last executing test programs: 3.820312474s ago: executing program 0 (id=1129): clock_nanosleep(0x2, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 3.720325931s ago: executing program 0 (id=1132): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffeffff}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x22, &(0x7f0000006040)=@framed={{}, [@map_idx, @tail_call, @tail_call, @jmp, @cb_func, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, @generic, @jmp, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x63, 0x79, 0x20, 0x5ac, 0x23f, 0xe0d8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd6, 0x2}}]}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000003c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005e00)='./file0\x00', &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid={'resgid', 0x3d, r7}}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001680)="6bc95672b6c205a1743b65ab5eb69a3405845d19c044a33cc79fcbe22edbd30cffe7c9d8d07afaad537d5f82856e5096ea60388e304e3caae1075a602c5e09558fb3145b938b9039eabd6c4835d16b9b7940b635549140f2fcba71f87c26d0d0ba127b33b9766b5bf2132247de9d89dde86a4be8a6698673e7ad66d0a0d2b8fd565201b356e5ebd49b8445d36b5b1a5b6ac7e14c496e3ce8bfe76c8963e6ca67f278d96013ae6de40afa17ca6d7b47f202872d9b18acb2d984ba64a8320b013da1fa7b644b2ac79a60fffdb2bdc476642f5faace182fae562933c98ffc9a11f86438fcd30bfeaf53582b76221df86b1a6a79053d0003bc29dcd058475ac7837b1ce4e086eda65712cf753804844e31873801900adfed863305b49c794d9fdc8e209e64d5953e8ccc1e14f9664f2191aaa041ea1608d41704cfd04ed655674a5626465aa216e531499b6084e9f151dc2b518810b2b07234c5ff46c38dae16ce12c78dec64fd3bf3836094c03b7586bc3774e3a26d0c9550419aeeaf1934358382abbe07046eb223cceb52da65f7970a4462dc5ed978e6f4641dc0a1b1a179bb973a2d2933928d959ed9f986d64ae47fe73ae1d85a3cb31ec31b628d0ac89dad6450217f14c36ff5b4c27fd5bad5026edba21de941a491e90b0f47e224d0018bf5fdffbb609e1908beaeb785964c65e690974e803735751d2e01c60b6d7af18dbac2900fa8b3e43d4d3067084566495c98c7bb93a4c60b5ba50033280676ab0b80a22d43cdc7955faaccb78ee95220f15b8945b8240b381687bbde8ea8d274a527abdb4f57ffb4e1939c10a8eff0dbf819b1830ed5c0664d040571aab93dbb4647f4a8fac775b613a80064f22244484ad39725a7aca9a178bb232c76ee174993bc1f3dbb72e70643a4befa71358885cb6ee3e34d3853aa5d04d446b307c401ed9af77638f2640820df228a09d7820d1535d8f1627ec5d28092584af102fc1ab43af9b61492d0a70f10d73eaa6ba7527a95ce9c09257e4ae2dd612950758c8dffc42da3d140279065858f541b4e80ea5df6bdde4b04cfda01c7a51b40e87d16ccd80971af93e5a3592829199079e8c2e48f42f02c285465bdc108940f3a516887fd93421fdfcf8ea5bca4fde6e6caec103adf4cfb5bfc75eb88dd96468a83641856948619c422bb8c6fb33200aca03e8f0fa1b019505abcdebe63f45802b7745615fd920afc7b18791d793d752f076e437e4884b3dab4fbea185c9cdd3fc120d66a72fbfb3cea366d96cf1c93c610a8f333fd0953c446fe0b13750cd0c69cd2dcf2b43e86641e84f3f8655930a459a02c3e230728e86498cd1f25e517b7ed501fddc3c4565fbab856e12619866789b951281e9b23202821e9aaff8757dfa12bd52554d6a078d8a117ce2f3b8f470d97d161a18c7d49261cf483463006bcc83c829723e712dd926479dbc12bf18acdfdfe07bae2cbec470366758bb6235916952635b0c104ef9749198040dd4ee53cbf43291b7c84c470b999b5048622b6e856e20d399aad9a7504349a40632d92ef6af4b0a514be4f3940e98e35be9f7b9e2ef952a0b159cc3497090e266b3abe4c130d1ed09137d107d7bd7950a244ebdb12eee5ac8c517a6f13a6b6d0ea85305fb37c60b02a20077501bd29745ec4653ab6d09e0e4d6153792891a7231dfcc1a295eb8e76c31447cb6b89f96a0f126d5f9fe720e61ece9e9f7741ce8418085b003723b7026a70ff0032747a0d9d089eb01c757066da0e0b276bc6a8a470bcdf646d99b809a20ff42235a6eb15e3425349fa32c9d7d97ee15147fb160d4f0788cadd715a888665d7b012f6d226b22eeda58237f7becf749c9457143eb33622cbab902bf5d1bae782397a267aa99053db723c8471cdedbdac54d63f280a1fd5a3a1454ca0ec859f7c7476ccd9b5814baaa9bc43fe2255a8a3f2936912a7c637873d82bd3b42ccd9ae32f25812a336a58c26d311a161f071065fad93617737880fd8eb4dce31a7e74df05b9c844c16750995780a10e7caef43c20170715b750a65a3cac6724f289dbb0f57e6f49c7c20b336f9aae92080c0905f45880337df3e1adca31e30a599f8839989909e6b6257c97cd7a296b3fda65b356ec84397a0631847a34f737aba9e5409337e3bb4753758b2415f4ef68f072d79162e0b4545879cf3753855d000c1e37a1f6721fc2407f4d8e9ba341edee5209007f41debac19b7a6f6ab5593e1f09cbe7d0114c60a15c3f680b680cb7232c024514956b639d86073449d25fd4a36e3c94959855810dc9ddf23dc7087ff6332e0ee528d04a70b19a7a7c4fde0ed41efa75908f4c9ca1f4e1d63b76efd47bc71f74b7299eff11be24b6afd2d1ee5b4e1c0f86297e89aee7165bbf98668de415c5224f6dde779a965748929b025a5192884ac8fa530fbf0a8949c1d6623a8f5d15319660c60d63a6dc643177b7b5751c7671cbed9a57bcb192dcb88cabcf613689740406088f193b67df83853c0d3041c5cf3983da25c059ecf18415ec1db0d187c9bdaa259b036d9ee9dcfd5120ad6d2990210981b58b3e73bdb961e749f9e615bbbeeec390480072cfca1bc9e8fdee652058101baf34bc9d41c67112fa2ed18088426a68482ea7a309039bf22db6655f6ca3d5e39f98c215aa50d75fe7c2c882bc46066d56098a67a517e65f6edd71445d7c0783f3394b09bdf9f82cd5489d547bb97bb2beb95cbde48588928e5caf6ec1ec61c2942cd8e1ed0dbca1adb9209b7ff206cb7be3d8fb6b25be50c085ab6d31efdab5e33245222b7874b05cd490bbcedbe376c67832d2b51d85f33fd5627c4ac2b094306626140d8e5786bec5eb174fb7e36112e8aa4057a99b972a44304c334c58d77fefb282f8709201db017c71ecc64f4b2acc1a968958a91875e961d6f6390761e7a646dd29886ef55d29b3517220647785a728f8b590b3bb86c2338eaeb595a4e91cefcdfcf9254ba45eb13551b4918a11d0c936c2390e1cbcef6f64b86c0da1bbcdb9cbb8fde2f4e2a08df6c25d682a4c1957f9793fade76c05fa7a892e65d8bdc55718f34869d43dc0d681b39f4ac2559ea3ba746353364bdf1485348cf5ec640ae8c4c95c924fb5ba5ee4735757d5602a340d2bcf5d81550bf5b531185797c935b1cb39323e2e56f3a3ba425ab0253694ccbfae6b5683846bcf064c4e287018cb5a091e3bfd6a7ef6e4e7337451bfb5ee8aecb3e05035e20ce1fa9d79367d0ffa0f05ffe010297b4019628b911ac0721646fb258372ec636d99b73ae7295efa355564685fcae3a7c30ea36d670f04d59e72bb1ea140147a79a0252d6fbacc34474a05a1324c832ccd4ba792b4ce24be1484bf517225327bf624707ed59eb75a7bbdbabae8251bcd9e6739225291a8b5295c93a8a64f13a24fda2e27cbdf2da57a9d05b2eb26e7e1521ba63967e20610ce4816e30f1252c22c3606d9d3aae9f7023be580f5765d551d5f9cd79ef54e0b1bade1c8554eb0061b09cb98494af76e223fde6e032f45541d9ea20b4775ad91539d66d31f81acfbc837f12659deb35e71ae7ab996882bcc21c04acfc800d73975794e9ea6ce8bb71e55a6d39536f5ec8ec077fa6091fdef129851eca434a260d8e57a3bae40d0bf26ad4b426656fe02b7386263aa33dfb0f41958832e5dffc72d080a71ee530ac91a3f49662dfb3f6b0ba280396637feea6580ffed10c0cdb4de8791bf4cc966d75d097ee3eb8c4e1460a77d3ff3740043e8781146ce10c9736502471364009b053f756d6229c4794f0bf6862c07abac4d65a14c4e9c4364c4de7342a67696adba14e0ca6bdf1cdb12f09c4510185ac6b1836197cb6b6dccbac0390e2e8f02334cc4821808d540a10bc4e766efbb5a31509411dc1900739710c62bb91e1bfa9b4b5e9817d061103372e87c90af4ce3cf6dd249fb90611c2452023c22de0cccc3fad0b704d7c5a474d2123a32ab20e674361602c90e2b7a9710209bfc4747f1e709d4c7d97a344c0dd812a41eac69cc97d452d0ffa6028b8d92cf76d6cdba2dc83b8ffa65a6abae76bb213616367f48d1f1ae0162bdb7eda11df5f86670999c19fbcc502e69139dc0b7b3e47781cf7644a6e0bf851ffebbfe546b6bccf0a2dfd76ddd9fa2f8701d1afec8c96aa6ee57a86e03d2d2c4712eaa07c1b715276c2c2625ed8acebbf95877ac0ee42484e2f9b36af5bc737f3a03caff97bfedc7455ac6bcd603d06d5a12b838788af3e653aadfd1a3fda47a9a8e05ca6868801d3ecf0c812ab24997f82e1911addbde943503dbed6704c18fb2673101cb0f5fafc19fb5eba3e913df3b5b13368df7cd18546a21e15a7d8ea3cd03bf908003f297f9e0fc9f4fd1ab124922d8c95ffefa0f668d46049876d310ffe1dd616579872e3e06c8601c54074984c5ea0f414a207d55d5e9fa0bcaca2da782d7ec347fc4bcf4fb0fe05754d507f4bdda3fee6de2c702878b3c942e3cd2adc5fea9ad2e1015c2a0257b543c01eb66fcbea59ccddf67348290db872622c1567fe437f6d34b5909e910b2ad4d4900cfa099a5ba51e07b6f6b068bb6ed77ef8cc70d5623a093715e59c1107474a06f0b78183b9704efd13b459ebf24e74aae8e13962d4abf9e67f6fea01f47116fce4f03dd01c0ee9497c8eb1c622276f0d5db5cf2f784f072452ad2bdf0ce2160909c9d8a319e002f67fa8841394d3ba47f4d0815d37f8c165c2a87a6e663627663e47e1f8477f6f3bde22b4180b11bfaab85e0339ee5090d15f9f1d8a49cb05744212364c5ddf628c411fd74aaaa07e46865b917ec3b64283d4a29d0caa100a28fd22c64fa16672af5a3692115f3205300729bcdfadbdaa53ac8e9915ff47d98711eab9e114dbbda79e26a74884c53e21476e49f8e2c739b8984fcce20d5ecccde6fcd2b157e1d09ba91dbdaceb4000af0ee60ce8fae10c28a177966d2dbd5469b7d5d8ec13a9b2262e79300b1dff994af1af9dc73a7540592b112a36c5ed7efcacb99026ef6a5668ccfaf5cb3e229e5d0fce91b9ec8d61600b3ef0109fcf132fa2e530901ebb975654eee4db3bd41a0aa94678d11e18bc764b2c145273d2d990e9205308e5e737279f6fa595ad417ed00e1fa4877ecf804228ceeac7c32fab3e2d9aef1e16ab39d4219d5ef3fa95e4009bb52252fd52d95ea53c7e91883cde72fc378efa5d4088c7c976c0b3b382fa46f9391bcf4fe18ff14d6900860e79e32ac235b552df9d5da1bb81efe29d6d78e8862fc1d038ac4ea0880baca80ec439d66da50f3d0c85ce0f16f7ef6c9fb901a745137a95f9532d9feb591cc32139917ffbec8a0aced80e7c51192a60af118a7f4516bf72bef4ab0f5031d0e54ede1e4fbabd9af694176cb4a1551fe3a827199363aafd10932420e6065d061fa012b2aa571869ec5f0b951757bca6ac7e764d0bfc13ba92ca27f2ac3cf1ffeb2385da0ac22bca31426c16d02aa41707a1e87dc271228327b4dfceb6968a719906c33e62c14bf0c0966818fcd1d9940def323d08f4fdca676d1ed08c814c7c6ad6119fedca73583c33ff4959072a5013644383d3437d95c6f21fa54a6f44e427eadae8398dda31624ebf1c6e1301820b98ce239b88c66fa4a2706ebd40d90b39aea2e1bbfabc7c1eb09b3890c05f5657498d0bc032ff24d3f44e09a2b1b403997da9e2fec90b621cfc6b0387d67d6b7bf5276a99a9b8cb37c7792bbb0bea2e2aa788989c6afff8d44e7b9c4a36f87a55aa8cff66be03b57cbdcecf04046d372c4174f4008f365c54f263c0ca04c40af160a0c2c191630063ce6b33368fed29d469d3df04e1d4ffcd3c7d4e21266cfc1debbcd0ccba5ff204a783c641e255dbddf41fe5297b024872920b479ab08c56b0bca4204d305205dc4ef8c8243bc2e933dc0262e0ee248de8230575257a6627b73ff01b483442447754f07595851b7cc4e63ed36df396867aad2a4645ba15d9926868aaf7593162b032cf02443cfec9453b430c513678e48650dc448f5b9ecc06cf92a37c711d0f79718afadecd3ef0de93280007f8c1f981137c16d2197268b61b78f0db37e5dab2fd8c5c50f1d7047af4d8522cce5e0aaad4251ae73cfacdcc9820701ecb2bcf30809d1c2455e2a1881ae4636c0ccd40c2028cdde6fbf3dad7e6431c3a140acc55a81f03ab2420872b2bf220bead1b6dcf3cdde8844fba4ed8e5f452251ba047bec1e88c9e52f7514bfb0a0b8a895556871b14376797023883040eb249d47813db97b2f14df8b7abf6c36e4e7865993f64e7e30f1fe0e26e68aa290e5ef3a8b7580f15b1b1167a514a3d1afbdd73fe7487e46ac1a03a9c221dac6300458f76be3b597be1dccf2bafdf55a6ca6c4249f2f8184accd31dd10bb878784c014f00df51a42068c5dbd709a2176e806defc95a4279bae301081d52552117fb43858d87eca1b8c78616fd99529104b27db6694828721afa705273e29c481874dbf33e02ad1a42e35bc048347b6e79db6bda474980ccb92ddc84ab3aea1525a4956b30a035110b2f8f9bff8c5780c842e6457726c8c1aba6da288f9b7c53958bc976785235486898f36e7ee5f5607d90bc241375963a5e32c297cc4cfcd8fa70ca8d3fd11355eb183cd5cf2e7af8f90e427f30cd053f577cf61202a80c978630e0dc66fd0ed01a199f0d0ab6d83b8a2eef32f375f4d55d36d81d13983c070de6b63d66021c0baaaca4f61579173d918c7c47d8e95146a116926826dc6b8476f4fbbe482640f0e16e07950705e8bada583a26dce802571a45e22c038f489332b7b4b03441ae33ef50681d85e13894f484eeda0c073516e7fd829bf08f02bb3cfb0baf18197af8745f376f1bb91de0556aaa53d7c452895ed13efa8d4e030d11f64c88eac1ba0ac697fa1a758acd12162d9c5665b2b4b227de480103b6a8d070a37acb202a24541efc98b12d099055a5c25a288023265b634fd5ee3b4a7d16d19c5ce8f444f533568387a5385567e03b677c98ce02d49f33d2142fafa614bd1433234d4b8675244202a0169a2ed4ffb844defb4a3539ebb89f695a5be39bcc8eaf4a907ab237dc62fc89cf6f5e93461298700b93ed1e30421243a62f997e25f0db61f55bb4800338ef0e49141c9fdad3ef5a95feac0d2400014fe9046fb012c9384be2de35f81808cb5c5d7d4ecd638f102ab325bc2518f48f8a0540a38e9b94391465984761b0f7c4cdae4bcfe5a886a83e55a11031c4c4487d097bd432952c56b9aa32296973f124ad15032f65718d7fe616e32c3a75edc8a0186ccaabe40e59b32add51536c79adf5459a5647ac82ee5ae313499c3f4f8e4f0c93ca51a8c980b5992b2d3d693ebe101d22b6b8f7f13c77a3317411ae61320733df226a8c85d0d3ad390314dfcec26d14bc0727dcfffb799a74144721cb1c2b2fb216816a8a81ba564d7f7ea184ab0de73f5144185d4bd35e0510ec950e2593551c6c368eb7dd25b0dda74309497fe712d4a9917834325a91c260f3d8802e0110f221b4250ab3cbc0920c7c283ea00e599fdcab3a40b96b3f57d20b564fe1e96ff5ba55db49454e91b641c7d0c498869f7f57e020281181ec4fe98e03c7892df38ab6545c9c8167867be2011233cbde840f638e0cee667d9693358083b8d350b0a54cc3982842301a58916029c556e526f9a55fa068fd33bf3212673b6afc49e5d59c1184a78d9e72fc8e41109e87fe6bc5b1aaa61373d38c5d7db79b3b7cb89d6c25c4caed3ec56164ec7ed8465c4d7cbdad3580ba2226385fedb63cbd17c470ca64d7988079c699c49969651d63cd5839426b272ce5aa3b7a74dae1f1599a4931bd6715b5b933c8a2fb44431896cbccaa834d72f53475f4b3b14777db5eae97b9e967a6ac5780a617378535da21459b3fc6206c69e8ae15f6ccf834c7a7fa6a3d3ba939e98b49e5f18faf6d53d8b059ce89016873ba50e17fd4720ae2083fb539fd7dd0fb8906dca0cfedc6f2d5d242102990274cf61665328806021483b5e2f4bf7558453a485bcb8c4e894f1531cefe72af52a953f555d77daa54b94f5b26c98741f3da7d62cb0693c35fff38aa94b4bb45972ce6e23f832e5305581b90793ff847d6fdcc1e06b5c6f1a8bfe892bccdd197524ad455a88e9f616ca0e774ba47699144da6d4c048ab35a2feab25d5fc612105986db5ddae261d8b8f46c7061238aeb35a8e27ed569b7de199f0177bc00eab559512c5d643cb4aaa57620caabef1510d243c9e1aef8c790153a49726a9ee0c667a125f1f4ba5f5850520550f7b2c030abee233ffc95746e7ce0d58e3abc81540784bde94ff6de24be92e72ecdc50517b845996a2d89c2debb89ca1b135fcb76b103551bc83d94a76df5f3e6c463c44e9bda17b7a971afb144a322dd55bf9ff9b611b079a02ed6e29d6a38842688544ef997f7e4ab969e4d6fed3fefda7eaaa769045c6ab1b594968ae92d2b344b0918e219936c5d22854186d136a09fddce04353d7a62b13c354aaa7c10993809906ac0947aefad39eec826c2860e6e5fa60afa410d2c7e17f2eec42b339832fcd896b8e7244d596824717740f2d73613cd31fea87c6fdc5220521995589fe3e2c4b4a398168ec250bb8cf101c39d87582496caf56901419cae044e2dfeb93dce757847e168bfb68d24c476b4205e8a3a1ee85d91985fb971705660d57a1ebff8249609c1b7858c4b3a213d555db3d85112770decbb8d1dded03aba193761d4fdc772220883fc33ffc2ca828e3b8f258b8431b884892dae766ae479eb9d8d1a9068d9e2415b966a2fdd4436751b9253af89bcc1b3e7d9638008a930772df528d8fb7aa3f30a390a81a35b8960bb6f3b5edc3064d92ff99fe62987550a8619945e53264a6f86d52e3e8abf99bfadde97aab9e213148acfc62ae44381761eacd7f6a09ae477a4d93312db51eefcd6c84dee4170c39eca64d188bb29ca92d06c172e5aa42fcbc78225a244c8120128146cb57a16fe77edbe1c61b2282cd8767ee4f1ea697038426e8bf4f6deee018a5d804fdfcfff223e42a21766ddb9e224818115265390400f6dc8714f89f6624c371eaaad7de7361f1cc140f5e0975e1f08a2ee61e5bad6cd6a85e56fe674038ca200b4c32e1448fa78b79258121c88df3242e6bc2f1fdcc485c223e4e6c54e7ad8499be4705e9f2aaa8d48549cd61da3e85758c742025a1e1462265fc432fa924154f34eac7ef80ed3769f2911517c4780d300ad780b7b90d96b4f986d2a78e7dcd834580937fbe9270404202829d243d466ebf9b2790bf8366665785331c165f92a819e0a9f41e1568fc8a9663a1b280b1356062389570a288756c941fb01327049e53390e2a92d79bf5becee45229a601dfc1f3aab79669af80a2ad8ebb3e6e4de8bfbe4aa7e64c1867ee3ba092299bd5959e597b6236f98aac689dd1dabba5a954f4625fc0cafebc0e8c4681f4e01301ae35e5116fdc4e16d7dcce7e25bfba661c7842cda24d80f0633e9bd1373bdc971762d0a107c07b005db57cec63de66a6d61cf1ac0b73b7ef6337945bc3f6d3ad06d31ed311525b7f6c86a92f134d17c3a6ad0d42ebde73cf3336019de6a5c663e1b6571b502f441d33869ab9f8c0c6c0c573165fc94a93e4fd5331159c805016c410d3a4b92925357e248569d44649683f0a8ba6560e55cb76f0ea8ca5eb68ed126fc41fdaa7aecd7322432c6f68a6469f0866afdb950aa0eb0de1e4b821bc7ce9c0b7d00687f5bb74a1a86adf201320bd6df334e36482dc5dc4eac4f0960beda7e26e05c4e5798d361cfd2b7e0eae6ab9bc9a9368188412065f0536fed17d288eff476f0c38fd48e04b1d66a47626ee594fa5dc803bce0431fa5f9bf58d9e0984b30f5641d936404fc11d8bf9dd03e1850452c2d4fbea9c76bb810b1ebbe687f93b45f5ad02504ef46bc6fa708778ce47eeb19235032e6f7eba802f0103d736a9b4f8aaafc276d216219d51c6a0c5c1b024a79b9af7aacd42b4b86337fbf4f53c8875142c11a6b6134bbf85fd4a14f9c50b16bda763d1f9cac7e1f74412dbcef4a32aa1584754883163340a25d9f0b8220d27b3a0c7df08c014375af0d765e64176891e68d92bbf9a61d0996335ef3fb27a64278e98f8360d8724358f1c6671e0489583f476caf923e2f7f6db4028b407989c6213ea4e6607dc709eddfebfe3cb1bf530041a90f97eaa7eb55a25e61b7bb80d61f1e3d4f307bf2f6f905a7806a05cfa5d62f9eb5eb6df890ada63db76b932fdb73c9de19e2e7b71bfa585a2a97fee8fc509de869705148d5bb6c4554b7c6b8b16b09bce6edb3afdcbea939916f43cf0116e732a063c4d28a5debb79e3befc82aaf830c2ea10b202c48da347ed2490c5bf6c16080872bfa12c31ae92cb022e248087d3f109edb797738cc0e71bcce3ee281002d33e7073e6f5445bd6726bf1f6168fdc0687be42f12abfec4dd26e891887e2e4e5129f5ade302bc7a82b5967d65258fcce2912cb777d19c34ca350962f2d40a3ce765a92e1088bc884a58c6beefb925a4231ea0e6fadd2443d4b13dba87719b2b7c1884af8e00784355efc21cbc0c50ebb7bf7509f36d706a2dfec239803e9f7af4994a01a0e9fa38b3574a391edc1f5c6491391a47990d65183692738c29cb61b27bb1b96efce53e05c661a71e7dd8de09cf60a4b8c3d33ece43ab3ca975fbde4bea9e8a192320171e2669a09805d3c875c009be92e337cb4fea6ce52c4743e7102ab3e3dfca19184dcf18753aaab56b28ec3f3bacfd828269c065823c182e812f575b4b2180af58f3f0a8e76233b4e6251f8f092f8092b82803764ac95e8f6ae1cb95b94c7db75be0df71614b37f9da227c757be063c10bce4b3ce7bf2640fb2e164c25174c72ebd11be6743c68112ad993e4c9a351b57877958b71d3732e6d273952e189577d2fc5f483b9f493ef8cb77d5cfa5f9c76d6a86c5754024a9f0ce55edd7ea026cb646554a504b269ce23dbcc0c8d5991b06256b7e0a2786548ceefa2c1b887fc9c98a691c05995cbceb1c12f43bba74de7e47ab785b4a85f26e875f3774bfa5b2134f58ac4815bc7b24a0ec6dd95841fcba18224f50f77c7a388b3e3b8996b3921ef37e31a4759f5255ccaf7e1cede372444b04cb815c5d7921edb793515f61842d6392f7916ee46d5146ee3063709cab941c836c0a9fe4a65544aeaf11a661a3831f418cba0fa4d6abd0cedebc10226b1362e29eccc580c9879624d77873efb4deebbf12d84f03d6651990a90c45de45ae4a8a05ac9f53c964411e0d1541de80f1d9e37b4ecd9d13397e90b69648c881b5b56ad860c3723e240b6ad2a3ffc1b17f98b3ee9bc7a9117829d111655503c5b969a6eb697d9bca6b58884fb1d161519fbbb1d76cf5b9d096ced9088bb96ac407049e34b47ca31f64bca46dfd1bb1f913cd33dd342c1f84bdea8ebfc6ab86bc54e33b8c344c0fb42a7e458c87d7f7e577ef8cc5d13eb9724071aecfd0033789f3a26ca57a6712457d7d77bb14fcbc4762a0b11f3d6939eb59bee3b1eeed8ca571119e46b228be92520ff0d6d205b2ae1d86732d758aed112db1454a884fe9ee6881b60fdf7", 0x2000, &(0x7f0000005fc0)={&(0x7f0000001500)={0x50, 0xffffffffffffffda, 0x2, {0x7, 0x28, 0x1, 0x840000, 0x9, 0x200, 0x8, 0x4}}, &(0x7f00000002c0)={0x18, 0xfffffffffffffffe, 0x9, {0x7ff}}, &(0x7f0000000400)={0x18, 0x2f, 0x8, {0x8}}, &(0x7f0000001580)={0x18, 0x0, 0xffffffffffff0c6e, {0x30}}, &(0x7f00000015c0)={0x18, 0x0, 0x5, {0x10000}}, &(0x7f0000003700)={0x28, 0x0, 0xffffffff, {{0x4, 0x2, 0x2}}}, &(0x7f0000003740)={0x60, 0x0, 0x2, {{0x9, 0x2, 0x5, 0x6, 0x2, 0xf2f0, 0x400, 0x4}}}, &(0x7f00000037c0)={0x18, 0x0, 0x0, {0x7}}, &(0x7f0000003800)={0x16, 0xfffffffffffffffe, 0x7, {'wlan1\x00'}}, &(0x7f0000003840)={0x20, 0xffffffffffffffda, 0x2}, &(0x7f0000003880)={0x78, 0x0, 0x1, {0x1, 0x956, 0x0, {0x6, 0x2, 0x80000000, 0x6, 0x10001, 0x9, 0x4, 0xfffffffe, 0x1, 0x4000, 0xaa, 0x0, 0x0, 0x1}}}, &(0x7f0000003a80)={0x90, 0x0, 0x8, {0x0, 0x2, 0x8, 0x81, 0x5a93, 0x8, {0x2, 0x2, 0x9, 0x80000001, 0x6, 0x6, 0x2, 0x5, 0xb5, 0x4000, 0x2, 0x0, r3, 0x5, 0x10000}}}, &(0x7f0000003b40)={0xe0, 0x0, 0x7fff, [{0x4, 0xa19, 0x11, 0x1, '/dev/vhost-vsock\x00'}, {0x3, 0x6, 0x11, 0x0, '/dev/vhost-vsock\x00'}, {0x2, 0x80, 0x1, 0x2, '@'}, {0x6, 0xb0, 0x4, 0x1, '-}.