last executing test programs: 1m49.711770151s ago: executing program 3 (id=895): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mbind(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x3, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000100003050000003efcffffff000000005aec6d372dbaaf6a1e6b085691e58bed39b0bccb84198166dd699ad592ce1194256efa21a43bc52f8aa6020c3793a90fe424d3938c7328045e39fa3de1c07130", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES64=r0, @ANYBLOB="59771911a9f08038cb72131aeadeecbfe91da6f77dff08afd8e02ef63bb2e5055f783ed9b7de5da351d69fc5299a253d02738ee60af12dabca40481522f47c8f400b99b05f656739b8cbc4095aae2db3709fc4ad4236063f412f87b90923a9ab8fee1c2e4201d295e24b19a9ee9b3d34694a17f635a084a3e1b1fb48cacc87c943ddc87dbe3bc310d53fbf9e8fb2393e1e1e3146a3457434bd52d44625b670f532712a6fc9adef355bb50b1846"], 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x59) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 1m49.541860861s ago: executing program 3 (id=898): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) r2 = syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101202) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000580)={0x6, 0x7, 0x1}) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x1}, 0x10000}], 0x2, 0x600000a2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000e0e000/0x3000)=nil, 0x3000, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r4, 0x0, 0x7a, 0x5, 0x9, 0x0, {0x2, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') pread64(r6, &(0x7f00000013c0)=""/15, 0xf, 0x404) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000000)={0x0, 0x6, 0x1016, 0x1}) ioctl$VIDIOC_QUERYMENU(r5, 0xc040564a, &(0x7f0000000180)={0x0, 0x1, @name="44c8e76a390e80ca112cd78c0d7fddd4721a01000000000000003e6560d83ffd"}) 1m48.890870274s ago: executing program 2 (id=906): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x4, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x10001}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f00000014c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x64}, 0x94) creat(&(0x7f00000063c0)='./file0\x00', 0x120) rmdir(&(0x7f0000007880)='./file0\x00') 1m48.832171605s ago: executing program 2 (id=907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffe6, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x0, 0x406, 0x0, 0xffffffff, 0x25}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c064}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m48.72054075s ago: executing program 2 (id=908): mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}]}, 0x5c}}, 0x0) munlockall() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x7f, 0x8, 0x301}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x5}, 0x10}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@loopback}, {@in=@initdev={0xac, 0x1e, 0x80, 0x0}, 0x0, 0x33}, @in=@local, {}, {0xc, 0x402, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000, 0x2, 0x0, 0x0, 0xea}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x40}}, @tfcpad={0x8, 0x16, 0x4000001}]}, 0x144}, 0x1, 0x0, 0x0, 0x44800}, 0x20008800) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1m48.631782282s ago: executing program 3 (id=909): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r0, &(0x7f0000001f40)={0x2020}, 0x2020) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000080)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x101) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x6, 0x6, 0x80, 0x80}, {0x2, 0xfff, 0xcd5, 0x80000001}}}, 0x80) 1m48.631228047s ago: executing program 3 (id=910): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@multicast2, @in6=@private2}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f00000006c0)=0xe8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="2b0326bd7000fbdbdf2512"], 0x14}}, 0x8000) mount$tmpfs(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000800)=ANY=[]) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000640)=@gcm_256={{0x304}, "55b2bfe456f65ac5", "94933eabd65daad540f97d075c35dc3d0c5423c36a5a29e09986c18918a9d481", "ea6eda2b", "a3df11c174fa26bb"}, 0x38) mount$overlay(0x0, &(0x7f0000000000)='./file2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @mcast1, 0x4}, 0x1c) syz_emit_ethernet(0x126, &(0x7f00000024c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000f03a00fe8000000000000000000000000000bbff0200000000000000000000000000010400907800"], 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000700)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000008c0)="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", 0xfb}, {&(0x7f00000009c0)="40c9b1b08b62707b75177e368c450242c298e3db576192db0a87eb7aa85e53958588c01e3f66950f41835b15a11f8760dab61ed91414999613d2b67fe6307c3765f3d7dc9e0829e0b58b438b16e485ec35ed6fb936360b63c0c90bd054c489ef1b454264467dd1b2602044cba34e66b613ee499c73e531b89a0775f518580ebd4d87b1c8281d600346134cf7fdbad20243cf780b5425fb87f2787d28dd9cfb", 0x9f}, {&(0x7f0000000780)="994cd2ce49c23cdd81c32ef18cca43f29ef5391c73f48382c37c0cc71bfbe08907376d834c8899a6e9dd88bd1a4931118ac9217346ce5460b057c5c445e61143045678db17f399f428c469557f1d6eee5a139ec4618d", 0x56}], 0x3}}], 0x1, 0x40840) chdir(&(0x7f00000001c0)='./bus\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x4) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f40800030006010000bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000580)='./file1\x00', &(0x7f0000000200)='./file0\x00') 1m48.571982213s ago: executing program 2 (id=911): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x75, 0x18b740) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1) close(r1) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) read(r2, &(0x7f0000000000)=""/83, 0x53) read(r2, 0x0, 0x0) ptrace(0x11, r0) 1m48.510692391s ago: executing program 2 (id=912): r0 = syz_socket_connect_nvme_tcp() ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x7, 0x3, 0x3}) close(r0) 1m48.437552395s ago: executing program 3 (id=913): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000002100)={0x80, 0x5, 0xf00, 0x2, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000009a000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000002140)={&(0x7f000052c000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000382000/0x3000)=nil, 0x3000, 0xc) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002180)={0x1d89}, 0x8) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x464040, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x80003, 0x3, 0x7, 0x6, 0x3, 0x3, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x1, 0xd615, 0x9, 0x7fdfffff, 0xfffffffe, 0x6000, 0x0, 0x0, r4, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, r5, &(0x7f00000020c0), 0x7f03) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x28}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') preadv(r7, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) 1m48.437240365s ago: executing program 2 (id=914): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) ptrace(0x10, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd=r1, 0x823, &(0x7f00000001c0)=[{0x0, 0x10}], 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009000034000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000140000000e0a0102000000000000000001000000140000001000010000000000000000000000000a94d99f4a88af8f7c"], 0x90}}, 0x0) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000300)=@overlay={0x0, 0x2, 0x4, 0x100000, 0x2, {}, {0x1, 0x2, 0x8a, 0x40, 0xb, 0x3, "c2ca11ed"}, 0x4819, 0x3, {}, 0x80000000}) rt_sigqueueinfo(r0, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) 1m48.329660898s ago: executing program 32 (id=914): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) ptrace(0x10, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd=r1, 0x823, &(0x7f00000001c0)=[{0x0, 0x10}], 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009000034000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000140000000e0a0102000000000000000001000000140000001000010000000000000000000000000a94d99f4a88af8f7c"], 0x90}}, 0x0) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000300)=@overlay={0x0, 0x2, 0x4, 0x100000, 0x2, {}, {0x1, 0x2, 0x8a, 0x40, 0xb, 0x3, "c2ca11ed"}, 0x4819, 0x3, {}, 0x80000000}) rt_sigqueueinfo(r0, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) 1m48.276471848s ago: executing program 3 (id=917): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x40c4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 1m48.276332756s ago: executing program 33 (id=917): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x40c4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 1m30.251517614s ago: executing program 5 (id=1137): syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000040)="75e3862f63c88fafd92444f4464cd1eaaf013db728673b91fd62543632900a84f700c1a1ef8478e485dc2babd36bcb7026abc45f462acb2f554bfd789f6d72a132ec17a6020f13ff4e963f2f6ef36d8249e34a17e254554c8530be52a10bdca656604bb74e185d88528391d1774b52b2551d52dd43415643019618a14f967c20dac32361ea2583b82ecbd01e7fa8808cf05bee67a09ab8b55445d96ec023ed57bf3bfe6305e0885c335f81b9af083776a2b8b3408a6354bbb3b2df7a8abc2f60483499cf0886fae2ab93f606d93faae0debf") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x5, 0x2, 0xec) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80000, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0}) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f0000001600)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000000020500000000000000000001000004d8000a803c0002800c00028005000100880000002c00018014000300fe88000000000000000000000000000114000400fe80000000000000000000000000003e08000140000000001400028006000340000000000600034000010000380002800600034000ff000006000340000000000c00028005000100840000000c00028005000100840000000c00028005000100060000003800028006000340000200002c00018014000300fe8000000000000000000000000000aa14000400ff0100a071995e03b222079d64b3000000000000000000000000010c00028006000340000400000800084000000001080005400000000064e5b1722e4a742413fb6837cd7f05a2bbdb22c8a44e1bf32124959ec991f1588ac125770d5535a9b8d8a9e5949aaf7df2713bac68add5f1fbcd246ce2c217f1a5dac4f665f267e877c76e871ba288b5234ed4bcde4a7970"], 0xfc}, 0x1, 0x0, 0x0, 0x81}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r9 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r9, r9, &(0x7f0000000080), 0x7f04) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r10, 0xc08c5114, &(0x7f0000000780)={"0160bd8f41a34066c329e5c6d3143a3c4cdc2139bb1c026b2b7398bbddbc", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3b8]}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000000250300000000000008"], 0x80}}, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1m29.920543436s ago: executing program 5 (id=1145): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r0, &(0x7f0000000080)="8adc6364fa280e422208a887ac9e37d1162a5f9bb101bd2bc6af60eb546fca1589b50ecba8ed4143c3858c8a9b3ef5f43d78ea7dd256e88f2ea790b1394b3e1413007fd291baa55a8f3d38a4b50eab0d81791b23", 0x54) 1m29.824078752s ago: executing program 5 (id=1146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1m29.737044699s ago: executing program 5 (id=1148): r0 = socket(0x10, 0x2, 0xfffffffc) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='vlan0\x00', 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0x80, 0x9) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000180)='./file0/../file0/../file0/../file0\x00') r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r7, &(0x7f0000004340)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f00000000c0)) 1m28.785229032s ago: executing program 5 (id=1169): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0xa00, 0x0, {0x2}}, 0x14}}, 0x0) 1m28.38075739s ago: executing program 5 (id=1181): r0 = syz_open_dev$evdev(0x0, 0x0, 0x2101) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)='\\', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)="560409000000601007f1bfc8446f785300fc7a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e776011282e789dbfd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3737b9ec29b8416714cab16f748d946050000002f010000000000000000000000000051ed68f6e8b6d92237c7838a03a25eebb2585ad1449314730ba4f08ffca53fe92e25b081914a", 0xa6}, {&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d18345ac61b2958886a77e2a2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff210002f922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb962aeca814ad530c1413e502b92f3e51eaf75ec5b595b19e4945a1a821a8c47f804465f9e04d0ec9aff13036fe4f3a56b324e9ea795cc89d0f30433f3fa8aa7cc4dd93197840d644c6e48329c266316227ea917708cde40163a6b092d3c722a71e9f21255315cb87a74916d56da0479e7e8865b289fc8095a8477e7fee5eda0c55ec6d53c7aac85f6171717935832962f6db7889683497f3f5a4aa6c6af16908cc4c853536c4f624a75cae05", 0x184}], 0x2}}], 0x2, 0x0) 1m28.282013392s ago: executing program 34 (id=1181): r0 = syz_open_dev$evdev(0x0, 0x0, 0x2101) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)='\\', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)="560409000000601007f1bfc8446f785300fc7a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e776011282e789dbfd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3737b9ec29b8416714cab16f748d946050000002f010000000000000000000000000051ed68f6e8b6d92237c7838a03a25eebb2585ad1449314730ba4f08ffca53fe92e25b081914a", 0xa6}, {&(0x7f0000001a80)="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", 0x184}], 0x2}}], 0x2, 0x0) 1m5.179892649s ago: executing program 0 (id=1721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x8000007ff, 0x913a, 0x0, 0x8, 0xf42, 0xfffffffffffffff7}, {0x7, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in=@local, 0x4d6, 0x2b}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x3, 0x1}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e21, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x11e0}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}, 0x1, {[0x2, 0x5, 0x5, 0x10001, 0xffffffff, 0x6, 0x6, 0x9]}}, 0x5c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r8) add_key(&(0x7f0000004280)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m5.03111514s ago: executing program 0 (id=1726): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x18, 0x140e, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20}, 0x10) 1m5.030809993s ago: executing program 0 (id=1727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x0, 0x406, 0x0, 0xffffffff, 0x25}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c064}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m4.860520389s ago: executing program 0 (id=1733): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c001a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000340)="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", &(0x7f0000000440)=""/215, &(0x7f0000000800)="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", &(0x7f0000000080)="12d91259ff987246ff3721306b3ebf8a39ab8f0a7f0be45b61fce9273a2c", 0x5, 0x1}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000000)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000740)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700), r4, 0x0, 0x2, 0x4}}, 0x20) r5 = dup(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @multicast1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) 1m4.782675311s ago: executing program 0 (id=1735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x8000007ff, 0x913a, 0x0, 0x8, 0xf42, 0xfffffffffffffff7}, {0x7, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in=@local, 0x4d6, 0x2b}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x3, 0x1}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e21, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x11e0}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}, 0x1, {[0x2, 0x5, 0x5, 0x10001, 0xffffffff, 0x6, 0x6, 0x9]}}, 0x5c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r8) add_key(&(0x7f0000004280)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m4.779597166s ago: executing program 0 (id=1737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x10, 0x101, 0x7fff, 0xcc, 0x1420}, 0x50) 1m4.66266007s ago: executing program 35 (id=1737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x10, 0x101, 0x7fff, 0xcc, 0x1420}, 0x50) 54.812051451s ago: executing program 6 (id=1893): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x4000000000000ffd, 0x0, 0x0, 0x0, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x1000000000000, 0x9, 0x8, 0x0, 0x1, 0x1a, 0x0, "d11b209eae6c97b9cd16caa09b6bf408e15c5f9bc7558c81956a4f167a2ba5e4f229f74d03ab915ff40882b4d4a59d00ee8f27fe678df2ec33a8e341c6631840", "f906abe25a20268be4d5c44adaa45679e8e78edcc9e86a3950c1b0580b998993e4338aa17ca0ebd0609d86eaf00a02acf6efea12c9e3abbf1527ec41d63d9a12", "8b1024a6a22a6268189bcdc5078aff9fbe4e581e7f9b7d9e74c3a57c9046ce58", [0x7]}) 54.723021801s ago: executing program 6 (id=1897): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 54.65799904s ago: executing program 6 (id=1900): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x40c4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 54.650788274s ago: executing program 6 (id=1902): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x140f, 0x2, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008004) 54.569073905s ago: executing program 6 (id=1905): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x1c, 0x42, 0xb, 0x70ad23, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x3, @empty, 'veth1_to_bridge\x00'}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000200)="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", 0x1000}], 0x1, &(0x7f0000001240)=[{0xe8, 0x10c, 0x7ffe, "7dfb802f40b1c660c929e709bc8786ebfc6a81340026634e0f43c8f1788a8adbafeed7fc7ed398c5bac64de9d311f343aacb190b556c554d17e1ed06293eb18e7f2c91c9f507b0a89f86d02c56010979a3f9d0afc0a2e840aad63703825298d94c70965eac359d5e915bb6d71cdaad899e75a78260fda83c74542d6f336bb067e3227b6e1886bb4ce601b78a74b6c8d99288cd15743f9473347620003c11fe604adb654ea5abb30637b0b0af187683b796bf2d947d7d3e41798914893df4c3b2951b95f2e54c7344055e57ea6153312e5d9551bb7c"}, {0xd8, 0xc0359bccb688ff28, 0x1, "ab5cb7f438c3df8aed97df24879ad5af61d55ae7819158c8a060cf3cca2cd54571b02d9b9c4af76724acd98d46f887a497c40b9436f26054a1d047af1166635c3905f71d63b5e1bacbc5a102b643dba7da85454ca2870f275393c8ab21a2d02b066f7922a4ca7914826a0c81320d225d3ec2279ce81145be7fbe401052a99948b2a37f197d16de4d5f238e3a9910fab0a1e617ce6a4130d0f7d53f2e7e09263637e6fce8130230cace23713d1613c6bccc27fe871fedc0d9345dd6955be140273d7d61eae035"}, {0x78, 0x110, 0x400, "3732e54a163b39557e7020b970efe946b518928629b33ad6c1bf610d1c93b1664ff80cf20b30813c6b1d3cb09f0d028a9783b0891f4e0b7570e6fd38bb9da333e75fa78045ed3e49974fae12bdd90403d54cb574dfb0524ea222856d4fb326fa61f271f56d3b"}, {0xf0, 0x119, 0x0, "dbd61023921ebd3394c6924c7c4916021cb378689df827af9c93b92a512ae71ace63e9482e9e383b01d8286a6dd2ac89fe204966ed29e5118fc8c65d5fdb33bbbea8cc29c30b1e49e727190f312034af0d014e7d3c429c6e67572b129a848c50d5eecbe814c995b29c8c17521b1a7ae1b216f3686f8517e5045e433f52784a4c54905115f57182d3e3a6c2b2e24aa1e1763299a1d89fdc8f613900306ed6f194d7cd90927fb399cbb135473d931d7987bc5c9bf283d2efae2aef2f9479ccfa9488cb662479c67c673e22a8b16668e79412649825c8b3c240eb90e63a49bafeed"}], 0x328}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001580)="f375f948ffc78940919ac303e032f21df1ccd7b6abc2611265bb15f6e55642e07f217fe9f4ebcf7c0609752c928dfc5f77d9ab360a8c1328a5cef6557758f38a9006d3232e8edab3ff41024ff44110ceff0878cb05feb0de83d9259b6b41cd12d6be9fd6c14e02f79f3f4ff49b2c7d64dc66f8f88d7d6c6a252bcd71b62f3708073d701d9a06ba750ad19d7776da10675c5e5dbd2ee77e218af30456e16c7cf1f02466366c659d903b72e93ca196d3742fc2e336505bfb95ed21fbf34978ee37c36bc9fb49fbe10fbc0863410ec1637689d9fa303e6e73ca04766fcf5fccbc52f660ec4002f55046f4f81ca8b827fead2352fd9a04e8d8a4e6", 