [ 376.451400][ T29] audit: type=1326 audit(1736730110.289:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff734384690 code=0x7ffc0000 [ 376.511481][ T29] audit: type=1326 audit(1736730110.289:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff734385d29 code=0x7ffc0000 [ 376.611096][ T29] audit: type=1326 audit(1736730110.298:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff734387c47 code=0x7ffc0000 [ 376.917622][ T29] audit: type=1326 audit(1736730110.298:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff734387bbc code=0x7ffc0000 [ 376.944459][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.492807][ T29] audit: type=1326 audit(1736730110.298:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff734387af4 code=0x7ffc0000 [ 377.519739][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.766733][ T29] audit: type=1326 audit(1736730110.298:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff73438498a code=0x7ffc0000 [ 377.895413][ T29] audit: type=1326 audit(1736730110.298:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff734385d29 code=0x7ffc0000 [ 378.143130][ T29] audit: type=1326 audit(1736730110.298:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff734385d29 code=0x7ffc0000 [ 381.559707][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1062'. [ 381.573173][T10345] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1062'. [ 381.609251][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 381.691382][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 381.691399][ T29] audit: type=1326 audit(1736730115.331:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10344 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4777385d29 code=0x7ffc0000 [ 381.805510][ T29] audit: type=1326 audit(1736730115.331:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10344 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4777385d29 code=0x7ffc0000 [ 383.332894][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 385.759694][T10402] xt_l2tp: invalid flags combination: c [ 386.493021][T10411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.112771][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1085'. [ 388.233376][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.232360][T10450] xt_l2tp: invalid flags combination: c [ 392.617579][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1108'. [ 393.413246][T10493] fuse: Bad value for 'fd' [ 393.459626][ T29] audit: type=1800 audit(1736730126.312:377): pid=10493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1109" name="file1" dev="tmpfs" ino=1019 res=0 errno=0 [ 394.784807][T10514] xt_connbytes: Forcing CT accounting to be enabled [ 394.794890][T10514] Cannot find add_set index 0 as target [ 395.103285][T10517] loop2: detected capacity change from 0 to 7 [ 395.117667][T10517] Dev loop2: unable to read RDB block 7 [ 395.125259][T10517] loop2: AHDI p2 p3 p4 [ 395.130307][T10517] loop2: partition table partially beyond EOD, truncated [ 395.139002][T10517] loop2: p2 start 131072 is beyond EOD, truncated [ 395.147412][T10517] loop2: p3 size 150995200 extends beyond EOD, truncated [ 399.969717][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 408.619438][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 409.415146][T10660] overlayfs: failed to clone upperpath [ 409.568464][T10652] xt_l2tp: invalid flags combination: c [ 410.771460][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 411.405221][T10692] binder: 10690:10692 ioctl 4018620d 0 returned -22 [ 411.541571][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'. [ 411.865397][T10704] xt_l2tp: invalid flags combination: c [ 411.880782][T10713] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 413.144393][T10731] binder: 10730:10731 ioctl 4018620d 0 returned -22 [ 413.710006][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 414.408246][ T29] audit: type=1326 audit(1736730145.928:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4c185d29 code=0x7ffc0000 [ 414.443341][T10763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1195'. [ 414.454612][T10763] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1195'. [ 414.467359][ T29] audit: type=1326 audit(1736730145.965:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a4c184690 code=0x7ffc0000 [ 414.523805][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 414.614792][ T29] audit: type=1326 audit(1736730145.965:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8a4c187557 code=0x7ffc0000 [ 414.861706][ T29] audit: type=1326 audit(1736730145.965:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a4c185d29 code=0x7ffc0000 [ 415.114467][ T29] audit: type=1326 audit(1736730145.974:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8a4c187557 code=0x7ffc0000 [ 415.142208][ T29] audit: type=1326 audit(1736730145.974:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8a4c18498a code=0x7ffc0000 [ 415.169333][ T29] audit: type=1326 audit(1736730145.974:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4c185d29 code=0x7ffc0000 [ 415.196384][ T29] audit: type=1326 audit(1736730145.974:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4c185d29 code=0x7ffc0000 [ 415.213168][T10771] binder: 10770:10771 ioctl 4018620d 0 returned -22 [ 415.223384][ T29] audit: type=1326 audit(1736730145.974:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8a4c187bbc code=0x7ffc0000 [ 415.259104][ T29] audit: type=1326 audit(1736730145.974:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8a4c187af4 code=0x7ffc0000 [ 415.294111][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1199'. [ 417.281532][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1209'. [ 418.077781][T10822] binder: BINDER_SET_CONTEXT_MGR already set [ 418.086239][T10822] binder: 10821:10822 ioctl 4018620d 20000040 returned -16 [ 418.436817][T10837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1217'. [ 418.447757][T10837] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1217'. [ 418.801228][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'. [ 420.963693][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 422.047008][T10902] xt_l2tp: invalid flags combination: c [ 422.386746][T10905] binder: BINDER_SET_CONTEXT_MGR already set [ 422.402970][T10905] binder: 10904:10905 ioctl 4018620d 20000040 returned -16 [ 423.375198][T10930] overlayfs: failed to clone upperpath [ 423.654602][T10942] binder: 10941:10942 ioctl c0306201 0 returned -14 [ 423.833479][T10955] loop2: detected capacity change from 0 to 7 [ 423.843947][T10955] Dev loop2: unable to read RDB block 7 [ 423.856860][T10955] loop2: AHDI p2 p3 p4 [ 423.863645][T10955] loop2: partition table partially beyond EOD, truncated [ 423.879628][T10955] loop2: p2 start 131072 is beyond EOD, truncated [ 423.889051][T10955] loop2: p3 size 150995200 extends beyond EOD, truncated [ 424.012951][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 424.906282][T10976] xt_l2tp: invalid flags combination: c [ 427.636077][T10989] loop2: detected capacity change from 0 to 7 [ 427.712852][T10989] Dev loop2: unable to read RDB block 7 [ 427.731465][T10989] loop2: AHDI p2 p3 p4 [ 427.743983][T10989] loop2: partition table partially beyond EOD, truncated [ 427.773480][T10989] loop2: p2 start 131072 is beyond EOD, truncated [ 427.803362][T10989] loop2: p3 size 150995200 extends beyond EOD, truncated [ 427.895619][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'. [ 428.616945][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 428.616964][ T29] audit: type=1800 audit(1736730159.210:423): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1270" name="file1" dev="tmpfs" ino=1477 res=0 errno=0 [ 429.559057][T11026] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1283'. [ 430.110318][ T29] audit: type=1326 audit(1736730160.613:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4c185d29 code=0x7ffc0000 [ 430.110366][ T29] audit: type=1326 audit(1736730160.613:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a4c184690 code=0x7ffc0000 [ 430.110397][ T29] audit: type=1326 audit(1736730160.613:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8a4c187557 code=0x7ffc0000 [ 430.110427][ T29] audit: type=1326 audit(1736730160.613:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a4c185d29 code=0x7ffc0000 [ 430.110458][ T29] audit: type=1326 audit(1736730160.613:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8a4c187557 code=0x7ffc0000 [ 430.110489][ T29] audit: type=1326 audit(1736730160.613:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8a4c18498a code=0x7ffc0000 [ 430.110517][ T29] audit: type=1326 audit(1736730160.613:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4c185d29 code=0x7ffc0000 [ 430.110542][ T29] audit: type=1326 audit(1736730160.613:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4c185d29 code=0x7ffc0000 [ 430.110571][ T29] audit: type=1326 audit(1736730160.613:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a4c185d29 code=0x7ffc0000 [ 431.095527][T11053] xt_l2tp: invalid flags combination: c [ 432.207275][T11061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1297'. [ 432.445315][T11073] overlayfs: failed to clone upperpath [ 432.470308][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 433.725749][T11095] loop2: detected capacity change from 0 to 7 [ 433.870110][T11097] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1311'. [ 434.117908][T11095] Dev loop2: unable to read RDB block 7 [ 434.131022][T11095] loop2: AHDI p2 p3 p4 [ 434.136586][T11095] loop2: partition table partially beyond EOD, truncated [ 434.145469][T11095] loop2: p2 start 131072 is beyond EOD, truncated [ 434.153314][T11095] loop2: p3 size 150995200 extends beyond EOD, truncated [ 434.666911][T11115] binder: 11114:11115 ioctl 4018620d 0 returned -22 [ 434.765760][T11116] fuse: Bad value for 'fd' [ 435.581806][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 436.542702][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 436.542719][ T29] audit: type=1800 audit(1736730166.637:458): pid=11135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1323" name="file1" dev="tmpfs" ino=564 res=0 errno=0 [ 436.612184][T11133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1322'. [ 436.909122][T11149] loop2: detected capacity change from 0 to 7 [ 436.956455][T11149] Dev loop2: unable to read RDB block 7 [ 436.963223][T11149] loop2: AHDI p2 p3 p4 [ 436.968330][T11149] loop2: partition table partially beyond EOD, truncated [ 436.981384][T11149] loop2: p2 start 131072 is beyond EOD, truncated [ 436.995286][T11149] loop2: p3 size 150995200 extends beyond EOD, truncated [ 437.245787][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1330'. [ 438.137497][T11169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1336'. [ 439.041337][T11184] binder: 11183:11184 ioctl 4018620d 0 returned -22 [ 439.351976][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 440.449411][T11197] loop2: detected capacity change from 0 to 7 [ 440.504994][T11197] Dev loop2: unable to read RDB block 7 [ 440.545579][T11197] loop2: AHDI p2 p3 p4 [ 440.575539][T11203] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1348'. [ 440.589069][T11197] loop2: partition table partially beyond EOD, truncated [ 440.622469][T11197] loop2: p2 start 131072 is beyond EOD, truncated [ 440.641842][T11197] loop2: p3 size 150995200 extends beyond EOD, truncated [ 441.487990][T11223] binder: 11219:11223 ioctl c0306201 0 returned -14 [ 441.591849][T11227] xt_l2tp: invalid flags combination: c [ 442.834106][T11237] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1359'. [ 443.599137][T11245] loop2: detected capacity change from 0 to 7 [ 443.620515][T11245] Dev loop2: unable to read RDB block 7 [ 443.641569][T11245] loop2: AHDI p2 p3 p4 [ 443.657858][T11245] loop2: partition table partially beyond EOD, truncated [ 443.669446][T11245] loop2: p2 start 131072 is beyond EOD, truncated [ 443.678620][T11245] loop2: