last executing test programs: 6m3.579481005s ago: executing program 3 (id=58): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 6m3.234179252s ago: executing program 3 (id=64): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000013c0)) read$dsp(r0, &(0x7f0000000440)=""/171, 0xab) 6m3.020112428s ago: executing program 3 (id=68): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x2df) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)='4', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r3, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ksm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000040}, 0x80) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r7, &(0x7f00000061c0)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x61) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) sendmmsg(0xffffffffffffffff, &(0x7f000001f500)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6m1.866223674s ago: executing program 3 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x739e5beb50a87d2b) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x508, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1000f0000) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='svc_stats_latency\x00', r3}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 6m0.912003063s ago: executing program 3 (id=91): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0xfff, "fe0c9b21c872a2f28f8019c5df98ac6856a01954f2e640ad7d02e385421e1cb7", 0x2}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) getpeername(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000006112340095000007000000003cd940badbdf5890ffcf35ec5ab58e8ef72e62cd10b2c60f271747417c7d92a86dfc44eaf1fd53dc3995a7b7e41225d752b864a7402d7d3f5fa410310fc20aa8bd0302e0ed1703c848aa03f88431c57ade6c2ffe8ebaa328ceeade609b9afe2098008ae5bad664017c2874a7e1419933b8599437c834db526bd79c942f8af2f4d86cd40fc996"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = socket(0x0, 0x803, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000700)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x1ba}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x6, 0x3) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000140)={r7}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000018c0)={r7, @in={{0x2, 0x4e20, @multicast2}}, 0x5, 0x7, 0x27, 0x4, 0xc, 0x3, 0x7}, &(0x7f0000001980)=0x9c) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') pread64(r8, &(0x7f0000000880)=""/4096, 0x1000, 0x400000000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000683dc9a1f1e3c1ca8c5c37ce80524e000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000000000000000b000"/28], 0x48) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r9, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) 6m0.699228052s ago: executing program 3 (id=94): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x3fb, 0x1c3140) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x101, "84724c2face6194268a853dbfdcd995c8868fb26bd923eec7a5dba7a51bed122", 0x6, 0x9e4, 0xde5f, 0xb, 0x9, 0x0, 0x480, 0x0, [0x2, 0x7fff, 0x10000, 0x10000]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}}, 0x0) 6m0.543746638s ago: executing program 32 (id=94): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x3fb, 0x1c3140) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x101, "84724c2face6194268a853dbfdcd995c8868fb26bd923eec7a5dba7a51bed122", 0x6, 0x9e4, 0xde5f, 0xb, 0x9, 0x0, 0x480, 0x0, [0x2, 0x7fff, 0x10000, 0x10000]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}}, 0x0) 5m14.271721124s ago: executing program 1 (id=564): getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) 5m14.271607286s ago: executing program 1 (id=565): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1, 0x254c, 0x0) 5m14.223994117s ago: executing program 1 (id=566): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) listen(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 5m14.223726245s ago: executing program 1 (id=567): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x20000, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='./bus\x00') linkat(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000240)='.\x00', 0x1200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x14927e, 0x1c1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x2, @mcast1}, {0x2, 0x0, 0x4, @private1}, r3}}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7e54}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) msgget(0x2, 0x0) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, 0x0, 0x94, 0x0) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 5m14.084046397s ago: executing program 1 (id=568): syz_clone(0x11, 0x0, 0xf400, 0x0, 0x0, 0x0) 5m13.893511956s ago: executing program 1 (id=569): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (fail_nth: 17) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r5}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7c) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendfile(r4, r3, 0x0, 0x180000504) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000240)={0x2, r3}) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x400c855) 5m13.887193131s ago: executing program 33 (id=569): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (fail_nth: 17) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r5}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7c) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendfile(r4, r3, 0x0, 0x180000504) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000240)={0x2, r3}) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x400c855) 4m16.26201305s ago: executing program 0 (id=1271): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 4m16.133107239s ago: executing program 0 (id=1273): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001fff000000000900000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32], 0x44}}, 0x4) (fail_nth: 9) 4m15.93327874s ago: executing program 0 (id=1276): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="f8c21f4bc6399e4abef3caa95c18e756720b0e0d2ca0dfc6a7764ee163ed9b27210966662239d539b0b8979c58453bfe87a23b32e26af342b545adecbb34d6ec75fe8b831db2d585923e3ef4d58489bad96e5c71f3dee89d89fe1aaf5eb7199ac9c0da47a2ee58c7efa44ec58ce18a4ef43112bd575a539b40", 0x79}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c00000000010108000000000000000002000000ffff00801400018008000100e000000108000200e0000001060003400002002f5b00028014eb6cff87f500605dcc51619ebebd000180080001000000000008000200e00000010c000280050001003a00000006000340000000000c000280050001008800000008000740000000000400108024001980080002000800000008000200000800000800"], 0x9c}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x5e, &(0x7f0000000240)={0x0}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x3) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0xfe, 0x44, 0x5, 0x0, @mcast1, @private0, 0x8000, 0x40, 0x7, 0x8000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', r4, 0x8, 0x10, 0x100, 0x8db, {{0x15, 0x4, 0x3, 0x20, 0x54, 0x68, 0x0, 0xb6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0x18, 0x36, 0x0, 0x9, [0xdab, 0x1885, 0x0, 0x1, 0x8]}, @lsrr={0x83, 0x27, 0x4f, [@broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, @multicast1, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1]}]}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x800) syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') 4m15.836573998s ago: executing program 0 (id=1278): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/98, 0x62) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 4m15.653407655s ago: executing program 0 (id=1279): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1, 0x2500, 0x6c000000) 4m13.602998797s ago: executing program 0 (id=1289): r0 = creat(&(0x7f00000025c0)='./file0\x00', 0x10) timerfd_settime(r0, 0x1, &(0x7f0000003800)={{0x0, 0x3938700}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xe803}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESDEC]) openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x10402, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000003ac0)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f00000003c0)=""/193, 0xc1}, {&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f0000000240)=""/22, 0x16}, {0x0}, {&(0x7f0000000640)=""/180, 0xb4}, {&(0x7f0000000700)=""/162, 0xa2}, {&(0x7f00000007c0)=""/204, 0xcc}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8, &(0x7f00000009c0)=""/155, 0x9b}, 0x4}, {{&(0x7f0000000a80)=@x25, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000b00)=""/53, 0x35}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/133, 0x85}, {&(0x7f0000001c00)=""/126, 0x7e}, {&(0x7f0000001c80)=""/164, 0xa4}, {&(0x7f0000001d40)=""/19, 0x13}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/41, 0x29}], 0x8, &(0x7f0000003c40)=""/133, 0x85}, 0x4}, {{&(0x7f00000005c0)=@ax25={{0x3, @rose}, [@rose, @remote, @rose, @rose, @remote, @null, @netrom, @bcast]}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f80)=""/42, 0x2a}, {&(0x7f0000001fc0)=""/183, 0xb7}], 0x2, &(0x7f00000020c0)=""/93, 0x5d}, 0x80e}, {{&(0x7f0000002140)=@generic, 0x80, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/177, 0xb1}], 0x1, &(0x7f00000022c0)=""/141, 0x8d}, 0x2}, {{&(0x7f0000002380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002400)=""/215, 0xd7}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2, &(0x7f0000003540)=""/255, 0xff}, 0x2}, {{&(0x7f0000003640)=@nl, 0x80, &(0x7f0000003a00)=[{&(0x7f00000036c0)=""/104, 0x68}, {&(0x7f0000003740)=""/28, 0x1c}, {&(0x7f0000003780)=""/27, 0x1b}, {&(0x7f00000037c0)=""/140, 0x8c}, {&(0x7f0000003880)=""/22, 0x16}, {&(0x7f00000038c0)=""/109, 0x6d}, {&(0x7f0000003940)=""/185, 0xb9}], 0x7, &(0x7f0000003a40)=""/98, 0x62}, 0x46afbf58}], 0x6, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x80000000}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000000)=0x6, 0x4) 4m13.577914648s ago: executing program 34 (id=1289): r0 = creat(&(0x7f00000025c0)='./file0\x00', 0x10) timerfd_settime(r0, 0x1, &(0x7f0000003800)={{0x0, 0x3938700}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xe803}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESDEC]) openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x10402, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000003ac0)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f00000003c0)=""/193, 0xc1}, {&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f0000000240)=""/22, 0x16}, {0x0}, {&(0x7f0000000640)=""/180, 0xb4}, {&(0x7f0000000700)=""/162, 0xa2}, {&(0x7f00000007c0)=""/204, 0xcc}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8, &(0x7f00000009c0)=""/155, 0x9b}, 0x4}, {{&(0x7f0000000a80)=@x25, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000b00)=""/53, 0x35}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/133, 0x85}, {&(0x7f0000001c00)=""/126, 0x7e}, {&(0x7f0000001c80)=""/164, 0xa4}, {&(0x7f0000001d40)=""/19, 0x13}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/41, 0x29}], 0x8, &(0x7f0000003c40)=""/133, 0x85}, 0x4}, {{&(0x7f00000005c0)=@ax25={{0x3, @rose}, [@rose, @remote, @rose, @rose, @remote, @null, @netrom, @bcast]}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f80)=""/42, 0x2a}, {&(0x7f0000001fc0)=""/183, 0xb7}], 0x2, &(0x7f00000020c0)=""/93, 0x5d}, 0x80e}, {{&(0x7f0000002140)=@generic, 0x80, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/177, 0xb1}], 0x1, &(0x7f00000022c0)=""/141, 0x8d}, 0x2}, {{&(0x7f0000002380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002400)=""/215, 0xd7}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2, &(0x7f0000003540)=""/255, 0xff}, 0x2}, {{&(0x7f0000003640)=@nl, 0x80, &(0x7f0000003a00)=[{&(0x7f00000036c0)=""/104, 0x68}, {&(0x7f0000003740)=""/28, 0x1c}, {&(0x7f0000003780)=""/27, 0x1b}, {&(0x7f00000037c0)=""/140, 0x8c}, {&(0x7f0000003880)=""/22, 0x16}, {&(0x7f00000038c0)=""/109, 0x6d}, {&(0x7f0000003940)=""/185, 0xb9}], 0x7, &(0x7f0000003a40)=""/98, 0x62}, 0x46afbf58}], 0x6, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x80000000}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000000)=0x6, 0x4) 3m15.957202417s ago: executing program 2 (id=1626): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r1 = openat$selinux_relabel(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$selinux_access(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x79d, 0x0, 0x0, 0x0, 0x104}) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000380)=""/219, 0xdb}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r5 = fcntl$dupfd(r2, 0x0, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xffffff17, 0x11, r5, 0x0) fcntl$setflags(r1, 0x2, 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x18, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r7 = dup(r1) write$FUSE_DIRENT(r7, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) ppoll(&(0x7f0000000240)=[{r6, 0x2341}, {r7, 0x4}, {r8, 0x202}, {r5, 0x20}, {r2, 0x90}, {r9, 0x2}, {r7, 0x8080}, {r1, 0x214}], 0x8, &(0x7f0000000280), &(0x7f0000000300)={[0x6]}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7) 3m15.792631396s ago: executing program 2 (id=1627): get_robust_list(0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000100021040100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010062726964676500002400028005002500010000000500180001"], 0x54}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000c0000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) sendto$packet(r1, &(0x7f0000000180)="0b030600e2ff020002004788aa96a13bb1000011000088ca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000008700000008000300", @ANYRES32=0x0, @ANYBLOB="05092a00100100250300000075140000000010f8b5f8b0f84e9c00aff749ab2a10638325000000ffffffffffff000000000000000000000000080211000000000000008c18000009728837faa3eb0208ef3fecc2dae409f4a41dd9651626a0000000753a99b9d2a54c0bdfda2f18b0b8440657d3a6ed5b1c0f163750d74a50d6b0610ac383d17a281bf6d16eb22439d626913213ff76ce7016d8109ac18c06592392b651a096412b7d3d6f9ccb1ce125527cbaa6b4ee0f0b31f80e758eac62d6da722fd15839aa1c41836716dedf52ad763f7385b4b962ea51fde6b17fd5945df6efbc91f8583fb44c12c8fc2a267b2f1d6e84eba135978e3deeb540afa915b7c9a4a19bddb3834b08ae622fe1c8e4a9ae16040c50416acb33538cb4baa7dfe22f48061503a00b8a6fa90ce3e0a9df990f5308e6dbc8d222e8702400ed0fc0118287aa490b96869f1292bbac698028e7179a93f9fdd7f7769d85d60e85182391fab815ca8ec4760cbe2083fb07e9a44103be697e72f26a5efbf888b07a40d08f0efd9886e91bfe840821ac07873983899f37cd0d04c6089c8755bc53d9a59792131490806cae86c7260f8809e85e8db5506d3de1620471320c3ea9fe9213b2bda97779ecfc1849bdbff51e311744e8a99e505caf1150bd451a80c62af27e34d68a57709d739c2883129f2a066c78eae87d0e306e1d911e666593dabe34a1e01f39060b39a0b3a717caf615377a506c2f1a1e91a1ef666dc371d87bf2d08f371b85e6e1cd7b0c985b8d6f3d03c7986e1f074647d7e50fd4fce6e439f2d6018b260b8da99b491f3088fbdd9563dd637773c3f93bf873717a9824f573135e334d99972a5bc69cb43ed8e998ea60061e0c75c54a0b115066d5d6caccf4565e7b9afa198237acd43b09e19549da12fa751fe296d8350e1ac625700d401c50ce72b34975a240bc4cf188e281904a6071b20aaeac7cd64cd3fd0aca33d60c6f6c8fa8c9ccc6a7d79b34a9be3dec18d91743ccf7c3004b20da583458d3f745f57c671b980ba914e0818c79d93cecee784e2b545b67bd6a7014420d3e5c2239ec9373d10e7a3460d0045fbd9ba3d52fa6db16c7329cf4adbf28afbfd90fd86ca3e4dc2646a249efeadb9a83af46d9ee5ad2223dad5bf86c9586ddf6ea597420bcd85cf6640ec3d7403025c3200eafe063185231a9948f794ad0e1ad6e77b11e450cf31b4117659518acf7bc8247862554dc43ddfbb09c37ac080780722b754da507e5013cbecb600fb15bf14480d6b0d5ff3e15aa4e22681374a65df152b94ac721ba86a26a402241a5a0663803c9ed86d1f75acae4099b3e9444682568589ecf7994430466c24665114909c8eab7d2145811d1ab88354419ca0692a4b6c69c9219e8d2daf45c87343cd8dd3d7a80fecd2f00f1bbd0d8b619a68928002ef83fc81ee6be6770f83dd71e9b09334de52b224a2029227bb815c2d47692c9d94dd4c2b98ed370aa16e0aad7716d7fce2e0a84e8cc86c497fff9013a99df9d2f0d04e1d807f9c705cc96e032af610889837b8d35c34474723f32f5d14e8b29b4e86e1505f9716ab0a0c91afe78f878658ce899957923355fa906857f1abb2e5bc279f6e4145e62e29169b2b8a0620de16878143e7605088306a2461e8557d728b9c986d68a642137f7bdb233a52e59cfe81c282b992d499ba53996b21f398b2e76dd4bba1e90f1f540cf38f3d21c51be53b8a5ed850a084f71d396cbe71fd495df0d3190f30bea2ec0e11854d3e728ee90d8970738ca68b3296aa1fb6149ea7e97d0cd40e249665d1095030a2f6caa917959b17a28946be3464511d429653d0a5a5498b2f3e9f5e82390b0f77e34cfb5f126eb0585859771f636ba030cca4176132486ec0365926eacdf7a8db4721b891e86530d2c636184703caa223feebe2bc3700e0006d1bfa8d31037548eea2ffee48e492ccc2c0e5e5d5ff2cabe510850d230cd76bcbfc57e4f93e11f02c90207491c4b1921c2ba5b4e27f090af8abc810225517035db14cc5a46d26ce2a66587091de2d90734f9b0b1418d94e013a60aee2e291b46da45ae31bee68e6fa2801253cbb98e9719408e2cedd73f734548c70cf9c08aefc2c8d4b08085f1bc2c9fab46b40d6fa69d5a0d96d455bfb2c53ae13858f9518dda35a9d56a0f41619a4cb46b1da1c59aad2e70f94f29477254d5023048d245be2dfa2d29ab575adef250f4dd6facaa839f722b2d3c5bb68a23eb9552843fd4d8607af3f82b7293e04a44c175e15386ddbf356b25c58604b6b5a114c9e6a439cb93d359c2475b452c733ba457e6bb2f29294d77bd95e5aee658c37cd2a648d7ff3dd7243f083763373d1f365a56189afc8056c47851ce7aff9ff80f0c2bf55312e8c786f12e599ff2b7133ffc8f5a15b4a94e53fe501821f70c5a4ef51e22db4b71e4997acb3f058c597832f387c3a23f7b3aefb5b73e00499dfd438b49afcdedfafbd2f8dfa578a28126b1402037378ff745ce76f69f0a4994555974cc8a98d4c7d451ca4907faed0b9423fd6083937fd776dae36b1d2f7aecc8c391b7d7c0558ca26e3f3242fc64c41328bbd536584fc77c6c01c0773e7ab2882f020effa0b66ecd320c45912f9eb2117c6ee98b789e4113a45d9926d4dccbc8db91432235d0441d460028d0b57161471a6d7a60cdce37771a9ed31b84aa697e96f9f098ae191f1170086d8c63e3b60eb5a2beacce5d97afcd5bfa0b432e78b4335ae1421cff8fef02a4f3de83ec1b2916965f3821b6736c37c39b51998eb0e3d7b00b9061e77351216336a5a70b260a3edd3e4aef0859d041f96c95fd5695a94a63c0fd7f6104fa8a8296d640ca4ba5475fd762d18fa8554af9e86f55025e0228d691916c13a3c3a015496282b1af1b5e7657a692cccd77869358dde80e94168251277cc96ec586a899caf98cd2fbfe1b8e4a456ed9961ace5b1772b541ad8c1f217c5f251b189b2ced86b2346b195dcee40f7da53d107b6406620443f4d8934ad4673b1953d3ebe80f6ddb876e297f34f93308bce3feb416952a70430a4663776240c01ffac965a1c6f52df977fa5e5b05a59a1c4e8b4a3ead63241687ce4c6039e292842ed88aa7f8cd8deb8e72392914ad681fdb35fa14c82af795388e2ff3fc3a9804b58acd2e7f1ee07d0cca553abd6b3aba8a34eb0fb748e48bffcea3dde525154a2ddf7e0f4930d0cc3b76cb04a17b5afa00b8c972db5111d6e0c25bb172552a74b95600"], 0x924}}, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000009c0)={0x2, {0x2, 0x401, 0x8, 0x0, 0x0, 0x4}}) r5 = getpgid(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000940)={0x1, 0x4, 0x3, 0xfac, r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="000000000000f03d000000000700000004"], 0x18}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r7, 0x8b32, &(0x7f0000000040)) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025642531010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') read$FUSE(r8, &(0x7f00000022c0)={0x2020}, 0x4d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r8) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030500ffffff9e00000000000000", @ANYRES32=0x0, @ANYBLOB="05000000000000002000128009000100697069700000000010000280080014000000000004001300"], 0x40}}, 0x0) 3m15.70290506s ago: executing program 2 (id=1628): fanotify_init(0x4, 0x0) (async) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000001040)=0x4) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000000)=0x68f, 0x6, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fanotify_mark(r0, 0x4, 0x44000039, r0, 0x0) r8 = syz_open_dev$audion(&(0x7f0000000180), 0x6, 0x20e002) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f00000001c0)="66470f38809873010000470f0866b8b7008ee865400f01c90f08f244ab400f3066b82a010f00d00f01f2b9800000c00f3235004000000f30", 0x38}], 0x1, 0x1, &(0x7f0000000380), 0x0) (async) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$SG_GET_REQUEST_TABLE(r10, 0x2279, 0x0) pread64(r0, 0x0, 0x0, 0x0) io_uring_setup(0x80260d, &(0x7f0000000080)={0x0, 0x2391, 0x400, 0xfffffffc, 0x25c}) 3m11.832825854s ago: executing program 2 (id=1649): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1026864, &(0x7f0000000b40)=ANY=[@ANYBLOB='max=-']) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) listen(r7, 0x0) 