0xf9}, {&(0x7f0000001680)="9a50c1ad3ec43e99ac245292203620f596c388664e72e51a016fb7738746b3558a0ae52cf3b38b39c4c7551378b5b322e8f186c31dea3fbc9a94f9d1079d8d26b5b1dc07d4e7c0a96fc52ab65c8c2d9ed5bd4531d428568236eb68deb7d58eb7c4d3f2631da12afd3954b1d6d9e4cc9690d87ce93367c929510d25afd77a1660172e4a3a98712c8b450ac6826c42df46da54285fb8a4d12a48ec30a18fd93586c0a47948a35d3786289cba2aab89144ebcce9561037fec2d94cc41d04bf91ab56564a2f2bd17e9fd45817b2f44fa22497185ba8aa62ac2f50de3806e6091f62e29228af929256611825a89eeabb68d6337ce52", 0xf3}, {&(0x7f0000001780)="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", 0xfa}, {&(0x7f0000001880)="e75886e295f9017c13e1b00c6ed0b4c042f89e312c951de4a80d7b852a059022c743643d491c487b1f9b8150c59083aab209069b463aac2ab64c89391272eb8d00fb2c2fe69bcb5f91a76b12021a035fd335c75ea4b01e848848c4a93841450edb5629f611d046a5e22be50e9c760e2ca462865a25cb364ba05fc560709e746805ab8de872c50233b340", 0x8a}, {&(0x7f0000001940)="79d0e3e596bb2e1d9d16aedfcc4511c3a37496d6e64b6feb520ff291c847735d5aca1b62a9d5ed17fb430f8ef87e016d13e4ffb3e2bc0efeeb220257057149ecfeba34901b7a19629135af5421cf67b4580c7314d3eacca7bba0469b5b26fc05e32c", 0x62}], 0x5}}, {{&(0x7f0000001a40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001ac0)="7584c91283832d458f0c0b31b42b279cf6fec93c6616c3c1e5cbc6f8d6ed30a22830ea8fa783dfdf2d6283cb9877c01abdcbc24b4b0e50dcccfba82aba1a8b4843b76235fce4b625623eb24124b90a4834ce49d16dd797cef4f7ddf91eba16d1d13366e6", 0x64}, {&(0x7f0000001b40)="e34fea43f802c02b3fa7fda30f65ac68435fc52540c57a71976376e88616969a0453ba3f0753332ef6e47b177057a5be033875fc5b326556e14d5e58245a77c132f432dcec4ff058acca6dc0dbc0686423227cd1d07b6cb4fad258ed6fc91da781531259be171c7bd1dee034a3f09e64857350dafdf84d4143fc81548611087fc724a8e2c845cb00e803cfea1971ee", 0x8f}, {&(0x7f0000001c00)="bb5baeb5ad84bc7b90f7130c5b6ed22f99fbb4ea5d4c7a8ca04d9a85fcd3496ecc91e4acf12ef8c0768e531dd236661793475ebcb7fecc90de12ce5927db96eea5dd34b73ad2d38696456bda0ed6672529f77083455a8952b0c09dbfe43c3d08f737b3bd379bbb55a29ffd91afcf3600208cfadec7c89256fc38f708a10af42098068b74225cad906c8e27b918b56fdea600d16b7cc7fad0", 0x98}, {&(0x7f0000001cc0)="141692c63439560b66e4da9909e7961bd02bda8661dd261bdfbbad1b8a859f9e3336cdeb2906022392311b3dbb67e4ce0764caeb7d4748071b1bcc795b42f761d7cec93469c5d85bf1cb5da7a1415a0486d5341fb490eef0acd8198655bf25c81de7efca3710faf1bad694475c602ab435d4980893afb69ebd43a503bee9a3db13bf3e2be12e841db64163bec4799f08cf16174e62d15ec7940113fe6074ce9bc731a62132be4ee7a5581324c896c23fecbc1860d943271e68101e0c2bccc3e774217570a9b67324d96ca9d00d1bc34320ed29", 0xd3}, {&(0x7f0000001dc0)="29ecdfe5d391b91ede06145470b402c71963e80e", 0x14}, {&(0x7f0000001e00)="418ce07ae8803757a4649f03353d1a7952b7da350af5816a87d0bbecf6c50bb233abe5b7ca3cf405e77a7ac4712d0e6852b803f268f9cf7e3fd644d5f58c7f4ef16c7965c3191cd56cfe05e3be71c33b5e764a7a70a82ab1a2880d818db330ef43c90df772d31defa9cd2b8e1fc24122b8b1b1aa44d86d95b0eb205503b966e5aee48040de1ae4fd14fc49e212835fb51d3ceb1d9af7bb846480320b723e785bab586df8ba40913e3aed9c3a3212419ef81c8fa6339c8b9f3dcf5714d5440f80b4fbdf", 0xc3}], 0x6, &(0x7f0000001f80)=[{0x48, 0x117, 0x8d9, "2d1f63b11b34f1dccbedcd999d23dfcf43e3f3a509a46b5d8226e636715bb6483ff4369798dbf9d5dd0ede94084872fcd84abb"}, {0xe0, 0x109, 0x7, "d50fe507567f6fdc34d91bd9d608c3b0bebe92e90c711aab62f75400467f17bb72d16bc9f40745ec3d9b38b2602c82b0075049b2c29ffaf00a39b50b9d88e27b87e9741a6fb83ab5dcf87228406b012fca852f6230e087d0b174f389498883a6d817dd248939085645b4331068b9cb28b8d382dd85cb394bbccbcbdb031f44ec844c17b60eca44eaff378e7bfd503ec699eb434fe8857503cc6c9b4dd8eb99ba530c303bc2efaa571695de6797d9b382f9fda265db53511c8d2d7b2f2e5b99cea57d18c7941131dac306416a48ec9d"}, {0xe8, 0x103, 0x3, "d3af2071f08b8240fef38f810ed5d48ec2229fe5e5abaf1063855f57429969f6a28dd6f00d3e08d6e43a2e7e6bee469631ca2e2e0ba2909115fca220b658b30353422cf7e2348f74a533b35e7d1bd11f87d1c0aa178d327fb6f158f2c0515a15297a1d86f2e6a18f0d649e2277a1c10a6e22c3758e4b240767645d9ba60fde197cfba7655ae453e7a4bb3957b14a0ea16c60ea4f543ab752becfa8607e3ef0d1c078a43d76211ee1bbc6ebd65449782200a1c067826e3658feb2dbcf2b9fb0e8051b4cecc18b9c3de466b4f81236188bdaee"}, {0x20, 0x112, 0x2, "dfde53244223fe2ad9fc6c34aba7e7"}, {0x58, 0x113, 0x8000, "b225bef7e2780e45d70de853eda8a1bab30a8480ff81ac5be104de215ee94c36dbaef7adcf124d0fc12afd54b12784a3cc9f0ab9fce2e1d6384db7631b008df304b6888128493503"}, {0xd8, 0x119, 0x7, "431c05d1d18da5e01e2ff99180576f44e816a60487c03c7c0af8a6e088e8e8c8f6e58f8a582d53eb0688fb1afa2e138be6af59aabfebe6e189099e6f5d2134ed6fbadc0a8344b73555d1af280ba212798dc7ab725dad06f56da7696610ad88bd88c3afa66a7b8c0a73d8d1bf26286e2a6e888ad14554b2d70c3f484afef520cd1821930ae07ca85b2d5bb8eef055226d4797947fe3e78c7f6437b084afb4f561858edc1736240758538cb7f502b53fb7882db27794a5cdd388869e2e81c594cadcccc12662"}], 0x360}}], 0x3, 0x40054) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f000000a3c0)=ANY=[@ANYBLOB="4eb9651b47f0561db110b71540ffef36308f8f7034bd8797f9624db4e4b87f48452cec45c6437c35d8b517bff7988b637a167a83010080f9cbb761b636d3c891002c924fc2d59a81cd946f055c842bb3c7a2e8faf8a30292b59d42d8fadda79f49df8e8554ed69b38bea3c0172c40ae60c1a0808e580fd9002d814e37105a25f82fcf0b6a66f94f0090c65dac446a5acf761d74b1398b275a72fc9ab1f0dac527f3c8c1054b6a552bfe9d6290147aef9997ccd8ea6c8", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xb) 53.04780694s ago: executing program 6 (id=1907): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 53.012543163s ago: executing program 36 (id=1907): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20.60102753s ago: executing program 1 (id=2474): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2, 0x0, 0x700}}, 0x14}}, 0x0) 20.537890676s ago: executing program 1 (id=2475): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, 0x0, 0x0, 0x40054) socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x1c}}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x8000000000000001) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000500)=0xd) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') exit(0x1ff) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r6, &(0x7f00000023c0)={0x2, 0x4e24, @broadcast}, 0x10) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES8=r6], 0xb) 4.835070025s ago: executing program 1 (id=2496): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="ff"], 0x20}}, 0x0) symlink(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setxattr$trusted_overlay_origin(0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x1) mkdir(0x0, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r1, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.749275461s ago: executing program 1 (id=2500): r0 = syz_usb_connect$hid(0x4, 0x2, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0xff, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x2005}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xe, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x2, 0xe, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="400308"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x634243) (async) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x634243) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000240)=[{0x200, 0x8000, 0x0, 0x0}], 0x1}) 4.134919053s ago: executing program 1 (id=2509): socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 4.133904871s ago: executing program 1 (id=2510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x3f2f79a2e8a6ea7, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000010) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c0001800600060086dd"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2.742825673s ago: executing program 7 (id=2517): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x180, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0xe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0xbf}}, {@nsim={{0xa}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4040800}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000400)={0xc, r5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000500)={0x3f, 0x1, 0x100, 0x4, "f75289e89546288830ca6803ddd6833437fa169a6845227a4efa51794ffddc1844e3cc87990859"}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800002000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="0a0006000802110200010000280050801116e7e346006a86ee0001004abee339084eeef16f162471f40000000500020002000000080003000aac0f00"], 0x50}}, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000000)={0xa287, 0x54, 0x1000, 0x8, 0xd, "0181aeca74a9d61f3653c9391f5b09720d0834"}) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000440)={0xa0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, &(0x7f0000000380)="30651b", 0x3) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r2, 0x4) 1.816626485s ago: executing program 4 (id=2534): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x85ffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x4}}}, 0x24}}, 0x0) 1.690174732s ago: executing program 8 (id=2535): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8, 0x5, "b91707d7"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r7 = syz_io_uring_setup(0x95, &(0x7f0000000140)={0x0, 0x201, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x20102, 0x0, 0x28}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r10}}) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}) io_uring_enter(r3, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0xf, &(0x7f00000027c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {}, [], {{0x5, 0x1, 0xb, 0x0}, {}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 1.593714496s ago: executing program 8 (id=2536): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10089080, 0x101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800}}, 0x50) dup3(r0, r1, 0x6700000000000000) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000711"], 0x52) 1.529692213s ago: executing program 4 (id=2537): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80) 1.529490622s ago: executing program 4 (id=2538): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x800400f0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.476017583s ago: executing program 8 (id=2539): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x372c6fbf, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0x2, 0x3, 0xbbf, 0x0, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0xfffffff8, 0x558e0d31, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x0, 0x4a7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xfffffff7, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0x8, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x104, 0x0, 0x7, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0xb, 0x2, 0x401, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x7, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffffb, 0x200004, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e63f783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x108, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x4, 0xd3, 0x7, 0x3435, 0x5, 0x7, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x82, 0x4, 0x9d86, 0x9, 0xfefffff7, 0x6, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0xfffffffe, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb910021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000040012000a00ff150048035c3b61c1d67f6f94007134cf6efb80073f6a5aa8457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001252c330f973f4953d2a6823a45", 0xd8}], 0x1}, 0x4000044) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.414931516s ago: executing program 7 (id=2540): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0xa888, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 8.119774ms ago: executing program 4 (id=2541): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}, 0x1, 0x0, 0x900}, 0x0) 8.058456ms ago: executing program 7 (id=2542): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) (async) membarrier(0x40, 0x0) (async) membarrier(0x2, 0x0) (async) membarrier(0x10, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'vlan0\x00', @local}) 7.814521ms ago: executing program 4 (id=2543): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) r2 = getpid() (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r5, 0x0) (async) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000180)={0x1, 0x4001}) (async) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00') lseek(r7, 0x4, 0x1) (async) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace$poke(0x5, r8, &(0x7f0000000080), 0x0) syz_open_procfs(r8, &(0x7f0000000140)='mountinfo\x00') (async) quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0) 7.614135ms ago: executing program 7 (id=2544): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x20000040) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c181", 0x18, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000300)={r7, r6, r7}, &(0x7f0000000440)=""/68, 0x44, &(0x7f0000000400)={&(0x7f00000002c0)={'xcbc(aes)\x00'}}) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f0000000000)={0x1, 0x942}) 5.298412ms ago: executing program 8 (id=2545): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0xfffffffffffffff0, 0x4040034}, 0xc802) 4.965358ms ago: executing program 7 (id=2546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') write$cgroup_int(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 4.688851ms ago: executing program 8 (id=2547): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000004) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xe, 0x101400) (async) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x24000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r2, 0x10001, {0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x1, 0xb, 0x10, "4f4dcd11e27c71424d9c5c681c11426c72a11f8fba105731ce872a699eb2b6ec883ad4796a8c97c770626ba1a4d8c58bff40bc6cf684f2ea7a40e6d2fffc292f", "f1520486d04d19a04a4b9a25ce619fe4419a677942551966cdcc15dd2e6b1ae71086e43f9863d171bffd160d6d99b0add67377e21dd3b67e657fb10e9b29cf8f", "ba4279c90e80193c6c7ed5b5e361a07125b78a45d1d6834ef0e964bef0d7032c", [0x7, 0x9]}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)={0x2, 'ip6gre0\x00', {0xde}, 0x7}) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000300)={0xa, 0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x20) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000340)=""/31, &(0x7f0000000380)=0x1f) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_loaded', 0x0, 0x140) io_uring_enter(r5, 0x6c32, 0x98ec, 0x2, &(0x7f0000000400)={[0x5]}, 0x8) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$NBD_PRINT_DEBUG(r5, 0xab06) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x3, @loopback, 0x10001}}, 0xd, 0x1}, &(0x7f0000000500)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000540)={r7, 0x3, 0xfffc}, 0x8) (async) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f00000005c0)=0x4, 0x4) (async) io_uring_enter(r5, 0x5b67, 0x9be9, 0x20, &(0x7f0000000600)={[0xa]}, 0x8) (async) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000640)=0x0) fcntl$setown(r1, 0x8, r9) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x0) (async) setsockopt$packet_buf(r5, 0x107, 0x6, &(0x7f00000006c0)="6db384ab180d01a08f1af81be813f96152b02041f63d4fba615c894c604fd948c68257d29c461fc9db051b7e7ca93ff7fe1d431b9cb901b492d16287a98279a8bae1fbab6606fbb7dc31f73340596d589ef0ab0909e3f38b6812d053306f3a8ef44de871452360e9c8d0b51dbe36bd417ef7554be703c435109269974e6597a9d16fd2c59bccf83b4e699816af4d97929579fe118754d3d7a81f4e2d448871e9fcef373a7dd14471b91e5c35eeaa35aed97de2be6283387cc755d724a0efd2703ed781f9aa438c0a399c9928b1679fe6f201fd043c01d9f0297f04b6f4987e6299f5", 0xe2) (async) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) fsetxattr$security_ima(r10, &(0x7f00000007c0), &(0x7f0000000800)=@v1={0x2, "170bc8"}, 0x4, 0x2) (async) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000840)={0x5, 0x2, 0x5, 0x6, 0x1, 0x0, [{0x2, 0xcf0, 0x4, '\x00', 0x101}]}) (async) setsockopt$MRT6_PIM(r5, 0x29, 0xcf, &(0x7f00000008c0)=0x4, 0x4) (async) syz_usb_connect$cdc_ncm(0x2, 0xa1, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x2, 0x1, 0x8, 0x0, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xffff0001, 0x3, 0x5, 0x1}, {0x6, 0x24, 0x1a, 0x6, 0x8}, [@country_functional={0x12, 0x24, 0x7, 0x9, 0x2, [0x400, 0x9, 0x3ff, 0xb8d5, 0x3, 0x7]}, @dmm={0x7, 0x24, 0x14, 0x5}, @obex={0x5, 0x24, 0x15, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x0, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x1, 0x5}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x0, 0x5, 0x5, 0x6, 0x0, 0xe}, 0xf, &(0x7f0000000a00)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xe, 0xd, 0x5c}, @ptm_cap={0x3}]}, 0x3, [{0x8e, &(0x7f0000000a40)=@string={0x8e, 0x3, "af7ae0d23794390baf6425155ec34e347957f9fbd9c5b32be4bd7f01f1dd844f92897c990b68eee26748e36ca7e01f989c8400422e471614b2471188b9388e19d26edaae12ef1d808b7a828a2b84d8e8946fd67191ebe15241c8c80ec72710628a0e31ea0145b9b7cd7223bccd63a0e2006db1687a51ca44c912f0bc24eff54914f7ae878978f199c87580dc"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x820}}]}) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000bc0)={0x2, 0x80000000, 0x0, 0x7, 0x3, [0x6, 0x1, 0x1, 0x7]}) 694.477µs ago: executing program 7 (id=2548): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0xce) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) getrandom(&(0x7f0000000300)=""/31, 0x1f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@local, r5}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 290.74µs ago: executing program 4 (id=2549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 0s ago: executing program 8 (id=2550): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004081}, 0x40) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = memfd_create(&(0x7f0000000200)='\x00', 0x7) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000280)=0x8) write$char_usb(r2, &(0x7f0000000380)="30651b", 0x3) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "b6000000551265406c7f3004000000ef00"}}) kernel console output (not intermixed with test programs): forcing a failure. [ 154.012405][T10607] name failslab, interval 1, probability 0, space 0, times 0 [ 154.018388][T10607] CPU: 3 UID: 0 PID: 10607 Comm: syz.6.1614 Not tainted syzkaller #0 PREEMPT(full) [ 154.018419][T10607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.018433][T10607] Call Trace: [ 154.018442][T10607] [ 154.018451][T10607] dump_stack_lvl+0x16c/0x1f0 [ 154.018509][T10607] should_fail_ex+0x512/0x640 [ 154.018541][T10607] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 154.018569][T10607] should_failslab+0xc2/0x120 [ 154.018595][T10607] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 154.018618][T10607] ? __alloc_skb+0x2b2/0x380 [ 154.018640][T10607] ? avc_has_perm+0x144/0x1f0 [ 154.018665][T10607] __alloc_skb+0x2b2/0x380 [ 154.018685][T10607] ? __pfx___alloc_skb+0x10/0x10 [ 154.018705][T10607] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 154.018734][T10607] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 154.018806][T10607] netlink_alloc_large_skb+0x69/0x130 [ 154.018838][T10607] netlink_sendmsg+0x6a1/0xdd0 [ 154.018869][T10607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.018907][T10607] ____sys_sendmsg+0xa98/0xc70 [ 154.018938][T10607] ? copy_msghdr_from_user+0x10a/0x160 [ 154.018970][T10607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.019014][T10607] ___sys_sendmsg+0x134/0x1d0 [ 154.019040][T10607] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.019103][T10607] __sys_sendmsg+0x16d/0x220 [ 154.019127][T10607] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.019171][T10607] do_syscall_64+0xcd/0x4c0 [ 154.019200][T10607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.019222][T10607] RIP: 0033:0x7f5cdf58ebe9 [ 154.019241][T10607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.019263][T10607] RSP: 002b:00007f5ce042b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.019288][T10607] RAX: ffffffffffffffda RBX: 00007f5cdf7b5fa0 RCX: 00007f5cdf58ebe9 [ 154.019303][T10607] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 154.019315][T10607] RBP: 00007f5ce042b090 R08: 0000000000000000 R09: 0000000000000000 [ 154.019328][T10607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.019340][T10607] R13: 