p3 size 150995200 extends beyond EOD, truncated [ 444.160435][T11260] binder: 11259:11260 ioctl c0306201 0 returned -14 [ 444.381270][T11265] xt_l2tp: invalid flags combination: c [ 445.155392][T11271] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1372'. [ 448.015214][T11308] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1385'. [ 448.366582][T11316] fuse: Bad value for 'fd' [ 451.780328][T11343] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1396'. [ 451.872336][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 454.439630][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.477346][ T29] audit: type=1800 audit(1736730183.400:459): pid=11366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1404" name="file1" dev="tmpfs" ino=1409 res=0 errno=0 [ 455.688321][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 455.727445][T11382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1410'. [ 456.277900][T11385] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 456.312306][T11385] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 456.322341][T11387] loop2: detected capacity change from 0 to 7 [ 456.357501][T11387] Dev loop2: unable to read RDB block 7 [ 456.364608][T11387] loop2: AHDI p2 p3 p4 [ 456.377021][T11387] loop2: partition table partially beyond EOD, truncated [ 456.386721][T11387] loop2: p2 start 131072 is beyond EOD, truncated [ 456.433848][T11387] loop2: p3 size 150995200 extends beyond EOD, truncated [ 459.782521][T11423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1423'. [ 459.821101][T11425] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 459.884418][T11425] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 460.213169][T11432] loop2: detected capacity change from 0 to 7 [ 460.244979][T11432] Dev loop2: unable to read RDB block 7 [ 460.271006][T11432] loop2: AHDI p2 p3 p4 [ 460.291067][T11432] loop2: partition table partially beyond EOD, truncated [ 460.347835][T11432] loop2: p2 start 131072 is beyond EOD, truncated [ 460.368564][T11432] loop2: p3 size 150995200 extends beyond EOD, truncated [ 462.690745][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 464.981886][T11471] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 465.023656][T11471] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 466.126556][T11485] loop2: detected capacity change from 0 to 7 [ 466.151308][T11485] Dev loop2: unable to read RDB block 7 [ 466.159679][T11485] loop2: unable to read partition table [ 466.183916][T11485] loop2: partition table beyond EOD, truncated [ 466.228498][T11485] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 467.568774][T11511] overlayfs: failed to clone upperpath [ 470.086852][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1458'. [ 470.822857][T11535] loop2: detected capacity change from 0 to 7 [ 470.844858][T11535] Dev loop2: unable to read RDB block 7 [ 470.884094][T11535] loop2: unable to read partition table [ 470.891395][T11535] loop2: partition table beyond EOD, truncated [ 470.899568][T11535] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 471.142869][T11546] overlayfs: failed to clone upperpath [ 472.640678][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1469'. [ 473.390737][T11570] loop2: detected capacity change from 0 to 7 [ 473.408949][T11570] Dev loop2: unable to read RDB block 7 [ 473.439516][T11570] loop2: unable to read partition table [ 473.447947][T11570] loop2: partition table beyond EOD, truncated [ 473.456182][T11570] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 473.890401][ T29] audit: type=1800 audit(1736730201.574:460): pid=11580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1478" name="file1" dev="tmpfs" ino=1526 res=0 errno=0 [ 474.338655][T11591] Cannot find add_set index 0 as target [ 474.430255][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 477.821442][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1497'. [ 479.051715][T11651] trusted_key: encrypted_key: keylen parameter is missing [ 480.324266][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 484.971136][T11700] Cannot find del_set index 1 as target [ 487.351862][T11724] xt_l2tp: invalid flags combination: c [ 488.592438][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1525'. [ 489.987828][T11753] overlayfs: failed to clone upperpath [ 490.110651][ T29] audit: type=1800 audit(1736730216.747:461): pid=11755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1532" name="file1" dev="tmpfs" ino=1621 res=0 errno=0 [ 491.335010][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1538'. [ 492.948104][T11790] binder: BINDER_SET_CONTEXT_MGR already set [ 492.955871][T11790] binder: 11789:11790 ioctl 4018620d 20000040 returned -16 [ 493.197983][T11797] binder: 11796:11797 ioctl c0306201 0 returned -14 [ 493.354956][T11803] xt_l2tp: invalid flags combination: c [ 494.435334][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 494.663174][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 494.675625][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 494.687804][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 494.721174][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 494.771268][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 494.865583][ T8914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.951571][T11801] lo speed is unknown, defaulting to 1000 [ 495.302645][ T8914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.704950][ T8914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.956668][ T8914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.145100][T11801] chnl_net:caif_netlink_parms(): no params data found [ 496.319036][T11835] lo speed is unknown, defaulting to 1000 [ 496.991940][ T8914] bridge_slave_1: left allmulticast mode [ 497.005087][ T8914] bridge_slave_1: left promiscuous mode [ 497.012319][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.023511][ T8914] bridge_slave_0: left allmulticast mode [ 497.030535][ T8914] bridge_slave_0: left promiscuous mode [ 497.038047][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.141839][ T5839] Bluetooth: hci0: command tx timeout [ 499.178792][ T8914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.202878][ T8914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.228627][ T8914] bond0 (unregistering): Released all slaves [ 499.254289][T11801] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.269950][T11801] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.280133][T11801] bridge_slave_0: entered allmulticast mode [ 499.299641][T11801] bridge_slave_0: entered promiscuous mode [ 499.378009][ T5839] Bluetooth: hci0: command tx timeout [ 499.402114][T11801] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.434763][T11801] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.521128][T11801] bridge_slave_1: entered allmulticast mode [ 499.552317][T11801] bridge_slave_1: entered promiscuous mode [ 500.217748][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 500.297794][T11801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.297871][ T8914] IPVS: stopping master sync thread 8046 ... [ 500.363620][T11801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.815144][T11801] team0: Port device team_slave_0 added [ 500.917021][T11801] team0: Port device team_slave_1 added [ 500.986077][T11882] xt_l2tp: invalid flags combination: c [ 501.060102][ T8914] hsr_slave_0: left promiscuous mode [ 501.086167][ T8914] hsr_slave_1: left promiscuous mode [ 501.117994][ T8914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.147021][ T8914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.183657][ T8914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.221616][ T8914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.325803][ T8914] veth1_macvtap: left promiscuous mode [ 501.344173][ T8914] veth0_macvtap: left promiscuous mode [ 501.351509][ T8914] veth1_vlan: left promiscuous mode [ 501.377209][ T8914] veth0_vlan: left promiscuous mode [ 501.548661][ T5839] Bluetooth: hci0: command tx timeout [ 501.721948][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1572'. [ 504.022575][ T5839] Bluetooth: hci0: command tx timeout [ 505.957018][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 506.018735][T11934] Cannot find add_set index 0 as target [ 507.153726][ T8914] team0 (unregistering): Port device team_slave_1 removed [ 507.328509][ T8914] team0 (unregistering): Port device team_slave_0 removed [ 508.107194][T11948] xt_l2tp: invalid flags combination: c [ 509.390899][T11965] loop2: detected capacity change from 0 to 7 [ 509.449728][T11965] Dev loop2: unable to read RDB block 7 [ 509.467481][T11965] loop2: unable to read partition table [ 509.484895][T11965] loop2: partition table beyond EOD, truncated [ 509.523306][T11965] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 509.621098][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 511.536445][T11979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.583101][T11801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.591775][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.594904][ T8] lo speed is unknown, defaulting to 1000 [ 511.692630][T11801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.729259][T11801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.738900][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.764295][ T8] infiniband syz2: ib_query_port failed (-19) [ 511.799110][T11801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.006338][T11801] hsr_slave_0: entered promiscuous mode [ 512.043846][T11801] hsr_slave_1: entered promiscuous mode [ 512.087935][T11801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.118439][T11801] Cannot create hsr debugfs directory [ 512.397493][T11990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1603'. [ 512.660719][T11801] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 512.924017][T11997] xt_l2tp: invalid flags combination: c [ 513.508928][T11801] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 513.560930][T11801] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 513.795756][T11801] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 514.763047][T12004] loop2: detected capacity change from 0 to 7 [ 514.840999][T12004] Dev loop2: unable to read RDB block 7 [ 514.858842][T12004] loop2: unable to read partition table [ 514.932919][T12004] loop2: partition table beyond EOD, truncated [ 514.940359][T12004] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 515.356147][T12016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.418920][T11801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.444020][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1613'. [ 515.557980][T11801] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.590524][T11801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.603020][T11801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.659246][ T8914] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.667968][ T8914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.679277][ T8914] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.687851][ T8914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.742725][T12025] fuse: Bad value for 'fd' [ 515.757868][ T29] audit: type=1800 audit(1736730240.740:462): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1609" name="file1" dev="tmpfs" ino=1871 res=0 errno=0 [ 516.154603][T11801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.430463][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 516.622154][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 517.949467][T12045] binder: BINDER_SET_CONTEXT_MGR already set [ 517.956921][T12045] binder: 12042:12045 ioctl 4018620d 20000040 returned -16 [ 518.290718][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 518.305418][ T8] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 518.315095][ T8] usb 5-1: can't read configurations, error -71 [ 518.330916][T12051] loop2: detected capacity change from 0 to 7 [ 518.339366][T12051] Dev loop2: unable to read RDB block 7 [ 518.346377][T12051] loop2: unable to read partition table [ 518.359712][T12051] loop2: partition table beyond EOD, truncated [ 518.364488][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1620'. [ 518.368304][T12051] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 518.598361][T11801] veth0_vlan: entered promiscuous mode [ 518.626903][T11801] veth1_vlan: entered promiscuous mode [ 518.706268][T11801] veth0_macvtap: entered promiscuous mode [ 518.734144][T11801] veth1_macvtap: entered promiscuous mode [ 518.776507][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.843697][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.888002][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.909891][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.948308][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.974366][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.003148][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.017806][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.061591][T11801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.094919][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.143052][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.165575][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.193518][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.219285][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.351255][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.398724][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.431791][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.498259][T11801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.520905][T11801] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.549056][T11801] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.560485][T11801] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.597089][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 519.604865][T11801] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.645152][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1626'. [ 519.816052][ T8915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.838027][ T8915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.426507][ T8915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.468519][ T8915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.624297][T12078] binder: 12077:12078 ioctl c0306201 0 returned -14 [ 521.002479][T12088] fuse: Bad value for 'fd' [ 521.011390][ T29] audit: type=1800 audit(1736730245.651:463): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1632" name="file1" dev="tmpfs" ino=1749 res=0 errno=0 [ 521.137625][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1635'. [ 521.374199][T12104] xt_l2tp: invalid flags combination: c [ 522.216717][T12114] binder: 12113:12114 ioctl c0306201 0 returned -14 [ 522.582607][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1643'. [ 522.616107][T12121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.654780][T12123] overlayfs: failed to clone upperpath [ 524.634823][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1649'. [ 524.705596][ T29] audit: type=1800 audit(1736730249.027:464): pid=12136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1648" name="file1" dev="tmpfs" ino=1867 res=0 errno=0 [ 524.782844][T12142] loop2: detected capacity change from 0 to 7 [ 524.812097][T12142] Dev loop2: unable to read RDB block 7 [ 524.819059][T12142] loop2: unable to read partition table [ 524.856323][T12142] loop2: partition table beyond EOD, truncated [ 524.864524][T12142] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 527.027886][T12173] xt_l2tp: invalid flags combination: c [ 527.097433][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1664'. [ 527.344641][ T29] audit: type=1800 audit(1736730251.562:465): pid=12182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1662" name="file1" dev="tmpfs" ino=1918 res=0 errno=0 [ 527.635461][T12188] loop2: detected capacity change from 0 to 7 [ 527.653533][T12188] Dev loop2: unable to read RDB block 7 [ 527.671179][T12188] loop2: unable to read partition table [ 527.686425][T12188] loop2: partition table beyond EOD, truncated [ 527.703273][T12188] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 527.859488][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1669'. [ 528.135804][ T5884] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 528.360238][ T5884] usb 8-1: Using ep0 maxpacket: 8 [ 528.376810][ T5884] usb 8-1: unable to get BOS descriptor or descriptor too short [ 528.387038][ T5884] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 528.397642][ T5884] usb 8-1: can't read configurations, error -71 [ 529.590735][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1675'. [ 529.824966][T12214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 529.993482][ T29] audit: type=1800 audit(1736730254.050:466): pid=12222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1680" name="file1" dev="tmpfs" ino=1834 res=0 errno=0 [ 530.107252][T12228] overlayfs: failed to clone upperpath [ 531.480480][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1689'. [ 531.646535][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1691'. [ 532.411672][T12261] binder: BINDER_SET_CONTEXT_MGR already set [ 532.419118][T12261] binder: 12260:12261 ioctl 4018620d 20000040 returned -16 [ 532.647356][ T29] audit: type=1800 audit(1736730256.520:467): pid=12259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1693" name="file1" dev="tmpfs" ino=1945 res=0 errno=0 [ 533.631870][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 534.368111][T12292] loop2: detected capacity change from 0 to 7 [ 534.382866][T12292] Dev loop2: unable to read RDB block 7 [ 534.406661][T12292] loop2: unable to read partition table [ 534.428569][T12292] loop2: partition table beyond EOD, truncated [ 534.453497][T12292] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 534.549952][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 534.704414][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 534.720556][ T25] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 534.890559][ T25] usb 5-1: can't read configurations, error -71 [ 536.560393][T12321] overlayfs: failed to resolve './file1': -2 [ 539.072167][ T5883] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 539.254136][ T5883] usb 7-1: Using ep0 maxpacket: 8 [ 539.388884][ T5883] usb 7-1: unable to get BOS descriptor or descriptor too short [ 539.491779][ T5883] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 539.642145][ T5883] usb 7-1: can't read configurations, error -71 [ 539.896552][T12358] binder: BINDER_SET_CONTEXT_MGR already set [ 539.903918][T12358] binder: 12356:12358 ioctl 4018620d 20000040 returned -16 [ 540.573021][T12376] loop2: detected capacity change from 0 to 7 [ 540.588255][T12376] Dev loop2: unable to read RDB block 7 [ 540.595096][T12376] loop2: unable to read partition table [ 540.602182][T12376] loop2: partition table beyond EOD, truncated [ 540.609602][T12376] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 545.408486][T12434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.606431][T12442] loop2: detected capacity change from 0 to 7 [ 545.835193][T12442] Dev loop2: unable to read RDB block 7 [ 545.890307][T12442] loop2: unable to read partition table [ 546.081006][T12442] loop2: partition table beyond EOD, truncated [ 546.233568][T12442] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 548.979595][T12488] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 552.638635][ T5883] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 552.991954][ T5883] usb 7-1: Using ep0 maxpacket: 8 [ 553.022810][ T5883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.035554][ T5883] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 553.055234][ T5883] usb 7-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 553.072053][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.095961][ T5883] usb 7-1: Product: syz [ 553.101534][ T5883] usb 7-1: Manufacturer: syz [ 553.107076][ T5883] usb 7-1: SerialNumber: syz [ 553.143021][ T5883] usb 7-1: config 0 descriptor?? [ 553.173940][ T5883] radioshark2 7-1:0.0: Invalid radioSHARK2 device [ 553.181807][ T5883] radioshark2 7-1:0.0: probe with driver radioshark2 failed with error -22 [ 553.204355][ T29] audit: type=1800 audit(1736730275.761:468): pid=12544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1794" name="file1" dev="tmpfs" ino=1995 res=0 errno=0 [ 553.248238][ T5883] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 553.370420][ T5883] usb 7-1: USB disconnect, device number 6 [ 557.545901][T12594] loop2: detected capacity change from 0 to 7 [ 557.602573][T12594] Dev loop2: unable to read RDB block 7 [ 557.656342][T12594] loop2: unable to read partition table [ 558.409936][T12594] loop2: partition table beyond EOD, truncated [ 558.456376][T12594] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 559.598059][T12620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.087758][T12662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 565.303209][T12700] loop2: detected capacity change from 0 to 7 [ 565.336417][T12700] Dev loop2: unable to read RDB block 7 [ 565.358012][T12700] loop2: unable to read partition table [ 565.379562][T12700] loop2: partition table beyond EOD, truncated [ 565.387655][T12700] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 567.753949][T12736] loop2: detected capacity change from 0 to 7 [ 567.928387][T12736] Dev loop2: unable to read RDB block 7 [ 567.989562][T12736] loop2: unable to read partition table [ 568.164340][T12736] loop2: partition table beyond EOD, truncated [ 568.172164][T12736] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 570.705949][ T29] audit: type=1800 audit(1736730292.131:469): pid=12761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1865" name="file1" dev="tmpfs" ino=266 res=0 errno=0 [ 574.757039][ T29] audit: type=1800 audit(1736730295.919:470): pid=12804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1879" name="file1" dev="tmpfs" ino=2120 res=0 errno=0 [ 575.798426][T12820] loop2: detected capacity change from 0 to 7 [ 575.886129][ T5828] Dev loop2: unable to read RDB block 7 [ 575.905967][ T5828] loop2: unable to read partition table [ 575.932017][ T5828] loop2: partition table beyond EOD, truncated [ 579.682567][T12858] fuse: Bad value for 'group_id' [ 579.689820][T12858] fuse: Bad value for 'group_id' [ 579.710733][ T29] audit: type=1800 audit(1736730300.559:471): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1893" name="file1" dev="tmpfs" ino=2147 res=0 errno=0 [ 580.188842][T12870] loop2: detected capacity change from 0 to 7 [ 580.198136][T12870] Dev loop2: unable to read RDB block 7 [ 580.209149][T12870] loop2: unable to read partition table [ 580.216197][T12870] loop2: partition table beyond EOD, truncated [ 580.228207][T12870] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 582.337679][T12892] fuse: Bad value for 'group_id' [ 582.365370][T12894] Cannot find add_set index 0 as target [ 582.370441][T12892] fuse: Bad value for 'group_id' [ 582.396267][ T29] audit: type=1800 audit(1736730303.075:472): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1906" name="file1" dev="tmpfs" ino=2163 res=0 errno=0 [ 582.576723][T12902] loop2: detected capacity change from 0 to 7 [ 582.674126][T12902] Dev loop2: unable to read RDB block 7 [ 582.958389][T12902] loop2: unable to read partition table [ 583.045145][T12902] loop2: partition table beyond EOD, truncated [ 583.108353][T12902] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 584.368629][ T5883] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 584.478223][T12932] Cannot find add_set index 0 as target [ 584.604046][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 