3m11.722752143s ago: executing program 2 (id=1651): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x1d8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x25}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5a}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x8000}, 0x8084) (async) socket$igmp6(0xa, 0x3, 0x2) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000047c00000400000014000180080016000000000006000600080600"], 0x1034}}, 0x0) 3m11.640543828s ago: executing program 2 (id=1655): get_robust_list(0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000100021040100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010062726964676500002400028005002500010000000500180001"], 0x54}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000c0000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) sendto$packet(r1, &(0x7f0000000180)="0b030600e2ff020002004788aa96a13bb1000011000088ca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000008700000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x924}}, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000009c0)={0x2, {0x2, 0x401, 0x8, 0x0, 0x0, 0x4}}) r5 = getpgid(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000940)={0x1, 0x4, 0x3, 0xfac, r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="000000000000f03d000000000700000004"], 0x18}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r7, 0x8b32, &(0x7f0000000040)) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025642531010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') read$FUSE(r8, &(0x7f00000022c0)={0x2020}, 0x4d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r8) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030500f0ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="05000000000000002000128009000100697069700000000010000280080014000000000004001300"], 0x40}}, 0x0) 3m11.619308894s ago: executing program 35 (id=1655): get_robust_list(0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000100021040100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010062726964676500002400028005002500010000000500180001"], 0x54}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000c0000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) sendto$packet(r1, &(0x7f0000000180)="0b030600e2ff020002004788aa96a13bb1000011000088ca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000008700000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x924}}, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000009c0)={0x2, {0x2, 0x401, 0x8, 0x0, 0x0, 0x4}}) r5 = getpgid(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000940)={0x1, 0x4, 0x3, 0xfac, r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="000000000000f03d000000000700000004"], 0x18}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r7, 0x8b32, &(0x7f0000000040)) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025642531010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') read$FUSE(r8, &(0x7f00000022c0)={0x2020}, 0x4d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r8) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030500f0ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="05000000000000002000128009000100697069700000000010000280080014000000000004001300"], 0x40}}, 0x0) 2m58.541377395s ago: executing program 6 (id=1863): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, r1, 0x1}, 0x14}}, 0xfff0) 2m58.54068842s ago: executing program 6 (id=1865): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0, 0xfffffffffffffe6c, r4, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000700)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000800)={0x0, 0x80, 0xa, 0x34325241, 0x2, [r7, 0x0, 0x0, r7], [0x401]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000080)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 2m58.482219474s ago: executing program 6 (id=1867): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000008100000004000000644e", @ANYRES32=0x0, @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r4, 0x0) flock(0xffffffffffffffff, 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, 0x0, 0x0}, 0x20) 2m57.441974431s ago: executing program 6 (id=1883): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="0307047079000000000001"], 0x18}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/../file0\x00'}) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="0307047079000000000001"], 0x18}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/../file0\x00'}) (async) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async) 2m57.291259261s ago: executing program 6 (id=1889): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) timerfd_create(0x0, 0x0) socket(0xa, 0x3, 0x3a) r3 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x4c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) timerfd_create(0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x4000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) (async) 2m57.199390551s ago: executing program 6 (id=1893): timerfd_create(0x9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000", @ANYRES8=r2], 0x125) read$eventfd(r0, &(0x7f0000000080), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 2m57.177134217s ago: executing program 36 (id=1893): timerfd_create(0x9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000", @ANYRES8=r2], 0x125) read$eventfd(r0, &(0x7f0000000080), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 54.996203848s ago: executing program 7 (id=3402): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040600000000"], 0x7) 54.150683087s ago: executing program 7 (id=3407): sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800938003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 53.991040251s ago: executing program 7 (id=3410): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x448}}, 0x0) 53.881054402s ago: executing program 7 (id=3414): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f0003", 0x2d}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffc7d, 0x0}, 0x0) 52.989856015s ago: executing program 7 (id=3421): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(&(0x7f00000001c0)=@filename='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x224d080, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) 52.989550845s ago: executing program 7 (id=3422): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x31, &(0x7f0000000100), &(0x7f0000000180)=""/49, 0x0, 0x0, 0x7e, 0xe9, &(0x7f00000001c0)="dc8e727d56a784b41646704bacd1ae3860a67ff6ed6a8974e1d7d4b898c632c457c42b0e85ea622d4dcb6b48b671d76818c7c2840418816a0173b719b8cb2431d2a59d53abacc4a6826ae0b03db7118d523fdc6fb0c85ddf14d73f83813aedecf2ad73f538792b0bdfcc540fda1512de3e71ba657c80a2a3f7df3e646c95", &(0x7f0000000280)="8d2d025a33a246da632bf02ea605b93c3159e005459631aa1431635205dc0c711de48b623d35b820dde27df660281bde376dd9d07145a9611a8834dc680c361ff1501170332580db20ae10c3424b93ca3a5e8069fbddcc20cc242f72cf9d06dffa7ad2f3cea075ba140e0b8068a550caa6c0ec6bfc77df1cfa04af19c3dab6287bf86727e2ab007e571a5bee715758ddb7318e312d6b5ce6168bd01523367ab61b26c3d70668ba9372eedfabf0d54cf32c7ecff30180d8b799266bf823272380fd0e6ee072bb07403265755c15194255cda51d3a7a9e23f0e804bc595063aad30bfeb37ebab70ae794", 0x0, 0x0, 0x3}, 0x50) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000024000100000100000000000000000000060004000000000006"], 0x5c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000b40)={0x1, 0x0, 0x1, &(0x7f0000000b00)={0x0, "5a54f9e02cb612f2ab8371533b1a289255cf9fdfebfb57089d8a86a476506dd5e4"}}) (async) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5}, 0x10) (async) r6 = getpid() process_vm_readv(r6, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) (async) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) (async) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r10, @ANYBLOB="44000280400001002408806aa5f351770a57b9108da83e89d17a568611f0eafbfaec14b0000071756575655f6964000000000000000000000000000040050003000300000008000400038000b55362e20e", @ANYRES32=r12, @ANYBLOB], 0x60}}, 0x0) memfd_secret(0x0) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) 52.436776412s ago: executing program 4 (id=2864): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000440)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x30}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x4) accept(r5, &(0x7f0000000080)=@can, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 43.216761741s ago: executing program 4 (id=2864): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000440)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x30}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x4) accept(r5, &(0x7f0000000080)=@can, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 37.370877458s ago: executing program 37 (id=3422): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x31, &(0x7f0000000100), &(0x7f0000000180)=""/49, 0x0, 0x0, 0x7e, 0xe9, &(0x7f00000001c0)="dc8e727d56a784b41646704bacd1ae3860a67ff6ed6a8974e1d7d4b898c632c457c42b0e85ea622d4dcb6b48b671d76818c7c2840418816a0173b719b8cb2431d2a59d53abacc4a6826ae0b03db7118d523fdc6fb0c85ddf14d73f83813aedecf2ad73f538792b0bdfcc540fda1512de3e71ba657c80a2a3f7df3e646c95", &(0x7f0000000280)="8d2d025a33a246da632bf02ea605b93c3159e005459631aa1431635205dc0c711de48b623d35b820dde27df660281bde376dd9d07145a9611a8834dc680c361ff1501170332580db20ae10c3424b93ca3a5e8069fbddcc20cc242f72cf9d06dffa7ad2f3cea075ba140e0b8068a550caa6c0ec6bfc77df1cfa04af19c3dab6287bf86727e2ab007e571a5bee715758ddb7318e312d6b5ce6168bd01523367ab61b26c3d70668ba9372eedfabf0d54cf32c7ecff30180d8b799266bf823272380fd0e6ee072bb07403265755c15194255cda51d3a7a9e23f0e804bc595063aad30bfeb37ebab70ae794", 0x0, 0x0, 0x3}, 0x50) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000024000100000100000000000000000000060004000000000006"], 0x5c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000b40)={0x1, 0x0, 0x1, &(0x7f0000000b00)={0x0, "5a54f9e02cb612f2ab8371533b1a289255cf9fdfebfb57089d8a86a476506dd5e4"}}) (async) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5}, 0x10) (async) r6 = getpid() process_vm_readv(r6, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) (async) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) (async) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r10, @ANYBLOB="44000280400001002408806aa5f351770a57b9108da83e89d17a568611f0eafbfaec14b0000071756575655f6964000000000000000000000000000040050003000300000008000400038000b55362e20e", @ANYRES32=r12, @ANYBLOB], 0x60}}, 0x0) memfd_secret(0x0) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) 30.513079525s ago: executing program 4 (id=2864): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000440)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x30}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x4) accept(r5, &(0x7f0000000080)=@can, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 22.350771243s ago: executing program 4 (id=2864): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000440)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x30}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x4) accept(r5, &(0x7f0000000080)=@can, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13.338563872s ago: executing program 4 (id=2864): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000440)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x30}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x4) accept(r5, &(0x7f0000000080)=@can, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.850759174s ago: executing program 5 (id=3844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000000)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC=r1], 0x30}}, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000280), 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x58}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f00006f0000/0x1000)=nil, 0x1000, 0x800007) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000008"], 0x24d8}], 0x1}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0xfffffe74) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x6d}, &(0x7f0000000000), &(0x7f0000000100)) r6 = io_uring_setup(0x91f, &(0x7f00000004c0)={0x0, 0x0, 0x100a, 0x0, 0x1f6, 0x0, r5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r6, 0x6, &(0x7f0000000040)=[0xffffffffffffffff], 0x1) 3.585662958s ago: executing program 4 (id=2864): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000440)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x30}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x4) accept(r5, &(0x7f0000000080)=@can, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.286917871s ago: executing program 5 (id=3846): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000300)=0x200000000) r3 = socket(0x10, 0x803, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x3, 0x3, 0x5, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4894}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x437, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x14cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010302}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @empty}}}], 0x20}}], 0x1, 0x0) 2.286396241s ago: executing program 9 (id=3847): io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x5}) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000009c0)) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_destroy(r0) sendmmsg$inet(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)="dab7e894387f66dd4e94792ba4b869b9c30de7a68f1e88e904f6196b2f08ffbcfbc9dcee44326af0c2293a74493c96448e7f675009c6e7a872ff451bba9d604f1f55345d34551853184141cb9495e0ccce6b16c25d6cf2df72ed43a9877afa52d392ff803e5d33e90791d831e1415ce6", 0x70}, {&(0x7f0000000540)="83e8531c0d936fc8ce41be9ab99dee09", 0x10}], 0x2}}], 0x2, 0x0) 2.201059935s ago: executing program 5 (id=3848): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x8}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0x17}]}]}, 0x2c}}, 0xc000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) 2.200707859s ago: executing program 5 (id=3849): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x80003, 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='g']) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='g']) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000fc0f00000a00000000000000", @ANYRES32, @ANYBLOB="000000000082092435ba61ae773e597723e00000000000000000000000000000000dc53ac8535c000110234b6ec9ef1067a15de71e20657c6e62504907a2afb0d2a1d0da0d40cd80491357cdeac4a19fc275de2fe1afa9dfa4bd07a1672b2c77f752789746233008f8b07cf030e772d78d69b9da5c6b8e228ea8e555013593535b41d53b1e84da76e1f8536f5c1837e05aac1c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, 0x0, 0x30, 0x12, @val=@uprobe_multi={&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)=[0x4], 0x0, 0x4, 0x100000}}, 0x40) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x4060, 0x1) (async) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x4060, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, &(0x7f0000000340)) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f0000000040)) read$FUSE(r4, &(0x7f000000c3c0)={0x2020}, 0x2020) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x1545, &(0x7f0000002d00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d92150f3a"], 0x0) (async) syz_emit_ethernet(0x1545, &(0x7f0000002d00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d92150f3a"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.076593308s ago: executing program 5 (id=3850): syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) r2 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() (async) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) writev(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = syz_io_uring_setup(0xd5, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0xffffffffffffffff, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) bind$inet6(r4, 0x0, 0x0) (async) bind$inet6(r4, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x40046207, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) r10 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r10, 0xc04c6100, &(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) bind$packet(r11, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES64=r6, @ANYRES8=r3, @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES64=r6, @ANYRES8=r3, @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.890238651s ago: executing program 5 (id=3853): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x1) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da24"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x0) syz_usb_disconnect(r1) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x400, 0x121000) ioctl$LOOP_CHANGE_FD(r3, 0x1260, 0xffffffffffffffff) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xfffffffc) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r4, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002240)=""/4120, 0x1018}], 0x1, 0x0, 0x0, 0x407006}, 0x104) 1.360857199s ago: executing program 9 (id=3858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x4}]}]}, 0x28}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSTATu(r4, &(0x7f0000000c00)={0x50d, 0x7d, 0x0, {{0x500, 0x1f7, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x55, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50d) 863.474232ms ago: executing program 8 (id=3867): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000740)=ANY=[@ANYBLOB="0400000000000000070000000100000000005782fad89a5a2f84000007000000000000000000000000000000000000000000000000000000030000000b8c33ca00000000000000000100000003000000070000000000f4be6067000000000000000000000000000000080000040000000000c20e0000000055edafb000000000000000000000000000000000000067d000000200"]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x2, 0x1, 0x4}], 0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2f0000000800000004000000", @ANYRES32, @ANYBLOB="55c40c176959a564dbaa74a50a0116d216c772604df1f0cb50b0a533ea62f33941309c2de8eca7cd48676501115b09b6b9be76d01b12101f16f038419c95aee9a1bc7187b9888d8397864650555c1272bf56d6ed1854e8d7949f60cef43a1f9c6b5714e9e2c186240d2cf63b124d19afe11f7b298ffb7f4bb70cd6443595a50142e28a8a7508c3c8a6fb62d2e9729bf68554234094bb6d865e3e48495417ddc46fd6fe9fdcd2fc6ae77e352803c7a7212d6c0418c91dc779e75e0caf923fc902cf9e6abe5609fec4969e15a7", @ANYRES64=0x0], 0x20) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x200}}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x6, 0x2, '\re\f', 0x200, 0x6}]}}}, 0x13) 649.039415ms ago: executing program 9 (id=3868): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001fff000000000900005865000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32], 0x44}}, 0x4) 648.582051ms ago: executing program 8 (id=3869): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@verity_on}, {@userxattr}]}) futex(&(0x7f000000cffc)=0x1, 0x4, 0x1, 0x0, &(0x7f0000000200), 0x1) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000000080)={0x58, 0x0, r1, [{0x1400000000000007, 0x0, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x0, 0xa, 0x0, '/>\rv/cuse\x00'}]}, 0x58) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) (async) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x12}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) r7 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x1f66, 0x555, 0x7, 0xb7, 0x3, 0x36b, 0x9, 0xb, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338300e8cb966058f66908611a2da3e15d07ea4bbea3d646bddcbf88d74a8f9b16f89ac1296a3ebe1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe659aabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf93360c81be9c56781a57bf6ac5bd26db48b73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f6635"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000000c0)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) (async) r10 = accept$alg(r6, 0x0, 0x0) recvmmsg(r10, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001880)=""/8, 0x8}, {&(0x7f00000001c0)=""/125, 0x7d}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001600)=""/85, 0x55}], 0x1}}], 