00007f5cdf7b6038 R14: 00007f5cdf7b5fa0 R15: 00007ffcf0fdb3f8 [ 154.019370][T10607] [ 154.023777][T10608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1616'. [ 154.141073][T10610] kvm: kvm [10609]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5 [ 154.167895][T10610] kvm: kvm [10609]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5 [ 154.171860][T10610] kvm: kvm [10609]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5 [ 154.217895][T10610] kvm_intel: kvm [10609]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5 [ 154.368557][T10634] FAULT_INJECTION: forcing a failure. [ 154.368557][T10634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.375058][T10634] CPU: 0 UID: 0 PID: 10634 Comm: syz.0.1624 Not tainted syzkaller #0 PREEMPT(full) [ 154.375083][T10634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.375093][T10634] Call Trace: [ 154.375099][T10634] [ 154.375105][T10634] dump_stack_lvl+0x16c/0x1f0 [ 154.375129][T10634] should_fail_ex+0x512/0x640 [ 154.375152][T10634] _copy_from_iter+0x29f/0x1720 [ 154.375174][T10634] ? __pfx_avc_has_perm+0x10/0x10 [ 154.375195][T10634] ? __pfx__copy_from_iter+0x10/0x10 [ 154.375220][T10634] ? sock_has_perm+0x259/0x2f0 [ 154.375245][T10634] ? __pfx_sock_has_perm+0x10/0x10 [ 154.375268][T10634] hci_sock_sendmsg+0x46d/0x25f0 [ 154.375291][T10634] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 154.375314][T10634] sock_write_iter+0x4fc/0x5b0 [ 154.375338][T10634] ? __pfx_sock_write_iter+0x10/0x10 [ 154.375369][T10634] ? bpf_lsm_file_permission+0x9/0x10 [ 154.375391][T10634] ? security_file_permission+0x71/0x210 [ 154.375416][T10634] ? rw_verify_area+0xcf/0x6c0 [ 154.375444][T10634] vfs_write+0x7d0/0x11d0 [ 154.375462][T10634] ? __pfx_sock_write_iter+0x10/0x10 [ 154.375486][T10634] ? __pfx_vfs_write+0x10/0x10 [ 154.375501][T10634] ? find_held_lock+0x2b/0x80 [ 154.375534][T10634] ksys_write+0x1f8/0x250 [ 154.375551][T10634] ? __pfx_ksys_write+0x10/0x10 [ 154.375573][T10634] do_syscall_64+0xcd/0x4c0 [ 154.375593][T10634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.375609][T10634] RIP: 0033:0x7f64f0d8ebe9 [ 154.375624][T10634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.375637][T10634] RSP: 002b:00007f64f1c84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.375652][T10634] RAX: ffffffffffffffda RBX: 00007f64f0fb5fa0 RCX: 00007f64f0d8ebe9 [ 154.375687][T10634] RDX: 000000000000000b RSI: 0000200000000100 RDI: 0000000000000004 [ 154.375697][T10634] RBP: 00007f64f1c84090 R08: 0000000000000000 R09: 0000000000000000 [ 154.375706][T10634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.375714][T10634] R13: 00007f64f0fb6038 R14: 00007f64f0fb5fa0 R15: 00007ffc668c6a18 [ 154.375734][T10634] [ 154.408487][T10631] tipc: Enabling of bearer rejected, failed to enable media [ 154.452213][T10639] tipc: Enabled bearer , priority 0 [ 154.485552][ T40] audit: type=1400 audit(1756320459.164:517): avc: denied { ioctl } for pid=10636 comm="syz.0.1625" path="/383/file0/file0" dev="fuse" ino=18446744073709551612 ioctlcmd=0x5408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 154.505853][T10639] syzkaller0: entered promiscuous mode [ 154.509027][T10639] syzkaller0: entered allmulticast mode [ 154.516939][T10639] tipc: Resetting bearer [ 154.521736][T10638] tipc: Resetting bearer [ 154.538691][T10638] tipc: Disabling bearer [ 154.788619][T10654] FAULT_INJECTION: forcing a failure. [ 154.788619][T10654] name failslab, interval 1, probability 0, space 0, times 0 [ 154.798655][T10654] CPU: 3 UID: 0 PID: 10654 Comm: syz.6.1632 Not tainted syzkaller #0 PREEMPT(full) [ 154.798682][T10654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.798693][T10654] Call Trace: [ 154.798699][T10654] [ 154.798707][T10654] dump_stack_lvl+0x16c/0x1f0 [ 154.798788][T10654] should_fail_ex+0x512/0x640 [ 154.798821][T10654] should_failslab+0xc2/0x120 [ 154.798843][T10654] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 154.798863][T10654] ? skb_clone+0x190/0x3f0 [ 154.798887][T10654] skb_clone+0x190/0x3f0 [ 154.798908][T10654] netlink_deliver_tap+0xabd/0xd30 [ 154.798935][T10654] netlink_unicast+0x64c/0x870 [ 154.798959][T10654] ? __pfx_netlink_unicast+0x10/0x10 [ 154.798980][T10654] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 154.799008][T10654] netlink_sendmsg+0x8d1/0xdd0 [ 154.799033][T10654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.799071][T10654] ____sys_sendmsg+0xa98/0xc70 [ 154.799096][T10654] ? copy_msghdr_from_user+0x10a/0x160 [ 154.799116][T10654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.799152][T10654] ___sys_sendmsg+0x134/0x1d0 [ 154.799173][T10654] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.799225][T10654] __sys_sendmsg+0x16d/0x220 [ 154.799245][T10654] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.799281][T10654] do_syscall_64+0xcd/0x4c0 [ 154.799304][T10654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.799321][T10654] RIP: 0033:0x7f5cdf58ebe9 [ 154.799336][T10654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.799354][T10654] RSP: 002b:00007f5ce042b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.799371][T10654] RAX: ffffffffffffffda RBX: 00007f5cdf7b5fa0 RCX: 00007f5cdf58ebe9 [ 154.799382][T10654] RDX: 0000000000008000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 154.799393][T10654] RBP: 00007f5ce042b090 R08: 0000000000000000 R09: 0000000000000000 [ 154.799403][T10654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.799413][T10654] R13: 00007f5cdf7b6038 R14: 00007f5cdf7b5fa0 R15: 00007ffcf0fdb3f8 [ 154.799438][T10654] [ 154.953225][T10661] fuse: Unknown parameter 'N¹eGðV±·@ÿï60p4½‡—ùbM´ä¸HE' [ 155.029522][T10671] syzkaller0: entered promiscuous mode [ 155.031445][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1640'. [ 155.031917][T10671] syzkaller0: entered allmulticast mode [ 155.121064][T10677] qnx4: no qnx4 filesystem (no root dir). [ 155.125890][T10677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=10677 comm=syz.0.1642 [ 155.223321][T10693] overlayfs: invalid origin (0000) [ 155.252255][T10696] qnx4: no qnx4 filesystem (no root dir). [ 155.301493][ T40] audit: type=1400 audit(1756320459.921:518): avc: denied { ioctl } for pid=10703 comm="syz.6.1655" path="socket:[50190]" dev="sockfs" ino=50190 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 155.313133][T10708] syzkaller0: entered promiscuous mode [ 155.313524][T10709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1656'. [ 155.315205][T10708] syzkaller0: entered allmulticast mode [ 155.320654][T10709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1656'. [ 155.326616][T10709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1656'. [ 155.391780][T10716] siw: device registration error -23 [ 155.447896][T10722] overlayfs: invalid origin (0000) [ 155.451926][ T5978] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 155.577125][T10743] syzkaller0: entered promiscuous mode [ 155.579568][T10743] syzkaller0: entered allmulticast mode [ 155.899615][T10765] tipc: Enabled bearer , priority 0 [ 155.906730][T10765] syzkaller0: entered promiscuous mode [ 155.909073][T10765] syzkaller0: entered allmulticast mode [ 155.918813][T10765] tipc: Resetting bearer [ 155.923239][T10764] tipc: Resetting bearer [ 155.932981][T10764] tipc: Disabling bearer [ 156.051302][T10773] syzkaller0: entered promiscuous mode [ 156.053285][T10773] syzkaller0: entered allmulticast mode [ 156.196662][T10781] openvswitch: netlink: Flow key attr not present in new flow. [ 156.198606][ T40] audit: type=1400 audit(1756320460.754:519): avc: denied { getopt } for pid=10779 comm="syz.6.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.199599][T10781] openvswitch: netlink: Flow key attr not present in new flow. [ 156.210571][T10781] openvswitch: netlink: Flow key attr not present in new flow. [ 156.214964][T10781] openvswitch: netlink: Flow key attr not present in new flow. [ 156.217551][T10781] openvswitch: netlink: Flow key attr not present in new flow. [ 156.220227][T10781] openvswitch: netlink: Flow key attr not present in new flow. [ 156.223082][T10781] openvswitch: netlink: Flow key attr not present in new flow. [ 156.225992][T10781] openvswitch: netlink: Flow key attr not present in new flow. [ 156.228551][T10781] openvswitch: netlink: Flow key attr not present in new flow. [ 156.230992][T10781] openvswitch: netlink: Flow key attr not present in new flow. [ 156.273863][T10784] tipc: Enabled bearer , priority 0 [ 156.280129][T10783] tipc: Disabling bearer [ 156.372433][T10789] tipc: Enabled bearer , priority 0 [ 156.377810][T10789] syzkaller0: entered promiscuous mode [ 156.379836][T10789] syzkaller0: entered allmulticast mode [ 156.386240][T10789] tipc: Resetting bearer [ 156.390178][T10788] tipc: Resetting bearer [ 156.399927][T10788] tipc: Disabling bearer [ 156.729561][T10805] overlayfs: invalid origin (0000) [ 156.793298][T10809] FAULT_INJECTION: forcing a failure. [ 156.793298][T10809] name failslab, interval 1, probability 0, space 0, times 0 [ 156.798294][T10809] CPU: 1 UID: 0 PID: 10809 Comm: syz.1.1702 Not tainted syzkaller #0 PREEMPT(full) [ 156.798309][T10809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.798316][T10809] Call Trace: [ 156.798321][T10809] [ 156.798325][T10809] dump_stack_lvl+0x16c/0x1f0 [ 156.798343][T10809] should_fail_ex+0x512/0x640 [ 156.798356][T10809] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 156.798370][T10809] should_failslab+0xc2/0x120 [ 156.798384][T10809] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 156.798395][T10809] ? genl_start+0x1e8/0x980 [ 156.798410][T10809] ? __netlink_dump_start+0x60b/0x990 [ 156.798421][T10809] ? __alloc_skb+0x2b2/0x380 [ 156.798434][T10809] __alloc_skb+0x2b2/0x380 [ 156.798444][T10809] ? __pfx___alloc_skb+0x10/0x10 [ 156.798460][T10809] netlink_dump+0x19b/0xd30 [ 156.798473][T10809] ? __pfx_netlink_dump+0x10/0x10 [ 156.798491][T10809] ? __asan_memset+0x23/0x50 [ 156.798507][T10809] ? genl_start+0x67f/0x980 [ 156.798523][T10809] __netlink_dump_start+0x6d6/0x990 [ 156.798538][T10809] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 156.798554][T10809] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 156.798573][T10809] ? __pfx_genl_get_cmd+0x10/0x10 [ 156.798585][T10809] ? __pfx_genl_start+0x10/0x10 [ 156.798598][T10809] ? __pfx_genl_dumpit+0x10/0x10 [ 156.798612][T10809] ? __pfx_genl_done+0x10/0x10 [ 156.798627][T10809] ? __radix_tree_lookup+0x21f/0x2c0 [ 156.798641][T10809] genl_rcv_msg+0x46e/0x800 [ 156.798657][T10809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.798672][T10809] ? __pfx_tipc_nl_node_dump_monitor+0x10/0x10 [ 156.798691][T10809] netlink_rcv_skb+0x155/0x420 [ 156.798704][T10809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.798719][T10809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.798765][T10809] ? netlink_deliver_tap+0x1ae/0xd30 [ 156.798786][T10809] genl_rcv+0x28/0x40 [ 156.798799][T10809] netlink_unicast+0x5aa/0x870 [ 156.798814][T10809] ? __pfx_netlink_unicast+0x10/0x10 [ 156.798827][T10809] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 156.798844][T10809] netlink_sendmsg+0x8d1/0xdd0 [ 156.798859][T10809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.798878][T10809] ____sys_sendmsg+0xa98/0xc70 [ 156.798893][T10809] ? copy_msghdr_from_user+0x10a/0x160 [ 156.798906][T10809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.798927][T10809] ___sys_sendmsg+0x134/0x1d0 [ 156.798940][T10809] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.798968][T10809] __sys_sendmsg+0x16d/0x220 [ 156.798986][T10809] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.799020][T10809] do_syscall_64+0xcd/0x4c0 [ 156.799035][T10809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.799047][T10809] RIP: 0033:0x7f16e3b8ebe9 [ 156.799057][T10809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.799067][T10809] RSP: 002b:00007f16e4920038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.799078][T10809] RAX: ffffffffffffffda RBX: 00007f16e3db5fa0 RCX: 00007f16e3b8ebe9 [ 156.799085][T10809] RDX: 0000000000008000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 156.799092][T10809] RBP: 00007f16e4920090 R08: 0000000000000000 R09: 0000000000000000 [ 156.799098][T10809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.799104][T10809] R13: 00007f16e3db6038 R14: 00007f16e3db5fa0 R15: 00007fffec906b08 [ 156.799118][T10809] [ 156.832958][ T40] audit: type=1400 audit(1756320461.343:520): avc: denied { map } for pid=10810 comm="syz.0.1703" path="/dev/video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 156.861230][T10813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10813 comm=syz.1.1704 [ 156.864027][ T40] audit: type=1400 audit(1756320461.343:521): avc: denied { execute } for pid=10810 comm="syz.0.1703" path="/dev/video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 156.890432][T10815] loop7: detected capacity change from 0 to 7 [ 156.891600][ C1] blk_print_req_error: 10 callbacks suppressed [ 156.891609][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.945685][ C1] buffer_io_error: 10 callbacks suppressed [ 156.945695][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.952084][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.955318][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.957978][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.961257][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.964187][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.968352][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.971419][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.974274][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.977026][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.979891][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.983127][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.986972][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.989885][T10815] ldm_validate_partition_table(): Disk read failed. [ 156.992419][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.996556][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 157.000935][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.005474][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 157.009845][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.014871][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 157.018394][T10815] Dev loop7: unable to read RDB block 0 [ 157.021528][T10815] loop7: unable to read partition table [ 157.024112][T10815] loop7: partition table beyond EOD, truncated [ 157.029049][T10815] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 157.295223][T10848] input: syz1 as /devices/virtual/input/input25 [ 157.310182][T10850] tipc: Enabled bearer , priority 0 [ 157.316423][T10849] tipc: Disabling bearer [ 157.320306][T10848] validate_nla: 4 callbacks suppressed [ 157.320320][T10848] netlink: 'syz.0.1718': attribute type 1 has an invalid length. [ 157.364297][T10852] loop7: detected capacity change from 0 to 7 [ 157.369576][T10852] ldm_validate_partition_table(): Disk read failed. [ 157.372866][T10852] Dev loop7: unable to read RDB block 0 [ 157.375612][T10852] loop7: unable to read partition table [ 157.377612][T10852] loop7: partition table beyond EOD, truncated [ 157.384165][T10852] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 157.451761][T10856] tipc: Enabled bearer , priority 0 [ 157.468487][T10856] syzkaller0: entered promiscuous mode [ 157.468503][T10856] syzkaller0: entered allmulticast mode [ 157.474830][T10856] tipc: Resetting bearer [ 157.483306][T10855] tipc: Resetting bearer [ 157.494545][T10855] tipc: Disabling bearer [ 157.590932][T10868] overlayfs: invalid origin (0000) [ 157.598289][ T5978] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 157.626841][T10870] tipc: Enabled bearer , priority 0 [ 157.629812][T10870] syzkaller0: entered promiscuous mode [ 157.632519][T10870] syzkaller0: entered allmulticast mode [ 157.652474][T10869] tipc: Resetting bearer [ 157.670043][T10869] tipc: Disabling bearer [ 157.676867][ T40] audit: type=1400 audit(1756320462.138:522): avc: denied { accept } for pid=10872 comm="syz.6.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.742863][T10879] tipc: Enabled bearer , priority 0 [ 157.757932][T10878] tipc: Disabling bearer [ 157.771272][T10883] __nla_validate_parse: 76 callbacks suppressed [ 157.771283][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 157.777448][T10883] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1733'. [ 157.820988][T10886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10886 comm=syz.6.1734 [ 157.826180][T10886] netlink: 'syz.6.1734': attribute type 1 has an invalid length. [ 157.851110][T10886] bond5: (slave bridge1): making interface the new active one [ 157.855727][T10886] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 157.878960][T10892] overlayfs: invalid origin (0000) [ 158.014892][T10899] tipc: Enabled bearer , priority 0 [ 158.017943][T10899] syzkaller0: entered promiscuous mode [ 158.020107][T10899] syzkaller0: entered allmulticast mode [ 158.035751][T10898] tipc: Resetting bearer [ 158.049679][T10898] tipc: Disabling bearer [ 158.197707][ T5985] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.205615][ T5985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.210536][ T5985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.214968][ T5985] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.218807][ T5985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.289109][T10905] xfrm0 speed is unknown, defaulting to 1000 [ 159.554235][T10919] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 159.564651][T10920] overlayfs: invalid origin (0000) [ 159.632510][T10905] chnl_net:caif_netlink_parms(): no params data found [ 159.653569][T10929] usb usb8: usbfs: process 10929 (syz.1.1751) did not claim interface 0 before use [ 159.759270][T10905] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.761817][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.765045][T10905] bridge_slave_0: entered allmulticast mode [ 159.768494][T10905] bridge_slave_0: entered promiscuous mode [ 159.772149][T10939] tipc: Enabled bearer , priority 0 [ 159.776941][T10905] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.780352][T10905] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.783689][T10905] bridge_slave_1: entered allmulticast mode [ 159.787525][T10905] bridge_slave_1: entered promiscuous mode [ 159.812371][T10939] syzkaller0: entered promiscuous mode [ 159.814634][T10939] syzkaller0: entered allmulticast mode [ 159.860011][T10905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.865947][T10939] tipc: Resetting bearer [ 159.872282][T10905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.889298][T10945] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1754'. [ 159.902401][T10937] tipc: Resetting bearer [ 159.914421][T10937] tipc: Disabling bearer [ 159.959861][T10905] team0: Port device team_slave_0 added [ 159.965459][T10905] team0: Port device team_slave_1 added [ 159.991222][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1756'. [ 159.999285][T10949] fuse: Unknown parameter 'N¹eGðV±·@ÿï60p4½‡—ùbM´ä¸HE' [ 160.052485][T10905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.055906][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.068447][T10905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.075564][T10905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.078764][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.091701][T10905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.204912][T10905] hsr_slave_0: entered promiscuous mode [ 160.208581][T10905] hsr_slave_1: entered promiscuous mode [ 160.212042][T10905] debugfs: 'hsr0' already exists in 'hsr' [ 160.214350][T10905] Cannot create hsr debugfs directory [ 160.448456][ T5978] Bluetooth: hci1: command tx timeout [ 160.685545][ T40] audit: type=1400 audit(1756320464.954:523): avc: denied { read } for pid=10979 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 160.744752][ T40] audit: type=1400 audit(1756320465.010:524): avc: denied { write } for pid=10979 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 160.751441][ T40] audit: type=1400 audit(1756320465.010:525): avc: denied { read } for pid=10979 comm="syz.4.1766" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 160.760598][ T40] audit: type=1400 audit(1756320465.010:526): avc: denied { open } for pid=10979 comm="syz.4.1766" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 160.856915][ T40] audit: type=1400 audit(1756320465.122:527): avc: denied { ioctl } for pid=10979 comm="syz.4.1766" path="socket:[49564]" dev="sockfs" ino=49564 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 161.758965][T10965] tipc: Enabling of bearer rejected, failed to enable media [ 161.817493][T10987] siw: device registration error -23 [ 161.856462][T10990] overlayfs: invalid origin (0000) [ 161.868412][ T5978] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 161.920206][T10905] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 161.929222][T10905] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 161.938995][T10905] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 161.948805][T10905] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 161.979335][T11003] fuse: Unknown parameter 'N¹eGðV±·@ÿï60p4½‡—ùbM´ä¸HE' [ 162.014037][ T40] audit: type=1400 audit(1756320466.198:528): avc: denied { getopt } for pid=11008 comm="syz.6.