$'}, {0x0, 0x6, 0x11, 0xfffc0000, '/dev/vhost-vsock\x00'}]}, &(0x7f0000005c80)={0x148, 0x0, 0xffffffffffffff4c, [{{0x6, 0x0, 0x1, 0xffffffffffff0001, 0x2, 0x5, {0x2, 0x7fff, 0x7, 0xdc, 0x80000000, 0x100, 0x3, 0x9, 0x5, 0xc000, 0xfffffe01, 0xee00, r4, 0x8, 0x8001}}, {0x3, 0xffff, 0x6, 0x8, 'wlan1\x00'}}, {{0x5, 0x2, 0x3ff, 0x100000001, 0xe3d, 0x5, {0x5, 0xa2b6, 0x7fffffff, 0xffffffffffffffff, 0x72, 0x4, 0x7, 0x1ff, 0x8, 0x8000, 0x100000, 0x0, 0xee00, 0x2, 0x6}}, {0x3, 0xffffffffffffffff, 0x0, 0xa78}}]}, &(0x7f0000005ec0)={0xa0, 0xfffffffffffffff5, 0x3f, {{0x0, 0x3, 0x7fff, 0x9, 0x1129, 0x40, {0x2, 0x5, 0x33c6, 0x10001, 0x5, 0x4, 0x9, 0xffffffff, 0x0, 0x4000, 0xffff, r5, r7, 0xffffffa0, 0xbb}}, {0x0, 0x9}}}, &(0x7f0000005f80)={0x20, 0x0, 0x7fffffffffffffff, {0x0, 0x0, 0x4c, 0xb851}}}) 3.627861903s ago: executing program 2 (id=1133): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="2a947354495ee7d43ad76e0880fbf78e993afbfe90a44de4a12b00484f9f2646cfa901000000b654933bef6ff86be62063eb6a5fd31740d1e8f03b4f94a035855eb2ba64592b85d3a386f199f74474d80039b40f676e4cc9643ce9e8bdb12910ad632ba38746b2a3d52863a530c334df95850ccf3353910df7bfc340c2c5cd0bbe149921557eef18dc7a6820b3e68ef1385ebe3453e0f054f40fdb4759f95e30390fbdd488d081beacbf4d90a221de4b2b5942b738866c999dbf7b48b1970b", 0xbf}, {&(0x7f0000000200)="b350d8a459dc6b65dfaa287643d5b1027adfe9647a77c6f4f115dc6063f7e73a82768ebea104788e997d0d02a5440e124bdf947c3bdf64940eeaacdf8f7fbabfe6303126baeb8979bfdb39fe549c3b2c5d23dbd3944c7992e1c77a13dc4d56603512391ef40b3ebfa64d4008ef85c5fc0efa85f023", 0x75}, {&(0x7f00000002c0)="3cd723b82355ed9f78cda5c2bf7ee6b9e733a0427ae2272c0729a2e9e28b2beae4b862c9ac320d4151dcd3cae35dd3985b6e2d0687f94a8757", 0x39}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)="4ef9147973bd0daa097ce373d9ebdc8ca4d7c269fd822c94cb42e885278e40ea11080ed01fca0b86d564d9cc7082dd4ad30734f9c0bb43d6394edc1cc3d6e50febd1ed302ad1f3c05203fdbe6608cbe4614bde9f88e811633ee37d751eaf0a9770c974b149666896f645dee19eac07495a87a39e90138b5a23dc5c6fb8543c4b4a56b104d3a6", 0x86}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x420) 2.748194701s ago: executing program 2 (id=1141): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="940000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000000c00020000000000000000000c00020006000000040000001c0003800c00010000000000000000000c00010000000000000000001c0004800c00011502000000080000000c00010099f6fffff9a5000008000500", @ANYRES32=r4], 0x94}}, 0x0) 2.746977674s ago: executing program 2 (id=1143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), 0xffffffffffffffff) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") r3 = dup(r2) socket$inet_udp(0x2, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x404}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="34010000", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf2501000000080004000200000074000380060007004e21000014000600fe80000000000000000000000000002208000300040000fc1200000000000000000000000000000800010000000000060007004e22000014000200636169663000000000000000000000001400060000000000000000000000ffff640101012c000280080004000180000008000500f8ffffff08000700010400000800050009000000080009000500000008000600060000000800050062000000080005000600000008000400030000003800018014000300fc02000000000000000000000000000008000500020080000800050003000000080005000100000008000800090000002000028014000100fc010000000000000000000000000001080008000700000000000000006a2f73ce717198cbe5f1ede2dafaedf2103db1b22c06f7d966e188189c22a3d7a360f4d5db9ad7c59010955ee99acdd9d61846676174f68f14241a843fed8a226d862f0801b2ee7d731fa76f4514f4298666d5864df82557342933c9273781a6002b730de615e5dfec0da93b8ddc71c567ee361523e0effc903bbdcbe3119a656b4e4337944994fd"], 0x134}, 0x1, 0x0, 0x0, 0x44}, 0x40010) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_exit\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r7) syz_emit_ethernet(0x130, &(0x7f0000000080)=ANY=[@ANYBLOB="716255c47b46aaaaaaaaaabb86dd6000000000fa00000000005dca23e2000000000000000000ff0200"/53], 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000600)={0x0, 0x3000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.533565158s ago: executing program 1 (id=1147): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x421, 0x0, &(0x7f0000000140)="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"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x208e29f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 2.396406663s ago: executing program 1 (id=1149): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe3d}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x630}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, &(0x7f0000000180)=""/129, 0x3c, 0x81, 0x1}, 0x20) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8}]}}}]}]}], {0x14}}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="0100", @ANYRES32=r7, @ANYBLOB="140004006e73"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030f0000000000000000340000000800030004000000e16e6b414a7bce65498a46c34b46a3f8075fd39e8ccca636f3ba08d0f20f9d5760c1495c9c0fbf8649dad88aef1e3aa901af62fcf8fde410ed4171798077c6c927e04902073f8bcc8510cdfeade29d59e9ef48451a1a1bd3fd89298bced7ed92ff57fdefb60363598ffbeab95d"], 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf254a0000000800030000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r11, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000a40)={0x24c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0xb0, 0x9, 0x5}, {0x2, 0x70, 0xd8, 0xa75}, {0x6, 0x80, 0x40, 0x8}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x20, 0x3f, 0x6}, {0x20, 0x7, 0x68, 0xa4b2}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x3f, 0x0, 0xfffffff7}, {0x2, 0x3f, 0x81, 0x3a}, {0x1, 0x40, 0x9, 0xb307}, {0x81, 0xf8, 0x1, 0x3}, {0x1ff, 0x4, 0xb4}, {0x5, 0x4, 0x2, 0x9}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20004005}, 0x4000) 2.254869088s ago: executing program 1 (id=1150): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="2a947354495ee7d43ad76e0880fbf78e993afbfe90a44de4a12b00484f9f2646cfa901000000b654933bef6ff86be62063eb6a5fd31740d1e8f03b4f94a035855eb2ba64592b85d3a386f199f74474d80039b40f676e4cc9643ce9e8bdb12910ad632ba38746b2a3d52863a530c334df95850ccf3353910df7bfc340c2c5cd0bbe149921557eef18dc7a6820b3e68ef1385ebe3453e0f054f40fdb4759f95e30390fbdd488d081beacbf4d90a221de4b2b5942b738866c999dbf7b48b1970b", 0xbf}, {&(0x7f0000000200)="b350d8a459dc6b65dfaa287643d5b1027adfe9647a77c6f4f115dc6063f7e73a82768ebea104788e997d0d02a5440e124bdf947c3bdf64940eeaacdf8f7fbabfe6303126baeb8979bfdb39fe549c3b2c5d23dbd3944c7992e1c77a13dc4d56603512391ef40b3ebfa64d4008ef85c5fc0efa85f023", 0x75}, {&(0x7f00000002c0)="3cd723b82355ed9f78cda5c2bf7ee6b9e733a0427ae2272c0729a2e9e28b2beae4b862c9ac320d4151dcd3cae35dd3985b6e2d0687f94a8757", 0x39}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)="4ef9147973bd0daa097ce373d9ebdc8ca4d7c269fd822c94cb42e885278e40ea11080ed01fca0b86d564d9cc7082dd4ad30734f9c0bb43d6394edc1cc3d6e50febd1ed302ad1f3c05203fdbe6608cbe4614bde9f88e811633ee37d751eaf0a9770c974b149666896f645dee19eac07495a87a39e90138b5a23dc5c6fb8543c4b4a56b104d3a6", 0x86}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x420) 1.782097431s ago: executing program 2 (id=1155): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0x184}}, 0xc840) r4 = eventfd2(0x0, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) dup2(r4, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000240)=""/53, 0x0, 0x5000}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0xffffe000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.50431968s ago: executing program 3 (id=1156): socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) 1.442330276s ago: executing program 3 (id=1157): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x421, 0x0, &(0x7f0000000140)="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"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0x208e29f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 1.387768282s ago: executing program 1 (id=1158): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x235, &(0x7f0000000080), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ppoll(&(0x7f0000000000)=[{}, {}, {}], 0x60, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) 1.384328769s ago: executing program 3 (id=1159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000440)) fanotify_init(0x200, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd) r2 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2276, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x7}}}, 0x14) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02000012000e00050014030a00002000000000d0ca0200"], 0x17) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x40}}, 0x0) syz_emit_vhci(0x0, 0xac) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000300)={0x3ff}, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0xffdd) 1.302145464s ago: executing program 1 (id=1160): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x1ab, &(0x7f00000003c0)="$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") open(&(0x7f0000002000)='./bus\x00', 0x14f942, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f00000005c0)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x264e33, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0), 0xfea7) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioprio_get$pid(0x6, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRESOCT=r0], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0a00fe00000000bda106000000000026010000f8ffffffb702000008800000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) 1.136414299s ago: executing program 0 (id=1161): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x8a, &(0x7f0000000580)={@multicast, @remote, @void, {@mpls_uc={0x8847, {[{0x1f, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0xd00, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6}], @ipv4=@icmp={{0x18, 0x4, 0x0, 0x27, 0x68, 0x66, 0x0, 0xfe, 0x1, 0x0, @empty, @private=0xa010102, {[@timestamp={0x44, 0x28, 0xd6, 0x0, 0x5, [0x3, 0x80000001, 0x3, 0x1, 0x9, 0x0, 0x81, 0x7, 0x9]}, @cipso={0x86, 0x1b, 0x0, [{0x6, 0x10, "a81a1d7c3e1a6f65a202eb9bdc3e"}, {0x1, 0x5, "49abc5"}]}, @rr={0x7, 0x3, 0xfd}, @timestamp={0x44, 0x4, 0x0, 0x0, 0xc}, @end]}}, @address_request}}}}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000140), 0x8) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x50, 0x29, 0xb, {0x0, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x1f}, @hao={0xc9, 0x10, @dev}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x50}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendmmsg$inet(r4, &(0x7f0000000500), 0x0, 0x4004441) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x7, 0x4, 0x6, @empty, @private1, 0x17, 0x7800, 0x9, 0x101}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x4) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '-[[}%'}, {0x20, ' \x01\x00'}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}], 0xa, "6e1c4f808c0428777c3f4765a34d224e3179341da507d7e6281a6a8482f8bf25ee0ab856f7d3c7287294606c27fb9ad31e2c05cd"}, 0x4f) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x8, 0x3}, 0x48) write(r2, &(0x7f0000000340)="07000000010000", 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="240000000000000029000000fc2300"/28, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) 1.100566861s ago: executing program 0 (id=1162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00'}) 984.052346ms ago: executing program 0 (id=1163): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), 0xffffffffffffffff) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_read_part_table(0x5c0, &(0x7f0000000000)="$eJzs27+KJFUUB+BfVXdXdYNLa2KoDZsYuYHxsKOyOywYLIKZoKmJiGAgKFONookamRj4AptMIBgZD6IvIMIwBoJmIgZq4Fyp/jc1YySNqPB9QXHuufeccxuqwwr/b2U+SkbXkuO6rrbx/I9k+dLTSbtYrSebfH/ghQd37t5b3K+aXa5KfuqSetOnfzTJY7vGWWyiL8b58MHR+x99/FaTLt35cZJPky4p7fZqq9p80vzl0r9V2+b8u564tq52j16XhzNdRbeyectGq3TaPmre23v+ycHp8nYflPXQWXM5Pcnh1dN1jm+uo0l+vsikXuy2Nm/T7fX1rmqTUspk0Gb7L5gMpj315XfHWTbrndGgtnc2S147e/7JatADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/nrKxWhzmkWlSJeN+9dkzVbc+NF5nnm3G6/Xvw6L9nByczt959/U6bx688s2rb39/9OP0lySj3Dp6qLTt7tzLaQdV46S+SPLobN/5Zdv2jReH6UWW+ermt4/Xo5Qyv8xPqv75edLluctaAAAAAAAAAAAAAAAAAAAA2NOdu/cW9+vZ9uv6epsvmSbVtQ/cy6+llMOU5kp2luTr81RJfkiphltNMr+RpP2gyWajS0q5Mf3nfhF/x58BAAD//++eW/s=") r3 = dup(r2) socket$inet_udp(0x2, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x404}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="34010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x44}, 0x40010) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_exit\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r7) syz_emit_ethernet(0x130, &(0x7f0000000080)=ANY=[@ANYBLOB="716255c47b46aaaaaaaaaabb86dd6000000000fa00000000005dca23e2000000000000000000ff0200"/53], 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000600)={0x0, 0x3000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 970.837218ms ago: executing program 3 (id=1164): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0x208e29f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 846.18098ms ago: executing program 2 (id=1165): socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) 759.672831ms ago: executing program 2 (id=1166): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="2a947354495ee7d43ad76e0880fbf78e993afbfe90a44de4a12b00484f9f2646cfa901000000b654933bef6ff86be62063eb6a5fd31740d1e8f03b4f94a035855eb2ba64592b85d3a386f199f74474d80039b40f676e4cc9643ce9e8bdb12910ad632ba38746b2a3d52863a530c334df95850ccf3353910df7bfc340c2c5cd0bbe149921557eef18dc7a6820b3e68ef1385ebe3453e0f054f40fdb4759f95e30390fbdd488d081beacbf4d90a221de4b2b5942b738866c999dbf7b48b1970b", 0xbf}, {&(0x7f0000000200)="b350d8a459dc6b65dfaa287643d5b1027adfe9647a77c6f4f115dc6063f7e73a82768ebea104788e997d0d02a5440e124bdf947c3bdf64940eeaacdf8f7fbabfe6303126baeb8979bfdb39fe549c3b2c5d23dbd3944c7992e1c77a13dc4d56603512391ef40b3ebfa64d4008ef85c5fc0efa85f023", 0x75}, {&(0x7f00000002c0)="3cd723b82355ed9f78cda5c2bf7ee6b9e733a0427ae2272c0729a2e9e28b2beae4b862c9ac320d4151dcd3cae35dd3985b6e2d0687f94a8757", 0x39}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)="4ef9147973bd0daa097ce373d9ebdc8ca4d7c269fd822c94cb42e885278e40ea11080ed01fca0b86d564d9cc7082dd4ad30734f9c0bb43d6394edc1cc3d6e50febd1ed302ad1f3c05203fdbe6608cbe4614bde9f88e811633ee37d751eaf0a9770c974b149666896f645dee19eac07495a87a39e90138b5a23dc5c6fb8543c4b4a56b104d3a6", 0x86}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x420) 412.232625ms ago: executing program 1 (id=1167): socket$nl_netfilter(0x10, 0x3, 0xc) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 351.053605ms ago: executing program 3 (id=1168): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x421, 0x0, &(0x7f0000000140)="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"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0x208e29f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 248.58341ms ago: executing program 3 (id=1169): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffeffff}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x22, &(0x7f0000006040)=@framed={{}, [@map_idx, @tail_call, @tail_call, @jmp, @cb_func, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, @generic, @jmp, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x63, 0x79, 0x20, 0x5ac, 0x23f, 0xe0d8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd6, 0x2}}]}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000003c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005e00)='./file0\x00', &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid={'resgid', 0x3d, r7}}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001680)="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", 0x2000, &(0x7f0000005fc0)={&(0x7f0000001500)={0x50, 0xffffffffffffffda, 0x2, {0x7, 0x28, 0x1, 0x840000, 0x9, 0x200, 0x8, 0x4}}, &(0x7f00000002c0)={0x18, 0xfffffffffffffffe, 0x9, {0x7ff}}, &(0x7f0000000400)={0x18, 0x2f, 0x8, {0x8}}, &(0x7f0000001580)={0x18, 0x0, 0xffffffffffff0c6e, {0x30}}, &(0x7f00000015c0)={0x18, 0x0, 0x5, {0x10000}}, &(0x7f0000003700)={0x28, 0x0, 0xffffffff, {{0x4, 0x2, 0x2}}}, &(0x7f0000003740)={0x60, 0x0, 0x2, {{0x9, 0x2, 0x5, 0x6, 0x2, 0xf2f0, 0x400, 0x4}}}, &(0x7f00000037c0)={0x18, 0x0, 0x0, {0x7}}, &(0x7f0000003800)={0x16, 0xfffffffffffffffe, 0x7, {'wlan1\x00'}}, &(0x7f0000003840)={0x20, 0xffffffffffffffda, 0x2}, &(0x7f0000003880)={0x78, 0x0, 0x1, {0x1, 0x956, 0x0, {0x6, 0x2, 0x80000000, 0x6, 0x10001, 0x9, 0x4, 0xfffffffe, 0x1, 0x4000, 0xaa, 0x0, 0x0, 0x1}}}, &(0x7f0000003a80)={0x90, 0x0, 0x8, {0x0, 0x2, 0x8, 0x81, 0x5a93, 0x8, {0x2, 0x2, 0x9, 0x80000001, 0x6, 0x6, 0x2, 0x5, 0xb5, 0x4000, 0x2, 0x0, r3, 0x5, 0x10000}}}, &(0x7f0000003b40)={0xe0, 0x0, 0x7fff, [{0x4, 0xa19, 0x11, 0x1, '/dev/vhost-vsock\x00'}, {0x3, 0x6, 0x11, 0x0, '/dev/vhost-vsock\x00'}, {0x2, 0x80, 0x1, 0x2, '@'}, {0x6, 0xb0, 0x4, 0x1, '-}.$'}, {0x0, 0x6, 0x11, 0xfffc0000, '/dev/vhost-vsock\x00'}]}, &(0x7f0000005c80)={0x148, 0x0, 0xffffffffffffff4c, [{{0x6, 0x0, 0x1, 0xffffffffffff0001, 0x2, 0x5, {0x2, 0x7fff, 0x7, 0xdc, 0x80000000, 0x100, 0x3, 0x9, 0x5, 0xc000, 0xfffffe01, 0xee00, r4, 0x8, 0x8001}}, {0x3, 0xffff, 0x6, 0x8, 'wlan1\x00'}}, {{0x5, 0x2, 0x3ff, 0x100000001, 0xe3d, 0x5, {0x5, 0xa2b6, 0x7fffffff, 0xffffffffffffffff, 0x72, 0x4, 0x7, 0x1ff, 0x8, 0x8000, 0x100000, 0x0, 0xee00, 0x2, 0x6}}, {0x3, 0xffffffffffffffff, 0x0, 0xa78}}]}, &(0x7f0000005ec0)={0xa0, 0xfffffffffffffff5, 0x3f, {{0x0, 0x3, 0x7fff, 0x9, 0x1129, 0x40, {0x2, 0x5, 0x33c6, 0x10001, 0x5, 0x4, 0x9, 0xffffffff, 0x0, 0x4000, 0xffff, r5, r7, 0xffffffa0, 0xbb}}, {0x0, 0x9}}}, &(0x7f0000005f80)={0x20, 0x0, 0x7fffffffffffffff, {0x0, 0x0, 0x4c, 0xb851}}}) 0s ago: executing program 0 (id=1170): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000001c0), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001114010000000000000000040002000000000008004f000000000008004b0000000000080001000000000000"], 0x30}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0xfffffffffffffdae, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9e}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) kernel console output (not intermixed with test programs): [ 168.555817][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.562156][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.566729][ T7990] bridge_slave_0: entered allmulticast mode [ 168.571807][ T7990] bridge_slave_0: entered promiscuous mode [ 168.596875][ T1097] hsr_slave_0: left promiscuous mode [ 168.614823][ T1097] hsr_slave_1: left promiscuous mode [ 168.627879][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.633564][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.642364][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.645845][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.706696][ T1097] veth1_macvtap: left promiscuous mode [ 168.709785][ T1097] veth0_macvtap: left promiscuous mode [ 168.712948][ T1097] veth1_vlan: left promiscuous mode [ 168.715350][ T1097] veth0_vlan: left promiscuous mode [ 169.280018][ T5197] Bluetooth: hci0: command tx timeout [ 169.861506][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 170.008020][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 170.516651][ T8048] loop2: detected capacity change from 0 to 2048 [ 170.581121][ T8048] loop2: p3 < > p4 < > [ 170.583385][ T8048] loop2: partition table partially beyond EOD, truncated [ 170.591836][ T8048] loop2: p3 start 4284289 is beyond EOD, truncated [ 171.137709][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.145417][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.149128][ T7990] bridge_slave_1: entered allmulticast mode [ 171.153043][ T7990] bridge_slave_1: entered promiscuous mode [ 171.261215][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.283891][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.341569][ T8054] netlink: 892 bytes leftover after parsing attributes in process `syz.0.715'. [ 171.369217][ T5197] Bluetooth: hci0: command tx timeout [ 171.427334][ T8061] loop2: detected capacity change from 0 to 8 [ 171.428260][ T7990] team0: Port device team_slave_0 added [ 171.458642][ T8052] loop3: detected capacity change from 0 to 512 [ 171.460514][ T7990] team0: Port device team_slave_1 added [ 171.477353][ T8061] unable to read id index table [ 171.488199][ T39] audit: type=1800 audit(1719404626.369:381): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.716" name="bus" dev="sda1" ino=1993 res=0 errno=0 [ 171.502165][ T39] audit: type=1804 audit(1719404626.389:382): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.716" name="/syzkaller.xeD1TT/227/bus" dev="sda1" ino=1993 res=1 errno=0 [ 171.529353][ T8052] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 171.540941][ T8052] EXT4-fs (loop3): 1 truncate cleaned up [ 171.544665][ T8052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.716577][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.721116][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.736590][ T7990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.851078][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.854165][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.866075][ T7990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.906680][ T7834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.984247][ T7990] hsr_slave_0: entered promiscuous mode [ 171.987600][ T7990] hsr_slave_1: entered promiscuous mode [ 172.195475][ T8089] loop3: detected capacity change from 0 to 1024 [ 172.798983][ T8098] loop0: detected capacity change from 0 to 32768 [ 172.814096][ T8098] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.724 (8098) [ 172.835319][ T8098] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 172.840173][ T8098] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 172.844840][ T8098] BTRFS info (device loop0): using free-space-tree [ 172.991533][ T39] audit: type=1400 audit(1719404627.879:383): avc: denied { read } for pid=8097 comm="syz.0.724" name="file1" dev="loop0" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.003606][ T39] audit: type=1400 audit(1719404627.879:384): avc: denied { open } for pid=8097 comm="syz.0.724" path="/syzkaller.heEYlm/17/file0/file1" dev="loop0" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.016776][ T39] audit: type=1400 audit(1719404627.899:385): avc: denied { ioctl } for pid=8097 comm="syz.0.724" path="/syzkaller.heEYlm/17/file0/file1" dev="loop0" ino=260 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.110606][ T7789] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 173.179579][ T7990] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.222782][ T7990] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.243086][ T7990] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.254325][ T7990] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.417609][ T8130] loop0: detected capacity change from 0 to 8 [ 173.438643][ T5197] Bluetooth: hci0: command tx timeout [ 173.451687][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.455926][ T8130] unable to read id index table [ 173.481680][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.493102][ T818] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.497152][ T818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.513339][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.516502][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.540186][ T39] audit: type=1800 audit(1719404628.379:386): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.725" name="bus" dev="sda1" ino=1992 res=0 errno=0 [ 173.550835][ T39] audit: type=1804 audit(1719404628.379:387): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.725" name="/syzkaller.heEYlm/18/bus" dev="sda1" ino=1992 res=1 errno=0 [ 173.736802][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.790604][ T7990] veth0_vlan: entered promiscuous mode [ 173.802180][ T7990] veth1_vlan: entered promiscuous mode [ 173.837469][ T7990] veth0_macvtap: entered promiscuous mode [ 173.849626][ T7990] veth1_macvtap: entered promiscuous mode [ 173.874481][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.881048][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.885149][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.891681][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.896746][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.916601][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.934606][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.946335][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.966897][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.972967][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.977980][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.982526][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.987496][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.031246][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.065339][ T7990] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.070023][ T7990] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.073612][ T7990] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.077104][ T7990] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.155485][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.164497][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.188504][ T8150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.726'. [ 174.197746][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.202909][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.320297][ T5197] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 175.518873][ T5197] Bluetooth: hci0: command tx timeout [ 175.575451][ T8178] Bluetooth: MGMT ver 1.22 [ 175.633323][ T5200] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 175.793637][ T8183] input: syz0 as /devices/virtual/input/input34 [ 176.388943][ T57] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 176.601950][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 176.606430][ T57] usb 8-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 176.611613][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.636636][ T57] usb 8-1: config 0 descriptor?? [ 176.645720][ T57] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input35 [ 176.863799][ T8193] loop3: detected capacity change from 0 to 512 [ 176.870944][ T8193] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.874787][ T8193] EXT4-fs (loop3): blocks per group (64) and clusters per group (32768) inconsistent [ 177.168552][ T5262] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 177.348531][ T5262] usb 6-1: Using ep0 maxpacket: 32 [ 177.353259][ T5262] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.359635][ T5262] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.364174][ T5262] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.368595][ T5262] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.373389][ T5262] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.377582][ T5262] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 177.385966][ T5262] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.390773][ T5262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.394247][ T5262] usb 6-1: Product: syz [ 177.396076][ T5262] usb 6-1: Manufacturer: syz [ 177.398009][ T5262] usb 6-1: SerialNumber: syz [ 177.598685][ T5200] Bluetooth: hci0: command tx timeout [ 177.601266][ T5197] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 177.679000][ T5197] Bluetooth: hci1: command tx timeout [ 177.684342][ T8210] loop1: detected capacity change from 0 to 512 [ 177.706909][ T8210] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 177.714734][ T8210] EXT4-fs (loop1): 1 truncate cleaned up [ 177.719234][ T8210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.888651][ T8217] loop0: detected capacity change from 0 to 32768 [ 178.049920][ T5262] cdc_ncm 6-1:1.0: bind() failure [ 178.057575][ T5262] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 178.060996][ T5262] cdc_ncm 6-1:1.1: bind() failure [ 178.072160][ T5262] usb 6-1: USB disconnect, device number 8 [ 178.087823][ T4674] bcm5974 8-1:0.0: could not read from device [ 178.091442][ T5387] usb 8-1: USB disconnect, device number 7 [ 178.103153][ T5563] bcm5974 8-1:0.0: could not read from device [ 178.105548][ T8217] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 178.113651][ T8217] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 178.152777][ T8217] bcachefs (loop0): alloc_read... done [ 178.155734][ T8217] bcachefs (loop0): stripes_read... done [ 178.157992][ T8217] bcachefs (loop0): snapshots_read... done [ 178.166655][ T8217] bcachefs (loop0): journal_replay... done [ 178.169750][ T8217] bcachefs (loop0): resume_logged_ops... done [ 178.175485][ T8217] bcachefs (loop0): going read-write [ 178.184401][ T8217] bcachefs (loop0): done starting filesystem [ 178.653601][ T8235] loop2: detected capacity change from 0 to 16 [ 178.676815][ T8235] erofs: (device loop2): mounted with root inode @ nid 36. [ 178.702088][ T7990] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.765477][ T8235] syz.2.750: attempt to access beyond end of device [ 178.765477][ T8235] loop2: rw=0, sector=40, nr_sectors = 8 limit=16 [ 178.974254][ T39] audit: type=1400 audit(1719404633.859:388): avc: denied { create } for pid=8234 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.987142][ T39] audit: type=1400 audit(1719404633.869:389): avc: denied { bind } for pid=8234 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.123161][ T5197] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 179.678703][ T5201] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.684026][ T5197] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 179.838831][ T57] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 180.031311][ T57] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.037686][ T57] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.043515][ T57] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.049538][ T57] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.058911][ T57] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.064220][ T57] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.067957][ T57] usb 6-1: Product: syz [ 180.070024][ T57] usb 6-1: Manufacturer: syz [ 180.080206][ T57] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 180.287367][ T56] usb 6-1: USB disconnect, device number 9 [ 180.770380][ T818] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 180.929221][ T7789] bcachefs (loop0): shutting down [ 180.932132][ T7789] bcachefs (loop0): going read-only [ 180.934527][ T7789] bcachefs (loop0): finished waiting for writes to stop [ 180.949402][ T7789] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 180.954503][ T7789] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 180.963725][ T7789] bcachefs (loop0): shutdown complete, journal seq 13 [ 180.968744][ T7789] bcachefs (loop0): marking filesystem clean [ 180.969644][ T818] usb 8-1: Using ep0 maxpacket: 32 [ 180.979453][ T818] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.984045][ T818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.022376][ T818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.026333][ T818] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 181.030502][ T7789] bcachefs (loop0): shutdown complete [ 181.032023][ T818] usb 8-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 181.046348][ T818] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.073919][ T818] usb 8-1: config 0 descriptor?? [ 181.101357][ T5201] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 181.414177][ T8269] loop2: detected capacity change from 0 to 8 [ 181.422186][ T8269] unable to read id index table [ 181.479529][ T39] audit: type=1800 audit(1719404636.369:390): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.764" name="bus" dev="sda1" ino=1990 res=0 errno=0 [ 181.522558][ T39] audit: type=1804 audit(1719404636.369:391): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.764" name="/syzkaller.xeD1TT/237/bus" dev="sda1" ino=1990 res=1 errno=0 [ 181.583260][ T818] hid-generic 0003:1B96:9F0A.0003: hidraw1: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.3-1/input0 [ 181.649302][ T8275] loop1: detected capacity change from 0 to 2048 [ 181.773950][ T818] usb 8-1: USB disconnect, device number 8 [ 181.788442][ T8275] loop1: p3 < > p4 < > [ 181.790777][ T8275] loop1: partition table partially beyond EOD, truncated [ 181.797077][ T8275] loop1: p3 start 4284289 is beyond EOD, truncated [ 181.805720][ T5201] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.838573][ T5201] Bluetooth: hci3: command 0x0406 tx timeout [ 182.587392][ T8289] loop2: detected capacity change from 0 to 256 [ 182.615494][ T8289] FAT-fs (loop2): Unrecognized mount option "nOnumtail=0" or missing value [ 182.708720][ T5239] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 182.990742][ T8291] loop3: detected capacity change from 0 to 32768 [ 183.105134][ T8301] input: syz0 as /devices/virtual/input/input36 [ 183.209032][ T8289] loop2: detected capacity change from 0 to 32768 [ 183.229124][ T8289] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.769 (8289) [ 183.241528][ T8291] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 183.248464][ T8291] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 183.271661][ T8289] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.282266][ T8289] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 183.287521][ T8289] BTRFS info (device loop2): using free-space-tree [ 183.315965][ T8291] bcachefs (loop3): alloc_read... done [ 183.322001][ T8291] bcachefs (loop3): stripes_read... done [ 183.324547][ T8291] bcachefs (loop3): snapshots_read... done [ 183.332745][ T8291] bcachefs (loop3): journal_replay... done [ 183.336422][ T8291] bcachefs (loop3): resume_logged_ops... done [ 183.342869][ T8291] bcachefs (loop3): going read-write [ 183.372111][ T8291] bcachefs (loop3): done starting filesystem [ 183.384906][ T8289] BTRFS info (device loop2): rebuilding free space tree [ 183.848593][ T5197] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.947123][ T5197] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 184.020064][ T8331] loop1: detected capacity change from 0 to 128 [ 184.055270][ T8331] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 184.172114][ T5197] Bluetooth: hci0: unexpected event for opcode 0xe412 [ 184.288641][ T39] audit: type=1400 audit(1719404639.169:392): avc: denied { unmount } for pid=5206 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 184.344338][ T5206] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.322565][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 185.455562][ T8353] input: syz0 as /devices/virtual/input/input37 [ 185.801926][ T7834] bcachefs (loop3): shutting down [ 185.808660][ T7834] bcachefs (loop3): going read-only [ 185.812609][ T7834] bcachefs (loop3): finished waiting for writes to stop [ 185.829960][ T7834] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 185.833870][ T7834] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 185.842573][ T7834] bcachefs (loop3): shutdown complete, journal seq 13 [ 185.849566][ T7834] bcachefs (loop3): marking filesystem clean [ 185.892897][ T7834] bcachefs (loop3): shutdown complete [ 186.222428][ T8329] warn_alloc: 1 callbacks suppressed [ 186.222448][ T8329] syz.1.772: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 186.235572][ T8329] CPU: 0 PID: 8329 Comm: syz.1.772 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 186.241182][ T8329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.246352][ T8329] Call Trace: [ 186.248075][ T8329] [ 186.250416][ T8329] dump_stack_lvl+0x16c/0x1f0 [ 186.252466][ T8329] warn_alloc+0x24d/0x3a0 [ 186.254637][ T8329] ? __pfx_warn_alloc+0x10/0x10 [ 186.256986][ T8329] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 186.259106][ T8329] ? __get_vm_area_node+0x190/0x2d0 [ 186.260907][ T8329] ? __get_vm_area_node+0x1bc/0x2d0 [ 186.263258][ T8329] __vmalloc_node_range_noprof+0xff7/0x1520 [ 186.266154][ T8329] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 186.268370][ T8329] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 186.271113][ T8329] ? __get_vm_area_node+0x190/0x2d0 [ 186.273336][ T8329] ? __get_vm_area_node+0x1bc/0x2d0 [ 186.275551][ T8329] __vmalloc_node_range_noprof+0xc8d/0x1520 [ 186.275821][ T39] audit: type=1400 audit(1719404641.129:393): avc: denied { mount } for pid=8359 comm="syz.2.784" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 186.277936][ T8329] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 186.289883][ T8329] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 186.292323][ T8329] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 186.295094][ T8329] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 186.297319][ T8329] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 186.299631][ T8329] vmalloc_user_noprof+0x6b/0x90 [ 186.301797][ T8329] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 186.304173][ T8329] vb2_vmalloc_alloc+0x11e/0x3d0 [ 186.306263][ T8329] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 186.308537][ T8329] __vb2_queue_alloc+0x896/0x1220 [ 186.310704][ T8329] vb2_core_create_bufs+0x55d/0xab0 [ 186.312945][ T8329] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 186.315358][ T8329] ? mark_held_locks+0x9f/0xe0 [ 186.317393][ T8329] vb2_create_bufs+0x566/0x780 [ 186.319497][ T8329] ? __pfx_vb2_create_bufs+0x10/0x10 [ 186.321821][ T8329] ? check_fmt+0x79e/0x8f0 [ 186.323858][ T8329] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.326392][ T8329] v4l_create_bufs+0x156/0x270 [ 186.328408][ T8329] __video_do_ioctl+0xaf9/0xf00 [ 186.330440][ T8329] ? __pfx___video_do_ioctl+0x10/0x10 [ 186.332828][ T8329] video_usercopy+0x4ce/0x1600 [ 186.334981][ T8329] ? __pfx___video_do_ioctl+0x10/0x10 [ 186.337294][ T8329] ? __pfx_video_usercopy+0x10/0x10 [ 186.339534][ T8329] ? selinux_file_ioctl+0x180/0x270 [ 186.341734][ T8329] v4l2_ioctl+0x1c0/0x260 [ 186.343630][ T8329] ? __pfx_v4l2_ioctl+0x10/0x10 [ 186.345609][ T8329] __x64_sys_ioctl+0x193/0x220 [ 186.347526][ T8329] do_syscall_64+0xcd/0x250 [ 186.349258][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.351560][ T8329] RIP: 0033:0x7f67cdd75ae9 [ 186.353367][ T8329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.361524][ T8329] RSP: 002b:00007f67ceafb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.365002][ T8329] RAX: ffffffffffffffda RBX: 00007f67cdf03fa0 RCX: 00007f67cdd75ae9 [ 186.367974][ T8329] RDX: 0000000020004fc0 RSI: 00000000c100565c RDI: 0000000000000005 [ 186.371057][ T8329] RBP: 00007f67cddf6746 R08: 0000000000000000 R09: 0000000000000000 [ 186.374495][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.378530][ T8329] R13: 000000000000000b R14: 00007f67cdf03fa0 R15: 00007ffd16da29c8 [ 186.383085][ T8329] [ 186.391771][ T8329] Mem-Info: [ 186.393217][ T8329] active_anon:9258 inactive_anon:0 isolated_anon:0 [ 186.393217][ T8329] active_file:2127 inactive_file:38587 isolated_file:0 [ 186.393217][ T8329] unevictable:1768 dirty:689 writeback:0 [ 186.393217][ T8329] slab_reclaimable:10543 slab_unreclaimable:70193 [ 186.393217][ T8329] mapped:12508 shmem:6398 pagetables:717 [ 186.393217][ T8329] sec_pagetables:324 bounce:0 [ 186.393217][ T8329] kernel_misc_reclaimable:0 [ 186.393217][ T8329] free:470934 free_pcp:9393 free_cma:0 [ 186.412833][ T8329] Node 0 active_anon:36908kB inactive_anon:0kB active_file:8508kB inactive_file:154280kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50032kB dirty:2752kB writeback:0kB shmem:22056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11120kB pagetables:2868kB sec_pagetables:1296kB all_unreclaimable? no [ 186.454655][ T8329] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 186.468865][ T8329] Node 0 DMA free:15360kB boost:0kB min:328kB low:408kB high:488kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 186.478281][ T8329] lowmem_reserve[]: 0 1317 0 0 0 [ 186.481963][ T8329] Node 0 DMA32 free:255916kB boost:0kB min:28984kB low:36228kB high:43472kB reserved_highatomic:0KB active_anon:32940kB inactive_anon:0kB active_file:8508kB inactive_file:154032kB unevictable:3536kB writepending:2752kB present:2080628kB managed:1377256kB mlocked:0kB bounce:0kB free_pcp:16312kB local_pcp:976kB free_cma:0kB [ 186.527906][ T8329] lowmem_reserve[]: 0 0 0 0 0 [ 186.530398][ T8329] Node 1 Normal free:1639256kB boost:0kB min:38268kB low:47832kB high:57396kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:1524kB local_pcp:1508kB free_cma:0kB [ 186.543147][ T8329] lowmem_reserve[]: 0 0 0 0 0 [ 186.545657][ T8329] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 186.587205][ T5201] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 186.596837][ T8329] Node 0 DMA32: 313*4kB (UME) 330*8kB (UME) 258*16kB (UME) 190*32kB (UME) 27*64kB (UME) 14*128kB (UME) 24*256kB (UME) 22*512kB (UME) 12*1024kB (UME) 5*2048kB (UM) 50*4096kB (UM) = 262356kB [ 186.605761][ T8329] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 15*16kB (UM) 1*32kB (M) 4*64kB (UM) 10*128kB (UM) 6*256kB (U) 9*512kB (UM) 5*1024kB (U) 2*2048kB (UM) 396*4096kB (UM) = 1639256kB [ 186.608228][ T8367] loop3: detected capacity change from 0 to 1024 [ 186.613129][ T8329] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.613154][ T8329] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.613168][ T8329] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.613182][ T8329] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.613196][ T8329] 43048 total pagecache pages [ 186.613203][ T8329] 0 pages in swap cache [ 186.613209][ T8329] Free swap = 124464kB [ 186.613218][ T8329] Total swap = 124996kB [ 186.613226][ T8329] 1048443 pages RAM [ 186.613231][ T8329] 0 pages HighMem/MovableOnly [ 186.613235][ T8329] 254808 pages reserved [ 186.613238][ T8329] 0 pages cma reserved [ 186.693754][ T39] audit: type=1400 audit(1719404641.579:394): avc: denied { unmount } for pid=5206 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 187.506008][ T63] hfsplus: b-tree write err: -5, ino 4 [ 187.596471][ T7990] UDF-fs: error (device loop1): udf_read_inode: (ino 114) failed !bh [ 187.606117][ T7990] UDF-fs: error (device loop1): udf_read_inode: (ino 114) failed !bh [ 187.954453][ T8379] loop0: detected capacity change from 0 to 32768 [ 187.961361][ T8379] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.789 (8379) [ 187.969970][ T8379] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.974240][ T8379] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 187.979181][ T8379] BTRFS info (device loop0): using free-space-tree [ 188.079579][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.241314][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.438718][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.504678][ T5197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.527099][ T5197] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.537892][ T5197] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.544381][ T5197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.569037][ T5197] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.576241][ T5197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.591108][ T8406] loop3: detected capacity change from 0 to 512 [ 188.609050][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.618270][ T8406] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 188.639244][ T8406] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.794: iget: bad i_size value: -67835469387268086 [ 188.641279][ T7789] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.650841][ T8406] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.794: couldn't read orphan inode 15 (err -117) [ 188.657594][ T8406] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.668350][ T8406] ext2 filesystem being mounted at /syzkaller.2xkETc/21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.032566][ T8403] chnl_net:caif_netlink_parms(): no params data found [ 189.042190][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 189.107825][ T8418] netlink: 116 bytes leftover after parsing attributes in process `syz.0.797'. [ 189.166188][ T5201] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 189.339119][ T63] bridge_slave_1: left allmulticast mode [ 189.341602][ T63] bridge_slave_1: left promiscuous mode [ 189.343884][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.352534][ T63] bridge_slave_0: left allmulticast mode [ 189.355164][ T63] bridge_slave_0: left promiscuous mode [ 189.357709][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.721287][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 189.869294][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.877199][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.893420][ T63] bond0 (unregistering): Released all slaves [ 190.086694][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.090688][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.094199][ T8403] bridge_slave_0: entered allmulticast mode [ 190.098688][ T8403] bridge_slave_0: entered promiscuous mode [ 190.112076][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.115318][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.118642][ T8403] bridge_slave_1: entered allmulticast mode [ 190.122371][ T8403] bridge_slave_1: entered promiscuous mode [ 190.237285][ T8403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.246734][ T8403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.415459][ T8403] team0: Port device team_slave_0 added [ 190.427317][ T8403] team0: Port device team_slave_1 added [ 190.510975][ T63] hsr_slave_0: left promiscuous mode [ 190.516219][ T63] hsr_slave_1: left promiscuous mode [ 190.531089][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.537749][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.562276][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.565393][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.615547][ T63] veth1_macvtap: left promiscuous mode [ 190.618141][ T63] veth0_macvtap: left promiscuous mode [ 190.621203][ T63] veth1_vlan: left promiscuous mode [ 190.623755][ T63] veth0_vlan: left promiscuous mode [ 190.641741][ T5201] Bluetooth: hci0: command tx timeout [ 190.696468][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 191.119822][ T7834] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 192.013803][ T63] team0 (unregistering): Port device team_slave_1 removed [ 192.145033][ T63] team0 (unregistering): Port device team_slave_0 removed [ 192.723882][ T5201] Bluetooth: hci0: command tx timeout [ 193.225808][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.232756][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.252638][ T8403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.262944][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.266126][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.277607][ T8403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.284010][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 193.304237][ T8468] netlink: 116 bytes leftover after parsing attributes in process `syz.2.811'. [ 193.330264][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 193.432416][ T5201] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 193.444735][ T8403] hsr_slave_0: entered promiscuous mode [ 193.448310][ T8403] hsr_slave_1: entered promiscuous mode [ 193.774304][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 193.882298][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 193.896897][ T8500] netlink: 116 bytes leftover after parsing attributes in process `syz.0.820'. [ 194.189983][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 194.203696][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 194.252665][ T8403] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.313154][ T8403] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.319704][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 194.329811][ T8403] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.350407][ T8403] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.422885][ T5201] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 194.490252][ T8403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.512910][ T8403] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.522896][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.526433][ T5244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.574552][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.577497][ T5244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.798958][ T5201] Bluetooth: hci0: command tx timeout [ 194.842640][ T8403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.901915][ T8403] veth0_vlan: entered promiscuous mode [ 194.912198][ T8403] veth1_vlan: entered promiscuous mode [ 194.943873][ T8403] veth0_macvtap: entered promiscuous mode [ 194.952734][ T8403] veth1_macvtap: entered promiscuous mode [ 194.969348][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.974235][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.988798][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.998188][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.003069][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.007948][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.016486][ T8403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.031499][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.037182][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.042258][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.047117][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.052563][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.057250][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.063091][ T8403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.072584][ T8403] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.078094][ T8403] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.083663][ T8403] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.087707][ T8403] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.195924][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.201128][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.226596][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.233270][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.439844][ T5201] Bluetooth: hci3: command 0x0406 tx timeout [ 195.798873][ T5201] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 196.014638][ T8596] loop3: detected capacity change from 0 to 32768 [ 196.036240][ T8596] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.839 (8596) [ 196.039531][ T5201] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 196.070654][ T8596] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 196.079160][ T8596] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 196.083333][ T8596] BTRFS info (device loop3): using free-space-tree [ 196.255862][ T39] audit: type=1400 audit(1719404651.139:395): avc: denied { mounton } for pid=8595 comm="syz.3.839" path="/syzkaller.2xkETc/30/bus/bus" dev="loop3" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 196.303114][ T8626] netlink: 'syz.1.844': attribute type 72 has an invalid length. [ 196.306966][ T8626] __nla_validate_parse: 5 callbacks suppressed [ 196.306977][ T8626] netlink: 1016 bytes leftover after parsing attributes in process `syz.1.844'. [ 196.313181][ T39] audit: type=1400 audit(1719404651.199:396): avc: denied { ioctl } for pid=8595 comm="syz.3.839" path="/syzkaller.2xkETc/30/bus/cpuacct.usage_percpu_sys" dev="loop3" ino=264 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 196.339568][ T39] audit: type=1400 audit(1719404651.209:397): avc: denied { remount } for pid=8595 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 196.348806][ T8596] loop3: detected capacity change from 32768 to 0 [ 196.353453][ T73] kworker/u32:4: attempt to access beyond end of device [ 196.353453][ T73] loop3: rw=6145, sector=13448, nr_sectors = 8 limit=0 [ 196.359793][ T73] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 196.364645][ T73] kworker/u32:4: attempt to access beyond end of device [ 196.364645][ T73] loop3: rw=6145, sector=13456, nr_sectors = 8 limit=0 [ 196.371248][ T73] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 196.381286][ T8629] BTRFS error (device loop3 state A): Transaction aborted (error -5) [ 196.386076][ T8629] BTRFS: error (device loop3 state A) in __btrfs_run_delayed_items:1176: errno=-5 IO failure [ 196.393414][ T8629] BTRFS info (device loop3 state EA): forced readonly [ 196.397132][ T8629] BTRFS warning (device loop3 state EA): Skipping commit of aborted transaction. [ 196.418017][ T8629] BTRFS: error (device loop3 state EA) in cleanup_transaction:1999: errno=-5 IO failure [ 196.430577][ T8629] BTRFS error (device loop3 state EMA): remounting read-write after error is not allowed [ 196.487054][ T7834] BTRFS info (device loop3 state EA): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 196.816367][ T5201] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 196.889040][ T5201] Bluetooth: hci0: command tx timeout [ 197.063985][ T5201] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 197.411331][ T8654] input: syz0 as /devices/virtual/input/input38 [ 197.518910][ T5201] Bluetooth: hci3: command 0x0406 tx timeout [ 197.598600][ T8664] loop1: detected capacity change from 0 to 8 [ 197.611605][ T8664] unable to read id index table [ 197.640262][ T5201] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 197.671302][ T5563] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 197.676375][ T5201] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 197.680606][ T39] audit: type=1800 audit(1719404652.569:398): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.857" name="bus" dev="sda1" ino=1999 res=0 errno=0 [ 197.706687][ T39] audit: type=1804 audit(1719404652.569:399): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.857" name="/syzkaller.U28m4x/10/bus" dev="sda1" ino=1999 res=1 errno=0 [ 197.925261][ T39] audit: type=1804 audit(1719404652.809:400): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.861" name="/syzkaller.heEYlm/67/bus" dev="sda1" ino=2003 res=1 errno=0 [ 198.834448][ T8698] loop1: detected capacity change from 0 to 512 [ 198.852149][ T8698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.856983][ T8698] ext4 filesystem being mounted at /syzkaller.U28m4x/13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.877698][ T39] audit: type=1400 audit(1719404653.759:401): avc: denied { watch } for pid=8697 comm="syz.1.868" path="/syzkaller.U28m4x/13/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.912612][ T8403] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.118829][ T5201] Bluetooth: hci0: command tx timeout [ 199.253610][ T8706] loop1: detected capacity change from 0 to 32768 [ 199.318150][ T8706] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 199.324428][ T8706] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 199.346608][ T8706] bcachefs (loop1): alloc_read... done [ 199.349348][ T8706] bcachefs (loop1): stripes_read... done [ 199.352025][ T8706] bcachefs (loop1): snapshots_read... done [ 199.357097][ T8706] bcachefs (loop1): journal_replay... done [ 199.360102][ T8706] bcachefs (loop1): resume_logged_ops... done [ 199.364418][ T8706] bcachefs (loop1): going read-write [ 199.369331][ T8706] bcachefs (loop1): done starting filesystem [ 199.599733][ T5201] Bluetooth: hci3: command 0x0406 tx timeout [ 199.686331][ T5201] Bluetooth: hci1: SCO packet for unknown connection handle 513 [ 199.750516][ T8725] loop2: detected capacity change from 0 to 8 [ 199.789605][ T8725] unable to read id index table [ 199.807597][ T39] audit: type=1800 audit(1719404654.689:402): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.872" name="bus" dev="sda1" ino=2001 res=0 errno=0 [ 199.819365][ T8722] loop0: detected capacity change from 0 to 64 [ 199.867587][ T39] audit: type=1804 audit(1719404654.699:403): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.872" name="/syzkaller.xeD1TT/268/bus" dev="sda1" ino=2001 res=1 errno=0 [ 200.243574][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.246529][ T5201] Bluetooth: hci1: command 0x0406 tx timeout [ 200.247024][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.838931][ T5197] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 200.895418][ T5197] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 201.038634][ T39] audit: type=1804 audit(1719404655.919:404): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.874" name="/syzkaller.2xkETc/36/bus" dev="sda1" ino=2003 res=1 errno=0 [ 201.453832][ T5197] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 201.519031][ T8749] loop2: detected capacity change from 0 to 128 [ 201.532088][ T8749] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 201.661171][ T5197] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 202.409255][ T8756] loop0: detected capacity change from 0 to 1024 [ 202.592411][ T8403] bcachefs (loop1): shutting down [ 202.594838][ T8403] bcachefs (loop1): going read-only [ 202.597200][ T8403] bcachefs (loop1): finished waiting for writes to stop [ 202.620206][ T8403] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13 [ 202.624732][ T8403] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [ 202.640158][ T8403] bcachefs (loop1): shutdown complete, journal seq 14 [ 202.646689][ T8403] bcachefs (loop1): marking filesystem clean [ 202.674440][ T8403] bcachefs (loop1): shutdown complete [ 203.146482][ T8761] loop3: detected capacity change from 0 to 32768 [ 203.160695][ T8761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.884 (8761) [ 203.181256][ T8761] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.186060][ T8761] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 203.193826][ T8761] BTRFS info (device loop3): using free-space-tree [ 203.251805][ T1090] hfsplus: b-tree write err: -5, ino 4 [ 203.283472][ T39] audit: type=1804 audit(1719404658.169:405): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.884" name="/syzkaller.2xkETc/39/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 203.305258][ T39] audit: type=1804 audit(1719404658.189:406): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.884" name="/syzkaller.2xkETc/39/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 203.375897][ T7834] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.492459][ T8746] warn_alloc: 1 callbacks suppressed [ 203.492472][ T8746] syz.2.879: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 203.502577][ T8746] CPU: 2 PID: 8746 Comm: syz.2.879 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 203.506478][ T8746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.510655][ T8746] Call Trace: [ 203.511852][ T8746] [ 203.512899][ T8746] dump_stack_lvl+0x16c/0x1f0 [ 203.514539][ T8746] warn_alloc+0x24d/0x3a0 [ 203.516058][ T8746] ? __pfx_warn_alloc+0x10/0x10 [ 203.517793][ T8746] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 203.520009][ T8746] ? __get_vm_area_node+0x190/0x2d0 [ 203.521749][ T8746] ? __get_vm_area_node+0x1bc/0x2d0 [ 203.523557][ T8746] __vmalloc_node_range_noprof+0xff7/0x1520 [ 203.525712][ T8746] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 203.527878][ T8746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.530135][ T8746] ? __get_vm_area_node+0x190/0x2d0 [ 203.531944][ T8746] ? __get_vm_area_node+0x1bc/0x2d0 [ 203.533849][ T8746] __vmalloc_node_range_noprof+0xc8d/0x1520 [ 203.536152][ T8746] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 203.537953][ T8746] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 203.539768][ T8746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.542147][ T8746] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 203.544022][ T8746] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 203.546206][ T8746] vmalloc_user_noprof+0x6b/0x90 [ 203.548188][ T8746] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 203.550439][ T8746] vb2_vmalloc_alloc+0x11e/0x3d0 [ 203.552446][ T8746] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 203.554446][ T8746] __vb2_queue_alloc+0x896/0x1220 [ 203.556339][ T8746] vb2_core_create_bufs+0x55d/0xab0 [ 203.558408][ T8746] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 203.560792][ T8746] ? rcu_is_watching+0x12/0xc0 [ 203.562712][ T8746] vb2_create_bufs+0x566/0x780 [ 203.564907][ T8746] ? __pfx_vb2_create_bufs+0x10/0x10 [ 203.567183][ T8746] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.569536][ T8746] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.571560][ T8746] v4l_create_bufs+0x156/0x270 [ 203.573243][ T8746] __video_do_ioctl+0xaf9/0xf00 [ 203.574918][ T8746] ? __pfx___video_do_ioctl+0x10/0x10 [ 203.576768][ T8746] video_usercopy+0x4ce/0x1600 [ 203.578449][ T8746] ? __pfx___video_do_ioctl+0x10/0x10 [ 203.580589][ T8746] ? __pfx_video_usercopy+0x10/0x10 [ 203.582518][ T8746] ? selinux_file_ioctl+0x180/0x270 [ 203.584907][ T8746] v4l2_ioctl+0x1c0/0x260 [ 203.586675][ T8746] ? __pfx_v4l2_ioctl+0x10/0x10 [ 203.588381][ T8746] __x64_sys_ioctl+0x193/0x220 [ 203.590096][ T8746] do_syscall_64+0xcd/0x250 [ 203.592112][ T8746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.594406][ T8746] RIP: 0033:0x7ffa07175ae9 [ 203.596313][ T8746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.604199][ T8746] RSP: 002b:00007ffa07f77048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.607735][ T8746] RAX: ffffffffffffffda RBX: 00007ffa07303fa0 RCX: 00007ffa07175ae9 [ 203.611067][ T8746] RDX: 0000000020004fc0 RSI: 00000000c100565c RDI: 0000000000000005 [ 203.614231][ T8746] RBP: 00007ffa071f6746 R08: 0000000000000000 R09: 0000000000000000 [ 203.618350][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.622188][ T8746] R13: 000000000000000b R14: 00007ffa07303fa0 R15: 00007ffc5777bca8 [ 203.625755][ T8746] [ 203.632865][ T8746] Mem-Info: [ 203.634716][ T8746] active_anon:9321 inactive_anon:0 isolated_anon:0 [ 203.634716][ T8746] active_file:1777 inactive_file:42126 isolated_file:0 [ 203.634716][ T8746] unevictable:1768 dirty:708 writeback:0 [ 203.634716][ T8746] slab_reclaimable:10551 slab_unreclaimable:70139 [ 203.634716][ T8746] mapped:13038 shmem:6411 pagetables:731 [ 203.634716][ T8746] sec_pagetables:324 bounce:0 [ 203.634716][ T8746] kernel_misc_reclaimable:0 [ 203.634716][ T8746] free:468971 free_pcp:7470 free_cma:0 [ 203.653921][ T8746] Node 0 active_anon:36912kB inactive_anon:0kB active_file:7108kB inactive_file:168436kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52152kB dirty:2828kB writeback:0kB shmem:21612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:2924kB sec_pagetables:1296kB all_unreclaimable? no [ 203.667498][ T8746] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 203.676943][ T39] audit: type=1400 audit(1719404658.559:407): avc: denied { create } for pid=8786 comm="syz.0.