0x2, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) inotify_add_watch(r11, &(0x7f0000000000)='./file0\x00', 0x2000000) 570.509711ms ago: executing program 8 (id=3870): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x114) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefe']) r4 = openat$pmem0(0xffffff9c, &(0x7f0000000100), 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[], 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x1000a3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xa89) sendto$inet(r0, 0x0, 0x0, 0x2c091, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 489.887039ms ago: executing program 9 (id=3871): r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = openat(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 410.955244ms ago: executing program 9 (id=3872): sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008020280ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 320.155084ms ago: executing program 9 (id=3873): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) 60.559679ms ago: executing program 8 (id=3874): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffc7d, 0x0, 0x0, 0x0, 0x0, 0xe000000}, 0x0) 60.39587ms ago: executing program 8 (id=3875): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) fcntl$addseals(r0, 0x409, 0x0) 0s ago: executing program 8 (id=3876): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = signalfd4(r4, &(0x7f0000000000)={[0x3]}, 0x8, 0x80000) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0xfffffffffffffffc, 0x0, 0x2, 0x800, 0x400000000000, 0x2, 0x7, 0x3]}) r7 = open_tree(r5, &(0x7f0000000040)='./file0\x00', 0x80800) ioctl$VIDIOC_TRY_ENCODER_CMD(r7, 0xc028564e, &(0x7f00000000c0)={0x3, 0x0, [0x4, 0x0, 0x4, 0x3, 0x9, 0x9, 0x1ff, 0xfffffffe]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0: encryption failed: -22 [ 354.588081][T17302] vivid-000: ================= START STATUS ================= [ 354.591255][T17302] vivid-000: Test Pattern: 75% Colorbar [ 354.593447][T17302] vivid-000: Fill Percentage of Frame: 100 [ 354.595660][T17302] vivid-000: Horizontal Movement: No Movement [ 354.597178][T17302] vivid-000: Vertical Movement: No Movement [ 354.601896][T17302] vivid-000: OSD Text Mode: All [ 354.603374][T17302] vivid-000: Show Border: false [ 354.605096][T17302] vivid-000: Show Square: false [ 354.606703][T17302] vivid-000: Sensor Flipped Horizontally: false [ 354.608643][T17302] vivid-000: Sensor Flipped Vertically: false [ 354.610206][T17302] vivid-000: Insert SAV Code in Image: false [ 354.612103][T17302] vivid-000: Insert EAV Code in Image: false [ 354.613571][T17302] vivid-000: Insert Video Guard Band: false [ 354.615026][T17302] vivid-000: Reduced Framerate: false [ 354.617027][T17302] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 354.619830][T17302] vivid-000: S-Video 000-0 Is Connected To: None [ 354.621724][T17302] vivid-000: Enable Capture Cropping: true [ 354.623330][T17302] vivid-000: Enable Capture Composing: true [ 354.624813][T17302] vivid-000: Enable Capture Scaler: true [ 354.626414][T17302] vivid-000: Timestamp Source: End of Frame [ 354.628486][T17302] vivid-000: Colorspace: SMPTE 170M [ 354.630189][T17302] vivid-000: Transfer Function: Default [ 354.631612][T17302] vivid-000: Y'CbCr Encoding: Default [ 354.633079][T17302] vivid-000: HSV Encoding: Hue 0-179 [ 354.634652][T17302] vivid-000: Quantization: Default [ 354.636233][T17302] vivid-000: Apply Alpha To Red Only: false [ 354.638141][T17302] vivid-000: Standard Aspect Ratio: 4x3 [ 354.640259][T17302] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 354.642802][T17302] vivid-000: DV Timings: 640x480p59 inactive [ 354.644845][T17302] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 354.647062][T17302] vivid-000: Maximum EDID Blocks: 2 [ 354.649361][T17302] vivid-000: Limited RGB Range (16-235): false [ 354.651428][T17302] vivid-000: Rx RGB Quantization Range: Automatic [ 354.653711][T17302] vivid-000: Power Present: 0x00000001 [ 354.655351][T17302] tpg source WxH: 720x576 (R'G'B) [ 354.657396][T17302] tpg field: 5 [ 354.658515][T17302] tpg crop: 720x576@0x0 [ 354.660133][T17302] tpg compose: 180x144@0x0 [ 354.661543][T17302] tpg colorspace: 1 [ 354.662802][T17302] tpg transfer function: 7/7 [ 354.664233][T17302] tpg quantization: 1/1 [ 354.665502][T17302] tpg RGB range: 0/2 [ 354.666712][T17302] vivid-000: ================== END STATUS ================== [ 354.724680][T17312] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.751677][T17314] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3418'. [ 354.791435][T17316] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.399221][ T39] audit: type=1400 audit(1730157575.703:1108): avc: denied { mounton } for pid=17321 comm="syz.7.3421" path="/537/file1/file0" dev="autofs" ino=75078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 355.840405][T17333] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.869375][T17335] FAULT_INJECTION: forcing a failure. [ 355.869375][T17335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.872600][T17335] CPU: 3 UID: 0 PID: 17335 Comm: syz.8.3428 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 355.875404][T17335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 355.878047][T17335] Call Trace: [ 355.878927][T17335] [ 355.879673][T17335] dump_stack_lvl+0x16c/0x1f0 [ 355.880863][T17335] should_fail_ex+0x497/0x5b0 [ 355.882061][T17335] _copy_to_user+0x32/0xd0 [ 355.883302][T17335] simple_read_from_buffer+0xd0/0x160 [ 355.884750][T17335] proc_fail_nth_read+0x198/0x270 [ 355.886023][T17335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.887438][T17335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.888853][T17335] vfs_read+0x1df/0xbe0 [ 355.890205][T17335] ? __fget_files+0x23a/0x3f0 [ 355.891613][T17335] ? fdget_pos+0x24c/0x360 [ 355.892833][T17335] ? __pfx_lock_release+0x10/0x10 [ 355.894118][T17335] ? trace_lock_acquire+0x14a/0x1d0 [ 355.895429][T17335] ? __pfx_vfs_read+0x10/0x10 [ 355.896637][T17335] ? __pfx___mutex_lock+0x10/0x10 [ 355.897964][T17335] ? __fget_files+0x244/0x3f0 [ 355.899798][T17335] ksys_read+0x12f/0x260 [ 355.901098][T17335] ? __pfx_ksys_read+0x10/0x10 [ 355.902310][T17335] do_syscall_64+0xcd/0x250 [ 355.903479][T17335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.905046][T17335] RIP: 0033:0x7fb91ab7d15c [ 355.906160][T17335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 355.911563][T17335] RSP: 002b:00007fb91b926030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.914124][T17335] RAX: ffffffffffffffda RBX: 00007fb91ad35f80 RCX: 00007fb91ab7d15c [ 355.916282][T17335] RDX: 000000000000000f RSI: 00007fb91b9260a0 RDI: 0000000000000004 [ 355.918338][T17335] RBP: 00007fb91b926090 R08: 0000000000000000 R09: 0000000000000000 [ 355.920295][T17335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.922225][T17335] R13: 0000000000000000 R14: 00007fb91ad35f80 R15: 00007ffcd6dba648 [ 355.924559][T17335] [ 355.950660][T17337] netlink: 'syz.8.3429': attribute type 16 has an invalid length. [ 355.953228][T17337] netlink: 'syz.8.3429': attribute type 3 has an invalid length. [ 355.955336][T17337] netlink: 64066 bytes leftover after parsing attributes in process `syz.8.3429'. [ 356.033053][ T1171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.832415][T17348] tmpfs: Bad value for 'mpol' [ 356.864032][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.880463][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.884168][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.889379][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.894560][ T5941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.900612][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.924837][T17349] lo speed is unknown, defaulting to 1000 [ 357.026875][T17349] chnl_net:caif_netlink_parms(): no params data found [ 357.107486][T17349] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.110329][T17349] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.112627][T17349] bridge_slave_0: entered allmulticast mode [ 357.115133][T17349] bridge_slave_0: entered promiscuous mode [ 357.118103][T17349] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.120204][T17349] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.122382][T17349] bridge_slave_1: entered allmulticast mode [ 357.126572][T17349] bridge_slave_1: entered promiscuous mode [ 357.153361][T17349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.157378][T17349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.189503][T17349] team0: Port device team_slave_0 added [ 357.193041][T17349] team0: Port device team_slave_1 added [ 357.215733][T17349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.217870][T17349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.225108][T17349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.229376][T17349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.231140][T17349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.241644][T17349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.271084][T17349] hsr_slave_0: entered promiscuous mode [ 357.273110][T17349] hsr_slave_1: entered promiscuous mode [ 357.275057][T17349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.277241][T17349] Cannot create hsr debugfs directory [ 357.634956][T17369] syzkaller0: entered allmulticast mode [ 357.640481][T17369] syzkaller0 (unregistering): left allmulticast mode [ 357.825568][ T1171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.893145][ T1171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.931507][T17382] netlink: 1068 bytes leftover after parsing attributes in process `syz.8.3440'. [ 357.987216][ T1171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.109614][ T1171] bridge_slave_1: left allmulticast mode [ 358.111102][ T1171] bridge_slave_1: left promiscuous mode [ 358.112878][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.124290][ T1171] bridge_slave_0: left allmulticast mode [ 358.125863][ T1171] bridge_slave_0: left promiscuous mode [ 358.128281][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.335371][T17402] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3446'. [ 358.426114][ T39] audit: type=1400 audit(1730157578.723:1109): avc: denied { nlmsg_write } for pid=17406 comm="syz.5.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 358.512507][ T39] audit: type=1326 audit(1730157578.803:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.8.3446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7fc00000 [ 358.528603][ T39] audit: type=1326 audit(1730157578.833:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.8.3446" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb91ab7e719 code=0x7fc00000 [ 358.587169][T17413] netlink: 'syz.5.3449': attribute type 16 has an invalid length. [ 358.589898][T17413] netlink: 'syz.5.3449': attribute type 3 has an invalid length. [ 358.592301][T17413] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.3449'. [ 358.620934][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.627203][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.633005][ T1171] bond0 (unregistering): Released all slaves [ 358.793833][T17410] netlink: 'syz.8.3446': attribute type 26 has an invalid length. [ 358.819422][T17416] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3450'. [ 358.866747][T17416] Êü: entered promiscuous mode [ 358.959258][ T5942] Bluetooth: hci1: command tx timeout [ 359.036098][ T1171] hsr_slave_0: left promiscuous mode [ 359.040813][ T1171] hsr_slave_1: left promiscuous mode [ 359.043342][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.045783][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.050613][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.053617][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.084999][ T1171] veth1_macvtap: left promiscuous mode [ 359.086598][ T1171] veth0_macvtap: left promiscuous mode [ 359.088371][ T1171] veth1_vlan: left promiscuous mode [ 359.089957][ T1171] veth0_vlan: left promiscuous mode [ 359.137342][ T39] audit: type=1326 audit(1730157579.433:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.8.3446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7fc00000 [ 359.143358][ T39] audit: type=1326 audit(1730157579.433:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.8.3446" exe="/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb91ab7e719 code=0x7fc00000 [ 359.149560][ T39] audit: type=1326 audit(1730157579.433:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.8.3446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7fc00000 [ 359.156023][ T39] audit: type=1326 audit(1730157579.433:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.8.3446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7fc00000 [ 359.162905][ T39] audit: type=1326 audit(1730157579.433:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.8.3446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7fc00000 [ 359.168872][ T39] audit: type=1326 audit(1730157579.433:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.8.3446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7fc00000 [ 359.441396][T17427] nbd8: detected capacity change from 0 to 12 [ 359.445240][ T5945] block nbd8: Send control failed (result -89) [ 359.447117][ T5945] block nbd8: Request send failed, requeueing [ 359.463398][ T5942] block nbd8: Receive control failed (result -32) [ 359.486078][ T1158] block nbd8: Dead connection, failed to find a fallback [ 359.497590][ T1158] block nbd8: shutting down sockets [ 359.510617][ T1158] blk_print_req_error: 25 callbacks suppressed [ 359.510630][ T1158] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.523091][ T1158] buffer_io_error: 25 callbacks suppressed [ 359.523105][ T1158] Buffer I/O error on dev nbd8, logical block 0, async page read [ 359.528490][ T5945] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.531253][ T5945] Buffer I/O error on dev nbd8, logical block 0, async page read [ 359.543532][ T5945] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.547899][ T5945] Buffer I/O error on dev nbd8, logical block 0, async page read [ 359.549994][ T5945] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.552772][ T5945] Buffer I/O error on dev nbd8, logical block 0, async page read [ 359.555395][ T5945] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.558522][ T5945] Buffer I/O error on dev nbd8, logical block 0, async page read [ 359.561189][ T5945] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.563883][ T5945] Buffer I/O error on dev nbd8, logical block 0, async page read [ 359.565863][ T5945] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.568678][ T5945] Buffer I/O error on dev nbd8, logical block 0, async page read [ 359.571214][ T5945] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.574087][ T5945] Buffer I/O error on dev nbd8, logical block 0, async page read [ 359.576550][ T5945] ldm_validate_partition_table(): Disk read failed. [ 359.578566][ T5945] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.580707][ T5945] Buffer I/O error on dev nbd8, logical block 0, async page read [ 359.582576][ T5945] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.584722][ T5945] Buffer I/O error on dev nbd8, logical block 0, async page read [ 359.586899][ T5945] Dev nbd8: unable to read RDB block 0 [ 359.588946][ T5945] nbd8: unable to read partition table [ 359.590407][ T5945] nbd8: partition table beyond EOD, truncated [ 359.625448][T17428] ldm_validate_partition_table(): Disk read failed. [ 359.647619][T17428] Dev nbd8: unable to read RDB block 0 [ 359.657299][T17428] nbd8: unable to read partition table [ 359.665063][T17428] nbd8: partition table beyond EOD, truncated [ 359.671213][ T5945] ldm_validate_partition_table(): Disk read failed. [ 359.673236][ T5945] Dev nbd8: unable to read RDB block 0 [ 359.675405][ T5945] nbd8: unable to read partition table [ 359.677157][ T5945] nbd8: partition table beyond EOD, truncated [ 359.694040][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 359.698736][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=5, location=5 [ 359.702046][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=4, location=4 [ 359.705288][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=3, location=3 [ 359.712849][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 359.733498][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 359.738844][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=2, location=2 [ 359.742419][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=1, location=1 [ 359.745671][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=0, location=0 [ 359.749405][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 359.762053][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 359.765684][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=0, location=0 [ 359.769694][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 359.773024][T17428] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 359.961646][T17433] tmpfs: Bad value for 'mpol' [ 360.692500][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 360.852391][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 361.038243][ T5942] Bluetooth: hci1: command tx timeout [ 362.265938][T17452] netlink: 'syz.5.3459': attribute type 16 has an invalid length. [ 362.272957][T17452] netlink: 'syz.5.3459': attribute type 3 has an invalid length. [ 362.274981][T17452] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.3459'. [ 362.373967][T17349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 362.387307][T17349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 362.419146][T17461] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3461'. [ 362.423553][T17349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 362.429899][T17349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 362.452609][T17464] tmpfs: Bad value for 'mpol' [ 362.468136][T17349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.472382][T17466] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 362.479283][T17349] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.483550][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.485863][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.499119][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.501339][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.532451][T17349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.614801][T17349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.766221][T17349] veth0_vlan: entered promiscuous mode [ 362.771701][T17481] ieee802154 phy0 wpan0: encryption failed: -22 [ 362.771968][T17349] veth1_vlan: entered promiscuous mode [ 362.796739][T17349] veth0_macvtap: entered promiscuous mode [ 362.803467][T17349] veth1_macvtap: entered promiscuous mode [ 362.814169][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.817168][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.823325][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.826689][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.829493][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.831910][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.836389][T17349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.842358][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.844266][T17485] ieee802154 phy0 wpan0: encryption failed: -22 [ 362.845076][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.850015][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.852536][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.855344][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.859882][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.862158][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.864868][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.869238][T17349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.875119][T17349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.877241][T17349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.880357][T17349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.883106][T17349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.927339][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.930532][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.942366][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.944683][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.070876][T17490] FAULT_INJECTION: forcing a failure. [ 363.070876][T17490] name failslab, interval 1, probability 0, space 0, times 0 [ 363.074179][T17490] CPU: 3 UID: 0 PID: 17490 Comm: syz.8.3469 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 363.077140][T17490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 363.080047][T17490] Call Trace: [ 363.081386][T17490] [ 363.082242][T17490] dump_stack_lvl+0x16c/0x1f0 [ 363.083617][T17490] should_fail_ex+0x497/0x5b0 [ 363.084815][T17490] ? fs_reclaim_acquire+0xae/0x150 [ 363.086131][T17490] should_failslab+0xc2/0x120 [ 363.087352][T17490] kmem_cache_alloc_node_noprof+0x71/0x310 [ 363.089219][T17490] ? __alloc_skb+0x2b1/0x380 [ 363.090412][T17490] __alloc_skb+0x2b1/0x380 [ 363.091590][T17490] ? __pfx___alloc_skb+0x10/0x10 [ 363.093175][T17490] netlink_ack+0x164/0xb90 [ 363.094423][T17490] ? kfree+0x14f/0x4b0 [ 363.095499][T17490] nfnetlink_rcv_batch+0x1626/0x24e0 [ 363.096809][T17490] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 363.098193][T17490] ? avc_has_perm_noaudit+0x119/0x3a0 [ 363.099535][T17490] ? avc_has_perm_noaudit+0x143/0x3a0 [ 363.100883][T17490] ? __nla_parse+0x40/0x60 [ 363.102045][T17490] nfnetlink_rcv+0x3c3/0x430 [ 363.103467][T17490] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 363.104879][T17490] netlink_unicast+0x53c/0x7f0 [ 363.106134][T17490] ? __pfx_netlink_unicast+0x10/0x10 [ 363.107542][T17490] netlink_sendmsg+0x8b8/0xd70 [ 363.108797][T17490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.110151][T17490] ? __might_fault+0xe3/0x190 [ 363.111399][T17490] ____sys_sendmsg+0xaaf/0xc90 [ 363.112741][T17490] ? copy_msghdr_from_user+0x10b/0x160 [ 363.114459][T17490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.115951][T17490] ? __pfx___lock_acquire+0x10/0x10 [ 363.117266][T17490] ___sys_sendmsg+0x135/0x1e0 [ 363.118930][T17490] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.120262][T17490] ? lock_acquire+0x2f/0xb0 [ 363.121415][T17490] ? __fget_files+0x40/0x3f0 [ 363.122740][T17490] ? fdget+0x176/0x210 [ 363.123871][T17490] __sys_sendmsg+0x117/0x1f0 [ 363.125061][T17490] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.126379][T17490] ? __fget_files+0x244/0x3f0 [ 363.127640][T17490] do_syscall_64+0xcd/0x250 [ 363.128841][T17490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.130468][T17490] RIP: 0033:0x7fb91ab7e719 [ 363.131668][T17490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.137403][T17490] RSP: 002b:00007fb91b926038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.139899][T17490] RAX: ffffffffffffffda RBX: 00007fb91ad35f80 RCX: 00007fb91ab7e719 [ 363.141975][T17490] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 363.144251][T17490] RBP: 00007fb91b926090 R08: 0000000000000000 R09: 0000000000000000 [ 363.146250][T17490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.148278][T17490] R13: 0000000000000000 R14: 00007fb91ad35f80 R15: 00007ffcd6dba648 [ 363.150315][T17490] [ 363.184617][T17492] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 363.377429][T17501] tmpfs: Bad value for 'mpol' [ 363.599890][T17505] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.607904][ T35] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 363.779129][ T35] usb 10-1: Using ep0 maxpacket: 16 [ 363.784177][ T35] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 363.787067][ T35] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.790063][ T35] usb 10-1: Product: syz [ 363.791375][ T35] usb 10-1: Manufacturer: syz [ 363.792703][ T35] usb 10-1: SerialNumber: syz [ 363.801129][ T35] usb 10-1: config 0 descriptor?? [ 363.804071][ T35] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 363.806598][ T35] usb 10-1: Detected FT232H [ 364.450089][ T35] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 364.452098][ T35] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 364.454236][ T35] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 364.460089][ T35] usb 10-1: USB disconnect, device number 35 [ 364.463902][ T35] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 364.466463][ T35] ftdi_sio 10-1:0.0: device disconnected [ 364.630362][T17523] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.712173][T17525] syz.8.3484: attempt to access beyond end of device [ 364.712173][T17525] nbd8: rw=0, sector=8, nr_sectors = 8 limit=0 [ 364.716317][T17525] qnx4: unable to read the superblock [ 364.764303][T17528] ieee802154 phy0 wpan0: encryption failed: -22 [ 365.257264][ T105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.098316][T17553] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3492'. [ 366.135909][T17550] vivid-001: disconnect [ 366.181609][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.187503][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.192411][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.206833][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.223170][ T5941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 366.227897][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.262087][T17557] vivid-001: reconnect [ 366.284376][T17555] lo speed is unknown, defaulting to 1000 [ 366.289225][T17564] netlink: 'syz.5.3494': attribute type 16 has an invalid length. [ 366.291946][T17564] netlink: 'syz.5.3494': attribute type 3 has an invalid length. [ 366.293900][T17564] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.3494'. [ 366.313709][T17558] XFS (nullb0): Invalid superblock magic number [ 366.388368][T17555] chnl_net:caif_netlink_parms(): no params data found [ 366.537357][T17555] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.540709][T17555] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.543873][T17555] bridge_slave_0: entered allmulticast mode [ 366.547134][T17555] bridge_slave_0: entered promiscuous mode [ 366.556324][T17555] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.563389][T17555] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.565376][T17555] bridge_slave_1: entered allmulticast mode [ 366.567518][T17555] bridge_slave_1: entered promiscuous mode [ 366.599915][T17555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.605691][T17555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.625075][T17578] netlink: 988 bytes leftover after parsing attributes in process `syz.5.3497'. [ 366.647622][T17555] team0: Port device team_slave_0 added [ 366.654317][T17555] team0: Port device team_slave_1 added [ 366.693965][T17555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.695928][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.703697][T17555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.714374][T17555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.716326][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.728136][T17555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.766529][T17582] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.816619][T17555] hsr_slave_0: entered promiscuous mode [ 366.825206][T17555] hsr_slave_1: entered promiscuous mode [ 366.835691][T17555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.844974][T17555] Cannot create hsr debugfs directory [ 366.912430][T17584] VFS: could not find a valid V7 on nullb0. [ 367.133321][ T105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.186982][T17589] netlink: 'syz.8.3502': attribute type 11 has an invalid length. [ 367.230058][ T105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.338551][ T105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.391833][T17601] netlink: 988 bytes leftover after parsing attributes in process `syz.8.3508'. [ 367.509384][ T105] bridge_slave_1: left allmulticast mode [ 367.510924][ T105] bridge_slave_1: left promiscuous mode [ 367.512458][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.516335][ T105] bridge_slave_0: left allmulticast mode [ 367.518244][ T105] bridge_slave_0: left promiscuous mode [ 367.520320][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.011166][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.019391][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.026535][ T105] bond0 (unregistering): Released all slaves [ 368.248308][ T6012] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 368.318149][ T5942] Bluetooth: hci1: command tx timeout [ 368.369602][ T105] hsr_slave_0: left promiscuous mode [ 368.372141][ T105] hsr_slave_1: left promiscuous mode [ 368.374928][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.377560][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.387914][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.390493][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.399037][ T6012] usb 10-1: Using ep0 maxpacket: 32 [ 368.401709][ T6012] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 368.406375][ T6012] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 368.411220][ T6012] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.413265][ T6012] usb 10-1: Product: syz [ 368.414813][ T6012] usb 10-1: Manufacturer: syz [ 368.416998][ T6012] usb 10-1: SerialNumber: syz [ 368.425841][ T6012] usb 10-1: config 0 descriptor?? [ 368.427679][T17611] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 368.438397][ T6012] hub 10-1:0.0: bad descriptor, ignoring hub [ 368.440192][ T6012] hub 10-1:0.0: probe with driver hub failed with error -5 [ 368.445941][ T6012] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input44 [ 368.465900][ T105] veth1_macvtap: left promiscuous mode [ 368.467436][ T105] veth0_macvtap: left promiscuous mode [ 368.471132][ T105] veth1_vlan: left promiscuous mode [ 368.472789][ T105] veth0_vlan: left promiscuous mode [ 368.640071][ T6012] usb 10-1: USB disconnect, device number 36 [ 368.641798][ C1] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 370.054726][ T105] team0 (unregistering): Port device team_slave_1 removed [ 370.226555][ T105] team0 (unregistering): Port device team_slave_0 removed [ 370.407966][ T5942] Bluetooth: hci1: command tx timeout [ 371.164037][ T5941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.205433][ T5941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.220686][ T5941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.241282][ T5941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.258077][ T5941] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 371.267871][ T5941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.504210][T17651] lo speed is unknown, defaulting to 1000 [ 371.529784][T17657] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.593924][T17555] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.615482][T17555] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.622883][T17651] chnl_net:caif_netlink_parms(): no params data found [ 371.633864][T17555] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.642554][T17555] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.745506][T17651] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.748711][T17651] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.750972][T17651] bridge_slave_0: entered allmulticast mode [ 371.753254][T17651] bridge_slave_0: entered promiscuous mode [ 371.756987][T17651] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.759448][T17651] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.761435][T17651] bridge_slave_1: entered allmulticast mode [ 371.764661][T17651] bridge_slave_1: entered promiscuous mode [ 371.823836][T17651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.842076][T17651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.891911][T17676] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.3527'. [ 371.896062][T17651] team0: Port device team_slave_0 added [ 371.900603][T17651] team0: Port device team_slave_1 added [ 371.966596][T17651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.969134][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.975633][T17651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.988629][T17651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.990430][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.997706][T17651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.006854][T17555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.036084][T17651] hsr_slave_0: entered promiscuous mode [ 372.048776][T17651] hsr_slave_1: entered promiscuous mode [ 372.051597][T17651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.053795][T17651] Cannot create hsr debugfs directory [ 372.115562][T17692] netlink: 'syz.5.3535': attribute type 72 has an invalid length. [ 372.116366][T17555] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.118344][T17692] netlink: 1016 bytes leftover after parsing attributes in process `syz.5.3535'. [ 372.159789][ T105] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.190169][T16014] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.191995][T16014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.200673][T17695] syz.5.3536 (17695): drop_caches: 4 [ 372.203934][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.205817][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.259919][ T105] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.275838][T17651] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 372.281984][T17651] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 372.288305][T17555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.294172][T17651] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 372.297574][T17651] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 372.342742][ T105] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.372553][T17651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.382133][T17651] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.392324][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.394664][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.444506][ T105] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.467631][T17555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.473291][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.476176][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.480949][T17721] netlink: 'syz.5.3543': attribute type 72 has an invalid length. [ 372.483100][T17721] netlink: 1016 bytes leftover after parsing attributes in process `syz.5.3543'. [ 372.491653][ T5942] Bluetooth: hci1: command tx timeout [ 372.570183][ T105] bridge_slave_1: left allmulticast mode [ 372.573127][ T105] bridge_slave_1: left promiscuous mode [ 372.579191][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.585458][ T105] bridge_slave_0: left allmulticast mode [ 372.586990][ T105] bridge_slave_0: left promiscuous mode [ 372.590375][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.842735][ T105] team0: Port device bridge0 removed [ 373.437942][ T5942] Bluetooth: hci4: command tx timeout [ 373.703532][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.707428][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.711162][ T105] bond0 (unregistering): Released all slaves [ 373.715909][ T105] bond1 (unregistering): Released all slaves [ 373.721113][ T105] bond2 (unregistering): Released all slaves [ 373.725557][ T105] bond3 (unregistering): Released all slaves [ 373.825193][T17651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.836999][T17555] veth0_vlan: entered promiscuous mode [ 373.863507][T17555] veth1_vlan: entered promiscuous mode [ 373.926371][T17764] netlink: 'syz.5.3551': attribute type 72 has an invalid length. [ 373.933671][T17764] netlink: 1016 bytes leftover after parsing attributes in process `syz.5.3551'. [ 373.962946][T17555] veth0_macvtap: entered promiscuous mode [ 374.021006][T17555] veth1_macvtap: entered promiscuous mode [ 374.037956][T17651] veth0_vlan: entered promiscuous mode [ 374.041008][T17778] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.3555'. [ 374.054133][ T105] hsr_slave_0: left promiscuous mode [ 374.073118][ T105] hsr_slave_1: left promiscuous mode [ 374.117520][ T105] veth1_macvtap: left promiscuous mode [ 374.120140][ T105] veth0_macvtap: left promiscuous mode [ 374.121654][ T105] veth1_vlan: left promiscuous mode [ 374.123013][ T105] veth0_vlan: left promiscuous mode [ 374.298002][ T35] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 374.447990][ T35] usb 13-1: Using ep0 maxpacket: 32 [ 374.454126][ T35] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 374.462769][ T35] usb 13-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 374.465545][ T35] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.467891][ T35] usb 13-1: Product: syz [ 374.469133][ T35] usb 13-1: Manufacturer: syz [ 374.470401][ T35] usb 13-1: SerialNumber: syz [ 374.473196][ T35] usb 13-1: config 0 descriptor?? [ 374.475183][T17781] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 374.486790][ T35] hub 13-1:0.0: bad descriptor, ignoring hub [ 374.488487][ T35] hub 13-1:0.0: probe with driver hub failed with error -5 [ 374.491501][ T35] input: syz syz as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input45 [ 374.571935][ T5942] Bluetooth: hci1: command tx timeout [ 374.693682][ T25] usb 13-1: USB disconnect, device number 18 [ 374.693693][ C3] usbtouchscreen 13-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 374.981993][T17789] netlink: 'syz.5.3559': attribute type 16 has an invalid length. [ 374.985048][T17789] netlink: 'syz.5.3559': attribute type 3 has an invalid length. [ 374.988278][T17789] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.3559'. [ 375.146284][T17795] input: syz0 as /devices/virtual/input/input46 [ 375.527932][ T5942] Bluetooth: hci4: command tx timeout [ 375.542357][ T105] team0 (unregistering): Port device team_slave_0 removed [ 376.593528][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3561'. [ 376.599529][T17651] veth1_vlan: entered promiscuous mode [ 376.604586][T17555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.607463][T17555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.610844][T17555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.613912][T17555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.616865][T17555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.621550][T17555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.626445][T17555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.651497][T17555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.654893][T17555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.659202][T17555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.661959][T17555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.664577][T17555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.667496][T17555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.670377][T17555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.673167][T17555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.695316][T17555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.703589][T17651] veth0_macvtap: entered promiscuous mode [ 376.711846][T17555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.714283][T17555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.717295][T17555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.721380][T17555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.751134][T17651] veth1_macvtap: entered promiscuous mode [ 376.758383][T17809] syzkaller0: entered promiscuous mode [ 376.760291][T17809] syzkaller0: entered allmulticast mode [ 