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.015831][T11011] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1776'. [ 162.022280][T10905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.032115][T11011] loop7: detected capacity change from 0 to 7 [ 162.036509][T11011] ldm_validate_partition_table(): Disk read failed. [ 162.043322][T10905] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.044098][T11011] Dev loop7: unable to read RDB block 0 [ 162.048811][T11011] loop7: unable to read partition table [ 162.050479][ T9225] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.050943][T11011] loop7: partition table beyond EOD, truncated [ 162.053258][ T9225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.060073][T11011] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 162.070217][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.073528][ T9222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.116050][T10905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.125470][T11011] support for the xor transformation has been removed. [ 162.132872][T11017] overlayfs: invalid origin (0000) [ 162.139872][ T5978] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 162.192979][T11023] siw: device registration error -23 [ 162.206430][T11026] netlink: 'syz.6.1782': attribute type 23 has an invalid length. [ 162.272298][T10905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.497847][T10905] veth0_vlan: entered promiscuous mode [ 162.504039][T10905] veth1_vlan: entered promiscuous mode [ 162.520704][ T8715] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 162.527641][T10905] veth0_macvtap: entered promiscuous mode [ 162.533668][T10905] veth1_macvtap: entered promiscuous mode [ 162.551649][T11060] loop7: detected capacity change from 0 to 7 [ 162.554816][ C1] blk_print_req_error: 51 callbacks suppressed [ 162.554825][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.555072][T10905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.556897][ C1] buffer_io_error: 50 callbacks suppressed [ 162.556906][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.570503][T10905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.572141][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.576093][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.579502][ T9225] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.580107][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.582857][ T9225] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.586735][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.587534][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.590596][ T9225] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.592688][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.596314][ T9225] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.599927][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.610558][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.614352][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.617429][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.651993][ T9225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.654672][ T9225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.670021][ T5978] Bluetooth: hci1: command tx timeout [ 162.671910][ T9223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.674408][ T9223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.681332][T11061] support for the xor transformation has been removed. [ 162.685268][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.689229][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.692773][T11060] ldm_validate_partition_table(): Disk read failed. [ 162.694166][ T40] audit: type=1400 audit(1756320466.834:529): avc: denied { mount } for pid=10905 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 162.695263][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.706551][ T8715] usb 9-1: not running at top speed; connect to a high speed hub [ 162.707750][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.711743][ T8715] usb 9-1: config 1 has an invalid interface number: 145 but max is 2 [ 162.714751][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.716968][ T8715] usb 9-1: config 1 has an invalid interface number: 213 but max is 2 [ 162.719992][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.722544][ T8715] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 162.725588][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.728888][ T8715] usb 9-1: config 1 has an invalid interface number: 59 but max is 2 [ 162.732289][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.735369][ T8715] usb 9-1: config 1 has an invalid interface number: 6 but max is 2 [ 162.740704][T11060] Dev loop7: unable to read RDB block 0 [ 162.740748][ T8715] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 162.743783][T11060] loop7: unable to read partition table [ 162.746956][ T8715] usb 9-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 162.749645][T11060] loop7: partition table beyond EOD, truncated [ 162.753392][ T8715] usb 9-1: config 1 has no interface number 0 [ 162.753406][ T8715] usb 9-1: config 1 has no interface number 1 [ 162.758197][T11060] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 162.759367][ T8715] usb 9-1: config 1 has no interface number 2 [ 162.765810][ T8715] usb 9-1: config 1 has no interface number 3 [ 162.769958][ T8715] usb 9-1: config 1 interface 145 altsetting 255 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 162.776881][ T8715] usb 9-1: config 1 interface 145 altsetting 255 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 162.781118][ T8715] usb 9-1: config 1 interface 213 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 162.785456][ T8715] usb 9-1: config 1 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.789711][ T8715] usb 9-1: config 1 interface 213 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 162.789728][ T8715] usb 9-1: config 1 interface 213 altsetting 0 endpoint 0x89 has an invalid bInterval 177, changing to 4 [ 162.789742][ T8715] usb 9-1: config 1 interface 213 altsetting 0 endpoint 0x89 has invalid maxpacket 12598, setting to 1023 [ 162.789756][ T8715] usb 9-1: config 1 interface 213 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 162.789770][ T8715] usb 9-1: config 1 interface 213 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 162.789784][ T8715] usb 9-1: config 1 interface 213 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 162.789805][ T8715] usb 9-1: config 1 interface 59 altsetting 129 has a duplicate endpoint with address 0xC, skipping [ 162.789817][ T8715] usb 9-1: config 1 interface 59 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 162.789830][ T8715] usb 9-1: config 1 interface 59 altsetting 129 endpoint 0x8F has invalid maxpacket 1023, setting to 64 [ 162.789844][ T8715] usb 9-1: config 1 interface 59 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 162.789856][ T8715] usb 9-1: config 1 interface 59 altsetting 129 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 162.789870][ T8715] usb 9-1: too many endpoints for config 1 interface 6 altsetting 233: 198, using maximum allowed: 30 [ 162.789886][ T8715] usb 9-1: config 1 interface 6 altsetting 233 has a duplicate endpoint with address 0xC, skipping [ 162.789900][ T8715] usb 9-1: config 1 interface 6 altsetting 233 has an invalid descriptor for endpoint zero, skipping [ 162.789911][ T8715] usb 9-1: config 1 interface 6 altsetting 233 has a duplicate endpoint with address 0xF, skipping [ 162.789923][ T8715] usb 9-1: config 1 interface 6 altsetting 233 has a duplicate endpoint with address 0x4, skipping [ 162.789934][ T8715] usb 9-1: config 1 interface 6 altsetting 233 has 4 endpoint descriptors, different from the interface descriptor's value: 198 [ 162.789948][ T8715] usb 9-1: config 1 interface 145 has no altsetting 0 [ 162.789958][ T8715] usb 9-1: config 1 interface 59 has no altsetting 0 [ 162.789967][ T8715] usb 9-1: config 1 interface 6 has no altsetting 0 [ 162.793956][ T8715] usb 9-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=73.81 [ 162.870835][ T8715] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.873457][ T8715] usb 9-1: Product: à § [ 162.873468][ T8715] usb 9-1: Manufacturer: ⃠腌饣滛㗥è„ꢭ౽国â¥ë†¹ê¾™ì­¶æ˜ƒéž­ã髸㓻ꡜè´ì•ºî‚Žà§Ÿæ­—麼ç²ê†žè”¦ä‹“⥜㑤䰠䌛ὡ㯛韠䫱㹠㼼㥙딈ᴦ藠麵䖨鷱壃î ì¸Œç¾žîŸˆê¥£é¯£æ¿‡è’Œç¤”㑴㕩꺃ﻢä©â¨‚鳂ễ蠄æŽÞªâ’²âœ–⣘త괘ꈃ䌉. [ 162.873483][ T8715] usb 9-1: SerialNumber: †[ 162.877849][T11021] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.881680][ T40] audit: type=1400 audit(1756320467.012:530): avc: denied { setattr } for pid=11066 comm="syz.1.1794" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.912981][ T40] audit: type=1400 audit(1756320467.040:531): avc: denied { unmount } for pid=5973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 162.975331][T11076] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 163.088363][T11084] fuse: Unknown parameter 'N¹eGðV±·@ÿï60p4½‡—ùbM´ä¸HE' [ 163.123323][ T8715] usb 9-1: USB disconnect, device number 3 [ 163.611596][T11102] overlayfs: invalid origin (0000) [ 163.725141][ T40] audit: type=1400 audit(1756320467.797:532): avc: denied { getopt } for pid=11107 comm="syz.4.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.949366][T11119] tipc: Enabled bearer , priority 0 [ 163.956199][T11119] syzkaller0: entered promiscuous mode [ 163.958782][T11119] syzkaller0: entered allmulticast mode [ 163.965979][T11119] tipc: Resetting bearer [ 163.970451][T11117] tipc: Resetting bearer [ 163.983578][T11117] tipc: Disabling bearer [ 163.996558][T11122] tipc: Enabled bearer , priority 0 [ 163.999744][T11122] syzkaller0: entered promiscuous mode [ 164.001625][T11122] syzkaller0: entered allmulticast mode [ 164.011039][T11122] tipc: Resetting bearer [ 164.015237][T11121] tipc: Resetting bearer [ 164.032374][T11121] tipc: Disabling bearer [ 164.319045][T11142] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1824'. [ 164.374801][T11150] net_ratelimit: 55 callbacks suppressed [ 164.374814][T11150] IPv6: addrconf: prefix option has invalid lifetime [ 164.545746][T11164] input: syz0 as /devices/virtual/input/input26 [ 164.548961][T11164] input: failed to attach handler leds to device input26, error: -6 [ 164.579327][T11164] netlink: 'syz.4.1832': attribute type 10 has an invalid length. [ 164.584821][T11167] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1831'. [ 164.591926][T11164] team0: Port device dummy0 added [ 164.599039][T11164] netlink: 'syz.4.1832': attribute type 10 has an invalid length. [ 164.602100][T11164] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.612677][T11164] team0: Failed to send options change via netlink (err -105) [ 164.615481][T11164] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.616504][T11169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=11169 comm=syz.6.1834 [ 164.628652][T11164] team0: Port device dummy0 removed [ 164.640956][T11164] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 164.672304][T11172] overlayfs: invalid origin (0000) [ 164.685503][ T5978] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 164.721140][T11176] fuse: Unknown parameter 'N¹eGðV±·@ÿï60p4½‡—ùbM´ä¸HE' [ 164.775420][T11175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1837'. [ 164.859269][T11190] tipc: Enabled bearer , priority 0 [ 164.862223][T11190] syzkaller0: entered promiscuous mode [ 164.864007][T11190] syzkaller0: entered allmulticast mode [ 164.870959][T11190] tipc: Resetting bearer [ 164.885278][T11189] tipc: Resetting bearer [ 164.898353][ T5978] Bluetooth: hci1: command tx timeout [ 164.902088][T11189] tipc: Disabling bearer [ 164.957161][T11202] overlayfs: invalid origin (0000) [ 164.967655][ T5978] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 165.088679][T11209] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1851'. [ 166.365038][T11211] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1852'. [ 166.370022][T11211] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1852'. [ 166.401116][ T5873] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 166.408762][T11226] loop7: detected capacity change from 0 to 7 [ 166.414212][T11226] ldm_validate_partition_table(): Disk read failed. [ 166.417231][T11226] Dev loop7: unable to read RDB block 0 [ 166.421142][T11226] loop7: unable to read partition table [ 166.423612][T11226] loop7: partition table beyond EOD, truncated [ 166.425590][T11226] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 166.447004][T11229] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 166.475547][T11226] support for the xor transformation has been removed. [ 166.524798][T11235] tipc: Enabled bearer , priority 0 [ 166.527371][T11235] syzkaller0: entered promiscuous mode [ 166.529149][T11235] syzkaller0: entered allmulticast mode [ 166.542519][T11235] tipc: Resetting bearer [ 166.546089][T11233] tipc: Resetting bearer [ 166.555408][T11233] tipc: Disabling bearer [ 166.561445][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 166.564314][ T5873] usb 6-1: config 2 interface 0 has no altsetting 0 [ 166.567933][ T5873] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 166.570874][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.573693][ T5873] usb 6-1: Product: syz [ 166.575007][ T5873] usb 6-1: Manufacturer: syz [ 166.576451][ T5873] usb 6-1: SerialNumber: syz [ 166.601287][T11237] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1863'. [ 166.621489][T11241] tipc: Started in network mode [ 166.623726][T11241] tipc: Node identity 06abcc3e0e9d, cluster identity 4711 [ 166.626386][T11241] tipc: Enabled bearer , priority 0 [ 166.635744][T11241] tipc: Resetting bearer [ 166.652086][T11240] tipc: Disabling bearer [ 166.663900][T11246] trusted_key: encrypted_key: keylen parameter is missing [ 166.664295][T11245] vfat: Unknown parameter 'load default trusted:00000000000000004093' [ 166.669489][T11247] trusted_key: encrypted_key: insufficient parameters specified [ 166.731297][T11253] loop7: detected capacity change from 0 to 7 [ 166.736255][T11253] ldm_validate_partition_table(): Disk read failed. [ 166.738841][T11253] Dev loop7: unable to read RDB block 0 [ 166.741730][T11253] loop7: unable to read partition table [ 166.749003][T11253] loop7: partition table beyond EOD, truncated [ 166.751508][T11253] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 166.803521][ T5873] usb 6-1: USB disconnect, device number 15 [ 166.807476][T11253] support for the xor transformation has been removed. [ 166.899186][T11261] siw: device registration error -23 [ 166.998091][T11270] bridge_slave_0: left allmulticast mode [ 167.002473][T11270] bridge_slave_0: left promiscuous mode [ 167.004507][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.012138][T11270] bridge_slave_1: left allmulticast mode [ 167.014553][T11270] bridge_slave_1: left promiscuous mode [ 167.014628][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 167.016688][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.026363][T11270] bond0: (slave bond_slave_0): Releasing backup interface [ 167.030591][T11270] bond0: (slave bond_slave_1): Releasing backup interface [ 167.037539][T11270] team0: Port device team_slave_0 removed [ 167.041921][T11270] team0: Port device team_slave_1 removed [ 167.045148][T11270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.047612][T11270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.050885][T11270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.053802][T11270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.075829][T11273] vxcan1: entered promiscuous mode [ 167.081071][T11273] team0: Port device vxcan1 added [ 167.117331][ T5978] Bluetooth: hci1: command tx timeout [ 167.163960][T11278] overlayfs: invalid origin (0000) [ 167.169415][ T5978] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 167.214618][T11280] tipc: Enabled bearer , priority 0 [ 167.217255][T11280] syzkaller0: entered promiscuous mode [ 167.219083][T11280] syzkaller0: entered allmulticast mode [ 167.231079][T11280] tipc: Resetting bearer [ 167.234253][T11279] tipc: Resetting bearer [ 167.243987][T11279] tipc: Disabling bearer [ 167.411538][T11287] tipc: Enabled bearer , priority 0 [ 167.423135][T11287] tipc: Resetting bearer [ 167.432814][T11286] tipc: Disabling bearer [ 167.460554][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 167.460566][ T40] audit: type=1400 audit(1756320471.296:539): avc: denied { setopt } for pid=11284 comm="syz.1.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 167.463771][T11288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1881'. [ 167.476839][T11290] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.1883'. [ 167.484284][T11290] ALSA: mixer_oss: invalid index 100000 [ 167.540890][T11295] vxcan1: entered promiscuous mode [ 167.543514][T11295] team0: Device vxcan1 is of different type [ 167.580725][T11301] overlayfs: invalid origin (0000) [ 167.586997][ T5978] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 167.638114][T11297] team0: Port device vxcan1 removed [ 167.783205][ T40] audit: type=1400 audit(1756320471.595:540): avc: denied { bind } for pid=11308 comm="syz.6.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 167.821901][T11316] loop7: detected capacity change from 0 to 7 [ 167.826282][T11316] ldm_validate_partition_table(): Disk read failed. [ 167.829112][T11316] Dev loop7: unable to read RDB block 0 [ 167.831372][T11316] loop7: unable to read partition table [ 167.833378][T11316] loop7: partition table beyond EOD, truncated [ 167.836207][T11316] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 167.888329][T11316] support for the xor transformation has been removed. [ 167.924296][T11325] vxcan1: entered promiscuous mode [ 167.931724][T11325] team0: Port device vxcan1 added [ 169.372787][T11341] tipc: Enabled bearer , priority 0 [ 169.375671][T11342] syzkaller0: entered promiscuous mode [ 169.377797][T11342] syzkaller0: entered allmulticast mode [ 169.395774][T11348] tipc: Resetting bearer [ 169.399089][T11339] tipc: Resetting bearer [ 169.410921][T11339] tipc: Disabling bearer [ 169.460907][ T40] audit: type=1400 audit(1756320473.167:541): avc: denied { getopt } for pid=11350 comm="syz.7.