last executing test programs: 1m54.618689086s ago: executing program 3 (id=147): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) getdents64(r0, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143142, 0x102) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r5, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r2, &(0x7f0000000840)="e6aaa18c6008103c3301ee0b30894a88807936738d1866e91b6acd2e6600009d8cb3f8f8a9d40c06", 0x28, 0x4048040, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) clock_gettime(0x0, &(0x7f00000030c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003080)=[{{&(0x7f0000000340)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/168, 0xa8}, {&(0x7f00000019c0)=""/206, 0xce}, {&(0x7f0000001ac0)=""/81, 0x51}, {&(0x7f0000001b40)=""/190, 0xbe}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/133, 0x85}, {&(0x7f0000002cc0)=""/35, 0x23}], 0x8, &(0x7f0000002d40)=""/183, 0xb7}, 0x3}, {{&(0x7f0000002e00)=@rc, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002e80)=""/222, 0xde}], 0x1, &(0x7f0000002fc0)=""/150, 0x96}, 0x1}], 0x2, 0x2101, &(0x7f0000003100)={r9, r10+60000000}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x54}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000400)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000940)={0x1c, r13, 0x5, 0x0, 0x0, {{0x5d}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x58, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) 1m54.353159128s ago: executing program 3 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x81}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7f}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2f, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0x7}, {0x9, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40010) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{}, @HCI_OP_LE_SET_SCAN_ENABLE={{0x40}, 0x6}}}, 0x9) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) 1m54.131460187s ago: executing program 3 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e000000", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000080026"], 0x30}}, 0x0) 1m54.042441824s ago: executing program 3 (id=156): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) r2 = openat$btrfs_control(0xffffff9c, &(0x7f0000000480), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x8a, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000240)='GPL\x00', 0xd, 0xdd, &(0x7f00000002c0)=""/221, 0x40f00, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x1f, r0, 0x8, &(0x7f0000000400)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r1, r2, 0x2, &(0x7f0000000580)=[r3], &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0x8}, {0x3, 0x2, 0x9, 0x7}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x1, 0x2, 0x2, 0x7}], 0x10, 0xffff4fb5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r4}, 0x38) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x12201) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000040)={0x3, 0x1}) r6 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2e, 0x401000, 0xe, 0x3, 0x2000001, 0x1, 0xb000000}}) 1m53.850937221s ago: executing program 3 (id=160): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) (async, rerun: 64) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) splice(r2, 0x0, r3, 0x0, 0x7ffff000, 0x3) (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000140)=0x7, 0x4) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0xfc}}, 0x0) 1m53.782413322s ago: executing program 3 (id=161): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2000010}, [@generic={0x6b, 0x1, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x121000) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfc30) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000004000000000000000000000000f083f6d3fdd7809efe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500200100"/128], 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r6, 0xe) 1m52.38184436s ago: executing program 2 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c562d9f48e2a96614fc58c71d634d2f8154cd89d5b4a16052b08eba0d57fb46eff88b66d4bfded20ce25bc42289e742e21400e8f761d62d8327d885405cb7b688449a7379d48a2972493550015fa348c0f8572a714dff7b38ebd0c5d15d0ee4553f3c4a37f634f9e177a3f0ee3f9ce883396bfad52bf7dc20afb87d9f0b41e5c3fc3ca0725018029ca1dd49283908af23f2b9b86bac2ed2c51d4a3d174c08bac2bacb0272ab760bdbc5d7264707efd823d581bdec1be27f61ee680175ba67c73cc8e06f86112d5bc78c1f40ac8d03e0d57ae5719d5522f04e2f64ba6131cdd59f6c3ab7260ad", @ANYRES32=0x0, @ANYBLOB="0020000000000000200012800b0001006272696467650000100002800a0014000180c20000020000"], 0x40}}, 0x40048814) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) poll(&(0x7f00000001c0)=[{r2, 0x2088}], 0x1, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 64) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r4 = socket$kcm(0x10, 0x6, 0x10) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340)=[0x0], 0x61, 0x0, 0x0, 0x0, r6}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)="e2", 0x1}], 0x2}, 0x40440) sendmsg(0xffffffffffffffff, 0x0, 0x4) creat(&(0x7f0000000200)='./file0/../file0\x00', 0x82) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setrlimit(0xd, &(0x7f0000000300)={0x8, 0x4}) 1m52.331784517s ago: executing program 2 (id=174): open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999f0dd65, 0x1, 0x3, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x6b, {0x8, 0x3d, 0x0, {0x0, 0x7fffffffffffffff, 0x0, 0x400, 0xd, 0xfffffffffffffffa, 0x9ec, 0x35741060, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000040)='./file0\x00', 0x1800, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f000000db80)={0x130, 0x0, r1, {0xfffffffffffffff9, 0x33b5, 0x0, '\x00', {0x8000, 0x5, 0x8, 0x5, 0x0, 0x0, 0xa000, '\x00', 0x5, 0x3, 0x8, 0x0, {0x4c43, 0xffff82b8}, {0x1, 0x9}, {0xfffffffffffffffa, 0x6}, {0x8000000000000000, 0xc4f3}, 0xd, 0x5b, 0x3ff, 0xfffffff7}}}, 0x130) 1m52.181478378s ago: executing program 2 (id=176): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000cc0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4f0, 0x0, 0x0, 0xe4, 0x3c8, 0x3c8, 0x45c, 0x45c, 0x45c, 0x45c, 0x45c, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, 0xff000000, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1, 0x76}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x31}}}, {{@ip={@loopback, @multicast2, 0x0, 0xffffff00, 'veth0_to_bridge\x00', 'xfrm0\x00', {}, {}, 0x5c, 0x0, 0x36}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xd3, 0xffffffff, @multicast1}}}, {{@uncond, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@icmp={{0x24}, {0xe, ';y'}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@local, @multicast1, 0xff000000, 0xff, 'veth0_vlan\x00', 'veth0\x00', {0xff}, {0xff}, 0x84, 0x1, 0x4}, 0x0, 0x12c, 0x168, 0x0, {}, [@common=@unspec=@conntrack2={{0xbc}, {{@ipv6=@remote, [0x0, 0xff000000, 0xff, 0xff000000], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}, [0xff, 0xff, 0xffffff00, 0xffffffff], @ipv6=@local, [0xffffff00, 0xff000000, 0xff], 0x7, 0x4, 0x3b, 0x4e20, 0x4e22, 0x4e21, 0x4e22, 0x2100, 0x5194}, 0x1c0, 0x609}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x3be800, 0x9, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x8}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x54c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) read$char_usb(r6, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r5, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\t'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fchdir(r3) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r7, 0x100, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x44008005}, 0x880) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) ioctl$SIOCX25SENDCALLACCPT(r8, 0x89e9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, r10, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x74, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x7, 0x8c, 0x1, 0xd64, 0x1ff, 0x5f]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10001}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x537}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x10000, 0x8000, 0xe1, 0xa, 0x6, 0x3]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 1m51.644711217s ago: executing program 2 (id=179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e0000000800", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000080026"], 0x30}}, 0x0) 1m51.562836258s ago: executing program 2 (id=181): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000049cf3cd9859e66cd20000000000a03000000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d0c00098008000140ffffffff140000001000010000000000000000000a84000a"], 0x90}}, 0x20050800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0xe2100, 0x0) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000040)={0x2, 0x89, 0x6, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r3, 0x0, 0x25c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf6c32a31d461d06a, 0x1ffffffffffffebc, &(0x7f0000000d80)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000001a80)=""/4032, 0xfc0, 0x4000, 0x0, 0x0) 1m51.552975597s ago: executing program 2 (id=182): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES8=r0, @ANYBLOB="2c7774d6d070c3", @ANYRESHEX=r1, @ANYBLOB="4bff1ad267c9fde80975e89f2c00"]) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_required, @ioring_restriction_sqe_flags_allowed, @ioring_restriction_register_op={0x0, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x7}], 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'veth0_to_bond\x00', @multicast}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x0, 0x54000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c744beb16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f83500000001c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES8=r8, @ANYBLOB="2c67726f75705f69643d2df174308ca3b3da64ed022e33fa7edce579fbadeb6523060e2ad495a9d357a38605ce9d06154d3f8242eab851f92bb57955ba211c068bcfb6d54bbf69a25810db5339f40a91360601fa7eee17ee8e09f5a7439b88c50aa1853540403d4a2ea0ce66dcc1c0fc5bbd7e5f3a5d50f0ecb0c7fd5189605fc3fa389844ff7569ddc848492f26485faaba23864056abb0", @ANYRESDEC=0x0]) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="e80000003f00070100000000fddbdf25027c0000d100378013000300717472283414d6"], 0xe8}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setaffinity(r10, 0x8, &(0x7f0000000180)=0x5) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r5], 0x54) inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000080)='./file0/file0\x00', 0x94000e4e) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1m49.063110572s ago: executing program 1 (id=192): r0 = creat(&(0x7f0000000200)='./file0/../file0\x00', 0x82) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000003c0)={@remote, @private}, &(0x7f0000000480)=0xfffffffffffffe45) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) 1m48.987693595s ago: executing program 1 (id=193): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x30000000, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000800)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r9, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x6}}}}, 0x30}}, 0x0) 1m48.723002082s ago: executing program 1 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0x2}, {0xc}}]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40046f41, &(0x7f00000004c0)=0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000001c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x401, 0x81, 0x7, 0x84, 0xffffffffffffffff, 0x4, '\x00', 0x0, r5, 0x1, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf256800000008000300", @ANYRES32=r6, @ANYBLOB="1600c70002040ab45c0000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4800) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b3fe000048c63d0d7926b11e0a3ebe78d489bcce7d0cb4b8c03380bff1afe50fd58926b2753941d935aa16f935c3a7f68e26445514aba28cd409e175e73d6415a9cc2bb2943e2e9de1fad32cb9934b1221420888e99563b27326c1475e38430991851d24c0e563ef12a7758e112b3dec49340fbab5ba27601e625ca4b9f823e8c73c17c365479a5755a372e9cba5a4715e25529d7429ec55271c541d0f6ee03864abdc3283744f4e5d4a56e41b441b02b224d4a748302db813169c671e96cd46c99b28e82bb5e0a12f822bc9206ccc7c39850800000000000000000000003546d0c1f91bc036b7272c9e6611fd0b6233886206b33992aa8372ab1839ace214e7e9e3684dc21bea2d4f2fceedaa9b1ecc60767dafe500"/290, @ANYRES16=r3, @ANYBLOB="000226bd7000fcdbdf251b00000005009200000000000500920008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x20000000) 1m48.632835759s ago: executing program 1 (id=198): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score\x00') read$FUSE(r0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './bus\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = creat(&(0x7f0000000040)='./file0\x00', 0x2a) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x28000080) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_open_procfs(r1, 0x0) 1m46.97433705s ago: executing program 1 (id=202): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 1m45.302319414s ago: executing program 1 (id=215): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7ff}, 0xe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2620, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x20, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r5 = userfaultfd(0x80001) shutdown(0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r6 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000600)={{0x4, 0x4, 0xbc2, 0x1, '\x00', 0x15}, 0x0, 0x100, 0x9, r6, 0x9, 0x8, 'syz1\x00', &(0x7f0000000040)=[']*^\':+/\x00', '-:,*\xdd-\x00', './binderfs/binder0\x00', '\xdf\x00', 'syz', '$$]##\x04%)!\\:\\\xa0\x00', '\x00', 'syz', '[\'$,\x00'], 0x3e}) 1m38.210605258s ago: executing program 32 (id=161): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2000010}, [@generic={0x6b, 0x1, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x121000) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfc30) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000004000000000000000000000000f083f6d3fdd7809efe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500200100"/128], 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r6, 0xe) 1m36.353143162s ago: executing program 33 (id=182): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES8=r0, @ANYBLOB="2c7774d6d070c3", @ANYRESHEX=r1, @ANYBLOB="4bff1ad267c9fde80975e89f2c00"]) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_required, @ioring_restriction_sqe_flags_allowed, @ioring_restriction_register_op={0x0, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x7}], 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'veth0_to_bond\x00', @multicast}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x0, 0x54000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c744beb16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f83500000001c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES8=r8, @ANYBLOB="2c67726f75705f69643d2df174308ca3b3da64ed022e33fa7edce579fbadeb6523060e2ad495a9d357a38605ce9d06154d3f8242eab851f92bb57955ba211c068bcfb6d54bbf69a25810db5339f40a91360601fa7eee17ee8e09f5a7439b88c50aa1853540403d4a2ea0ce66dcc1c0fc5bbd7e5f3a5d50f0ecb0c7fd5189605fc3fa389844ff7569ddc848492f26485faaba23864056abb0", @ANYRESDEC=0x0]) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="e80000003f00070100000000fddbdf25027c0000d100378013000300717472283414d6"], 0xe8}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setaffinity(r10, 0x8, &(0x7f0000000180)=0x5) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r5], 0x54) inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000080)='./file0/file0\x00', 0x94000e4e) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1m30.211465621s ago: executing program 34 (id=215): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7ff}, 0xe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2620, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x20, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r5 = userfaultfd(0x80001) shutdown(0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r6 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000600)={{0x4, 0x4, 0xbc2, 0x1, '\x00', 0x15}, 0x0, 0x100, 0x9, r6, 0x9, 0x8, 'syz1\x00', &(0x7f0000000040)=[']*^\':+/\x00', '-:,*\xdd-\x00', './binderfs/binder0\x00', '\xdf\x00', 'syz', '$$]##\x04%)!\\:\\\xa0\x00', '\x00', 'syz', '[\'$,\x00'], 0x3e}) 40.667701361s ago: executing program 4 (id=484): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlink(0x0, &(0x7f00000059c0)='./file0\x00') mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x14032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={0x0, 0x1, r1, 0x3, 0x80000}) 39.732139675s ago: executing program 4 (id=495): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x4b, "8050b00d48e9dc8badb10ba18eb8cd0902d4ddb15ae1ac651b0e2694cca0ce9114770679c4da2b4e9b947e82591d081811af138ad7c20bec257cff94e26f3096f7217bcb9dc77b7c5662e9"}, &(0x7f0000000080)=0x53) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@loopback, @private}, &(0x7f0000000100)=0x8) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x10, 0x1c0) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000180)={0x1}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10c2800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@noextend}, {@version_u}, {@loose}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}) r5 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r5, &(0x7f00000004c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000440)=""/6, 0x6}], 0x2}, 0x40010000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xee00, 0xee00}}, './file0\x00'}) fsetxattr(r6, &(0x7f0000000540)=@known='trusted.overlay.redirect\x00', &(0x7f0000000580)='\x00', 0x1, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000005c0)={r2, 0x8}, 0x8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000a80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000680)={0x38c, r7, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&@{.