376.779081][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.783306][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.785831][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.789444][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.792380][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.795555][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.799202][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.802971][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.806535][T17651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.863675][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.866479][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.870570][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.873660][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.876496][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.885166][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.897892][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.900995][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.903921][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.906993][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.912503][T17651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.944501][T17651] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.946900][T17651] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.950915][T17651] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.953220][T17651] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.959620][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.962154][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.991166][T17822] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.995886][ T105] IPVS: stop unused estimator thread 0... [ 377.015738][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.021401][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.051503][ T3646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.054539][ T3646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.165209][ T3646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.168816][ T3646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.331666][ T5942] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 377.356125][T17861] FAULT_INJECTION: forcing a failure. [ 377.356125][T17861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.365146][T17861] CPU: 0 UID: 0 PID: 17861 Comm: syz.8.3575 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 377.368607][T17861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 377.371412][T17861] Call Trace: [ 377.372453][T17861] [ 377.373617][T17861] dump_stack_lvl+0x16c/0x1f0 [ 377.374957][T17861] should_fail_ex+0x497/0x5b0 [ 377.376212][T17861] _copy_to_user+0x32/0xd0 [ 377.377845][T17861] simple_read_from_buffer+0xd0/0x160 [ 377.379796][T17861] proc_fail_nth_read+0x198/0x270 [ 377.381637][T17861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.383692][T17861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.385962][T17861] vfs_read+0x1df/0xbe0 [ 377.387669][T17861] ? __fget_files+0x23a/0x3f0 [ 377.389378][T17861] ? fdget_pos+0x24c/0x360 [ 377.390656][T17861] ? __pfx_lock_release+0x10/0x10 [ 377.392092][T17861] ? trace_lock_acquire+0x14a/0x1d0 [ 377.394054][T17861] ? __pfx_vfs_read+0x10/0x10 [ 377.395659][T17861] ? __pfx___mutex_lock+0x10/0x10 [ 377.397156][T17861] ? __fget_files+0x244/0x3f0 [ 377.398640][T17861] ksys_read+0x12f/0x260 [ 377.399991][T17861] ? __pfx_ksys_read+0x10/0x10 [ 377.401273][T17861] do_syscall_64+0xcd/0x250 [ 377.402625][T17861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.404769][T17861] RIP: 0033:0x7fb91ab7d15c [ 377.406430][T17861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 377.411869][T17861] RSP: 002b:00007fb91b926030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.415001][T17861] RAX: ffffffffffffffda RBX: 00007fb91ad35f80 RCX: 00007fb91ab7d15c [ 377.417212][T17861] RDX: 000000000000000f RSI: 00007fb91b9260a0 RDI: 0000000000000003 [ 377.419336][T17861] RBP: 00007fb91b926090 R08: 0000000000000000 R09: 0000000000000000 [ 377.421429][T17861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.423885][T17861] R13: 0000000000000000 R14: 00007fb91ad35f80 R15: 00007ffcd6dba648 [ 377.427052][T17861] [ 377.542647][T17879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17879 comm=syz.5.3579 [ 377.608108][ T5942] Bluetooth: hci4: command tx timeout [ 377.708136][ T8] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 377.868034][ T8] usb 13-1: Using ep0 maxpacket: 32 [ 377.879554][ T8] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 377.885273][ T8] usb 13-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 377.898063][ T8] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.901393][ T8] usb 13-1: Product: syz [ 377.902824][ T8] usb 13-1: Manufacturer: syz [ 377.904568][ T8] usb 13-1: SerialNumber: syz [ 377.909131][ T8] usb 13-1: config 0 descriptor?? [ 377.912655][T17868] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 377.915240][ T8] hub 13-1:0.0: bad descriptor, ignoring hub [ 377.916872][ T8] hub 13-1:0.0: probe with driver hub failed with error -5 [ 377.921701][ T8] input: syz syz as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input47 [ 377.989235][ T1132] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.126394][ T8] usb 13-1: USB disconnect, device number 19 [ 378.128276][ C0] usbtouchscreen 13-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 378.267532][ T1132] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.384163][ T1132] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.411398][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.413364][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.471196][ T1132] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.632154][ T1132] bridge_slave_1: left allmulticast mode [ 378.634271][ T1132] bridge_slave_1: left promiscuous mode [ 378.636053][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.640713][ T1132] bridge_slave_0: left allmulticast mode [ 378.642408][ T1132] bridge_slave_0: left promiscuous mode [ 378.644196][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.917257][T17911] overlayfs: failed to resolve './file0': -2 [ 378.928891][T17911] overlayfs: failed to resolve './file0': -2 [ 378.968957][T17915] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.031128][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.074870][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.101300][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.129616][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.143171][ T5941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 379.145689][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.220221][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.225444][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.231883][ T1132] bond0 (unregistering): Released all slaves [ 379.251790][T17913] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3582'. [ 379.265156][T17916] lo speed is unknown, defaulting to 1000 [ 379.412257][T17916] chnl_net:caif_netlink_parms(): no params data found [ 379.504286][T17916] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.506221][T17916] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.509255][ T5942] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 379.529211][T17916] bridge_slave_0: entered allmulticast mode [ 379.535047][T17916] bridge_slave_0: entered promiscuous mode [ 379.541162][T17916] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.544078][T17916] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.547413][T17916] bridge_slave_1: entered allmulticast mode [ 379.551618][T17916] bridge_slave_1: entered promiscuous mode [ 379.621297][T17916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.629381][T17916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.638895][T17964] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.667716][T17967] overlayfs: failed to resolve './file0': -2 [ 379.675565][T17967] overlayfs: failed to resolve './file0': -2 [ 379.679965][T17916] team0: Port device team_slave_0 added [ 379.686310][ T1132] hsr_slave_0: left promiscuous mode [ 379.688523][ T5942] Bluetooth: hci4: command tx timeout [ 379.695120][ T1132] hsr_slave_1: left promiscuous mode [ 379.697915][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.700229][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.706577][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.708658][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.749252][ T1132] veth1_macvtap: left promiscuous mode [ 379.750873][ T1132] veth0_macvtap: left promiscuous mode [ 379.752596][ T1132] veth1_vlan: left promiscuous mode [ 379.754160][ T1132] veth0_vlan: left promiscuous mode [ 381.064617][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 381.221435][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 381.285210][ T5942] Bluetooth: hci1: command tx timeout [ 382.391913][T17916] team0: Port device team_slave_1 added [ 382.394124][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3595'. [ 382.464726][T17916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.467236][T17916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.481926][T17916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.503535][T17916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.505464][T17916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.510674][T17994] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.523747][T17916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.528912][T17996] overlayfs: failed to resolve './file1': -2 [ 382.533293][T17996] overlayfs: failed to resolve './file1': -2 [ 382.591213][T17916] hsr_slave_0: entered promiscuous mode [ 382.605684][T17916] hsr_slave_1: entered promiscuous mode [ 382.616639][T17916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.618930][T17916] Cannot create hsr debugfs directory [ 382.726986][T18011] Lens A: ================= START STATUS ================= [ 382.729440][T18011] Lens A: Focus, Absolute: 0 [ 382.732863][T18011] Lens A: ================== END STATUS ================== [ 382.756862][ T39] kauditd_printk_skb: 323 callbacks suppressed [ 382.756874][ T39] audit: type=1326 audit(1730157603.053:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18012 comm="syz.8.3608" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7ffc0000 [ 382.766520][ T39] audit: type=1326 audit(1730157603.053:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18012 comm="syz.8.3608" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7ffc0000 [ 382.773621][ T39] audit: type=1326 audit(1730157603.053:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18012 comm="syz.8.3608" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fb91ab7e719 code=0x7ffc0000 [ 382.787367][ T39] audit: type=1326 audit(1730157603.053:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18012 comm="syz.8.3608" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7ffc0000 [ 382.801393][ T39] audit: type=1326 audit(1730157603.053:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18012 comm="syz.8.3608" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7ffc0000 [ 382.828738][ T39] audit: type=1326 audit(1730157603.053:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18012 comm="syz.8.3608" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb91ab7e719 code=0x7ffc0000 [ 382.844992][ T39] audit: type=1326 audit(1730157603.053:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18012 comm="syz.8.3608" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7ffc0000 [ 382.853097][ T39] audit: type=1326 audit(1730157603.053:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18012 comm="syz.8.3608" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7ffc0000 [ 382.860905][ T39] audit: type=1326 audit(1730157603.053:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18012 comm="syz.8.3608" exe="/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb91ab7e719 code=0x7ffc0000 [ 382.876550][ T39] audit: type=1326 audit(1730157603.053:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18012 comm="syz.8.3608" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x7ffc0000 [ 382.986750][T18027] FAULT_INJECTION: forcing a failure. [ 382.986750][T18027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.008896][T18027] CPU: 1 UID: 0 PID: 18027 Comm: syz.9.3612 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 383.012285][T18027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 383.016484][T18027] Call Trace: [ 383.017481][T18027] [ 383.018333][T18027] dump_stack_lvl+0x16c/0x1f0 [ 383.019750][T18027] should_fail_ex+0x497/0x5b0 [ 383.021068][T18027] _copy_from_user+0x32/0x100 [ 383.023412][T18027] copy_msghdr_from_user+0x99/0x160 [ 383.025048][T18027] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 383.026978][T18027] ? __pfx___lock_acquire+0x10/0x10 [ 383.028617][T18027] ___sys_sendmsg+0xff/0x1e0 [ 383.030192][T18027] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.032385][T18027] ? lock_acquire+0x2f/0xb0 [ 383.034396][T18027] ? __fget_files+0x40/0x3f0 [ 383.036054][T18027] ? fdget+0x176/0x210 [ 383.037207][T18027] __sys_sendmsg+0x117/0x1f0 [ 383.038789][T18027] ? __pfx___sys_sendmsg+0x10/0x10 [ 383.040452][T18027] ? __fget_files+0x244/0x3f0 [ 383.042016][T18027] do_syscall_64+0xcd/0x250 [ 383.043720][T18027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.046098][T18027] RIP: 0033:0x7f008457e719 [ 383.047931][T18027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.054738][T18027] RSP: 002b:00007f00843f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.057210][T18027] RAX: ffffffffffffffda RBX: 00007f0084735f80 RCX: 00007f008457e719 [ 383.059962][T18027] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 383.062715][T18027] RBP: 00007f00843f9090 R08: 0000000000000000 R09: 0000000000000000 [ 383.065788][T18027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.068917][T18027] R13: 0000000000000000 R14: 00007f0084735f80 R15: 00007ffd397498e8 [ 383.071221][T18027] [ 383.149009][T18034] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.161641][T18037] overlayfs: failed to resolve './file1': -2 [ 383.174377][T18037] overlayfs: failed to resolve './file1': -2 [ 383.368315][ T5942] Bluetooth: hci1: command tx timeout [ 383.433688][T18039] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3616'. [ 383.446481][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3616'. [ 383.466984][T17916] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.473560][T17916] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.480689][T17916] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.486699][T17916] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.574620][T17916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.583950][T17916] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.596321][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.598489][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.615195][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.617693][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.676443][T17916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.731950][T18069] overlayfs: failed to resolve './file1': -2 [ 383.735906][T18069] overlayfs: failed to resolve './file1': -2 [ 383.793866][T17916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.888007][ T70] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 384.028117][ T70] usb 10-1: device descriptor read/64, error -71 [ 384.122863][T18111] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.126744][T17916] veth0_vlan: entered promiscuous mode [ 384.141836][T17916] veth1_vlan: entered promiscuous mode [ 384.188547][T17916] veth0_macvtap: entered promiscuous mode [ 384.195078][T17916] veth1_macvtap: entered promiscuous mode [ 384.204260][T17916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.207162][T17916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.210428][T17916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.213993][T17916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.217488][T17916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.221651][T17916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.222363][T18116] Lens A: ================= START STATUS ================= [ 384.225634][T17916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.229816][T18116] Lens A: Focus, Absolute: 0 [ 384.232904][T18116] Lens A: ================== END STATUS ================== [ 384.246076][T17916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.256438][T17916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.267873][ T70] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 384.275061][T17916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.278164][T17916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.280755][T17916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.287819][T17916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.290669][T17916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.293714][T17916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.296423][T17916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.301796][T17916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.304580][T17916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.310492][T17916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.314997][T17916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.330066][T17916] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.332611][T17916] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.335499][T17916] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.342582][T17916] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.389920][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.392146][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.407905][ T70] usb 10-1: device descriptor read/64, error -71 [ 384.421225][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.423570][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.515573][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3636'. [ 384.518229][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3636'. [ 384.519069][ T70] usb usb10-port1: attempt power cycle [ 384.520791][T18125] netlink: 'syz.9.3636': attribute type 12 has an invalid length. [ 384.868110][ T70] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 384.889657][ T70] usb 10-1: device descriptor read/8, error -71 [ 385.127991][ T70] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 385.148657][ T70] usb 10-1: device descriptor read/8, error -71 [ 385.258557][ T70] usb usb10-port1: unable to enumerate USB device [ 385.436239][T18144] netlink: 'syz.9.3642': attribute type 1 has an invalid length. [ 385.439048][T18144] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3642'. [ 385.556984][T18150] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.614133][T18154] netlink: 'syz.9.3646': attribute type 16 has an invalid length. [ 385.616238][T18154] netlink: 'syz.9.3646': attribute type 3 has an invalid length. [ 385.618809][T18154] netlink: 64066 bytes leftover after parsing attributes in process `syz.9.3646'. [ 385.865636][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3650'. [ 386.118695][ T1171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.177789][T18177] netlink: 'syz.8.3653': attribute type 9 has an invalid length. [ 387.180164][T18177] netlink: 134660 bytes leftover after parsing attributes in process `syz.8.3653'. [ 387.245410][T18185] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3660'. [ 387.250289][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3660'. [ 387.266865][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.274511][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.277783][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.280218][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.284205][ T5941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 387.287331][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.309128][T18188] lo speed is unknown, defaulting to 1000 [ 387.349147][T18199] tmpfs: Bad value for 'mpol' [ 387.357206][T18200] netlink: 'syz.5.3663': attribute type 16 has an invalid length. [ 387.367426][T18200] netlink: 'syz.5.3663': attribute type 3 has an invalid length. [ 387.374283][T18200] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.3663'. [ 