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.584390][ T9224] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.656795][T11358] fuse: Bad value for 'fd' [ 169.665899][T11360] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 169.676580][T11360] CIFS mount error: No usable UNC path provided in device string! [ 169.676580][T11360] [ 169.679987][T11360] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 169.703624][ T9224] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.728204][T11363] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 169.774179][ T5985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.777597][ T5985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.782213][ T5985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.787835][ T5985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.793188][ T5985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.798118][T11369] gretap1: entered promiscuous mode [ 169.829182][ T9224] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.853706][T11367] xfrm0 speed is unknown, defaulting to 1000 [ 169.862394][ T5985] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 169.897317][T11374] fuse: Unknown parameter 'N¹eGðV±·@ÿï60p4½‡—ùbM´ä¸HE' [ 169.950520][ T839] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 169.950893][ T9224] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.995181][T11367] chnl_net:caif_netlink_parms(): no params data found [ 170.012939][T11383] tipc: Enabled bearer , priority 0 [ 170.036185][T11383] syzkaller0: entered promiscuous mode [ 170.039042][T11383] syzkaller0: entered allmulticast mode [ 170.106109][T11367] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.108377][T11367] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.110761][T11367] bridge_slave_0: entered allmulticast mode [ 170.113410][T11367] bridge_slave_0: entered promiscuous mode [ 170.116509][T11367] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.118688][T11367] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.120905][T11367] bridge_slave_1: entered allmulticast mode [ 170.122703][ T839] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 170.122719][ T839] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 170.122730][ T839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.122750][ T839] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 170.122764][ T839] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 170.124567][ T839] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.126507][T11367] bridge_slave_1: entered promiscuous mode [ 170.128676][ T839] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.136192][T11383] tipc: Resetting bearer [ 170.138175][ T839] usb 6-1: Product: syz [ 170.138187][ T839] usb 6-1: Manufacturer: syz [ 170.143353][ T839] cdc_wdm 6-1:1.0: skipping garbage [ 170.152194][ T839] cdc_wdm 6-1:1.0: skipping garbage [ 170.155404][ T839] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 170.157266][ T839] cdc_wdm 6-1:1.0: Unknown control protocol [ 170.172361][T11382] tipc: Resetting bearer [ 170.185138][T11382] tipc: Disabling bearer [ 170.263137][T11401] tipc: Enabled bearer , priority 0 [ 170.265749][T11401] syzkaller0: entered promiscuous mode [ 170.267546][T11401] syzkaller0: entered allmulticast mode [ 170.272292][T11367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.278077][T11367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.358435][ C2] wdm_int_callback: 2 callbacks suppressed [ 170.358451][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 170.359137][ T6955] usb 6-1: USB disconnect, device number 16 [ 170.360392][ C2] wdm_int_callback: 2 callbacks suppressed [ 170.360405][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 170.369085][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 170.578273][T11411] overlayfs: failed to resolve './file1': -2 [ 170.583811][ T9224] bond5 (unregistering): (slave bridge1): Releasing active interface [ 170.584410][ T5985] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 170.692321][ T9224] bond0 (unregistering): Released all slaves [ 170.703550][ T9224] bond1 (unregistering): Released all slaves [ 170.714890][ T9224] bond2 (unregistering): Released all slaves [ 170.725854][ T9224] bond3 (unregistering): Released all slaves [ 170.736576][ T9224] bond4 (unregistering): Released all slaves [ 170.744459][ T9224] bond5 (unregistering): Released all slaves [ 170.774075][ T8789] xfrm0 speed is unknown, defaulting to 1000 [ 170.776100][T11367] team0: Port device team_slave_0 added [ 170.777081][ T8789] infiniband syz1: ib_query_port failed (-19) [ 170.787765][T11400] tipc: Resetting bearer [ 170.800262][T11400] tipc: Disabling bearer [ 170.808639][T11367] team0: Port device team_slave_1 added [ 170.813075][T11413] __nla_validate_parse: 4 callbacks suppressed [ 170.813091][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1928'. [ 170.833981][T11413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.836408][T11413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.842543][T11413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.846270][T11413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.876065][ T9224] tipc: Left network mode [ 170.927687][T11367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.930350][T11367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.940278][T11367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.947623][T11367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.950537][T11367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.962727][T11367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.033369][T11367] hsr_slave_0: entered promiscuous mode [ 171.037281][T11367] hsr_slave_1: entered promiscuous mode [ 171.040390][T11367] debugfs: 'hsr0' already exists in 'hsr' [ 171.044071][T11367] Cannot create hsr debugfs directory [ 171.078373][T11425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11425 comm=syz.7.1931 [ 171.163611][ T9224] hsr_slave_0: left promiscuous mode [ 171.166222][ T9224] hsr_slave_1: left promiscuous mode [ 171.184487][ T9224] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 171.186923][ T9224] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 171.189326][ T9224] veth1_vlan: left promiscuous mode [ 171.228115][ T40] audit: type=1400 audit(1756320474.813:542): avc: denied { read } for pid=11437 comm="syz.4.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.323222][T11441] fuse: Unknown parameter 'N¹eGðV±·@ÿï60p4½‡—ùbM´ä¸HE' [ 171.494863][T11452] program syz.7.1940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.700615][T11463] loop7: detected capacity change from 0 to 7 [ 171.726116][ C0] blk_print_req_error: 73 callbacks suppressed [ 171.726132][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.732668][ C0] buffer_io_error: 70 callbacks suppressed [ 171.732683][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.739218][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.742561][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.745643][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.748888][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.751552][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.754422][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.757238][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.760194][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.762896][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.765841][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.814291][T11464] support for the xor transformation has been removed. [ 171.819454][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.823392][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.826865][T11463] ldm_validate_partition_table(): Disk read failed. [ 171.831667][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.835161][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.838371][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.841672][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.845078][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.848362][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.851113][T11463] Dev loop7: unable to read RDB block 0 [ 171.854261][T11463] loop7: unable to read partition table [ 171.856820][T11463] loop7: partition table beyond EOD, truncated [ 171.860553][T11463] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 171.994156][ T5985] Bluetooth: hci3: command tx timeout [ 172.053972][T11475] overlayfs: failed to resolve './file0': -2 [ 172.536574][ T9224] team0 (unregistering): Port device vxcan1 removed [ 172.669343][T11451] tipc: Enabled bearer , priority 0 [ 172.672756][T11453] syzkaller0: entered promiscuous mode [ 172.674692][T11453] syzkaller0: entered allmulticast mode [ 172.679364][T11466] tipc: Resetting bearer [ 172.698847][T11446] tipc: Resetting bearer [ 172.712389][T11446] tipc: Disabling bearer [ 172.753867][ T40] audit: type=1400 audit(1756320476.235:543): avc: denied { listen } for pid=11480 comm="syz.7.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.760463][ T40] audit: type=1400 audit(1756320476.235:544): avc: denied { accept } for pid=11480 comm="syz.7.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.785397][T11367] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 172.790939][T11367] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 172.797258][T11367] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 172.802718][T11367] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 172.833848][T11489] 9pnet: Could not find request transport: vi [ 172.839912][T11489] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 172.888493][T11367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.903263][T11367] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.906480][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'. [ 172.927897][ T9225] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.930354][ T9225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.935772][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1953'. [ 172.938450][ T9225] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.941073][ T9225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.949432][T11511] overlayfs: failed to resolve './file0': -2 [ 172.964856][ T5985] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 173.012593][T11520] tipc: Enabled bearer , priority 0 [ 173.017808][T11520] syzkaller0: entered promiscuous mode [ 173.023133][T11520] syzkaller0: entered allmulticast mode [ 173.036506][T11520] tipc: Resetting bearer [ 173.044497][T11519] tipc: Resetting bearer [ 173.066733][T11519] tipc: Disabling bearer [ 173.099488][T11367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.241213][T11540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1961'. [ 173.262955][T11367] veth0_vlan: entered promiscuous mode [ 173.272222][T11367] veth1_vlan: entered promiscuous mode [ 173.303368][T11367] veth0_macvtap: entered promiscuous mode [ 173.309739][T11367] veth1_macvtap: entered promiscuous mode [ 173.319538][T11367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.325442][T11367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.332682][ T9220] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.335494][ T9220] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.343858][ T9220] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.352894][ T9220] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.368637][T11565] tipc: Enabled bearer , priority 0 [ 173.376684][T11565] syzkaller0: entered promiscuous mode [ 173.379041][T11565] syzkaller0: entered allmulticast mode [ 173.404025][T11565] tipc: Resetting bearer [ 173.407204][ T9223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.409684][ T9223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.409778][T11564] tipc: Resetting bearer [ 173.422255][T11564] tipc: Disabling bearer [ 173.442083][ T9224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.444992][ T9224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.531760][ T1025] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 173.698998][ T1025] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 173.701778][ T1025] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 173.705771][ T1025] usb 9-1: config 0 interface 0 has no altsetting 0 [ 173.709710][ T1025] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.712997][ T1025] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 173.716641][ T1025] usb 9-1: Product: syz [ 173.717995][ T1025] usb 9-1: Manufacturer: syz [ 173.719475][ T1025] usb 9-1: SerialNumber: syz [ 173.726889][T11585] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1974'. [ 173.727485][ T1025] usb 9-1: config 0 descriptor?? [ 173.742102][ T1025] hub 9-1:0.0: bad descriptor, ignoring hub [ 173.744070][ T1025] hub 9-1:0.0: probe with driver hub failed with error -5 [ 173.751323][ T1025] usb 9-1: selecting invalid altsetting 0 [ 173.899821][T11608] loop7: detected capacity change from 0 to 7 [ 173.902866][T11608] ldm_validate_partition_table(): Disk read failed. [ 173.905660][T11608] Dev loop7: unable to read RDB block 0 [ 173.911687][T11608] loop7: unable to read partition table [ 173.913614][T11608] loop7: partition table beyond EOD, truncated [ 173.915761][T11608] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 173.992671][T11608] support for the xor transformation has been removed. [ 174.028609][T11620] exFAT-fs (nullb0): invalid boot record signature [ 174.031749][T11620] exFAT-fs (nullb0): failed to read boot sector [ 174.035291][T11620] exFAT-fs (nullb0): failed to recognize exfat type [ 174.039707][ T40] audit: type=1400 audit(1756320477.451:545): avc: denied { listen } for pid=11619 comm="syz.1.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 174.050203][ T40] audit: type=1400 audit(1756320477.451:546): avc: denied { setattr } for pid=11619 comm="syz.1.1987" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.090725][T11626] fuse: Unknown parameter 'N¹eGðV±·@ÿï60p4½‡—ùbM´ä¸HE' [ 174.103944][ T5985] Bluetooth: hci2: unexpected subevent 0x01 length: 37 > 18 [ 174.109256][ T5985] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 174.112794][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 174.112810][ T5985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.112819][ T5985] Workqueue: hci2 hci_rx_work [ 174.112835][ T5985] Call Trace: [ 174.112840][ T5985] [ 174.112844][ T5985] dump_stack_lvl+0x16c/0x1f0 [ 174.112859][ T5985] sysfs_warn_dup+0x7f/0xa0 [ 174.112870][ T8848] usb 9-1: USB disconnect, device number 4 [ 174.112881][ T5985] sysfs_create_dir_ns+0x24b/0x2b0 [ 174.112896][ T5985] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 174.112910][ T5985] ? find_held_lock+0x2b/0x80 [ 174.112927][ T5985] ? do_raw_spin_unlock+0x172/0x230 [ 174.112941][ T5985] kobject_add_internal+0x2c4/0x9b0 [ 174.112958][ T5985] kobject_add+0x16e/0x240 [ 174.112985][ T5985] ? __pfx_kobject_add+0x10/0x10 [ 174.113000][ T5985] ? do_raw_spin_unlock+0x172/0x230 [ 174.113012][ T5985] ? kobject_put+0xab/0x5a0 [ 174.113028][ T5985] device_add+0x288/0x1aa0 [ 174.113043][ T5985] ? __pfx_dev_set_name+0x10/0x10 [ 174.113059][ T5985] ? __pfx_device_add+0x10/0x10 [ 174.113074][ T5985] ? mgmt_send_event_skb+0x2fb/0x460 [ 174.113096][ T5985] hci_conn_add_sysfs+0x17e/0x230 [ 174.113108][ T5985] le_conn_complete_evt+0x1075/0x1d70 [ 174.113126][ T5985] ? preempt_count_sub+0xe0/0x160 [ 174.113144][ T5985] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 174.113160][ T5985] ? bt_warn+0xe4/0x120 [ 174.113178][ T5985] ? __pfx_bt_warn+0x10/0x10 [ 174.113197][ T5985] hci_le_conn_complete_evt+0x23c/0x370 [ 174.113221][ T5985] hci_le_meta_evt+0x357/0x5e0 [ 174.113231][ T5985] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 174.113254][ T5985] hci_event_packet+0x682/0x11c0 [ 174.113270][ T5985] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 174.113282][ T5985] ? __pfx_hci_event_packet+0x10/0x10 [ 174.113300][ T5985] ? kcov_remote_start+0x3c9/0x6d0 [ 174.113312][ T5985] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.113341][ T5985] hci_rx_work+0x2c5/0x16b0 [ 174.113354][ T5985] ? rcu_is_watching+0x12/0xc0 [ 174.113372][ T5985] process_one_work+0x9cf/0x1b70 [ 174.113393][ T5985] ? __pfx_process_one_work+0x10/0x10 [ 174.113411][ T5985] ? assign_work+0x1a0/0x250 [ 174.113424][ T5985] worker_thread+0x6c8/0xf10 [ 174.113444][ T5985] ? __pfx_worker_thread+0x10/0x10 [ 174.113457][ T5985] kthread+0x3c5/0x780 [ 174.113469][ T5985] ? __pfx_kthread+0x10/0x10 [ 174.113481][ T5985] ? rcu_is_watching+0x12/0xc0 [ 174.113494][ T5985] ? __pfx_kthread+0x10/0x10 [ 174.113505][ T5985] ret_from_fork+0x5d7/0x6f0 [ 174.113516][ T5985] ? __pfx_kthread+0x10/0x10 [ 174.113527][ T5985] ret_from_fork_asm+0x1a/0x30 [ 174.113548][ T5985] [ 174.113609][ T5985] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 174.205181][ T6955] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 174.208157][ T5985] Bluetooth: hci2: failed to register connection device [ 174.215917][ T5978] Bluetooth: hci3: command tx timeout [ 174.237989][T11636] vlan0: entered promiscuous mode [ 174.395168][ T6955] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.398805][ T6955] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.401833][ T6955] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.406854][T11654] loop9: detected capacity change from 0 to 7 [ 174.408032][ T6955] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 174.411575][T11654] ldm_validate_partition_table(): Disk read failed. [ 174.411847][ T6955] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.414407][T11654] Dev loop9: unable to read RDB block 0 [ 174.416671][ T6955] usb 13-1: Product: syz [ 174.418674][T11654] loop9: unable to read partition table [ 174.420593][ T6955] usb 13-1: Manufacturer: syz [ 174.420604][ T6955] usb 13-1: SerialNumber: syz [ 174.423955][ T6955] hub 13-1:1.0: bad descriptor, ignoring hub [ 174.425032][T11654] loop9: partition table beyond EOD, [ 174.426457][ T6955] hub 13-1:1.0: probe with driver hub failed with error -5 [ 174.428358][T11654] truncated [ 174.434276][T11654] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 174.434276][T11654] ) failed (rc=-5) [ 174.543166][T11682] xfrm0 speed is unknown, defaulting to 1000 [ 174.546197][T11682] xfrm0 speed is unknown, defaulting to 1000 [ 174.564477][T11682] xfrm0 speed is unknown, defaulting to 1000 [ 174.583902][T11682] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.600108][T11682] xfrm0 speed is unknown, defaulting to 1000 [ 174.605398][T11682] xfrm0 speed is unknown, defaulting to 1000 [ 174.609182][T11682] xfrm0 speed is unknown, defaulting to 1000 [ 174.611894][ T8789] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 174.617258][T11682] xfrm0 speed is unknown, defaulting to 1000 [ 174.620234][T11682] xfrm0 speed is unknown, defaulting to 1000 [ 174.627243][T11682] xfrm0 speed is unknown, defaulting to 1000 [ 174.641221][ T40] audit: type=1400 audit(1756320478.012:547): avc: denied { checkpoint_restore } for pid=11611 comm="syz.8.1985" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.644995][ T6955] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 174.761208][ T8789] usb 9-1: device descriptor read/64, error -71 [ 174.806874][T11692] syzkaller0: entered promiscuous mode [ 174.808928][T11692] syzkaller0: entered allmulticast mode [ 174.943675][T11702] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2008'. [ 175.039233][ T8789] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 175.139129][T11720] syzkaller0: entered promiscuous mode [ 175.141516][T11720] syzkaller0: entered allmulticast mode [ 175.188850][ T8789] usb 9-1: device descriptor read/64, error -71 [ 175.310335][ T8789] usb usb9-port1: attempt power cycle [ 175.491668][T11744] fuse: Bad value for 'fd' [ 175.616338][T11612] usb 13-1: reset high-speed USB device number 2 using dummy_hcd [ 175.672611][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2029'. [ 175.691191][ T8789] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 