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 203.680095][ T8746] Node 0 DMA free:15360kB boost:0kB min:328kB low:408kB high:488kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.700880][ T8746] lowmem_reserve[]: 0 1317 0 0 0 [ 203.703280][ T8746] Node 0 DMA32 free:220008kB boost:0kB min:28984kB low:36228kB high:43472kB reserved_highatomic:0KB active_anon:35396kB inactive_anon:0kB active_file:7108kB inactive_file:168496kB unevictable:3536kB writepending:2856kB present:2080628kB managed:1377256kB mlocked:0kB bounce:0kB free_pcp:32032kB local_pcp:8896kB free_cma:0kB [ 203.716621][ T8746] lowmem_reserve[]: 0 0 0 0 0 [ 203.718766][ T8746] Node 1 Normal free:1640764kB boost:0kB min:38268kB low:47832kB high:57396kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 203.732772][ T8746] lowmem_reserve[]: 0 0 0 0 0 [ 203.735085][ T8746] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.741427][ T8746] Node 0 DMA32: 161*4kB (ME) 239*8kB (UME) 201*16kB (UME) 113*32kB (UME) 31*64kB (UME) 8*128kB (UE) 5*256kB (UME) 4*512kB (ME) 17*1024kB (UME) 9*2048kB (UM) 44*4096kB (UM) = 231788kB [ 203.757345][ T8746] Node 1 Normal: 3*4kB (UM) 8*8kB (UM) 17*16kB (UM) 19*32kB (UM) 18*64kB (UM) 10*128kB (UM) 6*256kB (U) 9*512kB (UM) 5*1024kB (U) 2*2048kB (UM) 396*4096kB (UM) = 1640764kB [ 203.766829][ T8746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.772031][ T8746] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.776292][ T8746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.781218][ T8746] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.785333][ T8746] 46368 total pagecache pages [ 203.787472][ T8746] 0 pages in swap cache [ 203.789925][ T8746] Free swap = 124464kB [ 203.791865][ T8746] Total swap = 124996kB [ 203.798007][ T8746] 1048443 pages RAM [ 203.800490][ T8746] 0 pages HighMem/MovableOnly [ 203.804524][ T8746] 254808 pages reserved [ 203.808673][ T8746] 0 pages cma reserved [ 203.911542][ T8797] loop0: detected capacity change from 0 to 512 [ 203.943491][ T8797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.948111][ T8797] ext4 filesystem being mounted at /syzkaller.heEYlm/74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.036112][ T7789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.130455][ T5200] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 204.133281][ T5200] Bluetooth: hci1: SCO packet for unknown connection handle 1955 [ 204.428750][ T5206] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 204.447293][ T5206] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 204.785873][ T8809] loop1: detected capacity change from 0 to 32768 [ 204.797859][ T73] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.867300][ T8811] netlink: 1068 bytes leftover after parsing attributes in process `syz.3.897'. [ 204.877730][ T8809] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 204.955709][ T73] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.958732][ T5200] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 204.963104][ T8809] XFS (loop1): Ending clean mount [ 204.986994][ T8809] XFS (loop1): Quotacheck needed: Please wait. [ 205.045422][ T8809] XFS (loop1): Quotacheck: Done. [ 205.076941][ T39] audit: type=1400 audit(1719404659.959:408): avc: denied { write } for pid=8808 comm="syz.1.894" name="file1" dev="loop1" ino=9286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.076959][ T73] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.153363][ T5197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.170973][ T5197] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.185125][ T8403] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.187992][ T5197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.213112][ T5197] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.225433][ T5197] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 205.229511][ T5197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.241573][ T73] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.600106][ T8827] chnl_net:caif_netlink_parms(): no params data found [ 205.677066][ T73] bridge_slave_1: left allmulticast mode [ 205.680113][ T73] bridge_slave_1: left promiscuous mode [ 205.683185][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.694312][ T73] bridge_slave_0: left allmulticast mode [ 205.696783][ T73] bridge_slave_0: left promiscuous mode [ 205.699559][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.959221][ T5197] Bluetooth: hci1: SCO packet for unknown connection handle 513 [ 206.029836][ T8841] loop0: detected capacity change from 0 to 64 [ 206.417284][ T5197] Bluetooth: hci2: SCO packet for unknown connection handle 1955 [ 206.468246][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.503907][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.518725][ T73] bond0 (unregistering): Released all slaves [ 207.023679][ T8827] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.026839][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.033780][ T8827] bridge_slave_0: entered allmulticast mode [ 207.040492][ T8827] bridge_slave_0: entered promiscuous mode [ 207.054525][ T8827] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.058289][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.063393][ T8827] bridge_slave_1: entered allmulticast mode [ 207.070522][ T8827] bridge_slave_1: entered promiscuous mode [ 207.126046][ T8852] loop1: detected capacity change from 0 to 32768 [ 207.140694][ T8852] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.907 (8852) [ 207.166360][ T8852] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.189291][ T8852] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 207.193556][ T8852] BTRFS info (device loop1): using free-space-tree [ 207.234776][ T8827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.251240][ T8827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.277474][ T39] audit: type=1804 audit(1719404662.159:409): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.907" name="/syzkaller.U28m4x/21/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 207.288680][ T5200] Bluetooth: hci3: command tx timeout [ 207.298347][ T39] audit: type=1804 audit(1719404662.179:410): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.907" name="/syzkaller.U28m4x/21/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 207.322229][ T8403] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.405340][ T8827] team0: Port device team_slave_0 added [ 207.468188][ T8827] team0: Port device team_slave_1 added [ 207.557049][ T8878] netlink: 1068 bytes leftover after parsing attributes in process `syz.3.909'. [ 207.597447][ T73] hsr_slave_0: left promiscuous mode [ 207.603360][ T73] hsr_slave_1: left promiscuous mode [ 207.616153][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.620958][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.636252][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.644898][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.711191][ T73] veth1_macvtap: left promiscuous mode [ 207.713799][ T73] veth0_macvtap: left promiscuous mode [ 207.716440][ T73] veth1_vlan: left promiscuous mode [ 207.723256][ T73] veth0_vlan: left promiscuous mode [ 208.742586][ T8891] Bluetooth: MGMT ver 1.22 [ 209.015277][ T73] team0 (unregistering): Port device team_slave_1 removed [ 209.143589][ T73] team0 (unregistering): Port device team_slave_0 removed [ 209.358801][ T5200] Bluetooth: hci0: command 0x0406 tx timeout [ 209.368749][ T5200] Bluetooth: hci3: command tx timeout [ 210.155261][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.158598][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.170380][ T8827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.239091][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.242493][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.257504][ T8827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.298608][ T5200] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 210.340398][ T8894] loop1: detected capacity change from 0 to 2048 [ 210.384645][ T8827] hsr_slave_0: entered promiscuous mode [ 210.390733][ T8894] loop1: p3 < > p4 < > [ 210.393010][ T8894] loop1: partition table partially beyond EOD, truncated [ 210.393512][ T8827] hsr_slave_1: entered promiscuous mode [ 210.398654][ T8894] loop1: p3 start 4284289 is beyond EOD, truncated [ 210.414552][ T8827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.420582][ T8827] Cannot create hsr debugfs directory [ 210.898612][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 211.355806][ T8916] loop3: detected capacity change from 0 to 32768 [ 211.369448][ T8916] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.915 (8916) [ 211.392309][ T8916] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.397048][ T8916] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 211.407828][ T5200] Bluetooth: hci0: SCO packet for unknown connection handle 513 [ 211.411913][ T8916] BTRFS info (device loop3): using free-space-tree [ 211.438609][ T5200] Bluetooth: hci0: command 0x0406 tx timeout [ 211.438861][ T5197] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 211.442428][ T5200] Bluetooth: hci3: command tx timeout [ 211.462167][ T8926] loop1: detected capacity change from 0 to 64 [ 211.467749][ T8827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.481852][ T8827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.518187][ T8827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.524611][ T8933] loop0: detected capacity change from 0 to 1024 [ 211.545638][ T8827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.601529][ T39] audit: type=1804 audit(1719404666.489:411): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.915" name="/syzkaller.2xkETc/50/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 211.617599][ T39] audit: type=1804 audit(1719404666.499:412): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.915" name="/syzkaller.2xkETc/50/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 211.686696][ T7834] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.734956][ T8827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.767586][ T8827] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.795685][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.798756][ T5244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.823535][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.826701][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.117917][ T8827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.152352][ T8961] loop3: detected capacity change from 0 to 1024 [ 212.167000][ T8827] veth0_vlan: entered promiscuous mode [ 212.202947][ T8827] veth1_vlan: entered promiscuous mode [ 212.252295][ T8827] veth0_macvtap: entered promiscuous mode [ 212.260751][ T8827] veth1_macvtap: entered promiscuous mode [ 212.291543][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.294174][ T1097] hfsplus: b-tree write err: -5, ino 4 [ 212.303139][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.312214][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.317398][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.322746][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.333181][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.351516][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.374118][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.378971][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.383065][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.395224][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.400107][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.404092][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.409811][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.466236][ T8827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.477500][ T8827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.481804][ T8827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.508777][ T8827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.634594][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.642712][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.740770][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.744266][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.746025][ T8972] loop0: detected capacity change from 0 to 32768 [ 212.835280][ T8972] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 212.844726][ T8972] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 212.885787][ T8972] bcachefs (loop0): alloc_read... done [ 212.889024][ T8972] bcachefs (loop0): stripes_read... done [ 212.891560][ T8972] bcachefs (loop0): snapshots_read... done [ 212.896265][ T8972] bcachefs (loop0): journal_replay... done [ 212.900564][ T8972] bcachefs (loop0): resume_logged_ops... done [ 212.912179][ T8972] bcachefs (loop0): going read-write [ 212.920480][ T8972] bcachefs (loop0): done starting filesystem [ 213.026853][ T1090] hfsplus: b-tree write err: -5, ino 4 [ 213.518596][ T5200] Bluetooth: hci3: command tx timeout [ 214.411430][ T9021] loop2: detected capacity change from 0 to 32768 [ 214.416529][ T9021] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.926 (9021) [ 214.424335][ T5200] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 214.442148][ T9021] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.454715][ T9021] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 214.458865][ T9021] BTRFS info (device loop2): using free-space-tree [ 214.569279][ T39] audit: type=1804 audit(1719404669.459:413): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.926" name="/syzkaller.Dc2Jd5/4/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 214.586283][ T39] audit: type=1804 audit(1719404669.469:414): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.926" name="/syzkaller.Dc2Jd5/4/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 214.640463][ T8827] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.768526][ T818] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 214.820493][ T5201] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.826537][ T5201] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.838551][ T5201] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.845280][ T5201] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.859013][ T5201] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.864470][ T5201] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.953140][ T818] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.957183][ T818] usb 8-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 214.962896][ T818] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.967119][ T818] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xF7 has an invalid bInterval 101, changing to 7 [ 214.972873][ T818] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xF7 has invalid maxpacket 10100, setting to 1024 [ 214.986978][ T818] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.991341][ T818] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.995723][ T818] usb 8-1: Product: syz [ 214.997838][ T818] usb 8-1: Manufacturer: syz [ 215.018475][ T818] cdc_wdm 8-1:1.0: skipping garbage [ 215.022066][ T818] cdc_wdm 8-1:1.0: skipping garbage [ 215.047136][ T818] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 215.161334][ T9045] chnl_net:caif_netlink_parms(): no params data found [ 215.220184][ T5387] usb 8-1: USB disconnect, device number 9 [ 215.333670][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.336688][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.341010][ T9045] bridge_slave_0: entered allmulticast mode [ 215.345208][ T9045] bridge_slave_0: entered promiscuous mode [ 215.355026][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.357945][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.366060][ T9045] bridge_slave_1: entered allmulticast mode [ 215.370537][ T9045] bridge_slave_1: entered promiscuous mode [ 215.440925][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.448660][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.526728][ T9045] team0: Port device team_slave_0 added [ 215.533330][ T9045] team0: Port device team_slave_1 added [ 215.536279][ T5200] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 215.617181][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.620650][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.632041][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.639136][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.642266][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.656256][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.747207][ T9045] hsr_slave_0: entered promiscuous mode [ 215.750914][ T9045] hsr_slave_1: entered promiscuous mode [ 215.754424][ T9045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.758137][ T9045] Cannot create hsr debugfs directory [ 215.996676][ T7789] bcachefs (loop0): shutting down [ 216.001887][ T7789] bcachefs (loop0): going read-only [ 216.005112][ T7789] bcachefs (loop0): finished waiting for writes to stop [ 216.012443][ T7789] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 216.016993][ T7789] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 216.023592][ T7789] bcachefs (loop0): shutdown complete, journal seq 13 [ 216.029977][ T7789] bcachefs (loop0): marking filesystem clean [ 216.081675][ T7789] bcachefs (loop0): shutdown complete [ 216.097337][ T9045] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.131626][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 216.488493][ T5200] Bluetooth: hci0: command 0x0406 tx timeout [ 216.658508][ T5263] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 216.788658][ T9086] loop3: detected capacity change from 0 to 32768 [ 216.874250][ T5263] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.879346][ T5263] usb 6-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 216.884331][ T5263] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.886085][ T9086] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 216.888463][ T5263] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF7 has an invalid bInterval 101, changing to 7 [ 216.897761][ T9086] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 216.900271][ T5263] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF7 has invalid maxpacket 10100, setting to 1024 [ 216.910674][ T5263] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.915270][ T5263] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.919319][ T5263] usb 6-1: Product: syz [ 216.921152][ T5263] usb 6-1: Manufacturer: syz [ 216.921430][ T9086] bcachefs (loop3): alloc_read... done [ 216.925472][ T9086] bcachefs (loop3): stripes_read... done [ 216.927758][ T9086] bcachefs (loop3): snapshots_read... done [ 216.931486][ T9086] bcachefs (loop3): journal_replay... done [ 216.934051][ T9086] bcachefs (loop3): resume_logged_ops... done [ 216.938955][ T9086] bcachefs (loop3): going read-write [ 216.941567][ T5263] cdc_wdm 6-1:1.0: skipping garbage [ 216.944042][ T5263] cdc_wdm 6-1:1.0: skipping garbage [ 216.944415][ T9086] bcachefs (loop3): done starting filesystem [ 216.946424][ T5263] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 216.966103][ T5201] Bluetooth: hci4: command tx timeout [ 217.142429][ T5263] usb 6-1: USB disconnect, device number 10 [ 217.885082][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 217.888914][ T5201] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 217.953303][ T9104] usb usb9: usbfs: process 9104 (syz.0.947) did not claim interface 0 before use [ 218.024928][ T9045] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.154780][ T9045] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.274438][ T9045] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.405291][ T63] bridge_slave_1: left allmulticast mode [ 218.415580][ T63] bridge_slave_1: left promiscuous mode [ 218.418638][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.424094][ T63] bridge_slave_0: left allmulticast mode [ 218.426941][ T63] bridge_slave_0: left promiscuous mode [ 218.430117][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.558712][ T5201] Bluetooth: hci0: command 0x0406 tx timeout [ 218.561873][ T5200] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 218.927720][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.935170][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.941604][ T63] bond0 (unregistering): Released all slaves [ 219.050385][ T5201] Bluetooth: hci4: command tx timeout [ 219.088749][ T9045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.105070][ T9045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.111342][ T9045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.117319][ T9045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.122783][ T39] audit: type=1400 audit(1719404674.019:415): avc: denied { getopt } for pid=9121 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 219.138814][ T39] audit: type=1400 audit(1719404674.019:416): avc: denied { map } for pid=9121 comm="syz.0.953" path="/dev/video3" dev="devtmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 219.260216][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.275321][ T9045] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.284704][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.287998][ T5243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.295370][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 219.312107][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.315492][ T5243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.421621][ T7834] bcachefs (loop3): shutting down [ 219.439746][ T7834] bcachefs (loop3): going read-only [ 219.442172][ T7834] bcachefs (loop3): finished waiting for writes to stop [ 219.471147][ T7834] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 219.474617][ T7834] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 219.493259][ T7834] bcachefs (loop3): shutdown complete, journal seq 13 [ 219.497230][ T7834] bcachefs (loop3): marking filesystem clean [ 219.511914][ T63] hsr_slave_0: left promiscuous mode [ 219.517680][ T7834] bcachefs (loop3): shutdown complete [ 219.527134][ T63] hsr_slave_1: left promiscuous mode [ 219.545879][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.549366][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.553757][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.557385][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.593845][ T63] veth1_macvtap: left promiscuous mode [ 219.595914][ T63] veth0_macvtap: left promiscuous mode [ 219.597843][ T63] veth1_vlan: left promiscuous mode [ 219.600072][ T63] veth0_vlan: left promiscuous mode [ 220.106645][ T5200] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 220.111845][ T5200] Bluetooth: hci0: SCO packet for unknown connection handle 1955 [ 220.934776][ T63] team0 (unregistering): Port device team_slave_1 removed [ 221.075661][ T63] team0 (unregistering): Port device team_slave_0 removed [ 221.122508][ T5200] Bluetooth: hci4: command tx timeout [ 222.086479][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.152702][ T9045] veth0_vlan: entered promiscuous mode [ 222.163681][ T9045] veth1_vlan: entered promiscuous mode [ 222.187749][ T9154] loop3: detected capacity change from 0 to 16 [ 222.190261][ T39] audit: type=1400 audit(1719404677.069:417): avc: denied { accept } for pid=9155 comm="syz.0.963" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 222.209966][ T9154] erofs: (device loop3): mounted with root inode @ nid 36. [ 222.211466][ T9045] veth0_macvtap: entered promiscuous mode [ 222.219405][ T9154] syz.3.964: attempt to access beyond end of device [ 222.219405][ T9154] loop3: rw=0, sector=40, nr_sectors = 8 limit=16 [ 222.223227][ T9045] veth1_macvtap: entered promiscuous mode [ 222.244927][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.249978][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.253962][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.259394][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.263681][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.269824][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.276566][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.294704][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.312649][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.316883][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.324877][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.328949][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.333734][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.353522][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.367967][ T9045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.374470][ T9045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.375240][ T5200] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 222.381774][ T9045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.385474][ T9045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.388607][ T5200] Bluetooth: hci0: SCO packet for unknown connection handle 1955 [ 222.467459][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.475874][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.520674][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.524948][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.789967][ T9172] loop2: detected capacity change from 0 to 2048 [ 222.831142][ T9172] loop2: p3 < > p4 < > [ 222.833717][ T9172] loop2: partition table partially beyond EOD, truncated [ 222.839991][ T9172] loop2: p3 start 4284289 is beyond EOD, truncated [ 223.199250][ T5200] Bluetooth: hci4: command tx timeout [ 223.371698][ T5200] Bluetooth: hci2: SCO packet for unknown connection handle 1955 [ 223.431412][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 223.460252][ T39] audit: type=1400 audit(1719404678.349:418): avc: denied { ioctl } for pid=9198 comm="syz.1.979" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 223.468791][ T9199] netlink: 'syz.1.979': attribute type 33 has an invalid length. [ 223.575931][ T9203] macsec0: entered promiscuous mode [ 223.583168][ T9203] macsec1: entered promiscuous mode [ 223.927680][ T5200] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 224.001217][ T9229] loop2: detected capacity change from 0 to 128 [ 224.039048][ T9229] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 224.101627][ T9231] input: syz0 as /devices/virtual/input/input39 [ 224.387113][ T9236] loop0: detected capacity change from 0 to 2048 [ 224.463582][ T9236] loop0: p3 < > p4 < > [ 224.466319][ T9236] loop0: partition table partially beyond EOD, truncated [ 224.486809][ T9236] loop0: p3 start 4284289 is beyond EOD, truncated [ 224.882156][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 225.084226][ T5200] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 225.093073][ T5200] Bluetooth: hci0: SCO packet for unknown connection handle 1955 [ 225.242863][ T39] audit: type=1800 audit(1719404680.129:419): pid=9262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1001" name="file0" dev="sda1" ino=2008 res=0 errno=0 [ 225.574922][ T9268] loop0: detected capacity change from 0 to 1024 [ 225.813122][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1007'. [ 225.934504][ T9282] input: syz0 as /devices/virtual/input/input40 [ 226.056066][ T9223] warn_alloc: 1 callbacks suppressed [ 226.056084][ T9223] syz.2.988: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 226.066774][ T9223] CPU: 0 PID: 9223 Comm: syz.2.988 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 226.071944][ T9223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.077168][ T9223] Call Trace: [ 226.077681][ T9286] loop3: detected capacity change from 0 to 2048 [ 226.078826][ T9223] [ 226.078842][ T9223] dump_stack_lvl+0x16c/0x1f0 [ 226.078871][ T9223] warn_alloc+0x24d/0x3a0 [ 226.078898][ T9223] ? __pfx_warn_alloc+0x10/0x10 [ 226.089881][ T9223] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 226.092233][ T9223] ? __get_vm_area_node+0x190/0x2d0 [ 226.094453][ T9223] ? __get_vm_area_node+0x1bc/0x2d0 [ 226.096667][ T9223] __vmalloc_node_range_noprof+0xff7/0x1520 [ 226.099401][ T9223] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 226.101923][ T9223] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 226.105003][ T9223] ? __get_vm_area_node+0x190/0x2d0 [ 226.107484][ T9223] ? __get_vm_area_node+0x1bc/0x2d0 [ 226.109877][ T9223] __vmalloc_node_range_noprof+0xc8d/0x1520 [ 226.112412][ T9223] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 226.114656][ T9223] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 226.116873][ T9223] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 226.119624][ T9223] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 226.121988][ T9223] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 226.124582][ T9223] vmalloc_user_noprof+0x6b/0x90 [ 226.126886][ T9223] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 226.129055][ T9223] vb2_vmalloc_alloc+0x11e/0x3d0 [ 226.131212][ T9223] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 226.133612][ T9223] __vb2_queue_alloc+0x896/0x1220 [ 226.135955][ T9223] vb2_core_create_bufs+0x55d/0xab0 [ 226.138231][ T9223] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 226.141026][ T9223] ? rcu_is_watching+0x12/0xc0 [ 226.143511][ T9223] vb2_create_bufs+0x566/0x780 [ 226.146246][ T9223] ? __pfx_vb2_create_bufs+0x10/0x10 [ 226.148846][ T9223] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 226.151450][ T9223] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 226.154293][ T9223] v4l_create_bufs+0x156/0x270 [ 226.156582][ T9223] __video_do_ioctl+0xaf9/0xf00 [ 226.159053][ T9223] ? __pfx___video_do_ioctl+0x10/0x10 [ 226.161505][ T9223] video_usercopy+0x4ce/0x1600 [ 226.163717][ T9223] ? __pfx___video_do_ioctl+0x10/0x10 [ 226.166186][ T9223] ? __pfx_video_usercopy+0x10/0x10 [ 226.168598][ T9223] ? selinux_file_ioctl+0x180/0x270 [ 226.171602][ T9223] v4l2_ioctl+0x1c0/0x260 [ 226.173890][ T9223] ? __pfx_v4l2_ioctl+0x10/0x10 [ 226.176304][ T9223] __x64_sys_ioctl+0x193/0x220 [ 226.178709][ T9223] do_syscall_64+0xcd/0x250 [ 226.181443][ T9223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.184568][ T9223] RIP: 0033:0x7f71c2775ae9 [ 226.186967][ T9223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.196581][ T9223] RSP: 002b:00007f71c35d2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.200104][ T9223] RAX: ffffffffffffffda RBX: 00007f71c2903fa0 RCX: 00007f71c2775ae9 [ 226.203558][ T9223] RDX: 0000000020004fc0 RSI: 00000000c100565c RDI: 0000000000000005 [ 226.207034][ T9223] RBP: 00007f71c27f6746 R08: 0000000000000000 R09: 0000000000000000 [ 226.210614][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.214233][ T9223] R13: 000000000000000b R14: 00007f71c2903fa0 R15: 00007ffd150628d8 [ 226.217925][ T9223] [ 226.221806][ T9223] Mem-Info: [ 226.223282][ T9223] active_anon:5752 inactive_anon:0 isolated_anon:0 [ 226.223282][ T9223] active_file:1794 inactive_file:42200 isolated_file:0 [ 226.223282][ T9223] unevictable:1768 dirty:634 writeback:0 [ 226.223282][ T9223] slab_reclaimable:10789 slab_unreclaimable:70002 [ 226.223282][ T9223] mapped:12510 shmem:2702 pagetables:802 [ 226.223282][ T9223] sec_pagetables:325 bounce:0 [ 226.223282][ T9223] kernel_misc_reclaimable:0 [ 226.223282][ T9223] free:476613 free_pcp:3148 free_cma:0 [ 226.246180][ T9223] Node 0 active_anon:22920kB inactive_anon:0kB active_file:7176kB inactive_file:168644kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50040kB dirty:2532kB writeback:0kB shmem:7280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11248kB pagetables:3184kB sec_pagetables:1300kB all_unreclaimable? no [ 226.261323][ T9223] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 226.274218][ T9223] Node 0 DMA free:15360kB boost:0kB min:328kB low:408kB high:488kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.288230][ T9223] lowmem_reserve[]: 0 1317 0 0 0 [ 226.291106][ T9223] Node 0 DMA32 free:251820kB boost:0kB min:28984kB low:36228kB high:43472kB reserved_highatomic:0KB active_anon:22796kB inactive_anon:0kB active_file:7176kB inactive_file:168644kB unevictable:3536kB writepending:2532kB present:2080628kB managed:1377256kB mlocked:0kB bounce:0kB free_pcp:11228kB local_pcp:5740kB free_cma:0kB [ 226.320233][ T9286] loop3: p3 < > p4 < > [ 226.322152][ T9286] loop3: partition table partially beyond EOD, truncated [ 226.322213][ T9223] lowmem_reserve[]: [ 226.325104][ T9286] loop3: p3 start 4284289 is beyond EOD, [ 226.326558][ T9223] 0 [ 226.329206][ T9286] truncated [ 226.334156][ T9223] 0 0 0 0 [ 226.336011][ T9223] Node 1 Normal free:1639208kB boost:0kB min:38268kB low:47832kB high:57396kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:1488kB local_pcp:0kB free_cma:0kB [ 226.367867][ T9223] lowmem_reserve[]: 0 0 0 0 0 [ 226.370387][ T39] audit: type=1800 audit(1719404681.249:420): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1010" name="file0" dev="sda1" ino=2011 res=0 errno=0 [ 226.370731][ T9223] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 226.387129][ T9223] Node 0 DMA32: 90*4kB (UME) 171*8kB (UME) 197*16kB (UME) 230*32kB (UME) 113*64kB (UME) 26*128kB (UME) 21*256kB (ME) 22*512kB (UME) 24*1024kB (UME) 11*2048kB (UM) 41*4096kB (UME) = 254480kB [ 226.420380][ T11] hfsplus: b-tree write err: -5, ino 4 [ 226.430036][ T9223] Node 1 Normal: 2*4kB (UM) 0*8kB 2*16kB (UM) 10*32kB (UM) 15*64kB (U) 8*128kB (UM) 6*256kB (U) 8*512kB (UM) 5*1024kB (U) 2*2048kB (UM) 396*4096kB (UM) = 1639208kB [ 226.436670][ T9223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.443385][ T9223] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.447287][ T9223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.451286][ T9223] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.455823][ T9223] 46684 total pagecache pages [ 226.458184][ T9223] 0 pages in swap cache [ 226.462147][ T9223] Free swap = 124464kB [ 226.464285][ T9223] Total swap = 124996kB [ 226.466124][ T9223] 1048443 pages RAM [ 226.467658][ T9223] 0 pages HighMem/MovableOnly [ 226.471942][ T9223] 254808 pages reserved [ 226.474429][ T9223] 0 pages cma reserved [ 226.572478][ T9297] €Â: renamed from pim6reg1 [ 226.607160][ T9297] €Â0: renamed from pim6reg1 [ 227.032015][ T39] audit: type=1400 audit(1719404681.929:421): avc: denied { bind } for pid=9307 comm="syz.3.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.070053][ T39] audit: type=1400 audit(1719404681.929:422): avc: denied { node_bind } for pid=9307 comm="syz.3.1015" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 227.078537][ T9310] netlink: 828 bytes leftover after parsing attributes in process `syz.0.1017'. [ 227.233967][ T9316] input: syz0 as /devices/virtual/input/input41 [ 227.304720][ T9045] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 227.315119][ T9045] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 227.508179][ T9322] loop1: detected capacity change from 0 to 8 [ 227.533245][ T9322] unable to read id index table [ 227.593889][ T5239] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 227.598003][ T39] audit: type=1800 audit(1719404682.479:423): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1022" name="bus" dev="sda1" ino=1981 res=0 errno=0 [ 227.638841][ T39] audit: type=1804 audit(1719404682.489:424): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1022" name="/syzkaller.U28m4x/58/bus" dev="sda1" ino=1981 res=1 errno=0 [ 227.644580][ T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.813455][ T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.878290][ T5197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.883275][ T5197] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.888629][ T5197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.904328][ T5197] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.905681][ T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.908041][ T5197] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 227.915380][ T5197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.972999][ T5201] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 228.031101][ T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.031495][ T9341] loop3: detected capacity change from 0 to 128 [ 228.045343][ T9341] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 228.272602][ T9329] chnl_net:caif_netlink_parms(): no params data found [ 228.350691][ T75] bridge_slave_1: left allmulticast mode [ 228.353485][ T75] bridge_slave_1: left promiscuous mode [ 228.356553][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.362253][ T75] bridge_slave_0: left allmulticast mode [ 228.364516][ T75] bridge_slave_0: left promiscuous mode [ 228.367350][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.563958][ T5201] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 228.816959][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.848970][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.870293][ T75] bond0 (unregistering): Released all slaves [ 228.937669][ T9356] input: syz0 as /devices/virtual/input/input42 [ 229.039310][ T5200] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 229.040928][ T5201] Bluetooth: hci0: command 0x0406 tx timeout [ 229.144276][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.147200][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.150786][ T9329] bridge_slave_0: entered allmulticast mode [ 229.155394][ T9329] bridge_slave_0: entered promiscuous mode [ 229.255873][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.259771][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.263306][ T9329] bridge_slave_1: entered allmulticast mode [ 229.267209][ T9329] bridge_slave_1: entered promiscuous mode [ 229.370926][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.467720][ T75] hsr_slave_0: left promiscuous mode [ 229.479119][ T75] hsr_slave_1: left promiscuous mode [ 229.493225][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.496748][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.519582][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.523085][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.601157][ T75] veth1_macvtap: left promiscuous mode [ 229.603663][ T75] veth0_macvtap: left promiscuous mode [ 229.606154][ T75] veth1_vlan: left promiscuous mode [ 229.612362][ T75] veth0_vlan: left promiscuous mode [ 230.015084][ T5201] Bluetooth: hci3: command tx timeout [ 230.519808][ T7834] UDF-fs: error (device loop3): udf_read_inode: (ino 114) failed !bh [ 230.523118][ T7834] UDF-fs: error (device loop3): udf_read_inode: (ino 114) failed !bh [ 230.725790][ T9389] loop1: detected capacity change from 0 to 8 [ 230.742229][ T9389] unable to read id index table [ 230.757240][ T39] audit: type=1800 audit(1719404685.639:425): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1038" name="bus" dev="sda1" ino=2006 res=0 errno=0 [ 230.773301][ T39] audit: type=1804 audit(1719404685.639:426): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1038" name="/syzkaller.U28m4x/62/bus" dev="sda1" ino=2006 res=1 errno=0 [ 230.964554][ T75] team0 (unregistering): Port device team_slave_1 removed [ 231.088751][ T75] team0 (unregistering): Port device team_slave_0 removed [ 231.128577][ T5201] Bluetooth: hci0: command 0x0406 tx timeout [ 231.133975][ T5200] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 231.979033][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.014297][ T9370] €Â: renamed from pim6reg1 [ 232.078560][ T5201] Bluetooth: hci3: command tx timeout [ 232.086548][ T9329] team0: Port device team_slave_0 added [ 232.095706][ T9329] team0: Port device team_slave_1 added [ 232.139608][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.142505][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.153012][ T9329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.163928][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.166949][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.177034][ T9329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.262871][ T9329] hsr_slave_0: entered promiscuous mode [ 232.265568][ T9329] hsr_slave_1: entered promiscuous mode [ 232.269120][ T9329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.272311][ T9329] Cannot create hsr debugfs directory [ 232.543005][ T9417] macsec1: entered promiscuous mode [ 232.584522][ T5200] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.592211][ T5200] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.595439][ T5200] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.600458][ T5200] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.606013][ T5200] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.611046][ T5200] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.646834][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.708019][ T5201] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 232.790234][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.919410][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.975954][ T5201] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 232.979202][ T9421] chnl_net:caif_netlink_parms(): no params data found [ 232.980881][ T5201] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 233.047650][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.107175][ T39] audit: type=1804 audit(1719404687.989:427): pid=9442 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1049" name="/syzkaller.U28m4x/67/bus" dev="sda1" ino=2007 res=1 errno=0 [ 233.196884][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.199379][ T5201] Bluetooth: hci0: command 0x0406 tx timeout [ 233.200814][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.206124][ T9421] bridge_slave_0: entered allmulticast mode [ 233.211835][ T9421] bridge_slave_0: entered promiscuous mode [ 233.217420][ T9329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.224622][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.227811][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.233617][ T9421] bridge_slave_1: entered allmulticast mode [ 233.237719][ T9421] bridge_slave_1: entered promiscuous mode [ 233.243598][ T9329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.253546][ T9329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.329258][ T9329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.343249][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.350254][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.427336][ T9421] team0: Port device team_slave_0 added [ 233.448139][ T9421] team0: Port device team_slave_1 added [ 233.496297][ T75] bridge_slave_1: left allmulticast mode [ 233.498601][ T75] bridge_slave_1: left promiscuous mode [ 233.500984][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.505591][ T75] bridge_slave_0: left allmulticast mode [ 233.508692][ T75] bridge_slave_0: left promiscuous mode [ 233.511742][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.942716][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.954172][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.962866][ T75] bond0 (unregistering): Released all slaves [ 234.016798][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.019797][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.034286][ T9421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.040556][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.043565][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.054535][ T9421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.120509][ T39] audit: type=1400 audit(1719404689.009:428): avc: denied { name_bind } for pid=9471 comm="syz.0.1054" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 234.145726][ T9421] hsr_slave_0: entered promiscuous mode [ 234.149913][ T9421] hsr_slave_1: entered promiscuous mode [ 234.153188][ T9421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.156578][ T9421] Cannot create hsr debugfs directory [ 234.162894][ T9469] macsec0: entered promiscuous mode [ 234.165016][ T9469] macsec1: entered promiscuous mode [ 234.168643][ T5201] Bluetooth: hci3: command tx timeout [ 234.183283][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 234.365305][ T39] audit: type=1400 audit(1719404689.249:429): avc: denied { read } for pid=9482 comm="syz.0.1057" path="socket:[31736]" dev="sockfs" ino=31736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.405596][ T75] hsr_slave_0: left promiscuous mode [ 234.409076][ T75] hsr_slave_1: left promiscuous mode [ 234.412234][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.415123][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.418316][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.422289][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.458798][ T75] veth1_macvtap: left promiscuous mode [ 234.461159][ T75] veth0_macvtap: left promiscuous mode [ 234.463612][ T75] veth1_vlan: left promiscuous mode [ 234.465871][ T75] veth0_vlan: left promiscuous mode [ 234.642853][ T5201] Bluetooth: hci2: command tx timeout [ 234.728661][ T5201] Bluetooth: hci1: command 0x0406 tx timeout [ 235.594094][ T75] team0 (unregistering): Port device team_slave_1 removed [ 235.720649][ T75] team0 (unregistering): Port device team_slave_0 removed [ 236.041092][ T9495] loop1: detected capacity change from 0 to 16 [ 236.046521][ T9495] erofs: (device loop1): mounted with root inode @ nid 36. [ 236.063022][ T9495] syz.1.1060: attempt to access beyond end of device [ 236.063022][ T9495] loop1: rw=0, sector=40, nr_sectors = 8 limit=16 [ 236.238658][ T5201] Bluetooth: hci3: command tx timeout [ 236.729243][ T5200] Bluetooth: hci2: command tx timeout [ 236.747988][ T9502] macsec1: entered promiscuous mode [ 236.830858][ T9329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.872541][ T9329] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.903692][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.906750][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.926929][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.929776][ T5243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.963106][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 236.979445][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 237.038640][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 237.056642][ T9329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.156684][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'. [ 237.231270][ T9529] loop1: detected capacity change from 0 to 8 [ 237.237597][ T9529] unable to read id index table [ 237.255260][ T9329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.272152][ T9421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 237.291051][ T9421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.300453][ T9421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 237.307274][ T9421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 237.321343][ T5240] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 237.335235][ T39] audit: type=1800 audit(1719404692.219:430): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1068" name="bus" dev="sda1" ino=2003 res=0 errno=0 [ 237.352391][ T39] audit: type=1804 audit(1719404692.229:431): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1068" name="/syzkaller.U28m4x/80/bus" dev="sda1" ino=2003 res=1 errno=0 [ 237.369641][ T9329] veth0_vlan: entered promiscuous mode [ 237.384002][ T9329] veth1_vlan: entered promiscuous mode [ 237.431411][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.468240][ T9421] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.474600][ T9329] veth0_macvtap: entered promiscuous mode [ 237.482521][ T9329] veth1_macvtap: entered promiscuous mode [ 237.510841][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.514110][ T5242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.524922][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.530591][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.534963][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.540193][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.546409][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.553822][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.558960][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.563284][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.568073][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.578681][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.586073][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.589343][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.606147][ T9329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.611100][ T9329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.615005][ T9329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.618776][ T9329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.661975][ T9421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.730910][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.735478][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.769224][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.772928][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.851709][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.925225][ T9421] veth0_vlan: entered promiscuous mode [ 237.940090][ T9550] macsec1: entered promiscuous mode [ 237.965055][ T9421] veth1_vlan: entered promiscuous mode [ 237.998126][ T9421] veth0_macvtap: entered promiscuous mode [ 238.008242][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 238.008853][ T9421] veth1_macvtap: entered promiscuous mode [ 238.017021][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 238.041661][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.046794][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.053018][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.061827][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.076065][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.083273][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.090240][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.097064][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1073'. [ 238.102123][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 238.126700][ T9556] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1074'. [ 238.132911][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.137960][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.142633][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.147424][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.160100][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.165187][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.174205][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.193818][ T9421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.197870][ T9421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.203210][ T9421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.225144][ T9421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.316557][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.320655][ T5201] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 238.320983][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.328616][ T5201] Bluetooth: hci0: command 0x0406 tx timeout [ 238.369900][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.373716][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.501423][ T9574] loop1: detected capacity change from 0 to 1024 [ 238.550316][ T9579] loop2: detected capacity change from 0 to 8 [ 238.559435][ T9579] unable to read id index table [ 238.601415][ T5239] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 238.605429][ T39] audit: type=1800 audit(1719404693.489:432): pid=9579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1083" name="bus" dev="sda1" ino=2018 res=0 errno=0 [ 238.607331][ T39] audit: type=1804 audit(1719404693.489:433): pid=9579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1083" name="/syzkaller.rzaeON/5/bus" dev="sda1" ino=2018 res=1 errno=0 [ 238.798914][ T5201] Bluetooth: hci2: command tx timeout [ 239.342713][ T11] hfsplus: b-tree write err: -5, ino 4 [ 239.527230][ T9603] dccp_close: ABORT with 1 bytes unread [ 239.760732][ T5243] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 239.787736][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 239.882709][ T39] audit: type=1400 audit(1719404694.769:434): avc: denied { ioctl } for pid=9624 comm="syz.2.1103" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 239.940254][ T5243] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.944292][ T5243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.957666][ T5243] usb 6-1: config 0 descriptor?? [ 239.961416][ T5243] cp210x 6-1:0.0: cp210x converter detected [ 240.039179][ T9633] macsec0: entered promiscuous mode [ 240.041709][ T9633] macsec1: entered promiscuous mode [ 240.146429][ T9631] loop2: detected capacity change from 0 to 32768 [ 240.238078][ T9631] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 240.253394][ T9631] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 240.275832][ T9631] bcachefs (loop2): alloc_read... done [ 240.278618][ T9631] bcachefs (loop2): stripes_read... done [ 240.280709][ T9631] bcachefs (loop2): snapshots_read... done [ 240.287169][ T9631] bcachefs (loop2): journal_replay... done [ 240.290790][ T9631] bcachefs (loop2): resume_logged_ops... done [ 240.296925][ T9631] bcachefs (loop2): going read-write [ 240.302892][ T9631] bcachefs (loop2): done starting filesystem [ 240.369995][ T9601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.375944][ T9601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.380916][ T5243] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 240.399357][ T5243] usb 6-1: cp210x converter now attached to ttyUSB0 [ 240.569462][ T39] audit: type=1400 audit(1719404695.459:435): avc: denied { write } for pid=9660 comm="syz.3.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.635676][ T39] audit: type=1400 audit(1719404695.519:436): avc: denied { read } for pid=9660 comm="syz.3.1113" path="socket:[35635]" dev="sockfs" ino=35635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.689266][ T39] audit: type=1400 audit(1719404695.579:437): avc: denied { listen } for pid=9660 comm="syz.3.1113" lport=41662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.726778][ T5201] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 240.749597][ T39] audit: type=1400 audit(1719404695.639:438): avc: denied { accept } for pid=9660 comm="syz.3.1113" lport=41662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.888577][ T5201] Bluetooth: hci2: command tx timeout [ 240.951506][ T9673] macsec1: entered promiscuous mode [ 241.670786][ T5200] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 242.066099][ T5200] Bluetooth: hci2: SCO packet for unknown connection handle 1955 [ 242.303229][ T9329] bcachefs (loop2): shutting down [ 242.308422][ T9329] bcachefs (loop2): going read-only [ 242.310366][ T9329] bcachefs (loop2): finished waiting for writes to stop [ 242.313948][ T9329] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 242.317158][ T9329] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 242.324926][ T9329] bcachefs (loop2): shutdown complete, journal seq 13 [ 242.328201][ T9329] bcachefs (loop2): marking filesystem clean [ 242.357206][ T9329] bcachefs (loop2): shutdown complete [ 242.497379][ T5243] usb 6-1: USB disconnect, device number 11 [ 242.511819][ T5243] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 242.547481][ T5243] cp210x 6-1:0.0: device disconnected [ 242.563208][ T9710] __nla_validate_parse: 16 callbacks suppressed [ 242.563225][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 242.577651][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 242.639978][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 242.649278][ T9718] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1128'. [ 242.661688][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 242.699842][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'. [ 242.719755][ T9724] macsec1: entered promiscuous mode [ 242.808602][ T5200] Bluetooth: hci1: command 0x0406 tx timeout [ 242.909371][ T57] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 243.091154][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 243.099084][ T57] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 243.102189][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.106140][ T57] usb 5-1: config 0 descriptor?? [ 243.112108][ T57] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input43 [ 243.197104][ T5200] Bluetooth: hci2: SCO packet for unknown connection handle 1955 [ 243.320439][ T9717] loop0: detected capacity change from 0 to 512 [ 243.329631][ T9717] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.333594][ T9717] EXT4-fs (loop0): blocks per group (64) and clusters per group (32768) inconsistent [ 243.530605][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 243.534974][ T9743] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1141'. [ 243.689748][ T5201] Bluetooth: hci2: command tx timeout [ 243.700545][ T9750] loop2: detected capacity change from 0 to 2048 [ 243.755046][ T9750] loop2: p3 < > p4 < > [ 243.756673][ T9750] loop2: partition table partially beyond EOD, truncated [ 243.763319][ T9750] loop2: p3 start 4284289 is beyond EOD, truncated [ 243.955262][ T5201] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 244.133194][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 244.151429][ T9768] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1151'. [ 244.396977][ T5201] Bluetooth: hci2: SCO packet for unknown connection handle 1955 [ 244.643121][ T4674] bcm5974 5-1:0.0: could not read from device [ 244.651240][ T4674] bcm5974 5-1:0.0: could not read from device [ 244.654289][ T57] usb 5-1: USB disconnect, device number 14 [ 244.986336][ T9791] loop1: detected capacity change from 0 to 8 [ 244.990993][ T9791] unable to read id index table [ 244.993217][ T5201] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 244.997519][ T39] audit: type=1800 audit(1719404699.879:439): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1160" name="bus" dev="sda1" ino=2018 res=0 errno=0 [ 245.009620][ T39] audit: type=1804 audit(1719404699.889:440): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1160" name="/syzkaller.U28m4x/95/bus" dev="sda1" ino=2018 res=1 errno=0 [ 245.473524][ T9802] loop0: detected capacity change from 0 to 2048 [ 245.515003][ T9802] loop0: p3 < > p4 < > [ 245.516814][ T9802] loop0: partition table partially beyond EOD, truncated [ 245.524944][ T9802] loop0: p3 start 4284289 is beyond EOD, truncated [ 245.768471][ T5200] Bluetooth: hci2: command 0x0406 tx timeout [ 245.935844][ T9811] syzkaller0: entered promiscuous mode [ 245.937769][ T9811] syzkaller0: entered allmulticast mode [ 246.366013][ T7789] [ 246.367183][ T7789] ====================================================== [ 246.370482][ T7789] WARNING: possible circular locking dependency detected [ 246.373615][ T7789] 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 246.377591][ T7789] ------------------------------------------------------ [ 246.382351][ T7789] syz-executor/7789 is trying to acquire lock: [ 246.384875][ T7789] ffff888020bff008 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x281/0x670 [ 246.388761][ T7789] [ 246.388761][ T7789] but task is already holding lock: [ 246.391920][ T7789] ffff88802174f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0x62b/0x850 [ 246.396298][ T7789] [ 246.396298][ T7789] which lock already depends on the new lock. [ 246.396298][ T7789] [ 246.400969][ T7789] [ 246.400969][ T7789] the existing dependency chain (in reverse order) is: [ 246.404761][ T7789] [ 246.404761][ T7789] -> #2 (&disk->open_mutex){+.