387.391468][T18188] chnl_net:caif_netlink_parms(): no params data found [ 387.492764][ T1171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.545557][T18188] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.547625][T18188] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.550373][T18188] bridge_slave_0: entered allmulticast mode [ 387.556208][T18188] bridge_slave_0: entered promiscuous mode [ 387.559638][T18188] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.561538][T18188] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.563396][T18188] bridge_slave_1: entered allmulticast mode [ 387.565803][T18188] bridge_slave_1: entered promiscuous mode [ 387.609227][ T1171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.638664][T18188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.642378][T18188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.683557][T18188] team0: Port device team_slave_0 added [ 387.729978][ T1171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.749833][T18188] team0: Port device team_slave_1 added [ 387.845285][T18188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.847542][T18188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.859050][T18188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.863751][T18188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.865748][T18188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.873928][T18188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.908292][T18250] vivid-000: ================= START STATUS ================= [ 387.911105][T18250] vivid-000: Test Pattern: 75% Colorbar [ 387.912884][T18250] vivid-000: Fill Percentage of Frame: 100 [ 387.915035][T18250] vivid-000: Horizontal Movement: No Movement [ 387.918428][ T8] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 387.921289][T18250] vivid-000: Vertical Movement: No Movement [ 387.923540][T18250] vivid-000: OSD Text Mode: All [ 387.925301][T18250] vivid-000: Show Border: false [ 387.927100][T18250] vivid-000: Show Square: false [ 387.937947][T18250] vivid-000: Sensor Flipped Horizontally: false [ 387.939722][T18250] vivid-000: Sensor Flipped Vertically: false [ 387.939757][T18188] hsr_slave_0: entered promiscuous mode [ 387.941545][T18250] vivid-000: Insert SAV Code in Image: false [ 387.945382][T18250] vivid-000: Insert EAV Code in Image: false [ 387.947069][T18250] vivid-000: Insert Video Guard Band: false [ 387.950232][T18250] vivid-000: Reduced Framerate: false [ 387.951678][T18250] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 387.953534][T18188] hsr_slave_1: entered promiscuous mode [ 387.953701][T18250] vivid-000: S-Video 000-0 Is Connected To: None [ 387.957311][T18250] vivid-000: Enable Capture Cropping: true [ 387.957380][T18188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.959250][T18250] vivid-000: Enable Capture Composing: true [ 387.961167][T18188] Cannot create hsr debugfs directory [ 387.962428][T18250] vivid-000: Enable Capture Scaler: true [ 387.962444][T18250] vivid-000: Timestamp Source: End of Frame [ 387.962456][T18250] vivid-000: Colorspace: SMPTE 170M [ 387.962468][T18250] vivid-000: Transfer Function: Default [ 387.962479][T18250] vivid-000: Y'CbCr Encoding: Default [ 387.962491][T18250] vivid-000: HSV Encoding: Hue 0-179 [ 387.975910][T18250] vivid-000: Quantization: Default [ 387.977335][T18250] vivid-000: Apply Alpha To Red Only: false [ 387.979385][T18250] vivid-000: Standard Aspect Ratio: 4x3 [ 387.980839][T18250] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 387.982783][T18250] vivid-000: DV Timings: 640x480p59 inactive [ 387.984278][T18250] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 387.986165][T18250] vivid-000: Maximum EDID Blocks: 2 [ 387.987512][T18250] vivid-000: Limited RGB Range (16-235): false [ 387.989686][T18250] vivid-000: Rx RGB Quantization Range: Automatic [ 387.991362][T18250] vivid-000: Power Present: 0x00000001 [ 387.992756][T18250] tpg source WxH: 720x576 (R'G'B) [ 387.993993][T18250] tpg field: 5 [ 387.994843][T18250] tpg crop: 720x576@0x0 [ 387.995889][T18250] tpg compose: 180x144@0x0 [ 387.997911][T18250] tpg colorspace: 1 [ 387.998966][T18250] tpg transfer function: 7/7 [ 388.000784][T18250] tpg quantization: 1/1 [ 388.001969][T18250] tpg RGB range: 0/2 [ 388.003095][T18250] vivid-000: ================== END STATUS ================== [ 388.051969][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3679'. [ 388.056783][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 388.056798][ T39] audit: type=1400 audit(1730157608.353:1467): avc: denied { bind } for pid=18251 comm="syz.8.3679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.078197][ T8] usb 10-1: Using ep0 maxpacket: 8 [ 388.078470][ T1171] bridge_slave_1: left allmulticast mode [ 388.081110][ T8] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.081328][ T1171] bridge_slave_1: left promiscuous mode [ 388.083331][ T8] usb 10-1: config 0 has no interface number 0 [ 388.084886][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.086528][ T8] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.094336][ T8] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 388.094474][ T1171] bridge_slave_0: left allmulticast mode [ 388.096756][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.098840][ T1171] bridge_slave_0: left promiscuous mode [ 388.102264][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.104158][ T8] usb 10-1: config 0 descriptor?? [ 388.109004][ T8] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 388.325301][ T8] usb 10-1: USB disconnect, device number 41 [ 388.331205][ T8] iowarrior 10-1:0.1: I/O-Warror #0 now disconnected [ 388.548902][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.554528][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.559159][ T1171] bond0 (unregistering): Released all slaves [ 388.633485][T18266] netlink: 'syz.8.3682': attribute type 16 has an invalid length. [ 388.635381][T18266] netlink: 'syz.8.3682': attribute type 3 has an invalid length. [ 388.685851][T18269] Lens A: ================= START STATUS ================= [ 388.688201][T18269] Lens A: Focus, Absolute: 0 [ 388.689509][T18269] Lens A: ================== END STATUS ================== [ 388.722061][T18270] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 388.726352][T18270] Lens A: ================= START STATUS ================= [ 388.738108][T18270] Lens A: Focus, Absolute: 0 [ 388.742394][T18270] Lens A: ================== END STATUS ================== [ 388.939960][ T1171] hsr_slave_0: left promiscuous mode [ 388.943251][ T1171] hsr_slave_1: left promiscuous mode [ 388.946156][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.949756][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.952257][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.954268][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.000915][ T1171] veth1_macvtap: left promiscuous mode [ 389.002987][ T1171] veth0_macvtap: left promiscuous mode [ 389.005077][ T1171] veth1_vlan: left promiscuous mode [ 389.007011][ T1171] veth0_vlan: left promiscuous mode [ 389.083060][T18307] netlink: 'syz.9.3696': attribute type 16 has an invalid length. [ 389.097912][ T8] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 389.259804][ T8] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.263089][ T8] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.265581][ T8] usb 13-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 389.269912][ T8] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.272981][ T8] usb 13-1: config 0 descriptor?? [ 389.367464][ T5942] Bluetooth: hci1: command tx timeout [ 389.720678][ T8] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:28BD:0933.000B/input/input48 [ 389.809159][ T8] uclogic 0003:28BD:0933.000B: input,hidraw1: USB HID v5.50 Mouse [HID 28bd:0933] on usb-dummy_hcd.8-1/input0 [ 389.939335][T18288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.955023][T18288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.133771][ T39] audit: type=1400 audit(1730157610.433:1468): avc: denied { ioctl } for pid=18285 comm="syz.8.3689" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 390.568420][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 390.744637][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 390.926456][ T8] usb 13-1: reset high-speed USB device number 20 using dummy_hcd [ 391.448048][ T5942] Bluetooth: hci1: command tx timeout [ 392.116233][T18309] __nla_validate_parse: 3 callbacks suppressed [ 392.116246][T18309] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3697'. [ 392.123103][T18312] validate_nla: 1 callbacks suppressed [ 392.123116][T18312] netlink: 'syz.9.3697': attribute type 1 has an invalid length. [ 392.127580][T18312] netlink: 'syz.9.3697': attribute type 2 has an invalid length. [ 392.130824][T18312] netlink: 16074 bytes leftover after parsing attributes in process `syz.9.3697'. [ 392.147636][T18311] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3697'. [ 392.327390][T18328] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3701'. [ 392.351604][T18337] tmpfs: Bad value for 'mpol' [ 392.441042][T18188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 392.450043][T18188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 392.459286][T18188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 392.471076][T18188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 392.480303][T18346] Lens A: ================= START STATUS ================= [ 392.482207][T18346] Lens A: Focus, Absolute: 0 [ 392.483539][T18346] Lens A: ================== END STATUS ================== [ 392.584980][T18188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.600534][T18188] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.604887][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.606903][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.630431][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.633030][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.661954][T18188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 392.664722][T18188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.704326][T18362] netlink: 'syz.9.3706': attribute type 4 has an invalid length. [ 392.736606][T18362] netlink: 'syz.9.3706': attribute type 17 has an invalid length. [ 392.787505][T18188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.014351][ T39] audit: type=1400 audit(1730157613.313:1469): avc: denied { setopt } for pid=18396 comm="syz.5.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 393.032906][T18188] veth0_vlan: entered promiscuous mode [ 393.039710][T18188] veth1_vlan: entered promiscuous mode [ 393.061376][T18188] veth0_macvtap: entered promiscuous mode [ 393.070239][T18188] veth1_macvtap: entered promiscuous mode [ 393.084701][T18188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.089432][T18188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.092623][T18188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.095803][T18188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.098680][T18402] tmpfs: Bad value for 'mpol' [ 393.102312][T18188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.105030][T18188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.107610][T18188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.109287][T18404] libceph: resolve ' [ 393.109287][T18404] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 393.109287][T18404] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 393.114735][ T39] audit: type=1400 audit(1730157613.413:1470): avc: denied { shutdown } for pid=18403 comm="syz.8.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.118090][T18188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.124444][T18188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.139468][T18188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.142120][T18188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.144689][T18188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.156513][T18188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.159734][T18188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.162498][T18188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.165026][T18188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.167610][T18188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.170736][T18188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.173709][T18188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.190680][ T9] usb 13-1: USB disconnect, device number 20 [ 393.194975][T18188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.222021][T18188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.224369][T18188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.229721][T18188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.232632][T18188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.303284][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.305850][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.322568][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.324827][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.428805][T18424] IPVS: Unknown mcast interface: team_slave_1 [ 393.494332][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3719'. [ 393.499738][T18430] openvswitch: netlink: Unknown key attributes 2 [ 393.642042][T18435] team0: Port device team_slave_1 removed [ 393.816759][T18440] Lens A: ================= START STATUS ================= [ 393.820854][T18440] Lens A: Focus, Absolute: 0 [ 393.822782][T18440] Lens A: ================== END STATUS ================== [ 393.842071][T18397] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 393.875516][ T39] audit: type=1400 audit(1730157614.173:1471): avc: denied { bind } for pid=18447 comm="syz.9.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 393.986419][T18455] overlayfs: missing 'lowerdir' [ 394.077706][T18460] netlink: 'syz.9.3730': attribute type 16 has an invalid length. [ 394.084248][T18460] netlink: 64006 bytes leftover after parsing attributes in process `syz.9.3730'. [ 394.317898][ T2293] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 394.448152][ T9] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 394.473228][ T2293] usb 10-1: Using ep0 maxpacket: 32 [ 394.476733][ T2293] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 394.481533][ T2293] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 394.484887][ T2293] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.488713][ T2293] usb 10-1: Product: syz [ 394.490649][ T2293] usb 10-1: Manufacturer: syz [ 394.492349][ T2293] usb 10-1: SerialNumber: syz [ 394.494758][ T2293] usb 10-1: config 0 descriptor?? [ 394.496558][T18461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 394.499447][ T2293] hub 10-1:0.0: bad descriptor, ignoring hub [ 394.501041][ T2293] hub 10-1:0.0: probe with driver hub failed with error -5 [ 394.504446][ T2293] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input49 [ 394.600081][ T9] usb 14-1: too many configurations: 9, using maximum allowed: 8 [ 394.603274][ T9] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.606029][ T9] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.609558][ T9] usb 14-1: config 0 interface 0 has no altsetting 0 [ 394.616145][ T9] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.619401][ T9] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.622606][ T9] usb 14-1: config 0 interface 0 has no altsetting 0 [ 394.625568][ T9] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.628484][ T9] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.631946][ T9] usb 14-1: config 0 interface 0 has no altsetting 0 [ 394.636212][ T9] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.640010][ T9] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.644452][ T9] usb 14-1: config 0 interface 0 has no altsetting 0 [ 394.648444][ T9] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.651917][ T9] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.655055][ T9] usb 14-1: config 0 interface 0 has no altsetting 0 [ 394.658079][ T9] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.660711][ T9] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.664016][ T9] usb 14-1: config 0 interface 0 has no altsetting 0 [ 394.667472][ T9] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.669921][ T9] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.672844][ T9] usb 14-1: config 0 interface 0 has no altsetting 0 [ 394.675728][ T9] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.678265][ T9] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.681468][ T9] usb 14-1: config 0 interface 0 has no altsetting 0 [ 394.685178][ T9] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 394.687953][ T9] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 394.690727][ T9] usb 14-1: Product: syz [ 394.691900][ T9] usb 14-1: Manufacturer: syz [ 394.693566][ T9] usb 14-1: SerialNumber: syz [ 394.696643][ T9] usb 14-1: config 0 descriptor?? [ 394.701224][ T9] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0 [ 394.702215][ T2293] usb 10-1: USB disconnect, device number 42 [ 394.704053][ C3] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 394.812841][T18492] ata3.00: invalid multi_count 1 ignored [ 395.032012][ C0] usb 14-1: yurex_control_callback - control failed: -71 [ 395.032252][T10986] usb 14-1: USB disconnect, device number 2 [ 395.039305][T10986] yurex 14-1:0.0: USB YUREX #0 now disconnected [ 395.162643][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.416910][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.425368][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.429225][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.433567][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.448299][ T5941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 396.454663][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 396.490484][T18519] netlink: 'syz.9.3750': attribute type 16 has an invalid length. [ 396.490837][T18510] lo speed is unknown, defaulting to 1000 [ 396.493594][T18519] netlink: 63990 bytes leftover after parsing attributes in process `syz.9.3750'. [ 396.510803][T18521] syz.8.3751: attempt to access beyond end of device [ 396.510803][T18521] loop8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 396.515021][T18521] MINIX-fs: unable to read superblock [ 396.602633][T18510] chnl_net:caif_netlink_parms(): no params data found [ 396.692927][T18510] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.695303][T18510] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.697824][T18510] bridge_slave_0: entered allmulticast mode [ 396.700069][T18510] bridge_slave_0: entered promiscuous mode [ 396.710119][T18510] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.712306][T18510] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.715015][T18510] bridge_slave_1: entered allmulticast mode [ 396.722296][T18510] bridge_slave_1: entered promiscuous mode [ 396.743501][T18534] netlink: 'syz.9.3753': attribute type 1 has an invalid length. [ 396.755774][T18534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.777415][T18510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.783464][T18510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.837157][T18510] team0: Port device team_slave_0 added [ 396.841449][T18510] team0: Port device team_slave_1 added [ 396.873801][T18510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.877469][T18510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.886989][T18510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.892822][T18510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.895907][T18510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.907661][T18510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.953557][T18510] hsr_slave_0: entered promiscuous mode [ 396.955723][T18510] hsr_slave_1: entered promiscuous mode [ 396.961926][T18510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.964877][T18510] Cannot create hsr debugfs directory [ 