175.713883][ T8789] usb 9-1: device descriptor read/8, error -71 [ 175.979817][ T8789] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 176.003105][ T8789] usb 9-1: device descriptor read/8, error -71 [ 176.022923][ T53] usb 13-1: USB disconnect, device number 2 [ 176.028902][ T53] usblp0: removed [ 176.120013][ T8789] usb usb9-port1: unable to enumerate USB device [ 176.126439][T11769] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.223880][T11775] loop7: detected capacity change from 0 to 7 [ 176.229777][T11775] ldm_validate_partition_table(): Disk read failed. [ 176.232637][T11775] Dev loop7: unable to read RDB block 0 [ 176.236785][T11775] loop7: unable to read partition table [ 176.239284][T11775] loop7: partition table beyond EOD, truncated [ 176.241883][T11775] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 176.289884][ T8848] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 176.332556][T11775] support for the xor transformation has been removed. [ 176.415534][T11784] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 176.417905][T11784] [U] J"—e:ÀÆ" [ 176.450583][ T5978] Bluetooth: hci3: command tx timeout [ 176.453972][ T8848] usb 12-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 176.456764][ T8848] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.459889][ T8848] usb 12-1: Product: syz [ 176.461806][ T8848] usb 12-1: Manufacturer: syz [ 176.463453][ T8848] usb 12-1: SerialNumber: syz [ 176.687164][ T8848] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 176.691758][ T8848] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 176.695531][ T8848] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 176.705358][ T8848] lan78xx 12-1:1.0: probe with driver lan78xx failed with error -71 [ 176.718783][ T8848] usb 12-1: USB disconnect, device number 2 [ 176.733702][T11803] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2050'. [ 176.782333][T11815] netlink: 'syz.1.2054': attribute type 5 has an invalid length. [ 176.806844][T11820] pimreg3: entered allmulticast mode [ 176.827964][T11824] loop7: detected capacity change from 0 to 7 [ 176.832504][T11824] ldm_validate_partition_table(): Disk read failed. [ 176.839959][T11824] Dev loop7: unable to read RDB block 0 [ 176.840297][T11826] siw: device registration error -23 [ 176.842066][T11824] loop7: unable to read partition table [ 176.845540][T11824] loop7: partition table beyond EOD, truncated [ 176.849205][T11824] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 176.920952][T11824] support for the xor transformation has been removed. [ 176.934521][T11831] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2063'. [ 177.044312][T11846] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2069'. [ 177.262210][T11862] overlayfs: invalid origin (0000) [ 177.268828][ T5978] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 177.284867][T11857] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2074'. [ 177.455866][T11882] Bluetooth: MGMT ver 1.23 [ 177.468634][T11882] autofs: Unknown parameter 'r¡K\¦$\vŒÕorœpãó-ã«îBÚÞ `«é<ùÃq&^zkÿñ•1v' [ 177.495955][T11886] overlayfs: invalid origin (0000) [ 177.502227][ T5978] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 177.532538][ T40] audit: type=1400 audit(1756320480.715:548): avc: denied { setopt } for pid=11891 comm="syz.7.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.541050][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 173 [ 177.583612][ T839] usb 13-1: new low-speed USB device number 3 using dummy_hcd [ 177.588270][T11890] netlink: 'syz.1.2089': attribute type 72 has an invalid length. [ 177.591332][T11890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2089'. [ 177.741991][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2096'. [ 177.756121][ T839] usb 13-1: Invalid ep0 maxpacket: 16 [ 177.758875][T11911] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2097'. [ 177.772970][T11911] IPVS: set_ctl: invalid protocol: 128 255.255.255.255:20001 [ 177.776313][T11913] FAULT_INJECTION: forcing a failure. [ 177.776313][T11913] name failslab, interval 1, probability 0, space 0, times 0 [ 177.781633][T11913] CPU: 1 UID: 0 PID: 11913 Comm: syz.1.2098 Not tainted syzkaller #0 PREEMPT(full) [ 177.781658][T11913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.781666][T11913] Call Trace: [ 177.781671][T11913] [ 177.781677][T11913] dump_stack_lvl+0x16c/0x1f0 [ 177.781697][T11913] should_fail_ex+0x512/0x640 [ 177.781711][T11913] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 177.781731][T11913] should_failslab+0xc2/0x120 [ 177.781746][T11913] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 177.781757][T11913] ? __alloc_skb+0x2b2/0x380 [ 177.781772][T11913] __alloc_skb+0x2b2/0x380 [ 177.781783][T11913] ? __pfx___alloc_skb+0x10/0x10 [ 177.781795][T11913] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 177.781818][T11913] netlink_alloc_large_skb+0x69/0x130 [ 177.781839][T11913] netlink_sendmsg+0x6a1/0xdd0 [ 177.781860][T11913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.781884][T11913] ____sys_sendmsg+0xa98/0xc70 [ 177.781905][T11913] ? copy_msghdr_from_user+0x10a/0x160 [ 177.781922][T11913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.781953][T11913] ___sys_sendmsg+0x134/0x1d0 [ 177.781971][T11913] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.782013][T11913] __sys_sendmsg+0x16d/0x220 [ 177.782034][T11913] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.782056][T11913] ? fput+0x9b/0xd0 [ 177.782079][T11913] do_syscall_64+0xcd/0x4c0 [ 177.782095][T11913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.782108][T11913] RIP: 0033:0x7f16e3b8ebe9 [ 177.782119][T11913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.782131][T11913] RSP: 002b:00007f16e4920038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.782143][T11913] RAX: ffffffffffffffda RBX: 00007f16e3db5fa0 RCX: 00007f16e3b8ebe9 [ 177.782150][T11913] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 177.782157][T11913] RBP: 00007f16e4920090 R08: 0000000000000000 R09: 0000000000000000 [ 177.782163][T11913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.782170][T11913] R13: 00007f16e3db6038 R14: 00007f16e3db5fa0 R15: 00007fffec906b08 [ 177.782184][T11913] [ 177.834026][ T40] audit: type=1400 audit(1756320480.996:549): avc: denied { sqpoll } for pid=11916 comm="syz.7.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 177.900775][T11924] tipc: Enabled bearer , priority 0 [ 177.905186][T11924] syzkaller0: entered promiscuous mode [ 177.906017][ T839] usb 13-1: new low-speed USB device number 4 using dummy_hcd [ 177.908292][T11924] syzkaller0: entered allmulticast mode [ 177.927337][T11924] tipc: Resetting bearer [ 177.931395][T11923] tipc: Resetting bearer [ 177.954699][T11923] tipc: Disabling bearer [ 177.962905][T11927] siw: device registration error -23 [ 178.070011][T11937] overlayfs: workdir and upperdir must be separate subtrees [ 178.096593][ T839] usb 13-1: Invalid ep0 maxpacket: 16 [ 178.098384][ T839] usb usb13-port1: attempt power cycle [ 178.135942][ T40] audit: type=1400 audit(1756320481.277:550): avc: denied { getopt } for pid=11946 comm="syz.1.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.142029][ T40] audit: type=1400 audit(1756320481.277:551): avc: denied { connect } for pid=11946 comm="syz.1.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 178.208258][T11954] overlayfs: invalid origin (0000) [ 178.262637][T11961] macvlan0: entered promiscuous mode [ 178.388375][T11967] tipc: Enabled bearer , priority 0 [ 178.391090][T11967] syzkaller0: entered promiscuous mode [ 178.392698][T11967] syzkaller0: entered allmulticast mode [ 178.407574][T11967] tipc: Resetting bearer [ 178.412489][T11965] tipc: Resetting bearer [ 178.424174][T11965] tipc: Disabling bearer [ 178.460307][ T839] usb 13-1: new low-speed USB device number 5 using dummy_hcd [ 178.482289][ T839] usb 13-1: Invalid ep0 maxpacket: 16 [ 178.641889][ T839] usb 13-1: new low-speed USB device number 6 using dummy_hcd [ 178.673842][ T6955] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 178.674665][ T5978] Bluetooth: hci3: command tx timeout [ 178.680037][ T839] usb 13-1: Invalid ep0 maxpacket: 16 [ 178.682194][ T839] usb usb13-port1: unable to enumerate USB device [ 178.705667][T11973] gfs2: Unknown parameter 'u†rrier' [ 178.762071][T11977] overlayfs: invalid origin (0000) [ 178.769171][ T5978] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 178.834286][ T6955] usb 6-1: Using ep0 maxpacket: 8 [ 178.838055][ T6955] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 178.840801][ T6955] usb 6-1: config 179 has no interface number 0 [ 178.842928][ T6955] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 178.847134][ T6955] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 178.850675][ T6955] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 178.854138][ T6955] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 178.866206][ T6955] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 178.870434][ T6955] usb 6-1: config 179 interface 65 has no altsetting 0 [ 178.873407][ T6955] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 178.878120][ T6955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.893688][T11985] siw: device registration error -23 [ 178.904442][ T6955] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input29 [ 178.962685][ T5365] input input29: unable to receive magic message: -110 [ 178.963145][T11991] loop7: detected capacity change from 0 to 7 [ 178.971244][ C0] blk_print_req_error: 70 callbacks suppressed [ 178.971262][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.977824][ C0] buffer_io_error: 1021 callbacks suppressed [ 178.977833][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 178.984143][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.984800][ T5365] input input29: unable to receive magic message: -32 [ 178.988042][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 178.993726][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.996774][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 178.999513][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.001441][ T5976] input input29: unable to receive magic message: -32 [ 179.003239][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.004617][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.013920][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.017566][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.020576][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.023519][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.026660][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.029479][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.033330][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.034033][ T5365] input input29: unable to receive magic message: -32 [ 179.036734][T11991] ldm_validate_partition_table(): Disk read failed. [ 179.043201][ T5365] input input29: unable to receive magic message: -32 [ 179.046477][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.050559][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.054464][ T5365] input input29: unable to receive magic message: -32 [ 179.054982][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.061239][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.066454][T11991] Dev loop7: unable to read RDB block 0 [ 179.070176][T11991] loop7: unable to read partition table [ 179.072776][T11991] loop7: partition table beyond EOD, truncated [ 179.075451][T11991] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…0ýÞý©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 179.107847][T11969] input input29: unable to receive magic message: -32 [ 179.107872][ T40] audit: type=1400 audit(1756320482.184:552): avc: denied { append } for pid=11968 comm="syz.1.2120" name="event4" dev="devtmpfs" ino=3219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 179.114044][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.129223][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.130964][ T5380] ldm_validate_partition_table(): Disk read failed. [ 179.137755][ T5380] Dev loop7: unable to read RDB block 0 [ 179.140692][ T5380] loop7: unable to read partition table [ 179.143259][ T5380] loop7: partition table beyond EOD, truncated [ 179.174524][ T5380] ldm_validate_partition_table(): Disk read failed. [ 179.176477][T11969] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 179.181955][ T5380] Dev loop7: unable to read RDB block 0 [ 179.185553][ T5380] loop7: unable to read partition table [ 179.188172][ T6042] usb 6-1: USB disconnect, device number 17 [ 179.188183][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 179.190692][ T5380] loop7: partition table beyond EOD, truncated [ 179.192779][ C3] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 179.248244][T12005] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 179.302249][T12009] kvm: user requested TSC rate below hardware speed [ 179.315270][T12009] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 179.321450][T12010] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 179.507441][ T40] audit: type=1400 audit(1756320482.558:553): avc: denied { getopt } for pid=12024 comm="syz.4.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 179.781195][T12045] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 179.785716][T12045] netlink: 'syz.4.2152': attribute type 16 has an invalid length. [ 179.788347][T12045] netlink: 'syz.4.2152': attribute type 17 has an invalid length. [ 179.827917][T12045] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.831055][T12045] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.853751][T12045] vxcan1: left promiscuous mode [ 179.991034][T12045] veth3: left promiscuous mode [ 179.996334][T12045] gretap1: left promiscuous mode [ 179.998793][ T9223] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.003382][ T9223] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.006258][ T9223] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.011378][ T9223] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.014523][ T9223] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.017499][ T9223] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.021349][ T9223] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.026084][ T9223] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.030259][ T9223] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.034706][ T9223] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.038965][ T9223] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.044003][ T9223] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.059659][ T40] audit: type=1400 audit(1756320483.082:554): avc: denied { block_suspend } for pid=12056 comm="syz.1.2156" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.182146][T12066] sp0: Synchronizing with TNC [ 180.382587][T12076] netlink: 'syz.1.2164': attribute type 10 has an invalid length. [ 180.393988][T12076] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 180.455611][T12080] vxcan1: entered promiscuous mode [ 180.457524][T12080] team0: Device vxcan1 is of different type [ 180.487071][T12083] netlink: 'syz.4.2167': attribute type 4 has an invalid length. [ 182.334857][T12123] tipc: Enabled bearer , priority 0 [ 182.337771][T12126] syzkaller0: entered promiscuous mode [ 182.339813][T12126] syzkaller0: entered allmulticast mode [ 182.347494][T12134] tipc: Resetting bearer [ 182.351329][T12113] tipc: Resetting bearer [ 182.363605][T12113] tipc: Disabling bearer [ 182.667741][T12161] 9p: Unknown uid 00000000004294967295 [ 182.721567][ T40] audit: type=1400 audit(1756320485.570:555): avc: denied { map } for pid=12160 comm="syz.8.2195" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 184.005384][T12172] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 184.007284][T12176] tipc: Enabled bearer , priority 0 [ 184.012434][T12177] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 184.015200][T12177] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 184.034624][T12174] tipc: Resetting bearer [ 184.044125][T12185] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 184.046869][T12185] overlayfs: missing 'lowerdir' [ 184.186383][T12210] No control pipe specified [ 184.259782][ T40] audit: type=1400 audit(1756320487.011:556): avc: denied { write } for pid=12209 comm="syz.8.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 184.260039][T12210] block nbd8: Send control failed (result -22) [ 184.270458][T12210] block nbd8: Request send failed, requeueing [ 184.274421][ T120] block nbd8: Dead connection, failed to find a fallback [ 184.279368][ T120] block nbd8: shutting down sockets [ 185.765305][T12235] tipc: Started in network mode [ 185.767284][T12235] tipc: Node identity 761eb450bcd7, cluster identity 4711 [ 185.770629][T12235] tipc: Enabled bearer , priority 0 [ 185.899831][T12245] tipc: Resetting bearer [ 185.919811][T12233] tipc: Disabling bearer [ 186.154969][ T40] audit: type=1400 audit(1756320488.778:557): avc: denied { unmount } for pid=8560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 186.178362][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 186.238581][T12301] tipc: Enabling of bearer rejected, already enabled [ 186.656667][T12325] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 186.661827][T12325] overlayfs: overlapping lowerdir path [ 187.424407][T12338] overlayfs: invalid origin (0000) [ 187.433825][ T5978] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 188.019151][T12328] tipc: Enabling of bearer rejected, failed to enable media [ 188.147757][T12356] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 188.154671][T12356] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.160505][T12356] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.188448][ T40] audit: type=1400 audit(1756320490.677:558): avc: denied { write } for pid=12343 comm="syz.4.