*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'trans=fd,'}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&!!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x64f17728}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%\'+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-}/%(\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ',}(!&#][+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'mask'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xac}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb0e3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4d}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'MAY_READ'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+-#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'hash'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x942}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1e4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#^-$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x964}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x198, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(@\'[*\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff001}, @ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, 'trusted.overlay.redirect\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf29}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'rfdno'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, 'trusted.overlay.redirect\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.\xe4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'MAY_READ'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'rfdno'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x98}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x8f&%\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'.%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x49c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}]}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000ac0)={@multicast1, @private=0xa010101}, 0x8) socket$alg(0x26, 0x5, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x92}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfe}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000001140)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000000c80)={0x448, 0x3f3, 0x200, 0x70bd27, 0x25dfdbfc, {0x6, 0x0, 0x37, [0x4, 0x8001, 0xfffffffe, 0x5, 0x2, 0x4, 0x3, 0x6, 0x7, 0x4, 0x0, 0xe191, 0x40, 0x4, 0x10000, 0x3, 0x1, 0x3, 0xfffffff1, 0x2, 0x8, 0x2b, 0x0, 0x1000, 0x0, 0xe, 0xfffffffe, 0x0, 0xb, 0xfffffffa, 0x6, 0x800, 0x7fffffff, 0x80000001, 0xffff7938, 0xffffffff, 0xad, 0x9, 0x4, 0x64f, 0x6, 0x2, 0x5, 0x7, 0x0, 0xfffffffa, 0x10, 0x0, 0x6, 0x80000000, 0x9, 0x7c13, 0xffffff2e, 0xfffffffc, 0x16, 0x8, 0x1, 0x1, 0x5, 0x10000, 0x9, 0x31, 0x80000000, 0x200], [0x2862f4af, 0x401, 0x2, 0x9, 0x1c7, 0x6, 0x6, 0x81, 0x2, 0xe, 0x8, 0x3ff, 0x7, 0x1, 0x81, 0x6, 0x3, 0x7fffffff, 0x9, 0x1, 0x1, 0x8, 0x101, 0x1, 0x7fffffff, 0x401, 0x800, 0xffffffd2, 0x8, 0xe53, 0x0, 0x6, 0x8, 0x6, 0x8, 0xb, 0x4, 0x18000000, 0xe, 0xb, 0xf719, 0x7219, 0xc, 0x6, 0x90, 0x8, 0x2, 0xb24, 0x28, 0x7425, 0x9, 0x10000, 0xfffffffc, 0x8, 0x9, 0xffffffff, 0x8, 0x3, 0x5, 0xff, 0x8, 0x86e4, 0x0, 0x2], [0x3, 0xd, 0x7, 0x5, 0x3, 0x2, 0x7fff, 0xfffff800, 0x800, 0x4, 0x200, 0x1, 0xb740, 0x5, 0xf, 0x0, 0x8, 0xb, 0x6, 0xffff, 0x8, 0x2, 0xfffffffb, 0x5060, 0xffffd29f, 0x7, 0xa, 0x8, 0x2, 0x8, 0x9, 0x9, 0x8, 0x80000000, 0xd, 0x81, 0x8, 0x7f, 0x0, 0x1, 0x8001, 0x6, 0x7, 0x401, 0x0, 0x4, 0x1, 0x8, 0x7fff, 0x6, 0x1, 0x3, 0x7, 0x5, 0x97f, 0x7fff, 0x7, 0x7fff, 0x2, 0x9, 0x8, 0x3, 0xf334, 0x4], [0x5, 0x6, 0x7, 0xd, 0xe31e, 0xd, 0x5, 0x80000001, 0x10000, 0x7ff, 0xf33, 0x59d, 0xd, 0xe, 0x30, 0x3, 0x5, 0x2, 0x401, 0xb, 0x9, 0x2, 0x1, 0x1, 0x7, 0x6, 0x8000, 0x4, 0x6, 0x4, 0x3, 0x1ff, 0x7, 0x6, 0x401, 0xf, 0x8, 0x3, 0x5, 0xffffffff, 0x9, 0x0, 0x1, 0x9, 0xffffffda, 0x7, 0x10000, 0xa3ad, 0x1000, 0x40, 0xe2, 0x0, 0xfff, 0xb, 0x3, 0x81, 0xffffff81, 0x4f, 0x7, 0x8001, 0x4, 0x7fffffff, 0xffffffff, 0x4], 0x25, ['#!\x00', '\'.%\x00', '&!!\x00', ',(^\x00', '\x8f&%\'\x00', '(@\'[*\x00', 'MAY_READ', '\'\'\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x890}, 0x40080) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000011c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001240)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r9, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x44, r10, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x4000001) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000013c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001400)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r13, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$CDROMCLOSETRAY(r6, 0x5319) 38.648192321s ago: executing program 4 (id=498): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0xe2100, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) 38.401481978s ago: executing program 4 (id=500): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = creat(&(0x7f0000000040)='./file0\x00', 0x2a) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x28000080) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_open_procfs(r1, 0x0) 33.725826381s ago: executing program 4 (id=512): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x40, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r3, 0x40000000) syz_usb_disconnect(0xffffffffffffffff) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/consoles\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) 32.188993352s ago: executing program 4 (id=517): prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x5c}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x3a, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7bf901002cbc8e6c40a3b0acd1c8fc13000000040000200012800b00010067656e657665000010000280060005000800000000000000"], 0x40}}, 0x40800) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r7, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r8, &(0x7f0000000440)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, r8, 0x0, 0x300}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 16.907233242s ago: executing program 35 (id=517): prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x5c}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x3a, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7bf901002cbc8e6c40a3b0acd1c8fc13000000040000200012800b00010067656e657665000010000280060005000800000000000000"], 0x40}}, 0x40800) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r7, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r8, &(0x7f0000000440)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, r8, 0x0, 0x300}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 3.920702631s ago: executing program 6 (id=676): socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x800084, 0x80800) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 3.878825542s ago: executing program 6 (id=677): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x8051) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], '\x00'}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x38, 0x0, 0x1}, 0x28) (async) r1 = getpid() (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300800a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a68fbff9cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000000000000000000000084d6f31d5de024f", 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 3.818966728s ago: executing program 7 (id=680): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000500)={0x1, "c93eb2de090000007e008900000000000000031800003800000000000000000b00"}}) recvmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 3.721089255s ago: executing program 5 (id=682): r0 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0) fcntl$getown(r0, 0x9) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000640)={0x0}) 3.720927487s ago: executing program 6 (id=683): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="ec682ef88bf88a708e8f6ee593bd30b21f8953de7eeec04c24e7c8854e3d78bf1de9e7ed2716b61a385afff206a33d387a963a38b275752f74cb3e2108e7f01275d5d4668569e5cec009715d9c9623e10fd020e82afe0b97b326da947c004652645e58a9b8b024216cd0aa2cc4d52600c25f939401171828861bc3d4d023361a3c90f6b1e12ac3e67348b2701751effb6ee46ff84a2a1e7f64d427f4d294a93a3b7e0ba5aae47c3506369ceb0644bd", 0xaf, 0xfffffffffffffff9) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 3.670610354s ago: executing program 5 (id=684): socket$kcm(0x2, 0xa, 0x2) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f00800", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 3.670324657s ago: executing program 6 (id=685): socket$kcm(0x2, 0xa, 0x2) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f00800", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 3.500949458s ago: executing program 0 (id=689): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(r0, r1, 0xd, &(0x7f0000000100)={0xe, 0x905, 0x4}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x8000000000000000, 0x12) 3.420366241s ago: executing program 0 (id=690): pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000140)={0x1000, {"7e19e9ffce1f6ebea0bf44c64ee38ee3", "1e14a3c643c96e98a608b7c741fd667c", "fe4a5585b372f423a15b737d1493b688"}, 0x3, 0x6}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) r3 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') read$eventfd(r4, &(0x7f0000000040), 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) r5 = syz_open_procfs(r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000680)={0x158, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0x7, 0x2, 0x1e}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}, @enter_looper, @release, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000b00)={@flat=@binder={0x73622a85, 0x200}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/199, 0xc7, 0x0, 0x40}, @fd}, &(0x7f0000000b80)={0x0, 0x18, 0x40}}}, @release={0x40046306, 0x2}, @decrefs, @acquire_done, @release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x9, 0x4, 0x2a}, @fda={0x66646185, 0x1, 0x0, 0x26}}, &(0x7f0000000200)={0x0, 0x18, 0x34}}, 0x400}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000007c0)={@fda={0x66646185, 0x5, 0x0, 0x3a}, @flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000840)={0x0, 0x1c, 0x34}}}], 0xf9, 0x0, &(0x7f0000000580)="64a6bfe37c460239ade806a7c3752c1f9670c6fd3483e0570205273d5ea068901d52cc9c005506f610695723c0897391bb2f8c73408d11992ab910ce012be4d9ce4b03678880c9b58e2f9b3626e411500030795e3dec14379880ae80205e6f8bc77d3d8ae99cef4ceff9331ab33fafa1c5337682985fb5398733015d49960e77776cf24820085c258596fcb0be0edc9325b9089c447b25c416fbbe3f93e1b294bc73ed6d6b66cccc842104b90b2f67f25a52a44da56cddbc7346ab97b12593e8b87f8129354313d82b315715e6b0b0f56b163c895a6e76064252f0dc00031eaa0100000001000000acbbd00492873921e31a77b7fbc4d77395"}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x60800, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r6, &(0x7f0000003080), 0x0, 0x2, &(0x7f0000003180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x606824f5, 0x80100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x1}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 3.200869751s ago: executing program 0 (id=691): mkdir(&(0x7f0000000000)='./file1/file0\x00', 0x1) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0x0, 0x4000, 0x0, 0x0, 0x0, "5f730000a9003f00"}) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, 0x0}) (async) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = syz_clone(0x4948000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b", 0xb}], 0x1) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000180)=0x2cf7) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRES8], 0xffdd) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 3.200534776s ago: executing program 0 (id=692): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) pread64(r0, 0x0, 0x0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlockall(0x0) 2.7985458s ago: executing program 5 (id=693): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000040000000850000006100000095"], &(0x7f0000001ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="d2ff030760038d66b89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, &(0x7f00000002c0)='no,e\x00') listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.797521462s ago: executing program 6 (id=694): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000000701010000000000000000070000010c00064000000000000060000c0007800800024000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$EVIOCGKEY(r4, 0x80404518, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x11, 0x83, 0x20000a2e, 0x401000, 0xe, 0x3, 0x2000001, 0x1, 0xb000000}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000300)='./bus\x00', 0x240, 0xe4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYBLOB="27e7546fef9046fa84737402441264a5b22efade1dbfa0ef581261d2775d9be1366693aff3d851b8706d44ed87fce26c9693138839959dcaee24c166cc39ba33fac10e26800b007bc237d9841f1ddab2a146847e9be8f300c0b6b5eeff53f443bb8eb23501fca6f8f7d0cb09646fba16c586c5ad67c4ba3cdab81d67c9d108329fe19f899f2e017afe6a38c546817e986662b7535869298d93f978bdea97843c31", @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) ptrace(0x10, 0x0) ptrace$getregs(0xe, 0x0, 0x401, &(0x7f0000000100)=""/244) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000380)=0xa0) 2.171073723s ago: executing program 7 (id=695): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000002680)=""/4104) (async) r1 = openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="fdf3fe2cb7d980008b1cbd12e46b2c9b3f01c239c6434bba3f2a572460aa3e9776a97908a413c6856e73a764e3ea7ccb4b10fba99d0e2cefa03bc131d67b9a45ac169c232579c29bed3f0d9bffdcb7fb61707fac8d4f911ed1eb55a46b9eaead52faa47145e62cadc7e0f27a0d2770", 0x6f}, {0x0}, {&(0x7f0000000140)="59c24c64bdd27da32a6eab739062a4df73dd952eb640c1537d2241ce6b676b69f3dc2bd19aba5781ce8a4985eeda450327c801b044c5080fe4bbb937c403e668a33af4056d742a1c3f599c18cf6d0634c546e38298990100000000000000f20ca0913f3226a5e37d63f0e2d4001f863ce8686adc65357a30c22b0fb9", 0x7c}], 0x3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x3c, 0x2, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_ACTION={0x6, 0x3, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x804}, 0xc0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) close(r3) (async, rerun: 32) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000300)={'wg0\x00', 0x5}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000003940)=0x10) (async) read(0xffffffffffffffff, &(0x7f0000000080)=""/193, 0xc1) (async, rerun: 32) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x40) (rerun: 32) socket$igmp6(0xa, 0x3, 0x2) 1.760713113s ago: executing program 5 (id=696): r0 = gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0xc8, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRESOCT=r0], 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) userfaultfd(0x80801) userfaultfd(0x801) shmat(0x0, &(0x7f0000f02000/0x4000)=nil, 0x4000) 1.259424449s ago: executing program 0 (id=697): dup(0xffffffffffffffff) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0xffffffffffffffe0, &(0x7f0000000340)={@link_local, @dev, @val={@val={0x88a8, 0x3, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x3c, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@dstopts={0x2b}], "4c04ac6f"}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x92) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto(r1, &(0x7f0000000140)="980db0a01eef49fe852d26614c7ce09f7645332392479527e60622439127acedb186acfc3364a00a309f820b5e36f179c7ad6f48638f8584fe592f4df703c7dd9aa35ef3cd4971bb257ce7b3ab77faa9999dfb5586f9e80b29bb462c57ac6d68ccf1a7f864263a74072c4beecff897031c6289b60c13e7361cd5770b38e0cdaa0c2ba4ed0ed3a1e1dddf333447889f92c2e40a", 0x93, 0x4000000, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x3, 0x0, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}}}, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @local}}, 0x4, 0x6}, &(0x7f0000000100)=0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x74) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r0, 0x1, 0xf0ff, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x8000) 1.247187017s ago: executing program 7 (id=698): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) file_getattr(r0, 0x0, &(0x7f0000000040), 0x64, 0x10e7) 1.160771505s ago: executing program 0 (id=699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000000180)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x801) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f00000003c0)={{r5}, {@void, @actul_num={@void, 0x4, 0x54}}}) listen(r6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000005}, 0x4040001) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r8, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1}, 0x6e) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmmsg(r6, &(0x7f0000001c00)=[{{&(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="a83d4c1c0d245462e2f364016bdd89b0d3a3f50e3cf00a24fab6bd0d5b0382002652a27f818f26b6cf579b3c00896368ba4c5cc183c4e570e9bac81ea13de934683ecfa7787ecef1b9c5326253bbd2d7c3acc7f71dfcc34c2e6c4c212954437b044bd6765c8ab1ac3d657b9dba35c9ea5178c987be330c43e97daa27cc4119c9ea8852a6a991e6e86f3ef6dca8b4fc130bb7fe6efe857bb797ad9a038edf8c5c5a7c5b0d34cf90f485e0966801a63b2d66173591c5050048aa37cc87f1062f8a4854eef0656667cd54b9339d3a4017b00b23e65c3c32c7c2ca2bdb7ca177587f5d27f8e0b94e7a8a1a6ce84257a81163e89d", 0xf2}, {&(0x7f0000000180)="b94c98badcb613948370fc28392354d21f352fb8922b48e003f91f8ffda76043aacf432c054a9c6ccc39efc248bd800d5cdd537ac656093beec49e89f8a2d9d1944534513fefe1c110305b1e73cd85feec06df30977b09f10730b537a8bf19695ca36e51256a67cf8f0c8c18f9cb1639ce4bb6b4a78d26f7a2b584fb33a13343b2736ab6149df8a2b4fee22c", 0x8c}, {&(0x7f0000000280)="4dd466d3997264004b0d93b2d551f97c22319959df70fcd0e276f9ce18a4d1cffd", 0x21}], 0x3, &(0x7f00000006c0)=[{0x100c, 0x113, 0x1, "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"}, {0xa0, 0x11, 