397.021270][T18549] overlayfs: missing 'lowerdir' [ 397.042780][T18551] netlink: 'syz.9.3760': attribute type 16 has an invalid length. [ 397.045538][T18551] netlink: 63982 bytes leftover after parsing attributes in process `syz.9.3760'. [ 397.133808][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.192429][T18573] Lens A: ================= START STATUS ================= [ 397.194586][T18573] Lens A: Focus, Absolute: 0 [ 397.195761][T18573] Lens A: ================== END STATUS ================== [ 397.259837][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.377289][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.459138][ T2293] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 397.518128][ T12] bridge_slave_1: left allmulticast mode [ 397.522720][ T12] bridge_slave_1: left promiscuous mode [ 397.524364][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.528489][ T12] bridge_slave_0: left allmulticast mode [ 397.529824][ T12] bridge_slave_0: left promiscuous mode [ 397.531199][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.627979][ T2293] usb 10-1: Using ep0 maxpacket: 32 [ 397.631447][ T2293] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 397.635114][ T2293] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 397.637129][ T2293] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.652859][ T2293] usb 10-1: Product: syz [ 397.653963][ T2293] usb 10-1: Manufacturer: syz [ 397.655199][ T2293] usb 10-1: SerialNumber: syz [ 397.661258][ T2293] usb 10-1: config 0 descriptor?? [ 397.663484][T18575] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 397.669288][ T2293] hub 10-1:0.0: bad descriptor, ignoring hub [ 397.671339][ T2293] hub 10-1:0.0: probe with driver hub failed with error -5 [ 397.674572][ T2293] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input51 [ 397.880874][ T2293] usb 10-1: USB disconnect, device number 43 [ 397.882775][ C3] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 398.028638][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.058491][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.066056][ T12] bond0 (unregistering): Released all slaves [ 398.069077][T18582] netlink: 'syz.8.3773': attribute type 16 has an invalid length. [ 398.071438][T18582] netlink: 64126 bytes leftover after parsing attributes in process `syz.8.3773'. [ 398.302142][ T39] audit: type=1804 audit(1730157618.603:1472): pid=18594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.3777" name="/newroot/87/bus/file1" dev="overlay" ino=485 res=1 errno=0 [ 398.423940][T18613] netlink: 'syz.9.3782': attribute type 16 has an invalid length. [ 398.426142][T18613] netlink: 64098 bytes leftover after parsing attributes in process `syz.9.3782'. [ 398.477911][ T5942] Bluetooth: hci1: command tx timeout [ 398.499949][ T12] hsr_slave_0: left promiscuous mode [ 398.502941][ T12] hsr_slave_1: left promiscuous mode [ 398.505687][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.509048][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.512294][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.515161][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.568236][ T12] veth1_macvtap: left promiscuous mode [ 398.569869][ T12] veth0_macvtap: left promiscuous mode [ 398.571724][ T12] veth1_vlan: left promiscuous mode [ 398.573313][ T12] veth0_vlan: left promiscuous mode [ 398.660792][ T39] audit: type=1326 audit(1730157618.963:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18635 comm="syz.8.3788" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb91ab7e719 code=0x0 [ 399.517364][ T39] audit: type=1400 audit(1730157619.813:1474): avc: denied { getopt } for pid=18640 comm="syz.8.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 400.285806][ T12] team0 (unregistering): Port device team_slave_1 removed [ 400.554406][ T12] team0 (unregistering): Port device team_slave_0 removed [ 400.558180][ T5942] Bluetooth: hci1: command tx timeout [ 400.581277][T18660] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 400.585791][T18660] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 400.643726][T18662] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3797'. [ 400.819984][ T39] audit: type=1326 audit(1730157621.123:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18661 comm="syz.9.3797" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 400.826815][ T39] audit: type=1326 audit(1730157621.123:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18661 comm="syz.9.3797" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 401.466589][ T39] audit: type=1326 audit(1730157621.763:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18661 comm="syz.9.3797" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 401.928050][T18663] netlink: 'syz.9.3797': attribute type 26 has an invalid length. [ 402.110139][T18510] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 402.115663][T18510] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 402.130227][T18510] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.148865][T18510] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 402.152421][T18684] netlink: 'syz.9.3805': attribute type 16 has an invalid length. [ 402.155442][T18684] netlink: 60298 bytes leftover after parsing attributes in process `syz.9.3805'. [ 402.227230][T18510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.235518][T18510] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.237962][ T25] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 402.245374][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.247473][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.256676][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.258861][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.267195][T18694] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3810'. [ 402.275116][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3810'. [ 402.294682][T18510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.298532][T18510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.397258][T18510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.399606][ T25] usb 13-1: Using ep0 maxpacket: 32 [ 402.402442][ T25] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 402.406835][ T25] usb 13-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 402.411577][ T25] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.414040][ T25] usb 13-1: Product: syz [ 402.415248][ T25] usb 13-1: Manufacturer: syz [ 402.416508][ T25] usb 13-1: SerialNumber: syz [ 402.422227][ T25] usb 13-1: config 0 descriptor?? [ 402.425224][T18668] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 402.428263][ T25] hub 13-1:0.0: bad descriptor, ignoring hub [ 402.430101][ T25] hub 13-1:0.0: probe with driver hub failed with error -5 [ 402.437297][ T25] input: syz syz as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input53 [ 402.557768][T18510] veth0_vlan: entered promiscuous mode [ 402.563750][T18510] veth1_vlan: entered promiscuous mode [ 402.577632][T18731] netlink: 'syz.9.3816': attribute type 16 has an invalid length. [ 402.580319][T18510] veth0_macvtap: entered promiscuous mode [ 402.580505][T18731] netlink: 47242 bytes leftover after parsing attributes in process `syz.9.3816'. [ 402.583677][T18510] veth1_macvtap: entered promiscuous mode [ 402.591185][T18510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.593944][T18510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.596719][T18510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.600481][T18510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.603045][T18510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.605730][T18510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.608617][T18510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.611348][T18510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.614699][T18510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.616476][T18736] Lens A: ================= START STATUS ================= [ 402.618997][T18736] Lens A: Focus, Absolute: 0 [ 402.620323][T18736] Lens A: ================== END STATUS ================== [ 402.622613][T18510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.625439][T18510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.629409][T18510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.632153][T18510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.634795][T18510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.637473][ T25] usb 13-1: USB disconnect, device number 21 [ 402.638341][ C2] usbtouchscreen 13-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 402.638614][T18510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.646403][T18510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.648974][ T5942] Bluetooth: hci1: command tx timeout [ 402.649885][T18510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.649928][T18510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.649937][T18510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.651183][T18510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.665234][T18510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.668370][T18510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.670779][T18510] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.673539][T18510] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.723818][T18743] netlink: 'syz.9.3821': attribute type 16 has an invalid length. [ 402.725911][T18743] netlink: 'syz.9.3821': attribute type 3 has an invalid length. [ 402.736961][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.740183][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.750300][T18743] netlink: 64066 bytes leftover after parsing attributes in process `syz.9.3821'. [ 402.753169][T18746] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.760452][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.762754][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.807940][ T39] audit: type=1400 audit(1730157623.103:1478): avc: denied { ioctl } for pid=18747 comm="syz.9.3824" path="socket:[85098]" dev="sockfs" ino=85098 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 402.895409][ T39] audit: type=1400 audit(1730157623.193:1479): avc: denied { setattr } for pid=18756 comm="syz.9.3826" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 403.530644][T18777] netlink: 'syz.5.3831': attribute type 3 has an invalid length. [ 403.533795][T18777] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.3831'. [ 403.728374][T18779] Lens A: ================= START STATUS ================= [ 403.730384][T18779] Lens A: Focus, Absolute: 0 [ 403.731628][T18779] Lens A: ================== END STATUS ================== [ 403.826711][T18790] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3833'. [ 403.830300][T18790] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 403.834968][T18790] affs: Unrecognized mount option "T¾Ì¯¼‰-Á·õïÖ±÷Èiƒ*§IåËøô“­÷f›w“H‚ÄóÕ§ùå)‹“^Y" or missing value [ 403.839656][T18790] affs: Error parsing options [ 403.845305][T18790] afs: Unknown parameter 'dont_hash' [ 403.955939][T18799] Lens A: ================= START STATUS ================= [ 403.960128][T18799] Lens A: Focus, Absolute: 0 [ 403.961608][T18799] Lens A: ================== END STATUS ================== [ 403.994366][T18801] overlayfs: missing 'lowerdir' [ 404.070288][T18805] FAULT_INJECTION: forcing a failure. [ 404.070288][T18805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.073937][T18805] CPU: 1 UID: 0 PID: 18805 Comm: syz.5.3840 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 404.076987][T18805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 404.080542][T18805] Call Trace: [ 404.081560][T18805] [ 404.082691][T18805] dump_stack_lvl+0x16c/0x1f0 [ 404.084160][T18805] should_fail_ex+0x497/0x5b0 [ 404.085486][T18805] _copy_from_user+0x32/0x100 [ 404.086898][T18805] copy_msghdr_from_user+0x99/0x160 [ 404.088399][T18805] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 404.090140][T18805] ? __pfx___lock_acquire+0x10/0x10 [ 404.091895][T18805] ___sys_sendmsg+0xff/0x1e0 [ 404.093607][T18805] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.095364][T18805] ? lock_acquire+0x2f/0xb0 [ 404.097043][T18805] ? __fget_files+0x40/0x3f0 [ 404.098436][T18805] ? fdget+0x176/0x210 [ 404.099629][T18805] __sys_sendmsg+0x117/0x1f0 [ 404.100994][T18805] ? __pfx___sys_sendmsg+0x10/0x10 [ 404.102545][T18805] ? __fget_files+0x244/0x3f0 [ 404.103868][T18805] do_syscall_64+0xcd/0x250 [ 404.105079][T18805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.106604][T18805] RIP: 0033:0x7f3a1c57e719 [ 404.108229][T18805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.113379][T18805] RSP: 002b:00007f3a1d39d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.116216][T18805] RAX: ffffffffffffffda RBX: 00007f3a1c735f80 RCX: 00007f3a1c57e719 [ 404.119697][T18805] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 404.122746][T18805] RBP: 00007f3a1d39d090 R08: 0000000000000000 R09: 0000000000000000 [ 404.125489][T18805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.128278][T18805] R13: 0000000000000000 R14: 00007f3a1c735f80 R15: 00007ffc228f9508 [ 404.131126][T18805] [ 404.219972][T18808] tmpfs: Bad value for 'mpol' [ 404.395672][T18810] netlink: 'syz.5.3842': attribute type 3 has an invalid length. [ 404.399223][T18810] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.3842'. [ 404.599119][T18816] netlink: 9412 bytes leftover after parsing attributes in process `syz.5.3844'. [ 404.905683][ T3646] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.141837][T18821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=18821 comm=syz.5.3846 [ 406.182550][T18826] openvswitch: netlink: Missing valid actions attribute. [ 406.184619][T18826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.188935][T18826] netlink: zone id is out of range [ 406.190705][T18826] netlink: zone id is out of range [ 406.201489][T18826] netlink: set zone limit has 4 unknown bytes [ 406.277064][T18824] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 406.279059][T18824] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 406.289311][T18824] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 406.299946][T18832] fuse: Unknown parameter '000000000000000000000060x000000000000000b' [ 406.304813][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.312061][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.317648][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.328134][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.338578][ T5941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 406.345146][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.387319][T18842] FAULT_INJECTION: forcing a failure. [ 406.387319][T18842] name failslab, interval 1, probability 0, space 0, times 0 [ 406.393272][T18842] CPU: 1 UID: 0 PID: 18842 Comm: syz.8.3851 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 406.396919][T18842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 406.400681][T18842] Call Trace: [ 406.401678][T18842] [ 406.402670][T18842] dump_stack_lvl+0x16c/0x1f0 [ 406.404183][T18842] should_fail_ex+0x497/0x5b0 [ 406.405659][T18842] ? fs_reclaim_acquire+0xae/0x150 [ 406.407303][T18842] should_failslab+0xc2/0x120 [ 406.408827][T18842] kmem_cache_alloc_node_noprof+0x71/0x310 [ 406.410657][T18842] ? __alloc_skb+0x2b1/0x380 [ 406.412109][T18842] __alloc_skb+0x2b1/0x380 [ 406.413514][T18842] ? __pfx___alloc_skb+0x10/0x10 [ 406.415060][T18842] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 406.416918][T18842] netlink_alloc_large_skb+0x69/0x130 [ 406.418719][T18842] netlink_sendmsg+0x689/0xd70 [ 406.420237][T18842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.421911][T18842] ? __might_fault+0xe3/0x190 [ 406.423410][T18842] ____sys_sendmsg+0xaaf/0xc90 [ 406.424923][T18842] ? copy_msghdr_from_user+0x10b/0x160 [ 406.426676][T18842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.428096][T18829] lo speed is unknown, defaulting to 1000 [ 406.428338][T18842] ? __pfx___lock_acquire+0x10/0x10 [ 406.428366][T18842] ___sys_sendmsg+0x135/0x1e0 [ 406.433299][T18842] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.435098][T18842] ? lock_acquire+0x2f/0xb0 [ 406.436519][T18842] ? __fget_files+0x40/0x3f0 [ 406.437988][T18842] ? fdget+0x176/0x210 [ 406.439278][T18842] __sys_sendmsg+0x117/0x1f0 [ 406.440713][T18842] ? __pfx___sys_sendmsg+0x10/0x10 [ 406.442302][T18842] ? __fget_files+0x244/0x3f0 [ 406.443897][T18842] do_syscall_64+0xcd/0x250 [ 406.445344][T18842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.447147][T18842] RIP: 0033:0x7fb91ab7e719 [ 406.448618][T18842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.454689][T18842] RSP: 002b:00007fb91b926038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.457277][T18842] RAX: ffffffffffffffda RBX: 00007fb91ad35f80 RCX: 00007fb91ab7e719 [ 406.459825][T18842] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 406.462289][T18842] RBP: 00007fb91b926090 R08: 0000000000000000 R09: 0000000000000000 [ 406.464828][T18842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.467312][T18842] R13: 0000000000000000 R14: 00007fb91ad35f80 R15: 00007ffcd6dba648 [ 406.469754][T18842] [ 406.511034][T18848] overlayfs: missing 'workdir' [ 406.525463][T18829] chnl_net:caif_netlink_parms(): no params data found [ 406.574621][T18829] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.576733][T18829] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.578950][T18829] bridge_slave_0: entered allmulticast mode [ 406.582092][T18829] bridge_slave_0: entered promiscuous mode [ 406.585049][T18829] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.587040][T18829] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.589614][T18829] bridge_slave_1: entered allmulticast mode [ 406.591725][T18829] bridge_slave_1: entered promiscuous mode [ 406.654499][ T3646] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.663852][T18829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.674092][T18829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.703458][T18829] team0: Port device team_slave_0 added [ 406.707519][T18829] team0: Port device team_slave_1 added [ 406.736590][ T3646] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.750744][T18829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.752643][T18829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.761542][ T7959] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 406.763702][T18829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.768430][T18829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.770299][T18829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.777467][T18829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.804540][T18867] syz.8.3856 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 406.840305][ T3646] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.848230][T18829] hsr_slave_0: entered promiscuous mode [ 406.851521][T18829] hsr_slave_1: entered promiscuous mode [ 406.855899][T18829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.858870][T18829] Cannot create hsr debugfs directory [ 406.908055][ T7959] usb 10-1: Using ep0 maxpacket: 32 [ 406.914477][ T7959] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 406.921688][ T7959] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 406.924695][ T7959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.925163][T18871] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3857'. [ 406.926980][ T7959] usb 10-1: Product: syz [ 406.933655][ T7959] usb 10-1: Manufacturer: syz [ 406.939041][ T7959] usb 10-1: SerialNumber: syz [ 406.941713][ T7959] usb 10-1: config 0 descriptor?? [ 406.943958][T18851] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 406.946564][ T7959] hub 10-1:0.0: bad descriptor, ignoring hub [ 406.949114][ T7959] hub 10-1:0.0: probe with driver hub failed with error -5 [ 406.952326][ T7959] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input54 [ 406.977875][ T39] audit: type=1326 