584.659216][ T5883] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 584.672037][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.705508][ T5883] usb 5-1: config 0 has no interface number 0 [ 584.805882][ T5883] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 584.817945][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.827640][ T5883] usb 5-1: Product: syz [ 584.850427][ T5883] usb 5-1: Manufacturer: syz [ 584.866708][ T5883] usb 5-1: SerialNumber: syz [ 585.126871][ T5883] usb 5-1: config 0 descriptor?? [ 585.141301][T12938] fuse: Bad value for 'group_id' [ 585.147265][T12938] fuse: Bad value for 'group_id' [ 585.162740][ T29] audit: type=1800 audit(1736730305.666:473): pid=12938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1919" name="file1" dev="tmpfs" ino=331 res=0 errno=0 [ 585.170393][ T5883] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 585.280673][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.888913][ T5883] usb 5-1: USB disconnect, device number 15 [ 585.941329][ T11] usb 5-1: Failed to submit usb control message: -71 [ 585.950057][ T11] usb 5-1: unable to send the bmi data to the device: -71 [ 585.993245][ T11] usb 5-1: unable to get target info from device [ 586.017586][ T11] usb 5-1: could not get target info (-71) [ 586.027756][ T11] usb 5-1: could not probe fw (-71) [ 588.941949][ T29] audit: type=1800 audit(1736730309.192:474): pid=12983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1932" name="file1" dev="tmpfs" ino=357 res=0 errno=0 [ 591.765673][T13017] Cannot find add_set index 0 as target [ 593.297267][T13040] xt_l2tp: invalid flags combination: c [ 594.070508][T13046] loop2: detected capacity change from 0 to 7 [ 594.307223][T13046] Dev loop2: unable to read RDB block 7 [ 594.314524][T13046] loop2: unable to read partition table [ 594.322051][T13046] loop2: partition table beyond EOD, truncated [ 594.330470][T13046] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 595.283478][ T29] audit: type=1800 audit(1736730315.123:475): pid=13055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1957" name="file1" dev="tmpfs" ino=391 res=0 errno=0 [ 597.663028][T13098] Cannot find add_set index 0 as target [ 598.048880][T13112] loop2: detected capacity change from 0 to 7 [ 598.058669][T13112] Dev loop2: unable to read RDB block 7 [ 598.065932][T13112] loop2: unable to read partition table [ 598.073130][T13112] loop2: partition table beyond EOD, truncated [ 598.080839][T13112] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 600.450644][ T29] audit: type=1800 audit(1736730319.959:476): pid=13146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1991" name="file1" dev="tmpfs" ino=1302 res=0 errno=0 [ 601.907635][T13161] overlayfs: failed to clone upperpath [ 604.199262][ T29] audit: type=1800 audit(1736730323.457:477): pid=13187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2004" name="file1" dev="tmpfs" ino=449 res=0 errno=0 [ 605.711754][ T5884] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 606.106028][ T5884] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.118940][ T5884] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 606.151391][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.186788][ T5884] usb 7-1: config 0 descriptor?? [ 606.209543][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 606.769568][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 606.795737][T13225] syz_tun: entered allmulticast mode [ 606.804282][ T5884] pwc: recv_control_msg error -32 req 02 val 2700 [ 607.573114][T13222] syz_tun: left allmulticast mode [ 607.625699][T13230] fuse: Unknown parameter 'grou00000000000000000000' [ 607.701000][ T29] audit: type=1800 audit(1736730326.694:478): pid=13230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2021" name="file1" dev="tmpfs" ino=2318 res=0 errno=0 [ 608.336805][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00 [ 608.361112][ T5884] pwc: recv_control_msg error -32 req 04 val 1000 [ 608.390079][ T5884] pwc: recv_control_msg error -32 req 04 val 1300 [ 608.410457][ T5884] pwc: recv_control_msg error -32 req 04 val 1400 [ 608.419055][ T5884] pwc: recv_control_msg error -32 req 02 val 2000 [ 608.427521][ T5884] pwc: recv_control_msg error -32 req 02 val 2100 [ 608.435913][ T5884] pwc: recv_control_msg error -32 req 04 val 1500 [ 608.452014][ T5884] pwc: recv_control_msg error -32 req 02 val 2500 [ 608.462932][ T5884] pwc: recv_control_msg error -32 req 02 val 2400 [ 608.474245][ T5884] pwc: recv_control_msg error -32 req 02 val 2600 [ 608.484553][ T5884] pwc: recv_control_msg error -32 req 02 val 2900 [ 608.941099][ T5884] pwc: recv_control_msg error -71 req 04 val 1200 [ 609.009833][ T5884] pwc: Registered as video103. [ 609.043549][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35 [ 609.102185][ T5884] usb 7-1: USB disconnect, device number 7 [ 610.111267][ T5884] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 611.032871][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 611.047513][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 611.061506][ T5884] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 611.073113][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.226657][ T5884] usb 3-1: config 0 descriptor?? [ 612.875970][ T5884] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 613.386989][ T837] usb 3-1: USB disconnect, device number 13 [ 617.265973][T13321] syz_tun: entered allmulticast mode [ 619.094109][T13339] Cannot find add_set index 0 as target [ 620.242542][T13353] overlayfs: failed to clone upperpath [ 623.045193][T13371] fuse: Unknown parameter 'group_i00000000000000000000' [ 623.067266][ T29] audit: type=1800 audit(1736730341.108:479): pid=13371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2069" name="file1" dev="tmpfs" ino=2234 res=0 errno=0 [ 623.637665][T13381] trusted_key: encrypted_key: insufficient parameters specified [ 624.357637][T13387] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 625.986930][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 627.311388][T13382] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 627.330750][T13382] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 627.415933][T13382] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 627.689270][T13382] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 627.704417][T13382] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 627.715915][T13382] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 628.019830][T13416] chnl_net:caif_netlink_parms(): no params data found [ 628.361153][T13416] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.370157][T13416] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.381000][T13416] bridge_slave_0: entered allmulticast mode [ 628.392742][T13416] bridge_slave_0: entered promiscuous mode [ 628.408667][T13416] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.476033][T13416] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.522127][T13416] bridge_slave_1: entered allmulticast mode [ 628.574663][T13416] bridge_slave_1: entered promiscuous mode [ 628.703408][T13416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.865525][T13416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.052358][T13416] team0: Port device team_slave_0 added [ 629.129020][T13416] team0: Port device team_slave_1 added [ 629.506329][T13416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.542626][T13416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.746994][T13416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.871452][T13416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.985131][T13416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.024506][T13382] Bluetooth: hci5: command tx timeout [ 630.099591][T13416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.421023][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 630.436795][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 630.449278][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 630.484430][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 630.563610][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 630.574505][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 631.027278][T13416] hsr_slave_0: entered promiscuous mode [ 631.052467][T13416] hsr_slave_1: entered promiscuous mode [ 631.065972][T13416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.083294][T13416] Cannot create hsr debugfs directory [ 631.284418][ T3018] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.741926][ T3018] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.276497][T13382] Bluetooth: hci5: command tx timeout [ 632.743262][T13382] Bluetooth: hci3: command tx timeout [ 632.776741][ T3018] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.184506][T13476] xt_socket: unknown flags 0x50 [ 634.071599][ T3018] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.457465][T13382] Bluetooth: hci5: command tx timeout [ 634.690313][T13416] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 634.782942][T13489] fuse: Unknown parameter '0x0000000000000006' [ 634.792331][T13416] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 634.833068][T13447] chnl_net:caif_netlink_parms(): no params data found [ 634.853031][T13416] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 634.864172][T13416] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 634.966872][T13382] Bluetooth: hci3: command tx timeout [ 634.982128][T13416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.999386][T13416] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.010124][ T3018] bridge_slave_1: left allmulticast mode [ 635.016916][ T3018] bridge_slave_1: left promiscuous mode [ 635.069418][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.125353][ T3018] bridge_slave_0: left allmulticast mode [ 635.386447][ T3018] bridge_slave_0: left promiscuous mode [ 635.399748][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.822399][T13502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2111'. [ 635.844297][T13502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2111'. [ 636.733540][T13382] Bluetooth: hci5: command tx timeout [ 636.924183][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.163115][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.191368][ T3018] bond0 (unregistering): Released all slaves [ 637.198852][T13382] Bluetooth: hci3: command tx timeout [ 637.256650][T11974] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.265197][T11974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.312171][T13502] team0: entered promiscuous mode [ 637.318260][T13502] team_slave_0: entered promiscuous mode [ 637.340696][T13502] team_slave_1: entered promiscuous mode [ 637.382363][T13502] batadv_slave_1: entered promiscuous mode [ 637.412728][ T3018] IPVS: stopping master sync thread 9409 ... [ 637.486548][T11974] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.495116][T11974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.694927][T13447] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.707501][T13447] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.719446][T13447] bridge_slave_0: entered allmulticast mode [ 638.751973][T13447] bridge_slave_0: entered promiscuous mode [ 639.315114][T13447] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.356796][T13447] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.379981][T13447] bridge_slave_1: entered allmulticast mode [ 639.411995][T13447] bridge_slave_1: entered promiscuous mode [ 639.414464][T13382] Bluetooth: hci3: command tx timeout [ 639.560886][ T3018] hsr_slave_0: left promiscuous mode [ 639.571691][ T3018] hsr_slave_1: left promiscuous mode [ 639.596454][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.627365][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.667952][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.689909][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.741878][ T3018] veth1_macvtap: left promiscuous mode [ 639.785129][ T3018] veth0_macvtap: left promiscuous mode [ 639.796786][ T3018] veth1_vlan: left promiscuous mode [ 639.828168][ T3018] veth0_vlan: left promiscuous mode [ 642.949210][ T3018] team0 (unregistering): Port device team_slave_1 removed [ 643.119041][ T3018] team0 (unregistering): Port device team_slave_0 removed [ 644.456486][T13447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.506203][T13581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.537149][T13581] bond0: (slave rose0): Enslaving as an active interface with an up link [ 644.565871][T13447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.743093][T13447] team0: Port device team_slave_0 added [ 644.874553][T13447] team0: Port device team_slave_1 added [ 644.922602][T13416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.921631][T13447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.934825][T13629] input: syz0 as /devices/virtual/input/input36 [ 645.942566][T13447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.005023][T13447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.069288][T13447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.119321][T13447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.160405][T13447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.437624][T13447] hsr_slave_0: entered promiscuous mode [ 646.463400][T13447] hsr_slave_1: entered promiscuous mode [ 646.509814][T13447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 646.560581][T13447] Cannot create hsr debugfs directory [ 646.852628][ T3018] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.755855][ T3018] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.757261][T13683] netlink: 'syz.5.2155': attribute type 3 has an invalid length. [ 647.809774][T13683] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2155'. [ 647.883182][T13416] veth0_vlan: entered promiscuous mode [ 647.995623][ T3018] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.013029][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 648.611628][ T3018] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.730390][T13416] veth1_vlan: entered promiscuous mode [ 648.912226][T13416] veth0_macvtap: entered promiscuous mode [ 648.953182][T13416] veth1_macvtap: entered promiscuous mode [ 649.085032][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.098372][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.117848][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.142785][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.165739][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.235924][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.297925][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.319010][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.366565][T13416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.436081][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.462228][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.483765][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.505069][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.524491][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.538599][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.559960][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.577441][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.593787][T13416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.613002][ T5883] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 649.659748][T13447] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 649.682517][ T3018] bridge_slave_1: left allmulticast mode [ 649.698207][ T3018] bridge_slave_1: left promiscuous mode [ 649.706951][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.729124][ T3018] bridge_slave_0: left allmulticast mode [ 649.736347][ T3018] bridge_slave_0: left promiscuous mode [ 649.743681][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.805586][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 649.834762][ T5883] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 649.849713][ T5883] usb 3-1: config 6 has no interface number 0 [ 649.880502][ T5883] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 649.912086][ T5883] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 649.973866][ T5883] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 650.000647][ T5883] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 650.023440][ T5883] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 650.045372][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.060240][ T5883] usb 3-1: Product: syz [ 650.065352][ T5883] usb 3-1: Manufacturer: syz [ 650.071431][ T5883] usb 3-1: SerialNumber: syz [ 650.116567][ T5883] hso 3-1:6.2: Failed to find BULK IN ep [ 650.332732][ T5883] usb 3-1: USB disconnect, device number 14 [ 650.648849][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.671112][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.689156][ T3018] bond0 (unregistering): Released all slaves [ 650.705558][T13416] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.722438][T13416] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.733511][T13416] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.751788][T13416] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.765740][T13447] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 650.825853][T13447] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 650.874755][ T3018] IPVS: stopping master sync thread 12488 ... [ 650.889016][T13734] geneve2: entered promiscuous mode [ 650.900423][T13734] geneve2: entered allmulticast mode [ 650.968713][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 651.045341][T13447] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 651.366282][ T3018] hsr_slave_0: left promiscuous mode [ 651.380519][ T3018] hsr_slave_1: left promiscuous mode [ 651.398512][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.407462][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.431197][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.440140][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.513214][ T3018] veth1_macvtap: left promiscuous mode [ 651.526662][ T3018] veth0_macvtap: left promiscuous mode [ 651.533520][ T3018] veth1_vlan: left promiscuous mode [ 651.548053][ T3018] veth0_vlan: left promiscuous mode [ 652.861529][T13765] loop2: detected capacity change from 0 to 7 [ 652.871933][T13765] Dev loop2: unable to read RDB block 7 [ 652.891991][T13765] loop2: unable to read partition table [ 652.903010][T13765] loop2: partition table beyond EOD, truncated [ 652.922900][T13765] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 653.311635][ T3018] team0 (unregistering): Port device team_slave_1 removed [ 653.431252][ T3018] team0 (unregistering): Port device team_slave_0 removed [ 654.455880][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.473163][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.561627][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.571529][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.707371][T13447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.717992][T13382] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 654.914513][T13447] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.016909][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.025514][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.134560][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.143151][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.269044][T13447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 655.281908][T13447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 655.716538][T13794] lo speed is unknown, defaulting to 1000 [ 655.723890][T13794] lo speed is unknown, defaulting to 1000 [ 655.731630][T13794] lo speed is unknown, defaulting to 1000 [ 655.746665][T13794] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 655.858483][T13794] lo speed is unknown, defaulting to 1000 [ 655.866346][T13794] lo speed is unknown, defaulting to 1000 [ 655.873977][T13794] lo speed is unknown, defaulting to 1000 [ 655.881489][T13794] lo speed is unknown, defaulting to 1000 [ 655.889356][T13794] lo speed is unknown, defaulting to 1000 [ 656.386379][T13447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.850701][T13783] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 657.107177][T13783] usb 5-1: Using ep0 maxpacket: 16 [ 657.159364][T13783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.327983][T13783] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 657.560521][T13783] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 657.582784][T13783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.594855][T13783] usb 5-1: config 0 descriptor?? [ 657.942481][T13447] veth0_vlan: entered promiscuous mode [ 658.013379][T13447] veth1_vlan: entered promiscuous mode [ 658.053155][T13783] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input43 [ 658.114168][T13447] veth0_macvtap: entered promiscuous mode [ 658.136605][T13447] veth1_macvtap: entered promiscuous mode [ 658.165152][T13783] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 658.174881][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.225312][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.255910][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.258536][T13783] usb 5-1: USB disconnect, device number 16 [ 658.291365][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.315225][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.347237][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.370308][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.400736][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.434728][T13447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.464165][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.518306][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.550543][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.582414][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.618295][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.640078][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.661771][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.700501][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.725594][T13447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.758752][T13447] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.791124][T13447] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.817735][T13447] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.851849][T13447] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.053406][T13846] loop2: detected capacity change from 0 to 7 [ 659.065568][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2203'. [ 659.097952][T13846] Dev loop2: unable to read RDB block 7 [ 659.121187][T13846] loop2: unable to read partition table [ 659.131387][T13846] loop2: partition table beyond EOD, truncated [ 659.149157][T13846] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 659.172440][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.200473][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.319587][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.360477][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.965608][T13898] loop2: detected capacity change from 0 to 7 [ 661.000974][T13898] Dev loop2: unable to read RDB block 7 [ 661.007712][T13898] loop2: unable to read partition table [ 661.068894][T13898] loop2: partition table beyond EOD, truncated [ 661.084087][T13898] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 663.245866][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'. [ 664.157340][T13938] syz_tun: entered allmulticast mode [ 665.452951][T13947] netlink: 'syz.8.2231': attribute type 3 has an invalid length. [ 665.453124][T13947] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2231'. [ 