0x9, "7c5292cdeeaf0f47b0c91022ced3c7a142dcaad89e21e49e424d6b1a2af877f9936a63405d5335d2502df0e24e446e9093d5ac3129ea7f3cefaf8f3526677c337977639c561801d10824ecce9ed90dac153560fde383cf6f051b7c8af184315451f2f1bcf64fd5871a1f832ca932cc051229671654a163ed00b24fb46d1016bb9e8aabee954c48515aa7c920b230cc13b29b6a01"}, {0x80, 0x10a, 0xf, "e4e9c57d6ffbca65786f22cdecebc3b3672e0680740d7e34ea70f4d55891ffa8bb055d56f2c31355bd0efed8b9b723bf7e4f569ca5a0552b693cad0783a7a4da5283e7669757279b19217ed9f924a7ccf0eb4135e0240c4c74a25ca800e8d61d55135ee8f006b6a00b124ebb13f6f78ea54c"}], 0x112c}}, {{&(0x7f0000001800)=@qipcrtr={0x2a, 0x1}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001880)="13d023508cf270e4ef795ec9a9ea82b1668d20d01f9821dc9c6c6736a4a8da54008565f946225a2cfe7bfbd74e5f630595c7d1a28830e9a0112a8c35c1e76e521dc5c3e722a9495d0897136b38c38dd9cbea0fcdd29f160a397f855fb1e1d75c9f713c08adb9bda28c242679c45566f0ba994ef32760bfdf49f43d11143251074e3e58d69e20afadcff2f0ddc95bca989a6784e7b93fa307e0a884be4ee83363f03dc9d33a1738582e871d94460ad6a7f3610095da28909e0c3c37ae21edb3f6b4a95ce26d80f615dbf03b6ca4d9054c84c0f1e28bfd89f2f8d0fca62a6ba72edb3d50e6e2aeb5a8f01dcd02ecff440e4930187d0a3fdc", 0xf7}], 0x1}}, {{&(0x7f00000019c0)=@rc={0x1f, @any, 0x4}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001a40)="28978acae012fb4e1bd09757e38b9a1aed99af69a220", 0x16}], 0x1, &(0x7f0000001ac0)=[{0x28, 0x119, 0x8001, "a0cf3ef07e73a635934812854c4792f74e691c4d1314dd789a"}, {0xa8, 0x107, 0x2, "868f36bb0811523dd342d4022b7dce7821e00f9d3b3dbeb5ed5b78c9125b0ce30bc2dcdb60ec97e3df241ec09d9ddd61ac7ff18ca272dff6fe98edf50972711116d5d6bd447453291233de2344e2ce8551196d2282a46ae5e8d6d4e6baae26653dd4c6de3e7b22ef84496ee926a740359f23f044bca75ffbdbc06b20eed218220a5ff99416c2155af443764dd5243221480017e938600558ea75"}, {0x1c, 0x11, 0x2, "28c1dab80646a899d9d25f42f10722"}, {0x48, 0x19e, 0x8, "641d63fa62e672f73371050a741311417c5a8e6122212e8a7a5cdcdfa0a45dea977b2cffb72ff63413b247e104257b43d63843209a4b912e36f26be8"}], 0x134}}], 0x3, 0x4004844) 1.160489581s ago: executing program 7 (id=700): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x1f) 1.147038203s ago: executing program 5 (id=701): add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005000000000000008000000018000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20100, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) socket$unix(0x1, 0x1, 0x0) r3 = inotify_init() r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108) 1.090272471s ago: executing program 7 (id=702): socket$kcm(0x2, 0xa, 0x2) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r1, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f00800", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 880.211557ms ago: executing program 6 (id=703): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8781, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x4c) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000480), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0x8, 0x1, 0x4f, r4, 0x8f8, '\x00', 0x0, r4, 0x4, 0x0, 0x3, 0x6}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 879.787131ms ago: executing program 7 (id=704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3095b90b396cd8ec", "3499a517a1df1c71496cffeebaabfe5eb548502ce0f59ce4a4af09f0438ece31", "4277dea9", "0cf02f56bec1eb9e"}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsopen(0x0, 0x0) sendto$inet6(r2, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r2, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$inet6(0xa, 0x80002, 0x0) 0s ago: executing program 5 (id=705): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) r2 = openat$btrfs_control(0xffffff9c, &(0x7f0000000480), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000240)='GPL\x00', 0xd, 0xdd, &(0x7f00000002c0)=""/221, 0x40f00, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x1f, r0, 0x8, &(0x7f0000000400)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r1, r2, 0x2, &(0x7f0000000580)=[r3], &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0x8}, {0x3, 0x2, 0x9, 0x7}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x1, 0x2, 0x2, 0x7}], 0x10, 0xffff4fb5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r4}, 0x38) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000040)={0x3, 0x1}) r5 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x9, 0x19, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c50f751886fb50e007d5d016c44110f534af43cc07fac51bee22e72e86c01b4928d69bdefd07854c13920811fd7002dc8aada05a7c0bda02f7ff87fdc11bc4ec", "ee221bd6914010cf945a86f1069be93a8dc7d78055821a5718fd6b88965c471e", [0x3, 0x6]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2e, 0x401000, 0xe, 0x3, 0x2000001, 0x1, 0xb000000}}) kernel console output (not intermixed with test programs): T6181] Failed to get privilege flags for destination (handle=0x2:0x0) [ 84.099204][ T29] rc_core: IR keymap rc-su3000 not found [ 84.101272][ T29] Registered IR keymap rc-empty [ 84.130013][ T29] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 84.189315][ T29] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input8 [ 84.210936][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 84.210949][ T29] dw2102: su3000_power_ctrl: 0, initialized 1 [ 84.210956][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 84.270065][ T6185] batman_adv: batadv0: Adding interface: macsec1 [ 84.272836][ T6185] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.283934][ T6185] batman_adv: batadv0: Interface activated: macsec1 [ 84.380647][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 84.383245][ T29] dw2102: i2c transfer failed. [ 84.419515][ T5744] Bluetooth: hci0: command 0x040f tx timeout [ 84.539166][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 84.546142][ T29] dw2102: i2c transfer failed. [ 84.569290][ T5744] Bluetooth: hci3: command 0x040f tx timeout [ 84.641289][ T6191] netlink: 148 bytes leftover after parsing attributes in process `syz.1.77'. [ 84.644520][ T6191] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 84.709181][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 84.713582][ T29] dw2102: i2c transfer failed. [ 84.911663][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 84.914061][ T29] dw2102: i2c transfer failed. [ 85.067826][ T6195] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 86.173026][ T9] cfg80211: failed to load regulatory.db [ 86.649258][ T62] Bluetooth: hci3: command 0x040f tx timeout [ 87.106644][ T6205] netlink: 72 bytes leftover after parsing attributes in process `syz.2.80'. [ 87.107640][ T6199] 9pnet_virtio: no channels available for device syz [ 87.124887][ T6202] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.125159][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 87.134492][ T6202] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.139166][ T5835] usb 38-1: device descriptor read/8, error -110 [ 87.155638][ T29] dw2102: i2c transfer failed. [ 87.182942][ T6202] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.209878][ T6202] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.394085][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 87.395892][ T29] dw2102: i2c transfer failed. [ 87.415594][ T29] usb 5-1: USB disconnect, device number 2 [ 87.494441][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 87.567278][ T6208] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 87.680113][ T5835] usb usb38-port1: attempt power cycle [ 87.773709][ T6220] XFS (nbd3): SB validate failed with error -5. [ 87.790305][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.81'. [ 87.806982][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.81'. [ 87.949293][ T29] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 87.992378][ T6233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.008773][ T6233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.120352][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 88.123402][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 88.127612][ T29] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.132295][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.136528][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.141598][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 88.144537][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 88.148526][ T29] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.153075][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.157439][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.162408][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 88.165004][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 88.169220][ T29] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.173873][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.178156][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.186516][ T29] usb 5-1: string descriptor 0 read error: -22 [ 88.189014][ T29] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 88.193274][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.202384][ T6237] overlayfs: workdir and upperdir must be separate subtrees [ 88.209223][ T29] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 88.241081][ T5835] usb usb38-port1: unable to enumerate USB device [ 88.250224][ T62] Bluetooth: hci0: command 0x040f tx timeout [ 88.525781][ T54] usb 5-1: USB disconnect, device number 3 [ 88.843932][ T6247] syz.3.93 uses obsolete (PF_INET,SOCK_PACKET) [ 88.869717][ T6245] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.014711][ T6255] warning: `syz.3.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.030138][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 89.134800][ T40] audit: type=1326 audit(1780069778.157:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.2.94" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x0 [ 89.210554][ T5101] Bluetooth: hci1: command 0x0419 tx timeout [ 89.210575][ T62] Bluetooth: hci2: command 0x0419 tx timeout [ 89.212485][ T5744] Bluetooth: hci3: command 0x040f tx timeout [ 90.126841][ T6271] input: syz1 as /devices/virtual/input/input9 [ 90.193877][ T6274] netlink: 'syz.3.101': attribute type 3 has an invalid length. [ 90.377018][ T6280] netlink: 72 bytes leftover after parsing attributes in process `syz.2.99'. [ 90.624184][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'. [ 90.664310][ T6272] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.667886][ T6272] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.672774][ T6272] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.727530][ T6272] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.122284][ T6303] ipip0: entered allmulticast mode [ 91.158605][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 91.695095][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.115'. [ 91.958053][ T6326] orangefs_devreq_open: device cannot be opened in blocking mode [ 92.015481][ T6325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.117'. [ 92.249191][ T5744] Bluetooth: hci0: command 0x040f tx timeout [ 92.292651][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.295579][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.318093][ T6331] netlink: 'syz.3.120': attribute type 4 has an invalid length. [ 92.322578][ T6331] netlink: 152 bytes leftover after parsing attributes in process `syz.3.120'. [ 92.412343][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.422557][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.521207][ T6320] batman_adv: batadv0: Interface deactivated: macsec1 [ 92.546936][ T6331] .`: renamed from bond0 (while UP) [ 92.556660][ T1254] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.563047][ T1254] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.575196][ T1254] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.582943][ T1254] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.724932][ T5744] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 92.729764][ T5744] Bluetooth: hci2: command 0x0419 tx timeout [ 92.809186][ T5744] Bluetooth: hci3: command 0x040f tx timeout [ 93.358607][ T6360] overlayfs: workdir and upperdir must be separate subtrees [ 94.038646][ T6365] netlink: 'syz.2.129': attribute type 1 has an invalid length. [ 94.329214][ T54] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 94.369150][ T856] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 94.378762][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.132'. [ 94.481287][ T54] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.485374][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.488818][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 94.492316][ T54] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.496176][ T54] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.499266][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.505433][ T54] usb 6-1: config 0 descriptor?? [ 94.506593][ T6378] netlink: 72 bytes leftover after parsing attributes in process `syz.0.133'. [ 94.521513][ T856] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 94.524897][ T856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 94.529466][ T856] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.534342][ T856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.538996][ T856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 94.544919][ T856] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 94.548128][ T856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 94.551667][ T856] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.555951][ T856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.560641][ T856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 94.565775][ T856] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 94.568816][ T856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 94.573536][ T856] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.578247][ T856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.581771][ T856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 94.587938][ T856] usb 7-1: string descriptor 0 read error: -22 [ 94.590315][ T856] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 94.593210][ T856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.605485][ T856] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 94.889613][ T62] Bluetooth: hci3: command 0x040f tx timeout [ 94.920031][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.923664][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.926727][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.930424][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.933574][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.936610][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.939689][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.942654][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.945618][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.948630][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.967371][ T54] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 95.120053][ T842] usb 6-1: USB disconnect, device number 4 [ 95.871808][ T6397] overlayfs: workdir and upperdir must be separate subtrees [ 96.740422][ T5744] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 96.745629][ T5744] Bluetooth: hci1: Injecting HCI hardware error event [ 96.749012][ T5744] Bluetooth: hci1: hardware error 0x00 [ 96.862164][ T6417] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 96.969177][ T62] Bluetooth: hci3: command 0x040f tx timeout [ 97.052421][ T856] usb 7-1: USB disconnect, device number 3 [ 97.405601][ T6431] gfs2: error -5 reading superblock [ 98.324895][ T6464] overlayfs: failed to clone upperpath [ 98.415297][ T6470] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 98.418037][ T6470] bridge2: entered promiscuous mode [ 98.420295][ T6470] bridge2: entered allmulticast mode [ 98.424794][ T62] Bluetooth: hci1: unexpected cc 0x200c length: 3 > 1 [ 98.426895][ T62] Bluetooth: hci1: unexpected event for opcode 0x200c [ 98.596656][ T6476] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.644555][ T6479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 98.644785][ T6480] netlink: 'syz.0.155': attribute type 2 has an invalid length. [ 98.652301][ T6480] netlink: 56 bytes leftover after parsing attributes in process `syz.0.155'. [ 98.707234][ T6483] loop9: detected capacity change from 0 to 7 [ 98.749930][ C0] blk_print_req_error: 10 callbacks suppressed [ 98.749943][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.754820][ C0] buffer_io_error: 10 callbacks suppressed [ 98.754829][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.759829][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.762618][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.765792][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.769605][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.773395][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.776327][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.778988][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.781949][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.784656][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.787549][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.790238][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.793135][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.795928][ T6483] ldm_validate_partition_table(): Disk read failed. [ 98.799313][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.802194][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.804889][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.807685][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.810807][ T5744] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 98.813793][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.817284][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.821211][ T6483] Dev loop9: unable to read RDB block 0 [ 98.825204][ T6483] loop9: unable to read partition table [ 98.826992][ T6483] loop9: partition table beyond EOD, truncated [ 98.828918][ T6483] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 98.895362][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 99.112890][ T6504] netlink: 72 bytes leftover after parsing attributes in process `syz.3.161'. [ 99.184779][ T6502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.198795][ T6502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.202492][ T6502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.273973][ T6507] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 401070c9, magic 70 != 6b] [ 99.336381][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.164'. [ 99.452232][ T6520] capability: warning: `syz.2.169' uses 32-bit capabilities (legacy support in use) [ 99.761858][ T6531] netlink: 72 bytes leftover after parsing attributes in process `syz.1.171'. [ 100.535156][ T6551] x_tables: ip_tables: osf match: only valid for protocol 6 [ 101.050411][ T5744] Bluetooth: hci0: command 0x040f tx timeout [ 101.075623][ T5744] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 101.128814][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.179'. [ 101.209275][ T5744] Bluetooth: hci2: command 0x0419 tx timeout [ 101.210405][ T6567] 9p: Bad value for 'rfdno' [ 101.231637][ T40] audit: type=1326 audit(1780069790.257:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 101.240322][ T40] audit: type=1326 audit(1780069790.257:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.180" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 101.248651][ T40] audit: type=1326 audit(1780069790.267:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 101.257780][ T40] audit: type=1326 audit(1780069790.277:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 101.268134][ T6569] fuse: Bad value for 'user_id' [ 101.268318][ T40] audit: type=1326 audit(1780069790.277:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.180" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 101.269950][ T6569] fuse: Bad value for 'user_id' [ 101.279841][ T6569] netlink: 188 bytes leftover after parsing attributes in process `syz.2.182'. [ 101.398938][ T6576] 9p: Bad value for 'rfdno' [ 101.402061][ T6576] fuse: Bad value for 'fd' [ 101.403781][ T6576] netlink: 188 bytes leftover after parsing attributes in process `syz.0.184'. [ 101.861407][ T6583] overlayfs: failed to clone upperpath [ 104.053053][ T6613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.197'. [ 104.356654][ T6617] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 104.997361][ T6621] fuse: Bad value for 'fd' [ 105.002025][ T6621] netlink: 'syz.0.200': attribute type 29 has an invalid length. [ 105.053594][ T5744] Bluetooth: hci2: unexpected event for opcode 0x0406 [ 105.140426][ T5744] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 105.145541][ T5744] Bluetooth: hci3: Injecting HCI hardware error event [ 106.070784][ T6635] bridge0: port 1(syz_tun) entered blocking state [ 106.074675][ T6635] bridge0: port 1(syz_tun) entered disabled state [ 106.077030][ T6635] syz_tun: entered allmulticast mode [ 106.080455][ T6635] syz_tun: entered promiscuous mode [ 106.187107][ T6639] netlink: 72 bytes leftover after parsing attributes in process `syz.0.207'. [ 106.332410][ T6643] netlink: 'syz.0.208': attribute type 2 has an invalid length. [ 106.443996][ T6649] 9p: Bad value for 'source' [ 106.484674][ T6651] netlink: 'syz.0.212': attribute type 1 has an invalid length. [ 107.126808][ T5744] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 107.228392][ T6656] bridge0: port 1(syz_tun) entered blocking state [ 107.231215][ T6656] bridge0: port 1(syz_tun) entered forwarding state [ 107.245898][ T6656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.253094][ T6656] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.259644][ T6656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.292798][ T6656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.295835][ T6656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.299639][ T6656] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.414858][ T6658] syz_tun: left allmulticast mode [ 107.416478][ T6658] syz_tun: left promiscuous mode [ 107.419137][ T6658] bridge0: port 1(syz_tun) entered disabled state [ 107.428158][ T6658] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.456299][ T6658] team0: Mode changed to "random" [ 107.458698][ T6658] vlan0: entered promiscuous mode [ 107.464382][ T6658] team0: Port device vlan0 added [ 107.468498][ T6658] tipc: Started in network mode [ 107.470131][ T6658] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 107.472417][ T6658] tipc: Enabled bearer , priority 0 [ 107.539943][ T5744] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 108.609314][ T9] tipc: Node number set to 11578026 [ 110.085453][ T6680] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 110.740613][ T6684] netlink: 'syz.0.222': attribute type 12 has an invalid length. [ 110.743059][ T6684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.222'. [ 110.756993][ T6685] netlink: 'syz.0.222': attribute type 12 has an invalid length. [ 110.761071][ T6685] netlink: 132 bytes leftover after parsing attributes in process `syz.0.222'. [ 110.858379][ T6690] bond0: option ad_select: unable to set because the bond device is up [ 111.609224][ T5744] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 111.612119][ T5744] Bluetooth: hci2: Injecting HCI hardware error event [ 111.615596][ T5744] Bluetooth: hci2: hardware error 0x00 [ 111.694171][ T5101] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 111.795061][ T6701] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.829941][ T6701] team0: No ports can be present during mode change [ 111.836746][ T59] tipc: Resetting bearer [ 111.840628][ T6701] tipc: Enabling of bearer rejected, already enabled [ 111.883659][ T6703] netlink: 'syz.0.229': attribute type 3 has an invalid length. [ 112.402380][ T6705] kernel profiling enabled (shift: 9) [ 112.825375][ T6708] netlink: 'syz.0.230': attribute type 1 has an invalid length. [ 113.523573][ T6714] netlink: 72 bytes leftover after parsing attributes in process `syz.0.232'. [ 113.528372][ T6714] netlink: 48 bytes leftover after parsing attributes in process `syz.0.232'. [ 113.569957][ T6716] tipc: Enabled bearer , priority 0 [ 113.689210][ T5744] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 113.812591][ T6719] overlayfs: failed to clone upperpath [ 114.875043][ T6729] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 114.877033][ T6729] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 114.882380][ T6729] vhci_hcd vhci_hcd.0: Device attached [ 114.898084][ T6729] ./bus: Can't lookup blockdev [ 115.169156][ T5854] usb 38-1: SetAddress Request (6) to port 0 [ 115.171091][ T5854] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 115.513372][ T6730] vhci_hcd: connection reset by peer [ 115.517853][ T12] vhci_hcd vhci_hcd.0: stop threads [ 115.519620][ T12] vhci_hcd vhci_hcd.0: release socket [ 115.522000][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 117.129043][ T40] audit: type=1326 audit(1780069806.147:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.0.246" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x0 [ 118.328594][ T6767] fuse: Bad value for 'fd' [ 120.249404][ T5854] usb 38-1: device descriptor read/8, error -110 [ 120.563067][ T6777] netlink: 56 bytes leftover after parsing attributes in process `syz.0.252'. [ 120.649714][ T5854] usb usb38-port1: attempt power cycle [ 121.219665][ T5854] usb usb38-port1: unable to enumerate USB device [ 121.322415][ T6781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.253'. [ 123.150356][ T6790] overlayfs: failed to clone upperpath [ 126.010480][ T6805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.260'. [ 126.285649][ T40] audit: type=1326 audit(1780069815.307:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.262" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x0 [ 127.282125][ T6819] fuse: Bad value for 'fd' [ 127.651150][ T6823] overlayfs: failed to clone upperpath [ 129.014299][ T6825] netlink: 'syz.0.266': attribute type 19 has an invalid length. [ 129.067356][ T6827] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.267'. [ 129.225333][ T6831] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 129.228230][ T6831] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 129.231073][ T6831] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 129.233634][ T6831] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 129.236111][ T6831] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 129.238561][ T6831] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 129.241148][ T6831] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 129.243706][ T6831] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 129.246081][ T6831] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 129.262556][ T6831] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.268'. [ 130.066156][ T6839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.072265][ T6839] fuse: Bad value for 'fd' [ 130.791258][ T6843] overlayfs: failed to clone upperpath [ 131.711673][ T6854] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 131.715245][ T6854] overlayfs: failed to clone lowerpath [ 131.753896][ T6860] fuse: Bad value for 'fd' [ 131.852006][ T6864] proc: Unknown parameter '<ЈжюЯZMВ_y' [ 132.001055][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 132.028011][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 132.031761][ T6872] netlink: 120 bytes leftover after parsing attributes in process `syz.0.283'. [ 132.035421][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 132.039698][ T6872] fuse: Bad value for 'fd' [ 132.042443][ T6872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.283'. [ 133.028814][ T6885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.287'. [ 133.084876][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.288'. [ 133.239581][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 133.255455][ T6894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.291'. [ 133.472905][ T6901] overlayfs: failed to clone upperpath [ 135.172148][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 135.432065][ T6920] overlayfs: failed to clone upperpath [ 137.372194][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.374827][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.290336][ T6945] validate_nla: 46 callbacks suppressed [ 138.290353][ T6945] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 139.937342][ T62] Bluetooth: hci3: hardware error 0x00 [ 139.989827][ T6660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.017022][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 140.029903][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 140.030135][ T6954] overlayfs: failed to clone upperpath [ 140.034878][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 140.046953][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 140.055909][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 140.457531][ T5101] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 140.467055][ T5101] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 140.473052][ T5101] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 140.481053][ T5101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 140.485496][ T5101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 140.508805][ T5101] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.533685][ T5101] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.539854][ T5757] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.546105][ T5757] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.550218][ T5757] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.083530][ T6723] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.085776][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.088061][ T6723] bridge_slave_0: entered allmulticast mode [ 141.091321][ T6723] bridge_slave_0: entered promiscuous mode [ 141.096139][ T6723] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.098591][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.101087][ T6723] bridge_slave_1: entered allmulticast mode [ 141.103640][ T6723] bridge_slave_1: entered promiscuous mode [ 141.155116][ T1254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.169280][ T6723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.187234][ T6723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.237230][ T6723] team0: Port device team_slave_0 added [ 141.256278][ T6723] team0: Port device team_slave_1 added [ 141.302811][ T1254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.343295][ T6723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.345457][ T6723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.353223][ T6723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.357699][ T6723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.360069][ T6723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.367775][ T6723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.395055][ T1254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.454177][ T6723] hsr_slave_0: entered promiscuous mode [ 141.456462][ T6723] hsr_slave_1: entered promiscuous mode [ 141.458541][ T6723] debugfs: 'hsr0' already exists in 'hsr' [ 141.461336][ T6723] Cannot create hsr debugfs directory [ 141.508063][ T1254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.668220][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.670612][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.672927][ T6745] bridge_slave_0: entered allmulticast mode [ 141.676383][ T6745] bridge_slave_0: entered promiscuous mode [ 141.681787][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.684403][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.687101][ T6745] bridge_slave_1: entered allmulticast mode [ 141.690866][ T6745] bridge_slave_1: entered promiscuous mode [ 141.749710][ T6745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.754177][ T6745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.826687][ T6745] team0: Port device team_slave_0 added [ 141.858306][ T1254] bridge_slave_1: left allmulticast mode [ 141.860750][ T1254] bridge_slave_1: left promiscuous mode [ 141.863366][ T1254] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.868036][ T1254] bridge_slave_0: left allmulticast mode [ 141.873006][ T1254] bridge_slave_0: left promiscuous mode [ 141.874788][ T1254] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.022686][ T62] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 142.089242][ T62] Bluetooth: hci4: command tx timeout [ 142.333666][ T1254] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.341858][ T1254] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.346644][ T1254] .` (unregistering): Released all slaves [ 142.353962][ T6745] team0: Port device team_slave_1 added [ 142.369159][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 142.395987][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.398992][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.407546][ T6784] bridge_slave_0: entered allmulticast mode [ 142.421778][ T6784] bridge_slave_0: entered promiscuous mode [ 142.438835][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.441806][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.444476][ T6784] bridge_slave_1: entered allmulticast mode [ 142.447630][ T6784] bridge_slave_1: entered promiscuous mode [ 142.450348][ T1254] tipc: Disabling bearer [ 142.455709][ T1254] tipc: Left network mode [ 142.459402][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.463821][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.473228][ T6745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.483610][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.485740][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.494137][ T6745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.569300][ T62] Bluetooth: hci6: command tx timeout [ 142.589973][ T6784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.606844][ T6784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.631840][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 142.634616][ T6723] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.639446][ T6723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.644977][ T6745] hsr_slave_0: entered promiscuous mode [ 142.647252][ T6745] hsr_slave_1: entered promiscuous mode [ 142.650473][ T6745] debugfs: 'hsr0' already exists in 'hsr' [ 142.652792][ T6745] Cannot create hsr debugfs directory [ 142.659234][ T62] Bluetooth: hci5: command tx timeout [ 142.672738][ T6723] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.678381][ T6723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.683745][ T6784] team0: Port device team_slave_0 added [ 142.686953][ T6784] team0: Port device team_slave_1 added [ 142.701589][ T6723] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.712407][ T6723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.715700][ T6723] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.734706][ T6723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.769941][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 142.777533][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.785027][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.801830][ T6784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.827112][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.831322][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.840483][ T6784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.870851][ T1254] hsr_slave_0: left promiscuous mode [ 142.873887][ T1254] hsr_slave_1: left promiscuous mode [ 142.876926][ T1254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.881813][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.885908][ T1254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.888998][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.907685][ T1254] veth1_macvtap: left promiscuous mode [ 142.911645][ T1254] veth0_macvtap: left promiscuous mode [ 142.914000][ T1254] veth1_vlan: left promiscuous mode [ 142.916221][ T1254] veth0_vlan: left