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.218903][T12365] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2253'. [ 188.222610][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2253'. [ 188.255495][T12367] netlink: 'syz.7.2254': attribute type 2 has an invalid length. [ 188.260605][T12367] nbd: must specify a size in bytes for the device [ 188.395064][T12384] FAULT_INJECTION: forcing a failure. [ 188.395064][T12384] name failslab, interval 1, probability 0, space 0, times 0 [ 188.399678][T12384] CPU: 1 UID: 0 PID: 12384 Comm: syz.8.2259 Not tainted syzkaller #0 PREEMPT(full) [ 188.399699][T12384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.399706][T12384] Call Trace: [ 188.399710][T12384] [ 188.399715][T12384] dump_stack_lvl+0x16c/0x1f0 [ 188.399734][T12384] should_fail_ex+0x512/0x640 [ 188.399747][T12384] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 188.399761][T12384] should_failslab+0xc2/0x120 [ 188.399774][T12384] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 188.399786][T12384] ? __alloc_skb+0x2b2/0x380 [ 188.399800][T12384] __alloc_skb+0x2b2/0x380 [ 188.399810][T12384] ? __pfx___alloc_skb+0x10/0x10 [ 188.399820][T12384] ? __pfx___mutex_trylock_common+0x10/0x10 [ 188.399839][T12384] ? __pfx___might_resched+0x10/0x10 [ 188.399855][T12384] ? rcu_is_watching+0x12/0xc0 [ 188.399871][T12384] netlink_dump+0x19b/0xd30 [ 188.399885][T12384] ? __pfx_netlink_dump+0x10/0x10 [ 188.399897][T12384] ? __pfx___mutex_lock+0x10/0x10 [ 188.399920][T12384] __netlink_dump_start+0x6d6/0x990 [ 188.399935][T12384] smc_diag_handler_dump+0x1f9/0x240 [ 188.399949][T12384] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 188.399963][T12384] ? __pfx_smc_diag_dump+0x10/0x10 [ 188.399977][T12384] ? sock_diag_lock_handler+0x10f/0x2e0 [ 188.399998][T12384] sock_diag_rcv_msg+0x438/0x790 [ 188.400018][T12384] netlink_rcv_skb+0x155/0x420 [ 188.400030][T12384] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 188.400049][T12384] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.400067][T12384] ? netlink_deliver_tap+0x1ae/0xd30 [ 188.400082][T12384] netlink_unicast+0x5aa/0x870 [ 188.400097][T12384] ? __pfx_netlink_unicast+0x10/0x10 [ 188.400110][T12384] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 188.400126][T12384] netlink_sendmsg+0x8d1/0xdd0 [ 188.400142][T12384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.400160][T12384] ____sys_sendmsg+0xa98/0xc70 [ 188.400176][T12384] ? copy_msghdr_from_user+0x10a/0x160 [ 188.400189][T12384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.400210][T12384] ___sys_sendmsg+0x134/0x1d0 [ 188.400223][T12384] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.400251][T12384] __sys_sendmsg+0x16d/0x220 [ 188.400263][T12384] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.400284][T12384] do_syscall_64+0xcd/0x4c0 [ 188.400298][T12384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.400310][T12384] RIP: 0033:0x7feb4458ebe9 [ 188.400320][T12384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.400331][T12384] RSP: 002b:00007feb4536c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.400342][T12384] RAX: ffffffffffffffda RBX: 00007feb447b5fa0 RCX: 00007feb4458ebe9 [ 188.400348][T12384] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000005 [ 188.400355][T12384] RBP: 00007feb4536c090 R08: 0000000000000000 R09: 0000000000000000 [ 188.400361][T12384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.400368][T12384] R13: 00007feb447b6038 R14: 00007feb447b5fa0 R15: 00007ffd30a633d8 [ 188.400382][T12384] [ 188.412607][T12386] tipc: Enabled bearer , priority 0 [ 188.495988][T12390] /dev/sg0: Can't lookup blockdev [ 188.503803][T12386] tipc: Resetting bearer [ 188.535892][T12385] tipc: Disabling bearer [ 188.596006][ T40] audit: type=1400 audit(1756320491.070:559): avc: denied { append } for pid=12393 comm="syz.8.2263" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 188.616887][T12394] tipc: Enabled bearer , priority 10 [ 188.627878][T12394] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2263'. [ 188.631952][T12394] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2263'. [ 188.778638][ T40] audit: type=1400 audit(1756320491.239:560): avc: denied { lock } for pid=12408 comm="syz.8.2270" path="socket:[61698]" dev="sockfs" ino=61698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 188.951846][T12413] tipc: Enabled bearer , priority 10 [ 189.050018][ T40] audit: type=1400 audit(1756320491.491:561): avc: denied { read } for pid=12425 comm="syz.8.2276" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 189.064351][ T40] audit: type=1400 audit(1756320491.491:562): avc: denied { firmware_load } for pid=9221 comm="kworker/u32:26" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 189.151582][ T40] audit: type=1326 audit(1756320491.585:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.1.2279" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16e3b8ebe9 code=0x0 [ 189.533520][T12440] SELinux: syz.7.2280 (12440) set checkreqprot to 1. This is no longer supported. [ 189.533555][ T40] audit: type=1400 audit(1756320491.940:564): avc: denied { setcheckreqprot } for pid=12439 comm="syz.7.2280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 189.636764][T12443] fuse: Bad value for 'fd' [ 190.016582][ T6955] tipc: Node number set to 3402216528 [ 191.331573][T12426] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 191.332647][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.337516][T12426] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 192.259947][T12426] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.268309][T12426] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.272884][T12426] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.275449][T12426] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.279692][T12426] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.285720][T12426] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.287688][T12426] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.290309][T12426] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.389982][T12467] tipc: Enabling of bearer rejected, failed to enable media [ 192.419740][T12472] program syz.8.2293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.447487][T12476] siw: device registration error -23 [ 192.453025][ T40] audit: type=1400 audit(1756320494.671:565): avc: denied { append } for pid=12469 comm="syz.8.2293" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.471123][ T40] audit: type=1400 audit(1756320494.690:566): avc: denied { ioctl } for pid=12469 comm="syz.8.2293" path="/60/file0/cgroup.stat" dev="9p" ino=36047853 ioctlcmd=0xaee1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 192.487389][T12482] random: crng reseeded on system resumption [ 192.659594][T12501] vxcan1 speed is unknown, defaulting to 1000 [ 192.664333][T12501] vxcan1 speed is unknown, defaulting to 1000 [ 192.668883][T12501] vxcan1 speed is unknown, defaulting to 1000 [ 192.809423][T12501] infiniband syz2: set active [ 192.811135][ T6042] vxcan1 speed is unknown, defaulting to 1000 [ 192.812487][T12501] infiniband syz2: added vxcan1 [ 192.815825][T12501] syz2: rxe_create_cq: returned err = -12 [ 192.824026][T12501] infiniband syz2: Couldn't create ib_mad CQ [ 192.826163][T12501] infiniband syz2: Couldn't open port 1 [ 192.848972][T12501] RDS/IB: syz2: added [ 192.851659][T12501] smc: adding ib device syz2 with port count 1 [ 192.853805][T12501] smc: ib device syz2 port 1 has pnetid [ 192.856172][ T6041] vxcan1 speed is unknown, defaulting to 1000 [ 192.859578][T12501] vxcan1 speed is unknown, defaulting to 1000 [ 192.867639][T12517] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 192.870630][T12517] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 192.876198][T12517] tipc: Enabling of bearer rejected, failed to enable media [ 192.914462][T12519] netlink: 'syz.4.2306': attribute type 2 has an invalid length. [ 192.921148][T12521] tipc: Enabling of bearer rejected, failed to enable media [ 192.932881][T12522] overlayfs: invalid origin (0000) [ 192.977500][T12501] vxcan1 speed is unknown, defaulting to 1000 [ 193.118843][T12501] vxcan1 speed is unknown, defaulting to 1000 [ 193.164487][T12530] xfrm0 speed is unknown, defaulting to 1000 [ 193.201144][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2312'. [ 193.205190][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2312'. [ 193.208295][T12537] netlink: 'syz.1.2312': attribute type 11 has an invalid length. [ 193.238184][T12501] vxcan1 speed is unknown, defaulting to 1000 [ 193.274059][T12542] dummy0: entered allmulticast mode [ 193.365341][T12530] vxcan1 speed is unknown, defaulting to 1000 [ 193.365429][T12544] tipc: Enabling of bearer rejected, failed to enable media [ 193.563011][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.756985][T12549] overlayfs: invalid origin (0000) [ 193.765998][ T5978] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 194.485517][ T5985] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.485877][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.857492][T12501] vxcan1 speed is unknown, defaulting to 1000 [ 195.013296][T12501] vxcan1 speed is unknown, defaulting to 1000 [ 195.144653][T12562] siw: device registration error -23 [ 195.181742][T12568] Illegal XDP return value 3842596694 on prog (id 183) dev N/A, expect packet loss! [ 195.232799][T12574] overlayfs: invalid origin (0000) [ 195.240163][ T5978] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 195.483196][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2338'. [ 195.539869][ T40] audit: type=1400 audit(1756320497.557:567): avc: denied { getopt } for pid=12594 comm="syz.7.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 195.681652][ T5978] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 195.681691][ T5978] Bluetooth: hci2: Malformed LE Event: 0x02 [ 195.778884][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.713302][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.719719][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 196.881904][T12601] wg1: entered promiscuous mode [ 196.883811][T12601] team0: Device wg1 is of different type [ 196.926503][ T40] audit: type=1400 audit(1756320498.848:568): avc: denied { mount } for pid=12602 comm="syz.4.2341" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 196.935009][ T40] audit: type=1400 audit(1756320498.857:569): avc: denied { remount } for pid=12602 comm="syz.4.2341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 196.944811][T12603] netlink: 'syz.4.2341': attribute type 3 has an invalid length. [ 196.946175][T12605] siw: device registration error -23 [ 197.028434][ T40] audit: type=1400 audit(1756320498.951:570): avc: denied { unmount } for pid=8560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 197.079377][ T40] audit: type=1400 audit(1756320498.998:571): avc: denied { connect } for pid=12612 comm="syz.4.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.205277][ T40] audit: type=1400 audit(1756320499.119:572): avc: denied { read } for pid=12624 comm="syz.1.2350" path="socket:[62503]" dev="sockfs" ino=62503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.206698][T12630] (syz.4.2352,12630,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 197.217350][T12630] (syz.4.2352,12630,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 197.217946][T12632] siw: device registration error -23 [ 197.259864][T12637] ata1.00: invalid cdb length 6 [ 197.261424][T12638] vxcan1: entered promiscuous mode [ 197.455273][T12655] sctp: [Deprecated]: syz.4.2360 (pid 12655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.455273][T12655] Use struct sctp_sack_info instead [ 197.463388][ T40] audit: type=1400 audit(1756320499.353:573): avc: denied { getopt } for pid=12654 comm="syz.4.2360" lport=53767 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 197.507922][T12659] tmpfs: Bad value for 'gid' [ 197.509522][T12659] tmpfs: Bad value for 'gid' [ 197.569493][ T40] audit: type=1400 audit(1756320499.456:574): avc: denied { map } for pid=12663 comm="syz.1.2364" path="/dev/media1" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.676214][T12668] netlink: 'syz.4.2366': attribute type 1 has an invalid length. [ 197.683066][T12668] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2366'. [ 197.708625][T12673] netlink: 'syz.8.2367': attribute type 6 has an invalid length. [ 197.714634][T12673] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2367'. [ 197.826779][T12688] netlink: 'syz.4.2371': attribute type 1 has an invalid length. [ 197.829583][T12688] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2371'. [ 197.979410][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 197.979429][ T40] audit: type=1400 audit(1756320499.839:578): avc: denied { read } for pid=12691 comm="syz.4.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 197.991796][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.036055][ T40] audit: type=1400 audit(1756320499.896:579): avc: denied { getopt } for pid=12697 comm="syz.8.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 198.117592][T12702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2377'. [ 198.189605][T12712] netlink: 'syz.4.2380': attribute type 1 has an invalid length. [ 198.193236][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 198.331219][T12722] siw: device registration error -23 [ 198.511848][T12737] gtp0: entered promiscuous mode [ 198.577424][T12743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12743 comm=syz.7.2390 [ 198.738854][ T40] audit: type=1400 audit(1756320500.541:580): avc: denied { ioctl } for pid=12753 comm="syz.4.2395" path="socket:[63773]" dev="sockfs" ino=63773 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 198.759547][T12757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12757 comm=syz.7.2396 [ 198.759892][T12758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12758 comm=syz.7.2396 [ 198.771782][T12757] netlink: 'syz.7.2396': attribute type 1 has an invalid length. [ 198.814141][T12757] bond6: (slave bridge1): making interface the new active one [ 198.827855][T12757] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 198.931402][T12767] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2399'. [ 198.936160][T12767] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.941006][T12767] bond0: (slave lo): Error: Device type is different from other slaves [ 198.946391][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.946471][ T5985] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.949712][T12767] 9pnet: Unknown protocol version 9p20 [ 199.050936][ T8789] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 199.189957][ T8789] usb 6-1: device descriptor read/64, error -71 [ 199.215307][T12772] hfsplus: unable to find HFS+ superblock [ 199.223063][T12772] ubi31: attaching mtd0 [ 199.228532][T12772] ubi31: scanning is finished [ 199.231023][T12772] ubi31: empty MTD device detected [ 199.281955][T12779] dvmrp1: entered allmulticast mode [ 199.314663][ T40] audit: type=1400 audit(1756320501.083:581): avc: denied { nlmsg_read } for pid=12780 comm="syz.7.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.333889][T12772] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 199.336627][T12772] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 199.339850][T12772] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 199.342799][T12772] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 199.345946][T12772] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 199.348859][T12772] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 199.353872][T12772] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3609861617 [ 199.362898][T12772] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 199.368919][T12782] ubi31: background thread "ubi_bgt31d" started, PID 12782 [ 199.428990][ T40] audit: type=1400 audit(1756320501.196:582): avc: denied { write } for pid=12784 comm="syz.8.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 199.441159][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2404'. [ 199.445790][ T8789] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 199.446836][T12785] netlink: 'syz.8.2404': attribute type 10 has an invalid length. [ 199.452170][T12785] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2404'. [ 199.456449][T12785] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 199.460403][T12785] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 199.465650][T12785] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 199.476498][T12785] overlayfs: missing 'lowerdir' [ 199.584696][ T8789] usb 6-1: device descriptor read/64, error -71 [ 199.702989][ T8789] usb usb6-port1: attempt power cycle [ 199.715376][T12802] QAT: Invalid ioctl -2144835806 [ 199.947736][T12817] siw: device registration error -23 [ 199.950575][T12819] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2416'. [ 199.957962][T12819] pimreg: entered allmulticast mode [ 200.008914][ T40] audit: type=1400 audit(1756320501.738:583): avc: denied { map } for pid=12823 comm="syz.4.2418" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.022779][ T40] audit: type=1400 audit(1756320501.738:584): avc: denied { execute } for pid=12823 comm="syz.4.2418" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.066506][ T8789] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 200.091510][ T8789] usb 6-1: device descriptor read/8, error -71 [ 200.101470][T12833] syz.4.2421 (12833): /proc/12829/oom_adj is deprecated, please use /proc/12829/oom_score_adj instead. [ 200.118413][T12838] openvswitch: netlink: Duplicate or invalid key (type 0). [ 200.121500][T12838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.215955][ T40] audit: type=1400 audit(1756320501.935:585): avc: denied { ioctl } for pid=12842 comm="syz.8.2424" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 200.221647][T12843] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.234320][T12847] overlayfs: failed to resolve './file0': -2 [ 200.241465][ T5985] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 200.277392][T12853] siw: device registration error -23 [ 200.344689][ T8789] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 200.366947][ T8789] usb 6-1: device descriptor read/8, error -71 [ 200.391076][ T40] audit: type=1400 audit(1756320502.094:586): avc: denied { connect } for pid=12868 comm="syz.4.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 200.391129][T12867] comedi comedi0: dac02: I/O port conflict (0xfffffffffffffbff,8) [ 200.449137][ T40] audit: type=1400 audit(1756320502.150:587): avc: denied { connect } for pid=12866 comm="syz.8.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.484383][ T8789] usb usb6-port1: unable to enumerate USB device [ 200.614648][T12893] siw: device registration error -23 [ 200.785738][T12911] netlink: 'syz.4.2444': attribute type 1 has an invalid length. [ 200.797599][T12914] siw: device registration error -23 [ 200.816268][T12911] 8021q: adding VLAN 0 to HW filter on device bond12 [ 200.822056][T12911] bond11: (slave bond12): making interface the new active one [ 200.828353][T12911] bond11: (slave bond12): Enslaving as an active interface with an up link [ 200.864273][T12920] ip6tnl2: entered promiscuous mode [ 200.866526][T12920] ip6tnl2: entered allmulticast mode [ 200.872182][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2451'. [ 200.924732][T12924] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2452'. [ 201.027068][T12932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.385902][ T5873] IPVS: starting estimator thread 0... [ 201.387922][T12943] tipc: Enabling of bearer rejected, already enabled [ 201.424683][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2461'. [ 201.498959][T12946] IPVS: using max 45 ests per chain, 108000 per kthread [ 201.647324][T12972] nfs4: Bad value for 'source' [ 202.011714][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 202.061876][T12989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=12989 comm=syz.4.2473 [ 202.093643][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2476'. [ 202.106008][ T5978] Bluetooth: hci4: sending frame failed (-49) [ 202.111659][ T5985] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 202.193192][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 202.492542][ T6048] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 202.615491][T13017] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13017 comm=syz.8.2484 [ 202.655140][ T6048] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.658209][ T6048] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.664445][ T6048] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.668022][T13023] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.2486'. [ 202.668134][ T6048] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.679119][ T6048] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.682944][ T6048] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.686594][ T6048] usb 9-1: Product: syz [ 202.688421][ T6048] usb 9-1: Manufacturer: syz [ 202.694843][ T6048] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 202.763699][T13029] fuse: Bad value for 'fd' [ 202.768715][T13031] fuse: Bad value for 'fd' [ 202.908923][ T5985] Bluetooth: hci2: Malformed LE Event: 0x0d [ 203.123827][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 203.191116][ T6042] usb 9-1: USB disconnect, device number 9 [ 203.294222][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 204.235226][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 204.406116][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 204.496822][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.357511][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 205.518725][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 206.458803][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 206.640393][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 207.570466][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 207.741691][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 208.693087][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 208.853682][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 209.804811][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 209.967521][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 210.905956][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 211.077095][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 212.017922][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 212.188802][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 213.129881][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 213.311363][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 214.241450][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 214.412715][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 215.353225][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 215.524267][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 216.465133][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 216.646971][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 217.577067][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 217.748408][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 217.828407][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 217.828432][ T40] audit: type=1400 audit(1756320518.407:599): avc: denied { getopt } for pid=13056 comm="syz.8.