668.571778][T13983] syz_tun: entered allmulticast mode [ 672.720630][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2258'. [ 673.399776][ T29] audit: type=1326 audit(1736730388.187:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.2.2257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e66d85d29 code=0x0 [ 674.397174][T14026] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 676.329090][T14061] xt_l2tp: invalid flags combination: c [ 678.020949][ T29] audit: type=1800 audit(1736730392.349:481): pid=14082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2275" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 678.571821][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2282'. [ 679.318418][T14106] xt_l2tp: invalid flags combination: c [ 679.872317][T14112] fuse: Bad value for 'fd' [ 679.910472][ T29] audit: type=1800 audit(1736730394.286:482): pid=14112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2286" name="file1" dev="tmpfs" ino=2639 res=0 errno=0 [ 680.351045][T14128] binder_alloc: 14118: binder_alloc_buf, no vma [ 682.889033][T14152] xt_l2tp: invalid flags combination: c [ 683.918688][T13382] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 684.425761][ T29] audit: type=1800 audit(1736730398.514:483): pid=14169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2303" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 684.511076][T14173] fuse: Bad value for 'fd' [ 684.548056][ T29] audit: type=1800 audit(1736730398.598:484): pid=14173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2301" name="file1" dev="tmpfs" ino=2549 res=0 errno=0 [ 684.625559][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2304'. [ 684.849912][T13750] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 685.057562][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 685.106203][T13750] usb 10-1: Using ep0 maxpacket: 32 [ 685.230946][T13750] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.255148][T13750] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.392971][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 685.415311][ T25] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 685.425111][ T25] usb 3-1: config 0 has no interface number 0 [ 685.454390][ T25] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 685.481193][T13750] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 685.482014][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.540716][T13750] usb 10-1: config 1 interface 1 has no altsetting 0 [ 685.544250][ T25] usb 3-1: Product: syz [ 685.562215][T13750] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 685.581182][ T25] usb 3-1: Manufacturer: syz [ 685.584473][T13750] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.602507][ T25] usb 3-1: SerialNumber: syz [ 685.611106][T13750] usb 10-1: Product: syz [ 685.620025][T13750] usb 10-1: Manufacturer: syz [ 685.704840][ T25] usb 3-1: config 0 descriptor?? [ 685.709242][T13750] usb 10-1: SerialNumber: syz [ 686.228476][T13382] Bluetooth: hci1: command 0x0c1a tx timeout [ 687.392348][T13750] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 687.413489][T13750] usb 10-1: USB disconnect, device number 2 [ 687.517761][ T29] audit: type=1326 audit(1736730401.404:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14199 comm="syz.8.2315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa59185d29 code=0x0 [ 687.557857][ T25] radio-si470x 3-1:0.35: this is not a si470x device. [ 687.588587][T14205] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 687.610013][ T25] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 687.675521][T14207] fuse: Invalid rootmode [ 687.684658][ T29] audit: type=1800 audit(1736730401.563:486): pid=14207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2316" name="file1" dev="tmpfs" ino=109 res=0 errno=0 [ 688.069820][T14216] xt_l2tp: invalid flags combination: c [ 688.745354][ T25] usb 3-1: USB disconnect, device number 15 [ 688.762783][T13382] Bluetooth: hci1: command 0x0c1a tx timeout [ 689.167289][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2321'. [ 692.842358][T14258] tipc: Started in network mode [ 692.856645][T14258] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 692.946366][T14262] fuse: Unknown parameter ' [ 692.946366][T14262] 0000000000000000000001200000000000000000000012}ˆìs8aGô\šn00000000000000000010 [ 692.946366][T14262] ' [ 693.126794][T14265] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 693.715881][T14258] tipc: Enabled bearer , priority 0 [ 694.443514][T14283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.631600][T13750] tipc: Node number set to 11578026 [ 695.577801][T14292] support for the xor transformation has been removed. [ 696.025581][T14294] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2341'. [ 697.400257][T14310] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 697.448666][T14310] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 697.474996][T14310] overlayfs: missing 'lowerdir' [ 698.312943][T14312] bridge0: port 3(erspan0) entered blocking state [ 698.320837][T14312] bridge0: port 3(erspan0) entered disabled state [ 698.329356][T14312] erspan0: entered allmulticast mode [ 698.336448][T14312] erspan0: entered promiscuous mode [ 698.343363][T14312] bridge0: port 3(erspan0) entered blocking state [ 698.351682][T14312] bridge0: port 3(erspan0) entered forwarding state [ 700.001556][T14347] support for the xor transformation has been removed. [ 700.361410][ T5883] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 700.570743][ T5883] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 700.663841][ T5883] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.686888][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2359'. [ 700.764416][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 700.825681][ T5883] usb 3-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 700.845435][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.921490][ T5883] usb 3-1: config 0 descriptor?? [ 701.267816][T14362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.467251][ T5883] wacom 0003:056A:032F.000A: hidraw0: USB HID v0.09 Device [HID 056a:032f] on usb-dummy_hcd.2-1/input0 [ 701.659876][ T5883] usb 3-1: USB disconnect, device number 16 [ 703.203322][T14391] support for the xor transformation has been removed. [ 707.417459][T13750] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 707.895563][T14428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.486202][T13750] usb 10-1: Using ep0 maxpacket: 8 [ 708.496278][T13750] usb 10-1: config 2 has an invalid interface number: 31 but max is 0 [ 708.506959][T13750] usb 10-1: config 2 has no interface number 0 [ 709.533476][T13750] usb 10-1: config 2 interface 31 has no altsetting 0 [ 710.607459][T13750] usb 10-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 710.618700][T13750] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.628505][T13750] usb 10-1: Product: syz [ 710.633602][T13750] usb 10-1: Manufacturer: syz [ 710.639316][T13750] usb 10-1: SerialNumber: syz [ 710.721370][T14436] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2381'. [ 710.934534][ T29] audit: type=1800 audit(1736730423.208:487): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2386" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 711.103544][T13750] ch9200 10-1:2.31: probe with driver ch9200 failed with error -71 [ 711.117199][T13750] usb 10-1: USB disconnect, device number 3 [ 713.624310][T14463] netlink: 'syz.9.2393': attribute type 1 has an invalid length. [ 714.957352][T14470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.648139][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.671933][T14503] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 716.685353][T14503] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 716.762716][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2409'. [ 718.463320][T14526] xt_hashlimit: size too large, truncated to 1048576 [ 720.054798][T14543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2420'. [ 721.221880][T14557] netlink: 'syz.2.2425': attribute type 10 has an invalid length. [ 721.585834][T14572] xt_ecn: cannot match TCP bits for non-tcp packets [ 722.123591][ T29] audit: type=1800 audit(1736730433.741:488): pid=14577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2428" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 722.249366][T14557] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 723.112104][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2431'. [ 725.097085][ T29] audit: type=1800 audit(1736730436.547:489): pid=14618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2440" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 729.145371][T14636] netlink: 'syz.4.2446': attribute type 10 has an invalid length. [ 729.257801][T14636] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 729.791542][T14647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2449'. [ 730.101060][T14655] overlayfs: failed to clone upperpath [ 730.222424][T14658] fuse: Unknown parameter 'user_id00000000000000000000' [ 730.262998][ T29] audit: type=1800 audit(1736730441.364:490): pid=14658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2453" name="file1" dev="tmpfs" ino=326 res=0 errno=0 [ 730.581377][T14676] netlink: 'syz.5.2460': attribute type 10 has an invalid length. [ 730.722387][T14676] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 731.675861][T14695] overlayfs: failed to clone upperpath [ 733.305941][T14712] netlink: 'syz.9.2472': attribute type 10 has an invalid length. [ 733.848308][T14712] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 734.671353][T14730] syz_tun: entered allmulticast mode [ 736.082487][T14753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2487'. [ 736.627731][T14762] Illegal XDP return value 461035159 on prog (id 479) dev syz_tun, expect packet loss! [ 737.363617][T14775] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 737.377003][T14775] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 739.170894][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2499'. [ 740.125823][T13447] syz_tun (unregistering): left allmulticast mode [ 742.478201][T14807] Cannot find add_set index 0 as target [ 742.516567][ T8914] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.854496][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 742.880707][ T8914] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.021636][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 743.022040][T14825] overlayfs: failed to clone upperpath [ 743.053174][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 743.065342][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 743.088763][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 743.105841][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 743.181393][ T8914] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.830766][ T8914] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.866923][T14817] lo speed is unknown, defaulting to 1000 [ 745.320554][ T5839] Bluetooth: hci0: command tx timeout [ 745.336245][T14848] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2521'. [ 745.342685][ T8914] bridge_slave_1: left allmulticast mode [ 745.353957][ T8914] bridge_slave_1: left promiscuous mode [ 745.361058][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.371301][ T8914] bridge_slave_0: left allmulticast mode [ 745.501193][ T8914] bridge_slave_0: left promiscuous mode [ 745.509192][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.597986][ T5839] Bluetooth: hci0: command tx timeout [ 747.963142][T14858] netlink: 'syz.8.2524': attribute type 10 has an invalid length. [ 749.828943][ T5839] Bluetooth: hci0: command tx timeout [ 750.625570][ T8914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.797294][ T8914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.893208][ T8914] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 