promiscuous mode [ 143.135525][ T1254] team0 (unregistering): Port device team_slave_1 removed [ 143.144152][ T1254] team0 (unregistering): Port device team_slave_0 removed [ 143.257512][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 143.281827][ T6784] hsr_slave_0: entered promiscuous mode [ 143.284365][ T6784] hsr_slave_1: entered promiscuous mode [ 143.286257][ T6784] debugfs: 'hsr0' already exists in 'hsr' [ 143.288082][ T6784] Cannot create hsr debugfs directory [ 143.489762][ T6745] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.499860][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.506086][ T6745] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.510417][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.513291][ T6745] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.517589][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.521353][ T6745] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.525636][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.528996][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5 [ 143.537443][ T6723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.612584][ T6784] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 143.618863][ T6784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.625323][ T6723] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.630634][ T6784] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 143.637379][ T6784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.641375][ T6784] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 143.646761][ T6784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.650508][ T6784] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 143.657493][ T6784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.674499][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.677457][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.685486][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.688410][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.771907][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.788198][ T6745] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.812724][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.815078][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.947831][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.950881][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.989999][ T6784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.030959][ T6723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.034634][ T6784] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.054360][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.057197][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.061662][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.064433][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.089721][ T7085] overlayfs: failed to clone upperpath [ 144.179239][ T62] Bluetooth: hci4: command tx timeout [ 144.504403][ T6723] veth0_vlan: entered promiscuous mode [ 144.512283][ T6723] veth1_vlan: entered promiscuous mode [ 144.537971][ T6723] veth0_macvtap: entered promiscuous mode [ 144.571165][ T6723] veth1_macvtap: entered promiscuous mode [ 144.613047][ T6723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.628101][ T6723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.646359][ T1254] bridge_slave_1: left allmulticast mode [ 144.648211][ T1254] bridge_slave_1: left promiscuous mode [ 144.651347][ T1254] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.654841][ T1254] bridge_slave_0: left allmulticast mode [ 144.656646][ T1254] bridge_slave_0: left promiscuous mode [ 144.661900][ T1254] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.665568][ T62] Bluetooth: hci6: command tx timeout [ 144.742069][ T62] Bluetooth: hci5: command tx timeout [ 144.915095][ T1254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.920507][ T1254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.924696][ T1254] bond0 (unregistering): Released all slaves [ 144.936525][ T1192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.943784][ T1192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.946431][ T1192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.951369][ T6784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.953872][ T1192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.962670][ T6745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.022424][ T1254] tipc: Left network mode [ 145.045194][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.048097][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.078349][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.084738][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.156946][ T7127] syzkaller0: entered promiscuous mode [ 145.158736][ T7127] syzkaller0: entered allmulticast mode [ 145.263737][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6 [ 145.325223][ T6745] veth0_vlan: entered promiscuous mode [ 145.406743][ T6784] veth0_vlan: entered promiscuous mode [ 145.435296][ T1254] hsr_slave_0: left promiscuous mode [ 145.443271][ T1254] hsr_slave_1: left promiscuous mode [ 145.448332][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.455062][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.464728][ T1254] batman_adv: batadv0: Removing interface: macsec1 [ 145.715262][ T1254] team0 (unregistering): Port device team_slave_1 removed [ 145.726163][ T1254] team0 (unregistering): Port device team_slave_0 removed [ 145.824807][ T6745] veth1_vlan: entered promiscuous mode [ 145.837123][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7 [ 145.858901][ T6784] veth1_vlan: entered promiscuous mode [ 145.885056][ T6745] veth0_macvtap: entered promiscuous mode [ 145.900030][ T6745] veth1_macvtap: entered promiscuous mode [ 145.908548][ T6784] veth0_macvtap: entered promiscuous mode [ 145.923400][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.931442][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.936845][ T6784] veth1_macvtap: entered promiscuous mode [ 145.951305][ T1192] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.954605][ T1192] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.968368][ T1192] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.125346][ T1192] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.128835][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8 [ 146.144158][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.186713][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.213533][ T225] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.217518][ T225] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.228127][ T225] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.233260][ T225] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.239761][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.249797][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.259243][ T62] Bluetooth: hci4: command tx timeout [ 146.297745][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.310262][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.345368][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.352210][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.394247][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.399689][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.519042][ T5454] 8021q: adding VLAN 0 to HW filter on device eth9 [ 146.680626][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.254'. [ 146.739308][ T62] Bluetooth: hci6: command tx timeout [ 146.809159][ T62] Bluetooth: hci5: command tx timeout [ 146.884914][ T1254] IPVS: stop unused estimator thread 0... [ 147.334828][ T7161] loop9: detected capacity change from 0 to 7 [ 147.350317][ C3] blk_print_req_error: 10 callbacks suppressed [ 147.350334][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.356548][ C3] buffer_io_error: 10 callbacks suppressed [ 147.356563][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 147.362462][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.366202][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 147.372291][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.375956][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 147.380044][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.383682][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 147.389027][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.392325][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 147.396215][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.399851][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 147.407247][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.411092][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 147.413878][ T7161] ldm_validate_partition_table(): Disk read failed. [ 147.453172][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.456015][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 147.458864][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.462728][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 147.466474][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.470053][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 147.473535][ T7161] Dev loop9: unable to read RDB block 0 [ 147.481227][ T7161] loop9: unable to read partition table [ 147.483187][ T7161] loop9: partition table beyond EOD, truncated [ 147.488896][ T7161] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 147.811329][ T7188] loop9: detected capacity change from 0 to 7 [ 147.814717][ T7188] ldm_validate_partition_table(): Disk read failed. [ 147.817508][ T7188] Dev loop9: unable to read RDB block 0 [ 147.825181][ T7188] loop9: unable to read partition table [ 147.827608][ T7188] loop9: partition table beyond EOD, truncated [ 147.832369][ T7188] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 147.869937][ T7191] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.961471][ T7193] fuse: Unknown parameter 'rootй°еYЙ’PµlаЈ)сmode_00„Ћяя0000000;­mSC›яњ00' [ 147.966468][ T7193] netlink: 20 bytes leftover after parsing attributes in process `syz.5.321'. [ 147.976697][ T7193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.026949][ T7200] netlink: 'syz.6.323': attribute type 1 has an invalid length. [ 148.053603][ T7201] 9pnet_virtio: no channels available for device syz [ 148.065286][ T7201] overlayfs: failed to clone upperpath [ 148.239193][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 148.329151][ T62] Bluetooth: hci4: command tx timeout [ 148.339772][ T842] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 148.424076][ T34] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 148.428903][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 148.431707][ T34] usb 10-1: Product: syz [ 148.433023][ T34] usb 10-1: Manufacturer: syz [ 148.436670][ T34] usb 10-1: SerialNumber: syz [ 148.442348][ T34] usb 10-1: config 0 descriptor?? [ 148.450840][ T34] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 148.455455][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 148.464613][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.470043][ T34] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 148.474962][ T34] usb 10-1: media controller created [ 148.482184][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.520865][ T842] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 148.523280][ T842] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.526659][ T842] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.530731][ T842] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.534161][ T842] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.538568][ T842] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 148.541499][ T842] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.544971][ T842] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.548568][ T842] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.552348][ T842] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.556851][ T842] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 148.559502][ T842] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.562755][ T842] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.566347][ T842] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.570074][ T842] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.576069][ T842] usb 11-1: string descriptor 0 read error: -22 [ 148.578126][ T842] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.581763][ T842] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.591688][ T842] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 148.658599][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.666470][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.671307][ T7193] dvb-usb: bulk message failed: -22 (4/0) [ 148.673738][ T7193] cxusb: i2c read failed [ 148.810198][ T62] Bluetooth: hci6: command tx timeout [ 148.919562][ T1342] usb 11-1: USB disconnect, device number 2 [ 149.722764][ T7229] bond1: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 149.738607][ T7229] bond1 (unregistering): Released all slaves [ 149.786161][ T7231] xfrm0 speed is unknown, defaulting to 1000 [ 149.791700][ T7231] xfrm0 speed is unknown, defaulting to 1000 [ 149.796641][ T7231] xfrm0 speed is unknown, defaulting to 1000 [ 149.910555][ T856] xfrm0 speed is unknown, defaulting to 1000 [ 149.913656][ T7231] infiniband syz1: set active [ 149.915229][ T7231] infiniband syz1: added xfrm0 [ 149.928182][ T7231] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 149.934658][ T7231] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 149.943136][ T7231] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 149.962873][ T7231] RDS/IB: syz1: added [ 149.964385][ T7231] smc: adding ib device syz1 with port count 1 [ 149.966330][ T7231] smc: ib device syz1 port 1 has no pnetid [ 149.969771][ T856] xfrm0 speed is unknown, defaulting to 1000 [ 149.977386][ T7231] xfrm0 speed is unknown, defaulting to 1000 [ 150.078627][ T7231] xfrm0 speed is unknown, defaulting to 1000 [ 150.174983][ T7237] xfrm0 speed is unknown, defaulting to 1000 [ 150.323549][ T7231] xfrm0 speed is unknown, defaulting to 1000 [ 150.479836][ T7231] xfrm0 speed is unknown, defaulting to 1000 [ 150.576256][ T7231] xfrm0 speed is unknown, defaulting to 1000 [ 150.848260][ T34] cxusb: set interface failed [ 150.849869][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 150.888555][ T34] DVB: Unable to find symbol mt352_attach() [ 150.891080][ T34] dvb-usb: bulk message failed: -22 (5/0) [ 150.893231][ T34] zl10353_read_register: readreg error (reg=127, ret==-121) [ 150.896065][ T34] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 150.924034][ T7250] bpf: Bad value for 'mode' [ 150.987208][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.337'. [ 151.119159][ T34] rc_core: IR keymap rc-dvico-mce not found [ 151.121032][ T34] Registered IR keymap rc-empty [ 151.126586][ T34] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 151.147862][ T34] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input11 [ 151.159363][ T34] dvb-usb: schedule remote query interval to 100 msecs. [ 151.169138][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 151.175222][ T34] usb 10-1: USB disconnect, device number 2 [ 151.221307][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.340'. [ 151.252074][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 151.289695][ T7259] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.339'. [ 151.320829][ T7266] loop9: detected capacity change from 0 to 7 [ 151.325432][ T7266] ldm_validate_partition_table(): Disk read failed. [ 151.329271][ T7266] Dev loop9: unable to read RDB block 0 [ 151.331352][ T7266] loop9: unable to read partition table [ 151.333222][ T7266] loop9: partition table beyond EOD, truncated [ 151.338290][ T7266] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 151.472117][ T7270] binder: 7269:7270 ioctl c0306201 0 returned -14 [ 151.534005][ T7271] binder: 7269:7271 ioctl 7a4 80000380 returned -22 [ 151.689279][ T62] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 151.693985][ T62] Bluetooth: hci5: Injecting HCI hardware error event [ 151.697552][ T62] Bluetooth: hci5: hardware error 0x00 [ 152.360253][ T7277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.430292][ T7278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.437995][ T7277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.443663][ T7277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.611520][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88804c0fbc00: rx timeout, send abort [ 152.615649][ C3] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804c0fbc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 152.856879][ T7290] syzkaller0: entered promiscuous mode [ 152.861137][ T7290] syzkaller0: entered allmulticast mode [ 153.006952][ T7299] loop9: detected capacity change from 0 to 7 [ 153.010991][ C3] blk_print_req_error: 51 callbacks suppressed [ 153.011026][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.016009][ C3] buffer_io_error: 50 callbacks suppressed [ 153.016017][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.026039][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.028951][ T7302] xfrm0 speed is unknown, defaulting to 1000 [ 153.029365][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.029611][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.036702][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.039392][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.042309][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.045691][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.048785][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.052250][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.055143][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.058311][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.061305][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.064420][ T7299] ldm_validate_partition_table(): Disk