audit(1730157627.283:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.9.3847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 406.984916][ T39] audit: type=1326 audit(1730157627.283:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.9.3847" exe="/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 406.996338][ T39] audit: type=1326 audit(1730157627.293:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.9.3847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 407.008254][ T39] audit: type=1326 audit(1730157627.293:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.9.3847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 407.016763][ T39] audit: type=1326 audit(1730157627.293:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.9.3847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 407.023903][ T39] audit: type=1326 audit(1730157627.293:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.9.3847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 407.030827][ T39] audit: type=1326 audit(1730157627.293:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.9.3847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 407.037666][ T39] audit: type=1326 audit(1730157627.293:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.9.3847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 407.045178][ T39] audit: type=1326 audit(1730157627.293:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.9.3847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 407.054094][ T39] audit: type=1326 audit(1730157627.293:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.9.3847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008457e719 code=0x7fc00000 [ 407.118887][ T3646] bridge_slave_1: left allmulticast mode [ 407.120918][ T3646] bridge_slave_1: left promiscuous mode [ 407.123775][ T3646] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.128936][ T3646] bridge_slave_0: left allmulticast mode [ 407.130936][ T3646] bridge_slave_0: left promiscuous mode [ 407.133271][ T3646] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.152136][ T7959] usb 10-1: USB disconnect, device number 44 [ 407.153856][ C3] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 407.246487][T18878] netlink: 'syz.8.3860': attribute type 3 has an invalid length. [ 407.251224][T18878] netlink: 64066 bytes leftover after parsing attributes in process `syz.8.3860'. [ 407.337816][T18882] CIFS: iocharset name too long [ 407.479363][T18898] FAULT_INJECTION: forcing a failure. [ 407.479363][T18898] name failslab, interval 1, probability 0, space 0, times 0 [ 407.483287][T18898] CPU: 0 UID: 0 PID: 18898 Comm: syz.8.3866 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 407.486872][T18898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 407.489914][T18898] Call Trace: [ 407.491110][T18898] [ 407.492079][T18898] dump_stack_lvl+0x16c/0x1f0 [ 407.493443][T18898] should_fail_ex+0x497/0x5b0 [ 407.494785][T18898] ? fs_reclaim_acquire+0xae/0x150 [ 407.496201][T18898] should_failslab+0xc2/0x120 [ 407.497480][T18898] __kmalloc_noprof+0xcb/0x400 [ 407.498830][T18898] ? __d_alloc+0x31/0xaa0 [ 407.500013][T18898] __d_alloc+0x63f/0xaa0 [ 407.501174][T18898] d_alloc+0x4a/0x1e0 [ 407.502575][T18898] lookup_one_qstr_excl+0xcb/0x190 [ 407.504016][T18898] ? mnt_want_write+0x161/0x450 [ 407.505395][T18898] filename_create+0x1ed/0x530 [ 407.507018][T18898] ? __pfx_filename_create+0x10/0x10 [ 407.508878][T18898] ? __might_fault+0xe3/0x190 [ 407.510578][T18898] do_symlinkat+0xbf/0x310 [ 407.512239][T18898] ? __pfx_do_symlinkat+0x10/0x10 [ 407.514047][T18898] ? getname_flags.part.0+0x1c5/0x550 [ 407.516102][T18898] __x64_sys_symlink+0x75/0x90 [ 407.517862][T18898] do_syscall_64+0xcd/0x250 [ 407.519561][T18898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.521438][T18898] RIP: 0033:0x7fb91ab7e719 [ 407.522868][T18898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.528658][T18898] RSP: 002b:00007fb91b926038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 407.531243][T18898] RAX: ffffffffffffffda RBX: 00007fb91ad35f80 RCX: 00007fb91ab7e719 [ 407.533636][T18898] RDX: 0000000000000000 RSI: 0000000020000e40 RDI: 0000000020001640 [ 407.535996][T18898] RBP: 00007fb91b926090 R08: 0000000000000000 R09: 0000000000000000 [ 407.538343][T18898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.540702][T18898] R13: 0000000000000000 R14: 00007fb91ad35f80 R15: 00007ffcd6dba648 [ 407.543683][T18898] [ 407.704279][ T3646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.708753][ T3646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.712739][ T3646] bond0 (unregistering): Released all slaves [ 407.728600][T18901] netlink: 'syz.8.3867': attribute type 15 has an invalid length. [ 407.731208][T18901] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3867'. [ 407.778814][T18908] overlayfs: conflicting options: userxattr,verity=on [ 407.781912][T18907] CUSE: DEVNAME unspecified [ 407.950970][T18920] tmpfs: Bad value for 'mpol' [ 407.981622][T18922] netlink: 'syz.9.3872': attribute type 2 has an invalid length. [ 407.984490][T18922] netlink: 'syz.9.3872': attribute type 3 has an invalid length. [ 407.987669][T18922] netlink: 64066 bytes leftover after parsing attributes in process `syz.9.3872'. [ 408.151337][ T3646] hsr_slave_0: left promiscuous mode [ 408.154494][ T3646] hsr_slave_1: left promiscuous mode [ 408.157302][ T3646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.163498][ T3646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.168351][ T3646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.171301][ T3646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.216851][ T3646] veth1_macvtap: left promiscuous mode [ 408.218814][ T3646] veth0_macvtap: left promiscuous mode [ 408.220558][ T3646] veth1_vlan: left promiscuous mode [ 408.222578][ T3646] veth0_vlan: left promiscuous mode [ 408.237919][ T5941] Bluetooth: hci4: command 0x0c1a tx timeout [ 408.414969][ T5941] Bluetooth: hci1: command tx timeout [ 408.677901][ T25] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 408.870419][ T25] usb 13-1: Using ep0 maxpacket: 16 [ 408.890716][ T25] usb 13-1: config 0 has an invalid interface number: 8 but max is 0 [ 408.894011][ T25] usb 13-1: config 0 has no interface number 0 [ 408.896232][ T25] usb 13-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 408.900791][ T25] usb 13-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 408.906690][ T25] usb 13-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 408.910582][ T25] usb 13-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 408.913408][ T25] usb 13-1: Product: syz [ 408.914931][ T25] usb 13-1: SerialNumber: syz [ 408.929309][ T25] usb 13-1: config 0 descriptor?? [ 408.934485][ T25] cm109 13-1:0.8: invalid payload size 0, expected 4 [ 408.938173][ T5941] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 408.942190][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.8/input/input55 [ 408.953598][ T25] list_add double add: new=ffff888059891318, prev=ffff888059891318, next=ffff88804741c070. [ 408.953861][ T25] ------------[ cut here ]------------ [ 408.953868][ T25] kernel BUG at lib/list_debug.c:35! [ 408.953884][ T25] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 408.953895][ T25] CPU: 2 UID: 0 PID: 25 Comm: kworker/2:0 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 408.953907][ T25] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 408.953915][ T25] Workqueue: usb_hub_wq hub_event [ 408.953934][ T25] RIP: 0010:__list_add_valid_or_report+0xd6/0x100 [ 408.953951][ T25] Code: 89 f1 48 c7 c7 40 af d1 8b 48 89 de e8 83 b2 d7 fc 90 0f 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 c0 af d1 8b e8 6b b2 d7 fc 90 <0f> 0b 48 89 f7 48 89 34 24 e8 dc 82 59 fd 48 8b 34 24 e9 6c ff ff [ 408.953961][ T25] RSP: 0018:ffffc9000083ecf0 EFLAGS: 00010082 [ 408.953969][ T25] RAX: 0000000000000058 RBX: ffff88804741c070 RCX: ffffffff816d3f49 [ 408.953977][ T25] RDX: 0000000000000000 RSI: ffffffff816de866 RDI: 0000000000000005 [ 408.953983][ T25] RBP: ffff888059891318 R08: 0000000000000005 R09: 0000000000000000 [ 408.953990][ T25] R10: 0000000080000002 R11: ffffffff961ccdd0 R12: 0000000000000000 [ 408.953997][ T25] R13: ffff888059891318 R14: ffff888059891318 R15: ffff88804741c078 [ 408.954004][ T25] FS: 0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 408.954026][ T25] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.954035][ T25] CR2: 00007f5d600cff41 CR3: 000000002451a000 CR4: 0000000000352ef0 [ 408.954042][ T25] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 408.954049][ T25] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.954060][ T25] Call Trace: [ 408.954064][ T25] [ 408.954068][ T25] ? die+0x31/0x80 [ 408.954081][ T25] ? do_trap+0x232/0x430 [ 408.954095][ T25] ? __list_add_valid_or_report+0xd6/0x100 [ 408.954109][ T25] ? __list_add_valid_or_report+0xd6/0x100 [ 408.954121][ T25] ? do_error_trap+0xf4/0x230 [ 408.954134][ T25] ? __list_add_valid_or_report+0xd6/0x100 [ 408.954148][ T25] ? handle_invalid_op+0x34/0x40 [ 408.954161][ T25] ? __list_add_valid_or_report+0xd6/0x100 [ 408.954174][ T25] ? exc_invalid_op+0x2e/0x50 [ 408.954185][ T25] ? asm_exc_invalid_op+0x1a/0x20 [ 408.954201][ T25] ? __wake_up_klogd.part.0+0x99/0xf0 [ 408.954242][ T25] ? vprintk+0x86/0xa0 [ 408.954254][ T25] ? __list_add_valid_or_report+0xd6/0x100 [ 408.954268][ T25] usb_hcd_link_urb_to_ep+0x21d/0x390 [ 408.954285][ T25] dummy_urb_enqueue+0x291/0x8e0 [ 408.954298][ T25] usb_hcd_submit_urb+0x2d1/0x2090 [ 408.954309][ T25] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 408.954320][ T25] ? trace_contention_end+0xea/0x140 [ 408.954331][ T25] ? __mutex_lock+0x1a6/0x9c0 [ 408.954347][ T25] ? lockdep_hardirqs_on+0x7c/0x110 [ 408.954361][ T25] ? preempt_schedule_thunk+0x1a/0x30 [ 408.954372][ T25] ? cm109_input_open+0x8e/0x460 [ 408.954388][ T25] ? __pfx___mutex_lock+0x10/0x10 [ 408.954403][ T25] ? preempt_schedule_thunk+0x1a/0x30 [ 408.954414][ T25] usb_submit_urb+0x87c/0x1730 [ 408.954427][ T25] cm109_input_open+0x271/0x460 [ 408.954442][ T25] input_open_device+0x1c9/0x320 [ 408.954456][ T25] ? __pfx_cm109_input_open+0x10/0x10 [ 408.954471][ T25] kbd_connect+0x103/0x160 [ 408.954483][ T25] input_attach_handler.isra.0+0x181/0x260 [ 408.954494][ T25] input_register_device+0xa84/0x1110 [ 408.954505][ T25] cm109_usb_probe+0x122f/0x17c0 [ 408.954522][ T25] usb_probe_interface+0x309/0x9d0 [ 408.954533][ T25] ? __pfx_usb_probe_interface+0x10/0x10 [ 408.954543][ T25] really_probe+0x23e/0xa90 [ 408.954558][ T25] __driver_probe_device+0x1de/0x440 [ 408.954573][ T25] driver_probe_device+0x4c/0x1b0 [ 408.954587][ T25] __device_attach_driver+0x1df/0x310 [ 408.954601][ T25] ? __pfx___device_attach_driver+0x10/0x10 [ 408.954615][ T25] bus_for_each_drv+0x157/0x1e0 [ 408.954627][ T25] ? __pfx_bus_for_each_drv+0x10/0x10 [ 408.954638][ T25] ? lockdep_hardirqs_on+0x7c/0x110 [ 408.954652][ T25] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 408.954666][ T25] __device_attach+0x1e8/0x4b0 [ 408.954680][ T25] ? __pfx___device_attach+0x10/0x10 [ 408.954695][ T25] ? do_raw_spin_unlock+0x172/0x230 [ 408.954708][ T25] bus_probe_device+0x17f/0x1c0 [ 408.954721][ T25] device_add+0x114b/0x1a70 [ 408.954731][ T25] ? __pfx_device_add+0x10/0x10 [ 408.954740][ T25] ? mark_held_locks+0x9f/0xe0 [ 408.954752][ T25] usb_set_configuration+0x10cb/0x1c50 [ 408.954769][ T25] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 408.954783][ T25] usb_generic_driver_probe+0xb1/0x110 [ 408.954795][ T25] usb_probe_device+0xec/0x3e0 [ 408.954809][ T25] ? __pfx_usb_probe_device+0x10/0x10 [ 408.954824][ T25] really_probe+0x23e/0xa90 [ 408.954838][ T25] __driver_probe_device+0x1de/0x440 [ 408.954851][ T25] ? usb_driver_applicable+0x1c7/0x220 [ 408.954862][ T25] driver_probe_device+0x4c/0x1b0 [ 408.954876][ T25] __device_attach_driver+0x1df/0x310 [ 408.954890][ T25] ? __pfx___device_attach_driver+0x10/0x10 [ 408.954904][ T25] bus_for_each_drv+0x157/0x1e0 [ 408.954916][ T25] ? __pfx_bus_for_each_drv+0x10/0x10 [ 408.954927][ T25] ? lockdep_hardirqs_on+0x7c/0x110 [ 408.954941][ T25] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 408.954955][ T25] __device_attach+0x1e8/0x4b0 [ 408.954969][ T25] ? __pfx___device_attach+0x10/0x10 [ 408.954983][ T25] ? do_raw_spin_unlock+0x172/0x230 [ 408.954996][ T25] bus_probe_device+0x17f/0x1c0 [ 408.955009][ T25] device_add+0x114b/0x1a70 [ 408.955019][ T25] ? __pfx_device_add+0x10/0x10 [ 408.955028][ T25] ? add_device_randomness+0xb8/0xf0 [ 408.955042][ T25] usb_new_device+0xd90/0x1a10 [ 408.955062][ T25] ? __pfx_usb_new_device+0x10/0x10 [ 408.955077][ T25] hub_event+0x2d9a/0x4e10 [ 408.955096][ T25] ? __pfx_hub_event+0x10/0x10 [ 408.955110][ T25] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 408.955120][ T25] ? rcu_is_watching+0x12/0xc0 [ 408.955133][ T25] ? trace_lock_acquire+0x14a/0x1d0 [ 408.955146][ T25] ? process_one_work+0x921/0x1ba0 [ 408.955158][ T25] ? lock_acquire+0x2f/0xb0 [ 408.955167][ T25] ? process_one_work+0x921/0x1ba0 [ 408.955177][ T25] process_one_work+0x9c5/0x1ba0 [ 408.955189][ T25] ? __pfx_hcd_resume_work+0x10/0x10 [ 408.955204][ T25] ? __pfx_process_one_work+0x10/0x10 [ 408.955216][ T25] ? assign_work+0x1a0/0x250 [ 408.955231][ T25] worker_thread+0x6c8/0xf00 [ 408.955243][ T25] ? __pfx_worker_thread+0x10/0x10 [ 408.955253][ T25] kthread+0x2c1/0x3a0 [ 408.955265][ T25] ? _raw_spin_unlock_irq+0x23/0x50 [ 408.955277][ T25] ? __pfx_kthread+0x10/0x10 [ 408.955289][ T25] ret_from_fork+0x45/0x80 [ 408.955298][ T25] ? __pfx_kthread+0x10/0x10 [ 408.955310][ T25] ret_from_fork_asm+0x1a/0x30 [ 408.955326][ T25] [ 408.955330][ T25] Modules linked in: [ 408.955338][ T25] ---[ end trace 0000000000000000 ]--- [ 408.955344][ T25] RIP: 0010:__list_add_valid_or_report+0xd6/0x100 [ 408.955358][ T25] Code: 89 f1 48 c7 c7 40 af d1 8b 48 89 de e8 83 b2 d7 fc 90 0f 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 c0 af d1 8b e8 6b b2 d7 fc 90 <0f> 0b 48 89 f7 48 89 34 24 e8 dc 82 59 fd 48 8b 34 24 e9 6c ff ff [ 408.955367][ T25] RSP: 0018:ffffc9000083ecf0 EFLAGS: 00010082 [ 408.955375][ T25] RAX: 0000000000000058 RBX: ffff88804741c070 RCX: ffffffff816d3f49 [ 408.955383][ T25] RDX: 0000000000000000 RSI: ffffffff816de866 RDI: 0000000000000005 [ 408.955389][ T25] RBP: ffff888059891318 R08: 0000000000000005 R09: 0000000000000000 [ 408.955395][ T25] R10: 0000000080000002 R11: ffffffff961ccdd0 R12: 0000000000000000 [ 408.955402][ T25] R13: ffff888059891318 R14: ffff888059891318 R15: ffff88804741c078 [ 408.955408][ T25] FS: 0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 408.955428][ T25] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.955437][ T25] CR2: 00007f5d600cff41 CR3: 000000002451a000 CR4: 0000000000352ef0 [ 408.955444][ T25] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 408.955450][ T25] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.955458][ T25] Kernel panic - not syncing: Fatal exception [ 410.031168][ T25] Shutting down cpus with NMI [ 410.031662][ T25] Kernel Offset: disabled VM DIAGNOSIS: 23:11:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff81331af0 RDX=ffffffff8de957c0 RSI=ffffffff81331b38 RDI=ffffffff9377e7c0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff26efcf8 R10=ffffffff9377e7c7 R11=ffffc90000007ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81331b39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb91b8656c0 CR3=0000000051360000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a1c5f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a1c5f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a1c5f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a1c5f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a1c5f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a1c5f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a1c70c488 00007f3a1c70c480 00007f3a1c70c478 00007f3a1c70c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a1d26d100 00007f3a1c70c440 00007f3a1c70c458 00007f3a1c70c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a1c70c498 00007f3a1c70c490 00007f3a1c70c488 00007f3a1c70c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000134 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81331af0 RDX=ffff888042efc880 RSI=ffffffff81331b38 RDI=ffffffff9377e7c0 RBP=0000000000000001 RSP=ffffc900008b0fd0 R8 =0000000000000001 R9 =fffffbfff26efcf8 R10=ffffffff9377e7c7 R11=ffffc900008b0ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81331b39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5d60753280 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5d5fed6571 CR3=00000000354ea000 CR4=00350ef0 DR0=0000000000000621 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001020080 Opmask01=0000000000000000 Opmask02=00000000fefdff7f Opmask03=0410008081001001 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a3a3a3a3a3a3a 3a3a3a3a3a3a3a3a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303030303030 3030303030303030 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffff0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a55774a015101 2a2a2a2a2a2a2a2a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a55774a06a4da 2a2a2a2a2a2a2b9c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444e45565f444900 6c61697265730065 6369766544646362 00746375646f7270 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006f696475610079 70706f6c66006970 6174610063627200 636972656e656700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004a4c415044005c 55554a4943004c55 4451440046475700 464c57404b404200 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000032303030 3030303120303030 003930316d632f73 7265766972642f62 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 000055a9ed147390 0000000032303030 3030303100303030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde549efb0 000000002a64626e 002a6d656d70002a 6d6373002a646200 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a264b393a3a26 32393a3a263d393a 3a263e393a3a263b 393a3a263a393a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc9000083e730 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=000000000000006f R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5d600cff41 CR3=000000002451a000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000872c9164 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda23773a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3120203320206620 2066202030202031 20206120203e2034 3c20353020333020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000110102 RBX=0000000000000000 RCX=ffffffff81331af0 RDX=ffff88805876a440 RSI=ffffffff81331b38 RDI=ffffffff9377e7c0 RBP=0000000000000003 RSP=fffffe00000e6e20 R8 =0000000000000001 R9 =fffffbfff26efcf8 R10=ffffffff9377e7c7 R11=0000000000000000 R12=0000000000000000 R13=0000005f7970efe4 R14=dffffc0000000000 R15=ffffffff8e001170 RIP=ffffffff81331b39 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f00843f96c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0085272000 CR3=000000004e3ee000 CR4=00350ef0 DR0=0000000000000400 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 99e6da510012bbcb 5ee5a6754a650bbd ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3063fef5427a522 aa45b22349300920 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0bb412497e876e42 febebd13c3bfc6c3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3520a0429fa5dc7 4106c5b05f185980 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004380 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75b8ec7a36735200 000000010000f8c1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 86c72e009b65b200 0003cc003aecbc00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c1980000000f8bf 000000020000f8bf ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000f8c10000f8c4 fd26f80079730000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cf38a3963edbed0e be1515c11e3fa276 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c78846b228b51cf bc896cf6bd160727 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000068 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000068 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000