751.010194][ T8914] bond0 (unregistering): Released all slaves [ 751.470464][T14858] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 751.579545][ T8914] tipc: Disabling bearer [ 751.593326][ T8914] tipc: Left network mode [ 751.603708][T14817] chnl_net:caif_netlink_parms(): no params data found [ 752.054891][ T5839] Bluetooth: hci0: command tx timeout [ 752.189889][T14894] Bluetooth: MGMT ver 1.23 [ 752.514127][T14817] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.556825][T14817] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.622344][T14817] bridge_slave_0: entered allmulticast mode [ 752.753783][T14817] bridge_slave_0: entered promiscuous mode [ 754.088135][ T8914] hsr_slave_0: left promiscuous mode [ 754.110796][ T8914] hsr_slave_1: left promiscuous mode [ 754.129441][ T8914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.149348][ T8914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.169799][T14914] fuse: Unknown parameter 'ÿ00000000000000000005' [ 754.179442][T14914] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2542'. [ 754.191099][ T8914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.210091][ T8914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.330232][ T8914] veth1_macvtap: left promiscuous mode [ 754.337972][ T8914] veth0_macvtap: left promiscuous mode [ 754.347575][ T8914] veth1_vlan: left promiscuous mode [ 754.354891][ T8914] veth0_vlan: left promiscuous mode [ 754.361825][T14919] netlink: 'syz.4.2543': attribute type 10 has an invalid length. [ 755.020383][T14913] delete_channel: no stack [ 755.663983][ T8914] team0 (unregistering): Port device team_slave_1 removed [ 755.783933][ T8914] team0 (unregistering): Port device team_slave_0 removed [ 756.519311][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 756.727291][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.740410][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.754271][ T9] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 756.765515][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.779454][T14817] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.781111][ T9] usb 9-1: config 0 descriptor?? [ 756.795760][T14817] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.805363][T14817] bridge_slave_1: entered allmulticast mode [ 756.814290][T14817] bridge_slave_1: entered promiscuous mode [ 757.096396][T14817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.163920][T14817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.317961][ T9] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 757.333745][ T9] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 757.677751][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.000B/input/input49 [ 758.062545][T14817] team0: Port device team_slave_0 added [ 758.119913][ T9] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 758.278172][T14817] team0: Port device team_slave_1 added [ 758.333335][ T9] usb 9-1: USB disconnect, device number 2 [ 758.533805][T14817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.590926][T14817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.060195][T14817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.180215][T14817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.263260][T14817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.547460][T14817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.645942][T14952] pim6reg: entered allmulticast mode [ 759.737511][T14817] hsr_slave_0: entered promiscuous mode [ 759.745425][T14817] hsr_slave_1: entered promiscuous mode [ 759.780328][T14817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 759.789576][T14817] Cannot create hsr debugfs directory [ 760.032092][T14965] netlink: 'syz.2.2560': attribute type 10 has an invalid length. [ 763.187324][T13382] Bluetooth: hci5: command 0x0406 tx timeout [ 763.518347][T15013] netlink: 'syz.5.2574': attribute type 10 has an invalid length. [ 763.552298][T15016] support for the xor transformation has been removed. [ 763.907168][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 764.122109][ T9] usb 9-1: too many configurations: 89, using maximum allowed: 8 [ 764.215791][T15042] input: syz1 as /devices/virtual/input/input50 [ 764.300337][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 764.732953][ T9] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 764.787537][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.851558][ T9] usb 9-1: Product: syz [ 764.856598][ T9] usb 9-1: Manufacturer: syz [ 764.911595][ T9] usb 9-1: SerialNumber: syz [ 764.930646][ T9] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 764.973900][T14817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 765.052787][T14817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 765.080904][T14817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 765.181654][T14817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 765.708872][T14817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.839972][T14817] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.237821][T14817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 766.250500][T14817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 766.345650][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.354195][ T6847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.410523][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.419144][ T6847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.491083][T15051] syz_tun: entered allmulticast mode [ 766.971820][T13750] usb 9-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 767.035632][ T29] audit: type=1800 audit(1736730475.291:491): pid=15053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2583" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 767.191381][T15050] syz_tun: left allmulticast mode [ 767.458836][T15072] netlink: 'syz.5.2587': attribute type 10 has an invalid length. [ 767.488531][ T8] usb 9-1: USB disconnect, device number 3 [ 767.498555][ T8] usb 9-1: ath9k_htc: USB layer deinitialized [ 767.647642][T14817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.744594][T15081] netlink: 'syz.2.2590': attribute type 10 has an invalid length. [ 767.841718][T14817] veth0_vlan: entered promiscuous mode [ 767.872127][T15081] xt_ecn: cannot match TCP bits for non-tcp packets [ 767.876962][T14817] veth1_vlan: entered promiscuous mode [ 767.955039][T15089] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 767.976191][T14817] veth0_macvtap: entered promiscuous mode [ 767.987775][T14817] veth1_macvtap: entered promiscuous mode [ 768.009146][T15089] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 768.010076][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.030576][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.042880][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.055733][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.068414][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.081551][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.093709][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.106451][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.119535][T14817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.206912][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.247789][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.749298][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.799077][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.819951][T15103] support for the xor transformation has been removed. [ 768.890739][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.930883][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.969039][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.983108][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.009494][T14817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.018116][T15113] netlink: 'syz.5.2600': attribute type 10 has an invalid length. [ 769.136956][T14817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.178888][T14817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.200334][T14817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.237700][T14817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.885379][ T8915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.898331][ T8915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.181047][T15141] netlink: 'syz.8.2606': attribute type 10 has an invalid length. [ 771.217612][ T8915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.279178][ T8915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.381940][T15141] xt_ecn: cannot match TCP bits for non-tcp packets [ 772.393541][T14978] syz_tun (unregistering): left allmulticast mode [ 772.443249][T15160] support for the xor transformation has been removed. [ 773.073408][T13382] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 773.089923][T13382] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 773.108408][T13382] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 773.119587][T13382] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 773.132553][T13382] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 773.143015][T13382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 773.707955][ T8915] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.898508][T15190] lo speed is unknown, defaulting to 1000 [ 774.033226][ T8915] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.440769][T15219] o2cb: This node has not been configured. [ 774.448347][T15219] o2cb: Cluster check failed. Fix errors before retrying. [ 774.456938][T15219] (syz.0.2621,15219,1):user_dlm_register:674 ERROR: status = -22 [ 774.466342][T15219] (syz.0.2621,15219,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 775.402245][T13382] Bluetooth: hci2: command tx timeout [ 777.152678][ T8915] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.200524][T15229] support for the xor transformation has been removed. [ 777.532969][T15236] overlayfs: failed to verify upper (/file1, ino=3118, err=-116) [ 777.622688][T13382] Bluetooth: hci2: command tx timeout [ 777.640122][T15236] overlayfs: failed to verify index dir 'upper' xattr [ 778.092842][T15236] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 778.152967][ T8915] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.281881][T15250] bridge0: port 3(erspan0) entered disabled state [ 778.289812][T15250] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.298547][T15250] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.332105][T15250] bridge0: entered allmulticast mode [ 778.359286][T15190] chnl_net:caif_netlink_parms(): no params data found [ 778.542119][T15261] [ 778.545061][T15261] ====================================================== [ 778.553484][T15261] WARNING: possible circular locking dependency detected [ 778.561913][T15261] 6.13.0-rc6-next-20250107-syzkaller #0 Not tainted [ 778.569813][T15261] ------------------------------------------------------ [ 778.578343][T15261] syz.8.2632/15261 is trying to acquire lock: [ 778.585591][T15261] ffff8880284b7488 (vm_lock){++++}-{0:0}, at: binder_alloc_free_page+0x150/0xd50 [ 778.596664][T15261] [ 778.596664][T15261] but task is already holding lock: [ 778.605481][T15261] ffff88814cefc630 (&l->lock){+.+.}-{3:3}, at: lock_list_lru_of_memcg+0x24c/0x4d0 [ 778.616537][T15261] [ 778.616537][T15261] which lock already depends on the new lock. [ 778.616537][T15261] [ 778.629221][T15261] [ 778.629221][T15261] the existing dependency chain (in reverse order) is: [ 778.640017][T15261] [ 778.640017][T15261] -> #1 (&l->lock){+.+.