read failed. [ 153.066717][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.069654][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.072430][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.075307][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.078176][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.081029][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.087271][ T7299] Dev loop9: unable to read RDB block 0 [ 153.121774][ T7299] loop9: unable to read partition table [ 153.123712][ T7299] loop9: partition table beyond EOD, truncated [ 153.129714][ T7299] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 153.409728][ T7329] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.772201][ T62] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 154.075341][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 154.176535][ T7353] 9pnet_virtio: no channels available for device syz [ 154.339210][ T856] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 154.490665][ T856] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.494128][ T856] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.497195][ T856] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.501957][ T856] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.505427][ T856] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.510147][ T856] usb 9-1: config 0 descriptor?? [ 154.531615][ T7368] 9pnet_virtio: no channels available for device syz [ 154.535202][ T7368] overlayfs: failed to clone upperpath [ 154.929006][ T856] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 155.129317][ T62] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 155.133354][ T62] Bluetooth: hci6: Injecting HCI hardware error event [ 155.136510][ T62] Bluetooth: hci6: hardware error 0x00 [ 155.392475][ T7400] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 156.380013][ T5892] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 157.013271][ T7432] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.199107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 157.219287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 157.223945][ T62] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 157.967361][ T7444] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 157.969869][ T7444] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 158.019616][ T7444] vhci_hcd vhci_hcd.0: Device attached [ 158.419334][ T1342] usb 46-1: SetAddress Request (2) to port 0 [ 158.421266][ T1342] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 158.482698][ T7447] vhci_hcd: connection closed [ 158.509354][ T225] vhci_hcd vhci_hcd.4: stop threads [ 158.520663][ T225] vhci_hcd vhci_hcd.4: release socket [ 158.524969][ T225] vhci_hcd vhci_hcd.4: disconnect device [ 158.611687][ T54] usb 9-1: USB disconnect, device number 2 [ 158.864635][ T7472] netlink: 64 bytes leftover after parsing attributes in process `syz.6.382'. [ 159.540654][ T7485] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.542577][ T7485] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 159.552495][ T7485] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 159.613124][ T7491] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 160.180628][ T7514] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.566679][ T7528] 9pnet_virtio: no channels available for device syz [ 160.572680][ T7528] overlayfs: failed to clone upperpath [ 161.529332][ T62] Bluetooth: hci4: command 0x0c1a tx timeout [ 162.288207][ T7580] loop9: detected capacity change from 0 to 7 [ 162.305970][ C0] blk_print_req_error: 10 callbacks suppressed [ 162.305988][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.311560][ C0] buffer_io_error: 10 callbacks suppressed [ 162.311574][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.320327][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.323780][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.329683][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.333084][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.337889][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.341344][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.346992][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.350455][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.353918][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.357353][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.361454][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.365112][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.368184][ T7580] ldm_validate_partition_table(): Disk read failed. [ 162.370909][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.373755][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.376409][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.379886][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.383220][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.386368][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.391378][ T7580] Dev loop9: unable to read RDB block 0 [ 162.403806][ T7578] netlink: 64 bytes leftover after parsing attributes in process `syz.0.413'. [ 162.461334][ T7590] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 162.470400][ T7590] CIFS mount error: No usable UNC path provided in device string! [ 162.470400][ T7590] [ 162.473444][ T7580] loop9: unable to read partition table [ 162.474441][ T7590] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 162.477766][ T7580] loop9: partition table beyond EOD, truncated [ 162.486815][ T7580] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 162.665873][ T7593] netlink: 20 bytes leftover after parsing attributes in process `syz.5.418'. [ 163.019214][ T5816] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 163.172685][ T5816] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 163.176326][ T5816] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.180137][ T5816] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.184334][ T5816] usb 10-1: config 0 interface 0 has no altsetting 0 [ 163.195120][ T5816] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.198845][ T5816] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.203272][ T5816] usb 10-1: config 0 interface 0 has no altsetting 0 [ 163.207009][ T5816] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.210699][ T5816] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.215880][ T5816] usb 10-1: config 0 interface 0 has no altsetting 0 [ 163.222839][ T5816] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.235081][ T5816] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.241753][ T5816] usb 10-1: config 0 interface 0 has no altsetting 0 [ 163.250839][ T5816] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.260082][ T5816] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.269153][ T5816] usb 10-1: config 0 interface 0 has no altsetting 0 [ 163.277887][ T5816] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.285057][ T5816] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.291620][ T5816] usb 10-1: config 0 interface 0 has no altsetting 0 [ 163.295613][ T5816] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.305701][ T5816] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.317038][ T5816] usb 10-1: config 0 interface 0 has no altsetting 0 [ 163.322784][ T5816] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.326529][ T5816] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.332423][ T5816] usb 10-1: config 0 interface 0 has no altsetting 0 [ 163.351727][ T5816] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 163.356525][ T5816] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 163.360237][ T5816] usb 10-1: Product: syz [ 163.361569][ T5816] usb 10-1: Manufacturer: syz [ 163.363291][ T5816] usb 10-1: SerialNumber: syz [ 163.370478][ T5816] usb 10-1: config 0 descriptor?? [ 163.377020][ T5816] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 163.501425][ T7614] SET target dimension over the limit! [ 163.529359][ T1342] usb 46-1: device descriptor read/8, error -110 [ 163.579180][ T5854] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 163.592433][ T5816] usb 10-1: USB disconnect, device number 3 [ 163.603152][ T5816] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 163.610657][ T62] Bluetooth: hci4: command 0x0c1a tx timeout [ 163.703822][ T40] audit: type=1326 audit(1780069852.727:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 163.711651][ T40] audit: type=1326 audit(1780069852.727:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.427" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 163.721659][ T40] audit: type=1326 audit(1780069852.727:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 163.728325][ T40] audit: type=1326 audit(1780069852.727:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 163.734463][ T40] audit: type=1326 audit(1780069852.727:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.427" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 163.740923][ T40] audit: type=1326 audit(1780069852.727:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 163.747879][ T40] audit: type=1326 audit(1780069852.727:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 163.755502][ T40] audit: type=1326 audit(1780069852.727:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.427" exe="/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 163.762453][ T40] audit: type=1326 audit(1780069852.727:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 163.763157][ T5854] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.771691][ T40] audit: type=1326 audit(1780069852.727:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.427" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 163.773635][ T5854] usb 11-1: config 0 has no interface number 0 [ 163.773674][ T5854] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 163.786664][ T5854] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 163.789981][ T5854] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.792873][ T5854] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.797003][ T5854] usb 11-1: config 0 descriptor?? [ 163.799320][ T7606] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 163.810082][ T5854] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 163.929739][ T1342] usb usb46-port1: attempt power cycle [ 164.017417][ T7606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.020951][ T7606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.027897][ T5854] kernel write not supported for file /usb/iowarrior0 (pid: 5854 comm: kworker/1:6) [ 164.034494][ T5854] usb 11-1: USB disconnect, device number 3 [ 164.205650][ T7625] overlayfs: failed to resolve './file0': -2 [ 164.255941][ T7623] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 164.480251][ T7635] syz.5.434 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 164.499593][ T1342] usb usb46-port1: unable to enumerate USB device [ 164.571485][ T7643] netlink: 'syz.6.437': attribute type 1 has an invalid length. [ 164.680427][ T7648] syz_tun: entered allmulticast mode [ 164.734139][ T7650] io-wq is not configured for unbound workers [ 164.909177][ T5850] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 165.062405][ T5850] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 165.065464][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.069789][ T5850] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.074236][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 165.078578][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 165.084404][ T5850] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 165.087588][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.092212][ T5850] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.099125][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 165.109159][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 165.114791][ T5850] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 165.117850][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.122757][ T5850] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.127470][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 165.128172][ T7655] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 165.132566][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 165.143212][ T5850] usb 11-1: string descriptor 0 read error: -22 [ 165.145382][ T5850] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 165.148423][ T5850] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.170302][ T5850] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 165.193596][ T62] Bluetooth: hci4: unexpected event for opcode 0x0c12 [ 165.376051][ T1342] usb 11-1: USB disconnect, device number 4 [ 167.178125][ T7693] syz_tun: entered allmulticast mode [ 167.320392][ T7704] SET target dimension over the limit! [ 167.478999][ T7716] bridge_slave_0: left allmulticast mode [ 167.481882][ T7716] bridge_slave_0: left promiscuous mode [ 167.485589][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.499438][ T7716] bridge_slave_1: left allmulticast mode [ 167.502366][ T7716] bridge_slave_1: left promiscuous mode [ 167.504752][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.520138][ T7716] bond0: (slave bond_slave_0): Releasing backup interface [ 167.535664][ T7716] bond0: (slave bond_slave_1): Releasing backup interface [ 167.546795][ T7716] team0: Port device team_slave_0 removed [ 167.551907][ T7716] team0: Port device team_slave_1 removed [ 167.554084][ T7716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.556448][ T7716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.567860][ T7716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.570945][ T7716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.579467][ T7722] input: syz0 as /devices/virtual/input/input13 [ 167.646613][ T7725] netlink: 'syz.5.462': attribute type 2 has an invalid length. [ 167.678007][ T7716] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.690125][ T7727] overlayfs: failed to clone upperpath [ 167.690908][ T7720] team0: Mode changed to "roundrobin" [ 167.700554][ T7723] vlan0: entered promiscuous mode [ 167.720988][ T7723] team0: Port device vlan0 added [ 167.779540][ T7726] tipc: Started in network mode [ 167.781540][ T7726] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 167.784029][ T7726] tipc: Enabled bearer , priority 0 [ 168.900984][ T5816] tipc: Node number set to 11578026 [ 169.219331][ T62] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 169.224875][ T62] Bluetooth: hci4: Injecting HCI hardware error event [ 169.230860][ T62] Bluetooth: hci4: hardware error 0x00 [ 170.210105][ T7782] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 170.519357][ T5816] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 170.616614][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.5.473'. [ 170.670804][ T5816] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 170.673836][ T5816] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 170.677931][ T5816] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.682427][ T5816] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 170.686713][ T5816] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 170.692527][ T5816] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 170.695744][ T5816] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 170.700185][ T5816] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.704698][ T5816] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 170.711281][ T5816] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 170.716939][ T5816] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 170.722062][ T5816] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 170.726171][ T5816] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.730676][ T5816] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 170.734173][ T5816] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 170.741553][ T5816] usb 9-1: string descriptor 0 read error: -22 [ 170.743581][ T5816] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 170.746817][ T5816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.755788][ T5816] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 170.800262][ T7795] loop9: detected capacity change from 0 to 7 [ 170.807352][ C0] blk_print_req_error: 10 callbacks suppressed [ 170.807367][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.813196][ C0] buffer_io_error: 10 callbacks suppressed [ 170.813206][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.818686][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.822235][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.825334][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.829006][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.832377][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.835875][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.839203][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.842641][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.845786][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.849446][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.852811][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.856506][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.859834][ T7795] ldm_validate_partition_table(): Disk read failed. [ 170.864970][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.868448][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.909380][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.912855][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.915685][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.919512][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.923055][ T7795] Dev loop9: unable to read RDB block 0 [ 170.925269][ T7795] loop9: unable to read partition table [ 170.927365][ T7795] loop9: partition table beyond EOD, truncated [ 170.929926][ T7795] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 170.962019][ T34] usb 9-1: USB disconnect, device