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 217.852739][T13058] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2495'. [ 217.857213][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2495'. [ 217.862248][ T5985] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 217.885067][T13063] vlan2: entered promiscuous mode [ 217.892341][T13063] vlan2: entered allmulticast mode [ 217.895154][T13063] hsr_slave_1: entered allmulticast mode [ 217.999456][T13072] input: syz0 as /devices/virtual/input/input32 [ 218.688820][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 218.870656][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 219.716994][T13086] syzkaller0: entered promiscuous mode [ 219.719028][T13086] syzkaller0: entered allmulticast mode [ 219.762278][ T6042] tipc: Resetting bearer [ 219.800650][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 219.820582][ T5985] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 219.914917][T13120] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2517'. [ 219.971608][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 220.083439][T13140] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 220.086440][T13140] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 220.091892][T13140] vhci_hcd vhci_hcd.0: Device attached [ 220.101830][T13140] vhci_hcd vhci_hcd.0: port 0 already used [ 220.106724][T13141] vhci_hcd: connection closed [ 220.116636][ T9221] vhci_hcd: stop threads [ 220.121547][ T9221] vhci_hcd: release socket [ 220.123484][ T9221] vhci_hcd: disconnect device [ 220.185486][ T5873] usb 12-1: new low-speed USB device number 3 using dummy_hcd [ 220.321178][T13163] syzkaller0: entered promiscuous mode [ 220.323330][T13163] syzkaller0: entered allmulticast mode [ 220.359426][ T5873] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 220.362636][ T5873] usb 12-1: config 0 has no interface number 0 [ 220.364760][ T5873] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 220.369706][ T5873] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 220.373699][ T5873] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 220.377483][ T5873] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 220.381513][ T5873] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.387166][ T5873] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 220.391039][ T5873] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.394838][ T5873] usb 12-1: config 0 descriptor?? [ 220.397215][T13120] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 220.400104][T13120] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 220.405004][ T5873] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 220.630300][ T6041] usb 12-1: USB disconnect, device number 3 [ 220.635936][ T6041] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 220.840328][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 220.912666][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 220.970684][T13195] team0: Port device team_slave_0 removed [ 221.083479][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 221.205510][T13208] netlink: 'syz.8.2539': attribute type 7 has an invalid length. [ 222.025989][ T6042] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 222.028220][ T6042] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 222.034937][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 222.205946][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 222.700027][T13238] tipc: Enabled bearer , priority 0 [ 222.703440][T13234] tipc: Resetting bearer [ 222.723341][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2548'. [ 222.912306][T11724] usb 13-1: new low-speed USB device number 7 using dummy_hcd [ 223.089102][T11724] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 223.091994][T11724] usb 13-1: config 0 has no interface number 0 [ 223.094079][T11724] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.097539][T11724] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 223.101164][T11724] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 223.106805][T11724] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 223.110434][T11724] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 223.113905][T11724] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.118049][T11724] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 223.120954][T11724] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.125575][T11724] usb 13-1: config 0 descriptor?? [ 223.127815][T13237] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 223.130172][T13237] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 223.136000][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 223.142678][T11724] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 223.307117][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 223.357154][T13237] loop6: detected capacity change from 0 to 7 [ 223.370451][T13237] Dev loop6: unable to read RDB block 7 [ 223.373020][T13237] loop6: AHDI p1 [ 223.374637][T13237] loop6: partition table partially beyond EOD, truncated [ 223.390203][ T6041] usb 13-1: USB disconnect, device number 7 [ 223.395269][ T6041] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 224.252666][ T6042] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 224.255005][ T6042] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 224.258608][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 224.261877][ C2] ------------[ cut here ]------------ [ 224.267551][ C2] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 224.270520][ C2] WARNING: CPU: 2 PID: 0 at kernel/workqueue.c:2255 __queue_work+0xd03/0x1160 [ 224.274302][ C2] Modules linked in: [ 224.276715][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 224.282452][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.286982][ C2] RIP: 0010:__queue_work+0xd03/0x1160 [ 224.289284][ C2] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 00 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 ef 78 38 00 90 0f 0b 90 e9 b4 f5 ff [ 224.297853][ C2] RSP: 0018:ffffc90000648be8 EFLAGS: 00010082 [ 224.300479][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 224.303813][ C2] RDX: ffff88801debc880 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 224.307150][ C2] RBP: ffff888029384970 R08: 0000000000000001 R09: 0000000000000000 [ 224.310510][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920000c918f [ 224.314083][ C2] R13: 0000000000000101 R14: ffffffff81832460 R15: ffff888055f17978 [ 224.317751][ C2] FS: 0000000000000000(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000 [ 224.321074][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.323306][ C2] CR2: 00007f9063fd4f98 CR3: 0000000065810000 CR4: 0000000000352ef0 [ 224.325781][ C2] Call Trace: [ 224.326873][ C2] [ 224.327808][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 224.329701][ C2] call_timer_fn+0x197/0x620 [ 224.331616][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 224.333321][ C2] ? __run_timers+0x559/0x960 [ 224.335051][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 224.336929][ C2] __run_timers+0x569/0x960 [ 224.338452][ C2] ? __pfx___run_timers+0x10/0x10 [ 224.340244][ C2] ? rcu_is_watching+0x12/0xc0 [ 224.342313][ C2] ? asm_sysvec_call_function_single+0x1a/0x20 [ 224.344912][ C2] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.347123][ C2] run_timer_base+0x114/0x190 [ 224.349154][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 224.350943][ C2] run_timer_softirq+0x1a/0x40 [ 224.352476][ C2] handle_softirqs+0x216/0x8e0 [ 224.353998][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 224.355700][ C2] __irq_exit_rcu+0x109/0x170 [ 224.357200][ C2] irq_exit_rcu+0x9/0x30 [ 224.358565][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 224.360405][ C2] [ 224.361403][ C2] [ 224.362405][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 224.364318][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 224.366094][ C2] Code: 4c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 52 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 224.372169][ C2] RSP: 0018:ffffc90000187df8 EFLAGS: 00000282 [ 224.374119][ C2] RAX: 00000000001738ed RBX: 0000000000000002 RCX: ffffffff8b93bc29 [ 224.376796][ C2] RDX: 0000000000000000 RSI: ffffffff8de50328 RDI: ffffffff8c162900 [ 224.379593][ C2] RBP: ffffed1003bd7910 R08: 0000000000000001 R09: ffffed100d4c6655 [ 224.382486][ C2] R10: ffff88806a6332ab R11: 0000000000000000 R12: 0000000000000002 [ 224.385189][ C2] R13: ffff88801debc880 R14: ffffffff90ab4c90 R15: 0000000000000000 [ 224.388024][ C2] ? ct_kernel_exit+0x139/0x190 [ 224.389694][ C2] default_idle+0x13/0x20 [ 224.391571][ C2] default_idle_call+0x6d/0xb0 [ 224.393623][ C2] do_idle+0x391/0x510 [ 224.395313][ C2] ? __pfx_do_idle+0x10/0x10 [ 224.397096][ C2] ? trace_sched_exit_tp+0x2f/0x120 [ 224.399503][ C2] cpu_startup_entry+0x4f/0x60 [ 224.401647][ C2] start_secondary+0x21d/0x2b0 [ 224.403725][ C2] ? __pfx_start_secondary+0x10/0x10 [ 224.405984][ C2] common_startup_64+0x13e/0x148 [ 224.408133][ C2] [ 224.409478][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.412304][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 224.415569][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.419099][ C2] Call Trace: [ 224.420440][ C2] [ 224.421696][ C2] dump_stack_lvl+0x3d/0x1f0 [ 224.423697][ C2] vpanic+0x6e8/0x7a0 [ 224.425464][ C2] ? __pfx_vpanic+0x10/0x10 [ 224.427650][ C2] ? __queue_work+0xd03/0x1160 [ 224.429889][ C2] panic+0xca/0xd0 [ 224.431681][ C2] ? __pfx_panic+0x10/0x10 [ 224.433425][ C2] ? check_panic_on_warn+0x1f/0xb0 [ 224.435215][ C2] check_panic_on_warn+0xab/0xb0 [ 224.436873][ C2] __warn+0xf6/0x3c0 [ 224.438239][ C2] ? __queue_work+0xd03/0x1160 [ 224.439852][ C2] report_bug+0x3c3/0x580 [ 224.441738][ C2] ? __queue_work+0xd03/0x1160 [ 224.443437][ C2] handle_bug+0x184/0x210 [ 224.444962][ C2] exc_invalid_op+0x17/0x50 [ 224.446586][ C2] asm_exc_invalid_op+0x1a/0x20 [ 224.448244][ C2] RIP: 0010:__queue_work+0xd03/0x1160 [ 224.450223][ C2] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 00 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 ef 78 38 00 90 0f 0b 90 e9 b4 f5 ff [ 224.458069][ C2] RSP: 0018:ffffc90000648be8 EFLAGS: 00010082 [ 224.460607][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 224.463102][ C2] RDX: ffff88801debc880 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 224.465561][ C2] RBP: ffff888029384970 R08: 0000000000000001 R09: 0000000000000000 [ 224.468708][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920000c918f [ 224.471343][ C2] R13: 0000000000000101 R14: ffffffff81832460 R15: ffff888055f17978 [ 224.473757][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 224.475644][ C2] ? __warn_printk+0x198/0x350 [ 224.477144][ C2] ? __warn_printk+0x1a5/0x350 [ 224.478927][ C2] ? __queue_work+0xd02/0x1160 [ 224.481075][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 224.483495][ C2] call_timer_fn+0x197/0x620 [ 224.485487][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 224.487359][ C2] ? __run_timers+0x559/0x960 [ 224.488981][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 224.491300][ C2] __run_timers+0x569/0x960 [ 224.493230][ C2] ? __pfx___run_timers+0x10/0x10 [ 224.495362][ C2] ? rcu_is_watching+0x12/0xc0 [ 224.497281][ C2] ? asm_sysvec_call_function_single+0x1a/0x20 [ 224.499710][ C2] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.501636][ C2] run_timer_base+0x114/0x190 [ 224.503311][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 224.505338][ C2] run_timer_softirq+0x1a/0x40 [ 224.507527][ C2] handle_softirqs+0x216/0x8e0 [ 224.509557][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 224.511846][ C2] __irq_exit_rcu+0x109/0x170 [ 224.513825][ C2] irq_exit_rcu+0x9/0x30 [ 224.515643][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 224.518006][ C2] [ 224.519264][ C2] [ 224.520631][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 224.523386][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 224.525850][ C2] Code: 4c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 52 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 224.532247][ C2] RSP: 0018:ffffc90000187df8 EFLAGS: 00000282 [ 224.534218][ C2] RAX: 00000000001738ed RBX: 0000000000000002 RCX: ffffffff8b93bc29 [ 224.536804][ C2] RDX: 0000000000000000 RSI: ffffffff8de50328 RDI: ffffffff8c162900 [ 224.539580][ C2] RBP: ffffed1003bd7910 R08: 0000000000000001 R09: ffffed100d4c6655 [ 224.542834][ C2] R10: ffff88806a6332ab R11: 0000000000000000 R12: 0000000000000002 [ 224.545724][ C2] R13: ffff88801debc880 R14: ffffffff90ab4c90 R15: 0000000000000000 [ 224.548844][ C2] ? ct_kernel_exit+0x139/0x190 [ 224.550851][ C2] default_idle+0x13/0x20 [ 224.552732][ C2] default_idle_call+0x6d/0xb0 [ 224.554784][ C2] do_idle+0x391/0x510 [ 224.556566][ C2] ? __pfx_do_idle+0x10/0x10 [ 224.558640][ C2] ? trace_sched_exit_tp+0x2f/0x120 [ 224.560894][ C2] cpu_startup_entry+0x4f/0x60 [ 224.562597][ C2] start_secondary+0x21d/0x2b0 [ 224.564212][ C2] ? __pfx_start_secondary+0x10/0x10 [ 224.565871][ C2] common_startup_64+0x13e/0x148 [ 224.567475][ C2] [ 224.569197][ C2] Kernel Offset: disabled [ 224.570650][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:48:50 Registers: info registers vcpu 0 CPU#0 RAX=00000000000000cf RBX=0000000000000006 RCX=0000000000000006 RDX=0000000000000006 RSI=ffff88802be4d370 RDI=ffff88802be4c880 RBP=ffffc900046af918 RSP=ffffc900046af880 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff90ab4c97 R11=0000000000000000 R12=ffff88802be4d370 R13=0000000000000040 R14=0000000000000000 R15=ffff88802be4c880 RIP=ffffffff8197991d RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7edf7909c0 CR3=0000000048515000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7c914ed0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7c915056 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7c915056 00007ffe7c91505c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9065e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9065e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9065e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9065e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9065e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9065e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000019d4b5 RBX=0000000000000001 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50328 RDI=ffffffff8c162900 RBP=ffffed1003bd7488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deba440 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc13420be0 CR3=0000000033957000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000009fc 0000001800000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f01ffffffffffff ffffe50807800336 00000dd500000013 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 16800413a0031180 0413900318080013 8803220800138003 0190100001800432 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8080808080808080 1000060102ba2000 0000000000000000 0000001b1c080180 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080002100002 1000060171ba0008 0006100020808080 8080a01000060170 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc00040014948408 0007800401c71000 08014bbc006e7574 2f74656e2f766564 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a00050005000000 0600010005010000 0040060008ea76a5 0140130008800700 ZMM25=e654ec32e654ec32 e654ec32e654ec32 e654ec32e654ec32 e654ec32e654ec32 e654ec32e654ec32 e654ec32e654ec32 e654ec32e654ec32 e654ec32e654ec32 ZMM26=f6c72202f6c72202 f6c72202f6c72202 f6c72202f6c72202 f6c72202f6c72202 f6c72202f6c72202 f6c72202f6c72202 f6c72202f6c72202 f6c72202f6c72202 ZMM27=5787a16b5787a16b 5787a16b5787a16b 5787a16b5787a16b 5787a16b5787a16b 5787a16b5787a16b 5787a16b5787a16b 5787a16b5787a16b 5787a16b5787a16b ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=580d0000580d0000 580d0000580d0000 580d0000580d0000 580d0000580d0000 580d0000580d0000 580d0000580d0000 580d0000580d0000 580d0000580d0000 info registers vcpu 2 CPU#2 RAX=0000000000000055 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643cf5 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90000648550 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000055 R14=ffffffff9b111060 R15=ffffffff85643c90 RIP=ffffffff85643d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9063fd4f98 CR3=0000000065810000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556aca8de4 000055556aca8b30 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556acaa2c4 000055556acaa2c0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556acaa3a5 000055556acaa2e0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef00000004307f6c 40651255000000b6 4008038003000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0803e00300100003 d00300100003c003 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001ff fffffffffffffeff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000402b0940800 0100000008060601 20a4000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001ffffffffff fffffeff0803e003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100003d0030010 0003c00300000000 0000000000000000 00000000ef000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff9b0d21b4 RBX=ffffffff9b0d21b0 RCX=ffffffff81981483 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff9b0d21b0 RBP=0000000000000006 RSP=ffffc900006f8a58 R8 =0000000000000000 R9 =fffff520000df144 R10=0000000000000006 R11=ffffffff9b0d21b0 R12=0000000000000002 R13=ffff8880295ff528 R14=dffffc0000000000 R15=1ffff920000df15a RIP=ffffffff8221dfe2 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c398c4b CR3=000000003343d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e2acedf600 000055e2acedf600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec4ba1140 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e65756575716b72 6f772f6c656e7265 6b2074612030203a 4449502032203a55 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32203a65756c6176 207327726f747069 7263736564206563 61667265746e6920 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656874206d6f7266 20746e6572656666 6964202c73726f74 7069726373656420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e696f70646e65 2033207361682030 20676e6974746573 746c612035352065 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6361667265746e69 2030206769666e6f 63203a312d333120 627375205d343237 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000