}-{3:3}: [ 778.648442][T15261] lock_acquire+0x1ed/0x550 [ 778.654469][T15261] _raw_spin_lock+0x2e/0x40 [ 778.660483][T15261] lock_list_lru_of_memcg+0x24c/0x4d0 [ 778.667539][T15261] list_lru_del+0x58/0x1f0 [ 778.673438][T15261] zswap_entry_free+0x1ff/0x440 [ 778.679890][T15261] zswap_load+0x364/0x4a0 [ 778.685688][T15261] swap_read_folio+0x9b4/0x2690 [ 778.692127][T15261] swap_cluster_readahead+0x3cf/0x710 [ 778.699188][T15261] swapin_readahead+0x1ba/0xd30 [ 778.705615][T15261] do_swap_page+0x5c4/0x5c40 [ 778.711746][T15261] __handle_mm_fault+0x13d7/0x70f0 [ 778.718699][T15261] handle_mm_fault+0x3e2/0x8c0 [ 778.725023][T15261] exc_page_fault+0x459/0x8b0 [ 778.731267][T15261] asm_exc_page_fault+0x26/0x30 [ 778.737695][T15261] [ 778.737695][T15261] -> #0 (vm_lock){++++}-{0:0}: [ 778.746017][T15261] validate_chain+0x18ef/0x5920 [ 778.752444][T15261] __lock_acquire+0x1397/0x2100 [ 778.758895][T15261] lock_acquire+0x1ed/0x550 [ 778.764921][T15261] lock_vma_under_rcu+0x35f/0x9a0 [ 778.771577][T15261] binder_alloc_free_page+0x150/0xd50 [ 778.778626][T15261] __list_lru_walk_one+0x170/0x470 [ 778.785510][T15261] list_lru_walk_node+0xc4/0xa70 [ 778.792181][T15261] binder_shrink_scan+0x138/0x260 [ 778.798831][T15261] do_shrink_slab+0x72d/0x1160 [ 778.805151][T15261] shrink_slab+0x1093/0x14d0 [ 778.811577][T15261] drop_slab+0x142/0x280 [ 778.817272][T15261] drop_caches_sysctl_handler+0xbc/0x160 [ 778.824635][T15261] proc_sys_call_handler+0x5ec/0x920 [ 778.831575][T15261] do_iter_readv_writev+0x71a/0x9d0 [ 778.838414][T15261] vfs_writev+0x38b/0xbc0 [ 778.844415][T15261] do_writev+0x1b6/0x360 [ 778.850105][T15261] do_syscall_64+0xf3/0x230 [ 778.856226][T15261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.863907][T15261] [ 778.863907][T15261] other info that might help us debug this: [ 778.863907][T15261] [ 778.876261][T15261] Possible unsafe locking scenario: [ 778.876261][T15261] [ 778.885186][T15261] CPU0 CPU1 [ 778.891596][T15261] ---- ---- [ 778.898005][T15261] lock(&l->lock); [ 778.902579][T15261] lock(vm_lock); [ 778.910074][T15261] lock(&l->lock); [ 778.917750][T15261] rlock(vm_lock); [ 778.922298][T15261] [ 778.922298][T15261] *** DEADLOCK *** [ 778.922298][T15261] [ 778.932045][T15261] 4 locks held by syz.8.2632/15261: [ 778.938256][T15261] #0: ffff8880582a89b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x254/0x320 [ 778.949309][T15261] #1: ffff888025182420 (sb_writers#3){.+.+}-{0:0}, at: vfs_writev+0x2d6/0xbc0 [ 778.960045][T15261] #2: ffff88814cefc630 (&l->lock){+.+.}-{3:3}, at: lock_list_lru_of_memcg+0x24c/0x4d0 [ 778.971616][T15261] #3: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x1dd/0x9a0 [ 778.983308][T15261] [ 778.983308][T15261] stack backtrace: [ 778.990374][T15261] CPU: 1 UID: 0 PID: 15261 Comm: syz.8.2632 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 778.990391][T15261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 778.990400][T15261] Call Trace: [ 778.990406][T15261] [ 778.990413][T15261] dump_stack_lvl+0x241/0x360 [ 778.990431][T15261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.990443][T15261] ? __pfx__printk+0x10/0x10 [ 778.990465][T15261] print_circular_bug+0x13a/0x1b0 [ 778.990480][T15261] check_noncircular+0x36a/0x4a0 [ 778.990501][T15261] ? __pfx_check_noncircular+0x10/0x10 [ 778.990520][T15261] ? lockdep_lock+0x123/0x2b0 [ 778.990536][T15261] ? lockdep_unlock+0x16a/0x300 [ 778.990551][T15261] validate_chain+0x18ef/0x5920 [ 778.990577][T15261] ? __pfx_validate_chain+0x10/0x10 [ 778.990599][T15261] ? __pfx_validate_chain+0x10/0x10 [ 778.990620][T15261] ? look_up_lock_class+0x77/0x170 [ 778.990636][T15261] ? register_lock_class+0x102/0x980 [ 778.990656][T15261] ? __pfx_register_lock_class+0x10/0x10 [ 778.990676][T15261] ? mark_lock+0x9a/0x360 [ 778.990694][T15261] __lock_acquire+0x1397/0x2100 [ 778.990715][T15261] lock_acquire+0x1ed/0x550 [ 778.990730][T15261] ? binder_alloc_free_page+0x150/0xd50 [ 778.990750][T15261] ? __pfx_lock_acquire+0x10/0x10 [ 778.990770][T15261] ? mas_walk+0x1f3/0x280 [ 778.990789][T15261] lock_vma_under_rcu+0x35f/0x9a0 [ 778.990803][T15261] ? binder_alloc_free_page+0x150/0xd50 [ 778.990818][T15261] ? lock_vma_under_rcu+0x1dd/0x9a0 [ 778.990833][T15261] ? binder_alloc_free_page+0x150/0xd50 [ 778.990850][T15261] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 778.990867][T15261] ? __pfx_validate_chain+0x10/0x10 [ 778.990886][T15261] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 778.990906][T15261] binder_alloc_free_page+0x150/0xd50 [ 778.990933][T15261] __list_lru_walk_one+0x170/0x470 [ 778.990948][T15261] ? __pfx_binder_alloc_free_page+0x10/0x10 [ 778.990965][T15261] ? __pfx_binder_alloc_free_page+0x10/0x10 [ 778.990981][T15261] list_lru_walk_node+0xc4/0xa70 [ 778.990994][T15261] ? mark_lock+0x9a/0x360 [ 778.991011][T15261] ? __pfx_binder_alloc_free_page+0x10/0x10 [ 778.991028][T15261] ? __pfx_list_lru_walk_node+0x10/0x10 [ 778.991044][T15261] binder_shrink_scan+0x138/0x260 [ 778.991061][T15261] ? __pfx_binder_shrink_scan+0x10/0x10 [ 778.991080][T15261] do_shrink_slab+0x72d/0x1160 [ 778.991099][T15261] ? shrink_slab+0x12b/0x14d0 [ 778.991113][T15261] shrink_slab+0x1093/0x14d0 [ 778.991129][T15261] ? shrink_slab+0x12b/0x14d0 [ 778.991142][T15261] ? __pfx_lock_release+0x10/0x10 [ 778.991158][T15261] ? __pfx_shrink_slab+0x10/0x10 [ 778.991177][T15261] ? mem_cgroup_iter+0x3d/0x420 [ 778.991191][T15261] drop_slab+0x142/0x280 [ 778.991208][T15261] drop_caches_sysctl_handler+0xbc/0x160 [ 778.991226][T15261] ? __pfx_drop_caches_sysctl_handler+0x10/0x10 [ 778.991244][T15261] proc_sys_call_handler+0x5ec/0x920 [ 778.991262][T15261] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 778.991280][T15261] do_iter_readv_writev+0x71a/0x9d0 [ 778.991299][T15261] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 778.991315][T15261] ? rcu_read_lock_any_held+0xb7/0x160 [ 778.991333][T15261] vfs_writev+0x38b/0xbc0 [ 778.991347][T15261] ? trace_contention_end+0x3c/0x120 [ 778.991360][T15261] ? __mutex_lock+0x397/0x1010 [ 778.991374][T15261] ? __pfx_vfs_writev+0x10/0x10 [ 778.991392][T15261] ? __fget_files+0x2a/0x410 [ 778.991405][T15261] ? __fget_files+0x395/0x410 [ 778.991417][T15261] ? __fget_files+0x2a/0x410 [ 778.991432][T15261] do_writev+0x1b6/0x360 [ 778.991446][T15261] ? __pfx_do_writev+0x10/0x10 [ 778.991458][T15261] ? do_syscall_64+0x100/0x230 [ 778.991473][T15261] ? do_syscall_64+0xb6/0x230 [ 778.991487][T15261] do_syscall_64+0xf3/0x230 [ 778.991501][T15261] ? clear_bhb_loop+0x35/0x90 [ 778.991520][T15261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.991543][T15261] RIP: 0033:0x7faa59185d29 [ 778.991560][T15261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.991572][T15261] RSP: 002b:00007faa5a04d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 778.991587][T15261] RAX: ffffffffffffffda RBX: 00007faa59375fa0 RCX: 00007faa59185d29 [ 778.991596][T15261] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 778.991605][T15261] RBP: 00007faa59201b08 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 778.991614][T15261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.991622][T15261] R13: 0000000000000000 R14: 00007faa59375fa0 R15: 00007ffc96b36388 [ 778.991636][T15261] [ 779.793930][T15261] syz.8.2632 (15261): drop_caches: 2 [ 779.868660][T13382] Bluetooth: hci2: command tx timeout [ 780.122982][ T8915] bridge_slave_1: left allmulticast mode [ 780.130108][ T8915] bridge_slave_1: left promiscuous mode [ 780.137129][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.186814][ T8915] bridge_slave_0: left allmulticast mode [ 780.195997][ T8915] bridge_slave_0: left promiscuous mode [ 780.205296][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.546981][ T8915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.576098][ T8915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.590266][ T8915] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 780.600566][ T8915] bond0 (unregistering): Released all slaves [ 780.638017][T15261] syz_tun (unregistering): left allmulticast mode [ 780.682088][ T8915] IPVS: stopping master sync thread 10713 ... [ 780.701518][T15274] syz_tun (unregistering): left allmulticast mode [ 781.029100][ T8915] hsr_slave_0: left promiscuous mode [ 781.037727][ T8915] hsr_slave_1: left promiscuous mode [ 781.047117][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.061177][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.076465][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.085824][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.099459][ T8915] veth1_macvtap: left promiscuous mode [ 781.106075][ T8915] veth0_macvtap: left promiscuous mode [ 781.116107][ T8915] veth1_vlan: left promiscuous mode [ 781.122531][ T8915] veth0_vlan: left promiscuous mode [ 781.324024][ T8915] team0 (unregistering): Port device team_slave_1 removed [ 781.336356][ T8915] team0 (unregistering): Port device team_slave_0 removed [ 781.788548][ T8915] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.839957][ T8915] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.911971][ T8915] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.990591][ T8915] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.072481][ T8915] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.153172][ T8915] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.204071][ T8915] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.261909][ T8915] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.339841][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.351713][ T8915] bridge_slave_1: left allmulticast mode [ 782.359904][ T8915] bridge_slave_1: left promiscuous mode [ 782.366696][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.379488][ T8915] bridge_slave_0: left allmulticast mode [ 782.386546][ T8915] bridge_slave_0: left promiscuous mode [ 782.395157][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.406796][ T8915] bridge_slave_1: left allmulticast mode [ 782.416201][ T8915] bridge_slave_1: left promiscuous mode [ 782.423095][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.434939][ T8915] bridge_slave_0: left allmulticast mode [ 782.441723][ T8915] bridge_slave_0: left promiscuous mode [ 782.449716][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.803072][ T8915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.814686][ T8915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.826024][ T8915] bond0 (unregistering): Released all slaves [ 782.841823][ T8915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.854519][ T8915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.866206][ T8915] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 782.877154][ T8915] bond0 (unregistering): Released all slaves [ 782.887872][ T8915] bond0 (unregistering): Released all slaves [ 783.295928][ T8915] hsr_slave_0: left promiscuous mode [ 783.306490][ T8915] hsr_slave_1: left promiscuous mode [ 783.314071][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.323247][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.335818][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.344983][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.358706][ T8915] hsr_slave_0: left promiscuous mode [ 783.365857][ T8915] hsr_slave_1: left promiscuous mode [ 783.372634][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.383785][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.393300][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.403801][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.416188][ T8915] veth1_macvtap: left promiscuous mode [ 783.423230][ T8915] veth0_macvtap: left promiscuous mode [ 783.429988][ T8915] veth1_vlan: left promiscuous mode [ 783.436299][ T8915] veth0_vlan: left promiscuous mode [ 783.443926][ T8915] veth1_macvtap: left promiscuous mode [ 783.450566][ T8915] veth0_macvtap: left promiscuous mode [ 783.457239][ T8915] veth1_vlan: left promiscuous mode [ 783.464369][ T8915] veth0_vlan: left promiscuous mode [ 783.678748][ T8915] team0 (unregistering): Port device team_slave_1 removed [ 783.715601][ T8915] team0 (unregistering): Port device team_slave_0 removed [ 783.896259][ T8915] team0 (unregistering): Port device team_slave_1 removed [ 783.932000][ T8915] team0 (unregistering): Port device team_slave_0 removed