+.}-{3:3}: [ 246.408227][ T7789] __mutex_lock+0x175/0x9c0 [ 246.410367][ T7789] bdev_open+0x41a/0xe50 [ 246.412820][ T7789] bdev_file_open_by_dev+0x17d/0x210 [ 246.415499][ T7789] disk_scan_partitions+0x1ed/0x320 [ 246.417699][ T7789] device_add_disk+0xe97/0x1250 [ 246.420145][ T7789] pmem_attach_disk+0x9fe/0x1400 [ 246.422503][ T7789] nd_pmem_probe+0x1a9/0x1f0 [ 246.424894][ T7789] nvdimm_bus_probe+0x169/0x5d0 [ 246.427402][ T7789] really_probe+0x23e/0xa90 [ 246.429763][ T7789] __driver_probe_device+0x1de/0x440 [ 246.432422][ T7789] driver_probe_device+0x4c/0x1b0 [ 246.434692][ T7789] __driver_attach+0x283/0x580 [ 246.436989][ T7789] bus_for_each_dev+0x13c/0x1d0 [ 246.439104][ T7789] bus_add_driver+0x2e9/0x690 [ 246.441241][ T7789] driver_register+0x15c/0x4b0 [ 246.443330][ T7789] __nd_driver_register+0x103/0x1a0 [ 246.445285][ T7789] do_one_initcall+0x128/0x700 [ 246.447205][ T7789] kernel_init_freeable+0x69d/0xca0 [ 246.449431][ T7789] kernel_init+0x1c/0x2b0 [ 246.451557][ T7789] ret_from_fork+0x45/0x80 [ 246.453710][ T7789] ret_from_fork_asm+0x1a/0x30 [ 246.456016][ T7789] [ 246.456016][ T7789] -> #1 (&nvdimm_namespace_key){+.+.}-{3:3}: [ 246.458916][ T7789] __mutex_lock+0x175/0x9c0 [ 246.460642][ T7789] uevent_show+0x188/0x3b0 [ 246.462409][ T7789] dev_attr_show+0x53/0xe0 [ 246.464466][ T7789] sysfs_kf_seq_show+0x23e/0x410 [ 246.466908][ T7789] seq_read_iter+0x4fa/0x12c0 [ 246.469156][ T7789] kernfs_fop_read_iter+0x41a/0x590 [ 246.471620][ T7789] vfs_read+0x869/0xbd0 [ 246.473626][ T7789] ksys_read+0x12f/0x260 [ 246.475684][ T7789] do_syscall_64+0xcd/0x250 [ 246.477876][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.478624][ T818] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 246.480703][ T7789] [ 246.480703][ T7789] -> #0 (kn->active#5){++++}-{0:0}: [ 246.487345][ T7789] __lock_acquire+0x2478/0x3b30 [ 246.489690][ T7789] lock_acquire+0x1b1/0x560 [ 246.491908][ T7789] kernfs_drain+0x48f/0x590 [ 246.494227][ T7789] __kernfs_remove+0x281/0x670 [ 246.496497][ T7789] kernfs_remove_by_name_ns+0xb2/0x130 [ 246.499128][ T7789] device_del+0x381/0x9f0 [ 246.501210][ T7789] drop_partition+0x109/0x1c0 [ 246.503482][ T7789] bdev_disk_changed+0x24d/0x14f0 [ 246.505864][ T7789] __loop_clr_fd+0x654/0x850 [ 246.508055][ T7789] lo_ioctl+0x5dc/0x1950 [ 246.509742][ T7789] blkdev_ioctl+0x27c/0x6e0 [ 246.511640][ T7789] __x64_sys_ioctl+0x193/0x220 [ 246.513916][ T7789] do_syscall_64+0xcd/0x250 [ 246.516231][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.518885][ T7789] [ 246.518885][ T7789] other info that might help us debug this: [ 246.518885][ T7789] [ 246.522606][ T7789] Chain exists of: [ 246.522606][ T7789] kn->active#5 --> &nvdimm_namespace_key --> &disk->open_mutex [ 246.522606][ T7789] [ 246.527417][ T7789] Possible unsafe locking scenario: [ 246.527417][ T7789] [ 246.530664][ T7789] CPU0 CPU1 [ 246.533050][ T7789] ---- ---- [ 246.535569][ T7789] lock(&disk->open_mutex); [ 246.537504][ T7789] lock(&nvdimm_namespace_key); [ 246.540508][ T7789] lock(&disk->open_mutex); [ 246.543203][ T7789] lock(kn->active#5); [ 246.544707][ T7789] [ 246.544707][ T7789] *** DEADLOCK *** [ 246.544707][ T7789] [ 246.547527][ T7789] 1 lock held by syz-executor/7789: [ 246.549492][ T7789] #0: ffff88802174f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0x62b/0x850 [ 246.553652][ T7789] [ 246.553652][ T7789] stack backtrace: [ 246.556329][ T7789] CPU: 0 PID: 7789 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 246.560079][ T7789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.563839][ T7789] Call Trace: [ 246.564976][ T7789] [ 246.566014][ T7789] dump_stack_lvl+0x116/0x1f0 [ 246.567844][ T7789] check_noncircular+0x31a/0x400 [ 246.569500][ T7789] ? __pfx_check_noncircular+0x10/0x10 [ 246.571409][ T7789] ? __kernel_text_address+0xd/0x40 [ 246.573236][ T7789] ? __pfx_mark_lock+0x10/0x10 [ 246.574993][ T7789] ? lockdep_lock+0xc6/0x200 [ 246.577009][ T7789] ? __pfx_lockdep_lock+0x10/0x10 [ 246.578785][ T7789] __lock_acquire+0x2478/0x3b30 [ 246.580468][ T7789] ? __pfx___lock_acquire+0x10/0x10 [ 246.582386][ T7789] ? hlock_class+0x4e/0x130 [ 246.583860][ T7789] lock_acquire+0x1b1/0x560 [ 246.585526][ T7789] ? __kernfs_remove+0x281/0x670 [ 246.587678][ T7789] ? __pfx_lock_acquire+0x10/0x10 [ 246.589807][ T7789] ? up_write+0x1b2/0x520 [ 246.591680][ T7789] kernfs_drain+0x48f/0x590 [ 246.593578][ T7789] ? __kernfs_remove+0x281/0x670 [ 246.595660][ T7789] ? __pfx_kernfs_drain+0x10/0x10 [ 246.597898][ T7789] __kernfs_remove+0x281/0x670 [ 246.600024][ T7789] kernfs_remove_by_name_ns+0xb2/0x130 [ 246.602260][ T7789] device_del+0x381/0x9f0 [ 246.604229][ T7789] ? __pfx_device_del+0x10/0x10 [ 246.606455][ T7789] drop_partition+0x109/0x1c0 [ 246.608459][ T7789] bdev_disk_changed+0x24d/0x14f0 [ 246.610720][ T7789] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.613390][ T7789] ? __pfx___mutex_lock+0x10/0x10 [ 246.615571][ T7789] ? __pfx_bdev_disk_changed+0x10/0x10 [ 246.617990][ T7789] ? filemap_write_and_wait_range+0x7d/0x130 [ 246.619977][ T7789] __loop_clr_fd+0x654/0x850 [ 246.621977][ T7789] lo_ioctl+0x5dc/0x1950 [ 246.623571][ T7789] ? __pfx_lo_ioctl+0x10/0x10 [ 246.625208][ T7789] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 246.627231][ T7789] ? tomoyo_path_number_perm+0x292/0x590 [ 246.629150][ T7789] ? __pfx_lock_release+0x10/0x10 [ 246.630899][ T7789] ? kfree+0x12a/0x3b0 [ 246.632355][ T7789] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.634564][ T7789] ? blkdev_common_ioctl+0x1fc/0x2120 [ 246.636993][ T7789] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 246.639579][ T7789] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.641704][ T7789] ? ioctl_has_perm.constprop.0.isra.0+0x2f0/0x470 [ 246.643830][ T7789] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 246.646389][ T7789] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 246.649398][ T7789] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.651753][ T7789] ? __pfx_lo_ioctl+0x10/0x10 [ 246.653818][ T7789] blkdev_ioctl+0x27c/0x6e0 [ 246.655690][ T7789] ? __pfx_blkdev_ioctl+0x10/0x10 [ 246.657912][ T7789] ? selinux_file_ioctl+0xb4/0x270 [ 246.660116][ T7789] ? __pfx_blkdev_ioctl+0x10/0x10 [ 246.662271][ T7789] __x64_sys_ioctl+0x193/0x220 [ 246.664318][ T7789] do_syscall_64+0xcd/0x250 [ 246.666652][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.669284][ T7789] RIP: 0033:0x7f684bd756eb [ 246.671062][ T7789] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 246.678624][ T7789] RSP: 002b:00007ffcbf96abf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.682123][ T7789] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f684bd756eb [ 246.685534][ T7789] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 246.689280][ T7789] RBP: 00007ffcbf96ac9c R08: 0000000000000000 R09: 00007ffcbf96a997 [ 246.692215][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 246.695437][ T7789] R13: 000000000003c104 R14: 000000000003bdb1 R15: 00007ffcbf96ad00 [ 246.698642][ T7789] [ 246.699833][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.198514][ T5201] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 247.279604][ T5201] Bluetooth: hci0: command 0x0406 tx timeout [ 247.848528][ T5201] Bluetooth: hci2: command 0x0406 tx timeout [ 248.265009][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.373944][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.444159][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.506622][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.612337][ T75] bridge_slave_1: left allmulticast mode [ 248.614532][ T75] bridge_slave_1: left promiscuous mode [ 248.616813][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.622062][ T75] bridge_slave_0: left allmulticast mode [ 248.624648][ T75] bridge_slave_0: left promiscuous mode [ 248.627525][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.775400][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.782931][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.787790][ T75] bond0 (unregistering): Released all slaves [ 249.109653][ T75] hsr_slave_0: left promiscuous mode [ 249.112077][ T75] hsr_slave_1: left promiscuous mode [ 249.115114][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.118010][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.122103][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.125351][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.130779][ T75] veth1_macvtap: left promiscuous mode [ 249.133038][ T75] veth0_macvtap: left promiscuous mode [ 249.135112][ T75] veth1_vlan: left promiscuous mode [ 249.137022][ T75] veth0_vlan: left promiscuous mode [ 249.488488][ T75] team0 (unregistering): Port device team_slave_1 removed [ 249.499403][ T75] team0 (unregistering): Port device team_slave_0 removed [ 250.120966][ T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.178964][ T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.265255][ T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.363646][ T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.453269][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.525630][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.629224][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.715054][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.792961][ T39] audit: type=1400 audit(1719404705.679:441): avc: denied { setrlimit } for pid=9888 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 250.808340][ T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.854148][ T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.915739][ T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.993856][ T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.099628][ T75] bridge_slave_1: left allmulticast mode [ 251.101984][ T75] bridge_slave_1: left promiscuous mode [ 251.104447][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.109760][ T75] bridge_slave_0: left allmulticast mode [ 251.112419][ T75] bridge_slave_0: left promiscuous mode [ 251.114955][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.120950][ T75] bridge_slave_1: left allmulticast mode [ 251.122917][ T75] bridge_slave_1: left promiscuous mode [ 251.124882][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.128488][ T75] bridge_slave_0: left allmulticast mode [ 251.130486][ T75] bridge_slave_0: left promiscuous mode [ 251.132475][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.136513][ T75] bridge_slave_1: left allmulticast mode [ 251.138938][ T75] bridge_slave_1: left promiscuous mode [ 251.140906][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.144252][ T75] bridge_slave_0: left allmulticast mode [ 251.146279][ T75] bridge_slave_0: left promiscuous mode [ 251.148445][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.514209][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.519373][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.523918][ T75] bond0 (unregistering): Released all slaves [ 251.533638][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.538800][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.543401][ T75] bond0 (unregistering): Released all slaves [ 251.553378][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.558984][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.562769][ T75] bond0 (unregistering): Released all slaves [ 252.291102][ T75] hsr_slave_0: left promiscuous mode [ 252.294157][ T75] hsr_slave_1: left promiscuous mode [ 252.297365][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.315554][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.323055][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.325966][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.333040][ T75] hsr_slave_0: left promiscuous mode [ 252.336021][ T75] hsr_slave_1: left promiscuous mode [ 252.340318][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.343678][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.347920][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.351414][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.358862][ T75] hsr_slave_0: left promiscuous mode [ 252.361903][ T75] hsr_slave_1: left promiscuous mode [ 252.365025][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.368275][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.373580][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.377022][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.385562][ T75] veth1_macvtap: left promiscuous mode [ 252.388102][ T75] veth0_macvtap: left promiscuous mode [ 252.392431][ T75] veth1_vlan: left promiscuous mode [ 252.394991][ T75] veth0_vlan: left promiscuous mode [ 252.398657][ T75] veth1_macvtap: left promiscuous mode [ 252.401061][ T75] veth0_macvtap: left promiscuous mode [ 252.403536][ T75] veth1_vlan: left promiscuous mode [ 252.405839][ T75] veth0_vlan: left promiscuous mode [ 252.409355][ T75] veth1_macvtap: left promiscuous mode [ 252.411853][ T75] veth0_macvtap: left promiscuous mode [ 252.414450][ T75] veth1_vlan: left promiscuous mode [ 252.416989][ T75] veth0_vlan: left promiscuous mode [ 252.869763][ T75] team0 (unregistering): Port device team_slave_1 removed [ 252.926331][ T75] team0 (unregistering): Port device team_slave_0 removed [ 253.394792][ T75] team0 (unregistering): Port device team_slave_1 removed [ 253.454507][ T75] team0 (unregistering): Port device team_slave_0 removed [ 253.896415][ T75] team0 (unregistering): Port device team_slave_1 removed [ 253.903565][ T75] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 12:25:01 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff84fd31c0 RDI=ffffffff94dd83e0 RBP=ffffffff94dd83a0 RSP=ffffc9000392ee78 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e30312e36 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff29bb0ce R15=dffffc0000000000 RIP=ffffffff84fd31e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555556879500 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555568945c8 CR3=000000005789e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000001000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2844a690 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6e69e4256 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6e69e4263 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6e69e425d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6e69e4271 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6e69e42f7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6e69e43d5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81d266d2 RDX=ffff888029c50000 RSI=ffffffff81d26c66 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc900032c78b8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=dffffc0000000000 R12=00007f1977c12000 R13=dffffc0000000000 R14=ffffc900032c79e0 R15=00007f1977dbf000 RIP=ffffffff818de413 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000557e9e6cd8e8 CR3=000000000d97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005010404 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=000000003c0f0000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f197d8d46a3 00007f197d8d46a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff139b2d20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555592daf690 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555592dbce5d 0000555592dbcd10 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555592dc90e4 0000555592dc90e0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555592dff630 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f197d807598 0000002000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2070616d6d007025 20746f67202c7025 20746e6177005647 4553474953000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0555444848005500 05514a4205095500 05514b4452005647 4553474953000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 011780041885c2cd 9e08000100000008 0606011eca000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001ffff fffffffffffeff08 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 17b00300080017a8 0300020017a40300 020017a203000200 17a0030008001798 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eefc0b08000cbf33 2e2e31fc11041214 bfefefefeff2bf33 322e272b20222e2b ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf c924bfbfbfbfbfbf bfbfdf2422bfbf33 322e272b20222e2b ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=0000000080000000 RCX=ffffffff8178b22c RDX=ffff88802b372440 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90005be75f0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000080000000 R11=0000000000000000 R12=ffffc90005be76c0 R13=00007f80b3582477 R14=ffffc90005be7738 R15=ffff88802b372440 RIP=ffffffff818de3f3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f80b34ab280 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd6e6ad2c78 CR3=0000000029af2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000100001ff Opmask02=00000000ffffffff Opmask03=2040000404420020 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561351446800 00005613514269f0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1e44cc20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1e44c240 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730cf3c016e853 73730cf3c016e853 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737342 7373256022305873 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f32706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f32706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 000000332e003675 70632f302f716d2f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561351437260 00005613514459f0 0000000000000041 0000000000000033 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b84efa789477995c 0000561630779045 0000000000000031 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382432273f397b27 697a787c69303b7e 69305f474f5b647c 6930382432273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc9000376f308 RCX=ffffffff81342b8e RDX=ffffc9000376f318 RSI=ffffffff81e96f64 RDI=ffffc9000376f318 RBP=ffffc9000376f2d8 RSP=ffffc9000376f220 R8 =0000000000000007 R9 =0000000000000000 R10=ffffffff81e96f64 R11=0000000000000000 R12=ffffc9000376f248 R13=ffffffff81798350 R14=ffffc9000376f308 R15=ffff888024122440 RIP=ffffffff8179836e RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555564ecc500 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd6e6ad0ab8 CR3=000000004f0ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2844a690 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6e69e4256 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6e69e4263 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6e69e425d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6e69e4271 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6e69e42f7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6e69e43d5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000