number 3 [ 171.010807][ T7801] loop9: detected capacity change from 0 to 7 [ 171.015045][ T7801] ldm_validate_partition_table(): Disk read failed. [ 171.018012][ T7801] Dev loop9: unable to read RDB block 0 [ 171.020605][ T7801] loop9: unable to read partition table [ 171.022878][ T7801] loop9: partition table beyond EOD, truncated [ 171.026071][ T7801] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 171.254436][ T7814] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 171.260363][ T7814] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 171.267101][ T7814] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 171.271747][ T7814] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 171.281593][ T7814] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 171.319706][ T62] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 171.926783][ T7822] syzkaller0: entered promiscuous mode [ 171.928660][ T7822] syzkaller0: entered allmulticast mode [ 171.941918][ T7822] input: syz1 as /devices/virtual/input/input14 [ 172.563372][ T7828] loop9: detected capacity change from 0 to 7 [ 172.573165][ T7828] ldm_validate_partition_table(): Disk read failed. [ 172.576566][ T7828] Dev loop9: unable to read RDB block 0 [ 172.582934][ T7828] loop9: unable to read partition table [ 172.586100][ T7828] loop9: partition table beyond EOD, truncated [ 172.588702][ T7828] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 172.767240][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 172.863948][ T7849] netlink: 'syz.5.492': attribute type 1 has an invalid length. [ 172.893202][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'. [ 172.897095][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'. [ 172.903339][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'. [ 172.906822][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'. [ 172.923163][ T7852] tipc: Resetting bearer [ 172.934730][ T7852] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 173.055495][ T7852] netlink: 76 bytes leftover after parsing attributes in process `syz.0.493'. [ 173.303318][ T7867] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 174.472462][ T7878] Illegal XDP return value 7878 on prog (id 58) dev N/A, expect packet loss! [ 174.508189][ T7879] 9pnet_virtio: no channels available for device syz [ 174.585713][ T7880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.618225][ T7895] netlink: 'syz.5.502': attribute type 1 has an invalid length. [ 178.670279][ T7917] fuse: Unknown parameter '0x0000000000000003' [ 179.672595][ T7955] fuse: Bad value for 'fd' [ 179.709117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 180.146716][ T7970] /dev/nullb0: Can't lookup blockdev [ 180.834508][ T7977] loop8: detected capacity change from 0 to 7 [ 180.852645][ T7977] Dev loop8: unable to read RDB block 7 [ 180.854340][ T7977] loop8: unable to read partition table [ 180.856141][ T7977] loop8: partition table beyond EOD, truncated [ 180.858049][ T7977] loop_reread_partitions: partition scan of loop8 (юиў«xь—џСа– ) failed (rc=-5) [ 180.863720][ T7977] netlink: 32 bytes leftover after parsing attributes in process `syz.4.517'. [ 181.839102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 181.849118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 182.226160][ T78] Bluetooth: hci0: Frame reassembly failed (-84) [ 182.230480][ T78] Bluetooth: hci0: Frame reassembly failed (-84) [ 182.387060][ T78] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 182.672992][ T8044] 9p: Bad value for 'rfdno' [ 182.853617][ T8051] overlayfs: failed to clone upperpath [ 184.249185][ T5744] Bluetooth: hci0: command 0x1003 tx timeout [ 184.251299][ T62] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 184.689448][ T40] kauditd_printk_skb: 162 callbacks suppressed [ 184.689460][ T40] audit: type=1326 audit(1780069873.697:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.6.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000 [ 184.698099][ T40] audit: type=1326 audit(1780069873.697:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.6.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000 [ 184.704674][ T40] audit: type=1326 audit(1780069873.707:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.6.544" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f56f7c code=0x7ffc0000 [ 184.711255][ T40] audit: type=1326 audit(1780069873.707:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.6.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000 [ 184.717697][ T40] audit: type=1326 audit(1780069873.707:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.6.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000 [ 184.724140][ T40] audit: type=1326 audit(1780069873.707:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.6.544" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f56f7c code=0x7ffc0000 [ 184.794044][ T40] audit: type=1326 audit(1780069873.747:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.6.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000 [ 184.886784][ T40] audit: type=1326 audit(1780069873.907:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.6.544" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f56f7c code=0x7ffc0000 [ 184.926534][ T40] audit: type=1326 audit(1780069873.947:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.6.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000 [ 184.943664][ T40] audit: type=1326 audit(1780069873.957:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.6.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000 [ 186.309346][ T1342] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 186.484154][ T1342] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.488758][ T1342] usb 10-1: config 0 has no interfaces? [ 186.493755][ T1342] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.496797][ T1342] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.499461][ T1342] usb 10-1: Product: syz [ 186.500977][ T1342] usb 10-1: Manufacturer: syz [ 186.515207][ T1342] usb 10-1: config 0 descriptor?? [ 186.802681][ T34] usb 10-1: USB disconnect, device number 4 [ 187.400770][ T8107] netlink: 'syz.6.555': attribute type 1 has an invalid length. [ 187.556727][ T8110] [U]  [ 187.719148][ T5849] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 187.870812][ T5849] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 187.873732][ T5849] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 187.877763][ T5849] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.882407][ T5849] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 187.886858][ T5849] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 187.892498][ T5849] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 187.894991][ T5849] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 187.898850][ T5849] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.902970][ T5849] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 187.907056][ T5849] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 187.912200][ T5849] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 187.914738][ T5849] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 187.918193][ T5849] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.922482][ T5849] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 187.926778][ T5849] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 187.933442][ T5849] usb 11-1: string descriptor 0 read error: -22 [ 187.935490][ T5849] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 187.938405][ T5849] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.949220][ T5849] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 188.270062][ T5835] usb 11-1: USB disconnect, device number 5 [ 188.608233][ T7774] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.693524][ T7774] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.800142][ T7774] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.955494][ T7774] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.102500][ T5849] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 189.144802][ T7774] bridge_slave_1: left allmulticast mode [ 189.147237][ T7774] bridge_slave_1: left promiscuous mode [ 189.150310][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.156532][ T7774] bridge_slave_0: left allmulticast mode [ 189.157088][ T8135] overlayfs: failed to clone upperpath [ 189.158941][ T7774] bridge_slave_0: left promiscuous mode [ 189.164537][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.251465][ T5849] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 189.255031][ T5849] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 189.261182][ T5849] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 189.264160][ T5849] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.271460][ T5849] usb 11-1: Product: syz [ 189.272889][ T5849] usb 11-1: Manufacturer: syz [ 189.276221][ T5849] usb 11-1: SerialNumber: syz [ 189.296078][ T5849] usb 11-1: config 0 descriptor?? [ 189.310365][ T5849] hub 11-1:0.0: bad descriptor, ignoring hub [ 189.315388][ T5849] hub 11-1:0.0: probe with driver hub failed with error -5 [ 189.323474][ T5849] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input15 [ 189.401344][ T7774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.411742][ T7774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.418648][ T7774] bond0 (unregistering): Released all slaves [ 189.427917][ T7774] bond1 (unregistering): Released all slaves [ 189.453717][ T7774] bond2 (unregistering): Released all slaves [ 189.539545][ T5454] 8021q: adding VLAN 0 to HW filter on device eth10 [ 189.898524][ T8161] bridge_slave_0: left allmulticast mode [ 189.900848][ T8161] bridge_slave_0: left promiscuous mode [ 189.903233][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.934501][ T8161] bridge_slave_1: left allmulticast mode [ 189.946954][ T8161] bridge_slave_1: left promiscuous mode [ 189.950020][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.981741][ T8161] bond0: (slave bond_slave_0): Releasing backup interface [ 190.003830][ T5849] usb 11-1: USB disconnect, device number 6 [ 190.012269][ T8161] bond0: (slave bond_slave_1): Releasing backup interface [ 190.295178][ T8161] team0: Port device team_slave_0 removed [ 190.307601][ T8161] team0: Port device team_slave_1 removed [ 190.311479][ T8161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.316792][ T8161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.327485][ T8161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.331279][ T8161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.342578][ T8161] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.411270][ T5454] 8021q: adding VLAN 0 to HW filter on device eth11 [ 190.797519][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12 [ 190.923648][ T7774] hsr_slave_0: left promiscuous mode [ 190.938996][ T7774] hsr_slave_1: left promiscuous mode [ 190.946779][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.953035][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.963702][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.966136][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.986581][ T7774] veth1_macvtap: left promiscuous mode [ 190.991481][ T7774] veth0_macvtap: left promiscuous mode [ 190.995654][ T7774] veth1_vlan: left promiscuous mode [ 190.998490][ T7774] veth0_vlan: left promiscuous mode [ 191.219683][ T7774] team0 (unregistering): Port device team_slave_1 removed [ 191.232148][ T7774] team0 (unregistering): Port device team_slave_0 removed [ 191.358534][ T8179] netlink: 20 bytes leftover after parsing attributes in process `syz.5.572'. [ 191.371306][ T5454] 8021q: adding VLAN 0 to HW filter on device eth13 [ 191.538163][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.577'. [ 192.123501][ T8218] netlink: 36 bytes leftover after parsing attributes in process `syz.5.581'. [ 192.152823][ T8218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.164162][ T8218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.581'. [ 192.711664][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 192.890854][ T8243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.590'. [ 193.563475][ T8257] syzkaller0: entered promiscuous mode [ 193.565963][ T8257] syzkaller0: entered allmulticast mode [ 194.096648][ T8261] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 194.813587][ T8268] random: crng reseeded on system resumption [ 195.324156][ T8277] xfrm0 speed is unknown, defaulting to 1000 [ 195.828355][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.836273][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.839864][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.843639][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.847310][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.415847][ T8282] xfrm0 speed is unknown, defaulting to 1000 [ 196.526582][ T78] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.616492][ T78] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.818731][ T78] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.396808][ T78] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.537367][ T8282] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.539851][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.542422][ T8282] bridge_slave_0: entered allmulticast mode [ 197.545095][ T8282] bridge_slave_0: entered promiscuous mode [ 197.548268][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.550719][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.553242][ T8282] bridge_slave_1: entered allmulticast mode [ 197.556186][ T8282] bridge_slave_1: entered promiscuous mode [ 197.576614][ T8282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.584746][ T8282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.600439][ T8282] team0: Port device team_slave_0 added [ 197.603506][ T8282] team0: Port device team_slave_1 added [ 197.617010][ T8282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.619354][ T8282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.627022][ T8282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.638185][ T8282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.640533][ T8282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.652506][ T8282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.676593][ T8282] hsr_slave_0: entered promiscuous mode [ 197.678752][ T8282] hsr_slave_1: entered promiscuous mode [ 197.785351][ T8282] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 197.929324][ T5744] Bluetooth: hci0: command tx timeout [ 197.965800][ T8282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.969804][ T8282] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 198.111668][ T8282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.117726][ T8282] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 198.123634][ T8282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.134691][ T8282] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 198.157259][ T8282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.185001][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.606'. [ 198.297725][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.300002][ T8282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.302292][ T8282] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.304431][ T8282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.493477][ T78] bond0 (unregistering): Released all slaves [ 198.500009][ T78] bond1 (unregistering): Released all slaves [ 198.513596][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.516476][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.594472][ T8282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.623661][ T8282] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.632337][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.635345][ T7772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.650660][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.653697][ T7774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.686702][ T78] tipc: Disabling bearer [ 198.696422][ T78] tipc: Left network mode [ 198.711872][ T5454] 8021q: adding VLAN 0 to HW filter on device eth14 [ 198.832042][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.834724][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.983926][ T5454] 8021q: adding VLAN 0 to HW filter on device eth15 [ 199.131447][ T78] hsr_slave_0: left promiscuous mode [ 199.140671][ T78] hsr_slave_1: left promiscuous mode [ 199.171374][ T78] veth1_macvtap: left promiscuous mode [ 199.180176][ T78] veth0_macvtap: left promiscuous mode [ 199.185344][ T78] veth1_vlan: left promiscuous mode [ 199.427756][ T78] team0 (unregistering): Port device vlan0 removed [ 199.588522][ T5454] 8021q: adding VLAN 0 to HW filter on device eth16 [ 199.608185][ T8368] tipc: Started in network mode [ 199.612375][ T8368] tipc: Node identity 225e476eed36, cluster identity 4711 [ 199.620620][ T8368] tipc: Enabled bearer , priority 0 [ 199.657230][ T8365] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 199.661272][ T8369] syzkaller0: entered promiscuous mode [ 199.672463][ T8369] syzkaller0: entered allmulticast mode [ 199.688704][ T8365] tipc: Resetting bearer [ 199.702227][ T8282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.705249][ T8364] tipc: Resetting bearer [ 199.730129][ T8364] tipc: Disabling bearer [ 199.823128][ T5454] 8021q: adding VLAN 0 to HW filter on device eth17 [ 199.893114][ T8282] veth0_vlan: entered promiscuous mode [ 199.910700][ T8282] veth1_vlan: entered promiscuous mode [ 199.953686][ T8282] veth0_macvtap: entered promiscuous mode [ 199.974486][ T8282] veth1_macvtap: entered promiscuous mode [ 200.006533][ T8282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.009669][ T5744] Bluetooth: hci0: command tx timeout [ 200.024103][ T8282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.034268][ T1192] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.044367][ T1192] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.048996][ T1192] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.266894][ T1192] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.388065][ T7778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.394925][ T7778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.417667][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.422215][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.522181][ T8400] loop9: detected capacity change from 0 to 7 [ 200.526689][ C0] blk_print_req_error: 50 callbacks suppressed [ 200.526704][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.533026][ C0] buffer_io_error: 50 callbacks suppressed [ 200.533039][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.542764][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.546857][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.551016][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.554804][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.558699][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.562557][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.566222][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.569901][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.574380][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.577279][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.581157][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.583980][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.586541][ T8400] ldm_validate_partition_table(): Disk read failed. [ 200.589615][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.592789][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.596398][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.599278][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.602053][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.604916][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.608323][ T8400] Dev loop9: unable to read RDB block 0 [ 200.610750][ T8400] loop9: unable to read partition table [ 200.612716][ T8400] loop9: partition table beyond EOD, truncated [ 200.617035][ T8400] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 200.953430][ T8407] syz.7.615 (8407): drop_caches: 2 [ 201.200211][ T5744] block nbd6: Receive control failed (result -107) [ 201.255769][ T8420] 9p: Bad value for 'rfdno' [ 201.310032][ T8425] block nbd6: shutting down sockets [ 201.310576][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz.6.622'. [ 201.849024][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.625'. [ 202.089242][ T5744] Bluetooth: hci0: command tx timeout [ 202.132338][ T8445] input: syz0 as /devices/virtual/input/input16 [ 202.938819][ T8480] random: crng reseeded on system resumption [ 202.990044][ T8484] netlink: 'syz.6.637': attribute type 1 has an invalid length. [ 203.038578][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.632'. [ 203.101662][ T8475] 9p: Bad value for 'rfdno' [ 203.208965][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.632'. [ 203.321010][ T5850] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 203.482399][ T5850] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 203.484806][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 203.488174][ T5850] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.491891][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.496961][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 203.502582][ T5850] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 203.504917][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 203.508845][ T5850] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.512945][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.516501][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 203.522555][ T5850] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 203.525333][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 203.529008][ T5850] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.533575][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.537194][ T5850] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 203.543440][ T5850] usb 11-1: string descriptor 0 read error: -22 [ 203.545608][ T5850] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 203.549436][ T5850] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.560876][ T5850] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 203.812480][ T8522] : entered promiscuous mode [ 203.901287][ T5850] usb 11-1: USB disconnect, device number 7 [ 204.127468][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 204.131603][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 204.176176][ T8528] ceph: No mds server is up or the cluster is laggy [ 204.515791][ T5850] IPVS: starting estimator thread 0... [ 204.518589][ T8535] IPVS: nq: FWM 3 0x00000003 - no destination available [ 204.592417][ T8538] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 204.619183][ T8536] IPVS: using max 44 ests per chain, 105600 per kthread [ 204.786587][ T8547] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 204.788656][ T8547] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 204.791231][ T8547] vhci_hcd vhci_hcd.0: Device attached [ 204.800674][ T8547] Bluetooth: MGMT ver 1.23 [ 204.802238][ T8547] FAULT_INJECTION: forcing a failure. [ 204.802238][ T8547] name failslab, interval 1, probability 0, space 0, times 1 [ 204.806694][ T8547] CPU: 3 UID: 0 PID: 8547 Comm: syz.6.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.806711][ T8547] Tainted: [L]=SOFTLOCKUP [ 204.806715][ T8547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.806721][ T8547] Call Trace: [ 204.806725][ T8547] [ 204.806730][ T8547] dump_stack_lvl+0x100/0x190 [ 204.806754][ T8547] should_fail_ex.cold+0x5/0xa [ 204.806769][ T8547] should_failslab+0xc2/0x120 [ 204.806783][ T8547] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 204.806801][ T8547] ? __alloc_skb+0x140/0x710 [ 204.806815][ T8547] __alloc_skb+0x140/0x710 [ 204.806825][ T8547] ? __alloc_skb+0x5b7/0x710 [ 204.806834][ T8547] ? __pfx___alloc_skb+0x10/0x10 [ 204.806845][ T8547] ? __pfx___debug_object_init+0x10/0x10 [ 204.806863][ T8547] mgmt_cmd_complete+0x4f/0x5a0 [ 204.806881][ T8547] set_def_system_config+0xd82/0x15b0 [ 204.806899][ T8547] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 204.806916][ T8547] hci_sock_sendmsg+0x154e/0x2620 [ 204.806935][ T8547] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 204.806950][ T8547] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 204.806964][ T8547] sock_write_iter+0x524/0x5a0 [ 204.806979][ T8547] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 204.806994][ T8547] ? __pfx_sock_write_iter+0x10/0x10 [ 204.807008][ T8547] ? get_pid_task+0xfc/0x250 [ 204.807029][ T8547] ? bpf_lsm_file_permission+0x9/0x10 [ 204.807039][ T8547] ? security_file_permission+0x76/0x210 [ 204.807054][ T8547] ? rw_verify_area+0xce/0x6d0 [ 204.807068][ T8547] vfs_write+0x6ac/0x1070 [ 204.807081][ T8547] ? __pfx_sock_write_iter+0x10/0x10 [ 204.807096][ T8547] ? __pfx_vfs_write+0x10/0x10 [ 204.807121][ T8547] ? find_held_lock+0x2b/0x80 [ 204.807145][ T8547] ksys_write+0x1f8/0x250 [ 204.807157][ T8547] ? __pfx_ksys_write+0x10/0x10 [ 204.807169][ T8547] ? ksys_write+0x1ac/0x250 [ 204.807182][ T8547] ? rcu_is_watching+0x12/0xc0 [ 204.807197][ T8547] __do_fast_syscall_32+0xe7/0x970 [ 204.807214][ T8547] ? lockdep_hardirqs_on+0x78/0x100 [ 204.807237][ T8547] do_fast_syscall_32+0x32/0x70 [ 204.807259][ T8547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.807280][ T8547] RIP: 0023:0xf7f56f7c [ 204.807294][ T8547] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 204.807311][ T8547] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 204.807327][ T8547] RAX: ffffffffffffffda RBX: 000000000000001b RCX: 0000000080000000 [ 204.807338][ T8547] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 204.807347][ T8547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.807356][ T8547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.807365][ T8547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.807387][ T8547] [ 204.922006][ T8548] vhci_hcd: connection closed [ 204.922305][ T225] vhci_hcd vhci_hcd.6: stop threads [ 204.926363][ T225] vhci_hcd vhci_hcd.6: release socket [ 204.928022][ T225] vhci_hcd vhci_hcd.6: disconnect device [ 205.775009][ T8576] netlink: 'syz.5.657': attribute type 1 has an invalid length. [ 206.109162][ T5816] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 206.283554][ T5816] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 206.287877][ T5816] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 206.292437][ T5816] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.297819][ T5816] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 206.302673][ T5816] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 206.309449][ T5816] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 206.313060][ T5816] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 206.317056][ T5816] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.321299][ T5816] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 206.325861][ T5816] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 206.333522][ T5816] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 206.336657][ T5816] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 206.341108][ T5816] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.346104][ T5816] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 206.350935][ T5816] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 206.358830][ T5816] usb 10-1: string descriptor 0 read error: -22 [ 206.365461][ T5816] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 206.369605][ T5816] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.400783][ T5816] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 206.482456][ T8588] loop9: detected capacity change from 0 to 7 [ 206.485253][ C2] blk_print_req_error: 11 callbacks suppressed [ 206.485263][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.490024][ C2] buffer_io_error: 10 callbacks suppressed [ 206.490032][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.494588][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.497467][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.502405][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.505239][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.508091][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.510926][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.513612][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.516462][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.519210][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.522828][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.526484][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.529598][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.532138][ T8588] ldm_validate_partition_table(): Disk read failed. [ 206.534381][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.537260][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.540625][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.544229][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.599484][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.602595][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.605281][ T8588] Dev loop9: unable to read RDB block 0 [ 206.607522][ T8588] loop9: unable to read partition table [ 206.611296][ T8588] loop9: partition table beyond EOD, truncated [ 206.613311][ T8588] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 206.694673][ T8446] usb 10-1: USB disconnect, device number 5 [ 206.712612][ T8595] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 207.979203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 208.394225][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.7.669'. [ 208.454785][ T8446] hid_parser_main: 5 callbacks suppressed [ 208.454799][ T8446] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.461198][ T8446] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.464156][ T8446] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.466470][ T8446] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.468706][ T8446] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.472763][ T8446] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.475305][ T8446] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.477578][ T8446] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.480457][ T8446] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.482789][ T8446] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.492509][ T8446] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.03 Device [syz1] on syz1 [ 208.576683][ T8627] fido_id[8627]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.691226][ T8640] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 208.809841][ T8645] /dev/loop0: Can't lookup blockdev [ 208.992535][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.681'. [ 209.116923][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'. [ 209.169213][ T8446] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 209.264924][ T8682] blkio.reset_stats is deprecated [ 209.319195][ T8446] usb 12-1: Using ep0 maxpacket: 8 [ 209.323229][ T8446] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.327690][ T8446] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.333197][ T8446] usb 12-1: config 0 interface 0 has no altsetting 0 [ 209.335900][ T8446] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 209.339568][ T8446] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.344835][ T8446] usb 12-1: config 0 descriptor?? [ 209.523919][ T8689] ptrace attach of "/syz-executor exec"[8691] was attempted by "/syz-executor exec"[8689] [ 209.813161][ T8446] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 210.018037][ T8446] usb 12-1: USB disconnect, device number 2 [ 210.154691][ T8703] overlayfs: workdir and upperdir must be separate subtrees [ 212.825508][ T8747] netlink: 'syz.7.704': attribute type 39 has an invalid length. [ 212.882272][ T8755] loop9: detected capacity change from 0 to 7 [ 212.886916][ C3] blk_print_req_error: 10 callbacks suppressed [ 212.886926][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.905266][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.908336][ C2] buffer_io_error: 10 callbacks suppressed [ 212.908344][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 212.913069][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.915953][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 212.918658][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.921497][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 212.924561][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.927367][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 212.930564][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.933389][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 212.942013][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.944833][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.004575][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.007461][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.013152][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.015979][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.020421][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.023206][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.028999][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.035207][ T8755] ldm_validate_partition_table(): Disk read failed. [ 213.040390][ T8755] Dev loop9: unable to read RDB block 0 [ 213.042470][ T8755] loop9: unable to read partition table [ 213.044377][ T8755] loop9: partition table beyond EOD, truncated [ 213.049204][ T8755] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 213.123623][ T8756] BUG: Bad rss-counter state mm:ffff88804be69880 type:MM_FILEPAGES val:32 Comm:dhcpcd-run-hook Pid:8756 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 213.427751][ T6745] syz_tun (unregistering): left allmulticast mode [ 213.516107][ T7774] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.560343][ T8727] syz_tun (unregistering): left allmulticast mode [ 213.638609][ T7774] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.862823][ T7774] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.965484][ T7774] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.080673][ T7774] bridge_slave_1: left allmulticast mode [ 214.082498][ T7774] bridge_slave_1: left promiscuous mode [ 214.084957][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.088855][ T7774] bridge_slave_0: left allmulticast mode [ 214.091046][ T7774] bridge_slave_0: left promiscuous mode [ 214.092832][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.275736][ T7774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.279916][ T7774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.283658][ T7774] bond0 (unregistering): Released all slaves [ 214.288422][ T5454] 8021q: adding VLAN 0 to HW filter on device eth18 [ 214.410875][ T7774] IPVS: stopping master sync thread 8640 ... [ 214.427928][ T5454] 8021q: adding VLAN 0 to HW filter on device eth19 [ 214.576812][ T5454] 8021q: adding VLAN 0 to HW filter on device eth20 [ 214.691695][ T7774] hsr_slave_0: left promiscuous mode [ 214.693824][ T7774] hsr_slave_1: left promiscuous mode [ 214.695766][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.697987][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.701075][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.703434][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.749886][ T7774] veth1_macvtap: left promiscuous mode [ 214.751625][ T7774] veth0_macvtap: left promiscuous mode [ 214.753353][ T7774] veth1_vlan: left promiscuous mode [ 214.755014][ T7774] veth0_vlan: left promiscuous mode [ 214.875328][ T7774] team0 (unregistering): Port device team_slave_1 removed [ 214.888432][ T7774] team0 (unregistering): Port device team_slave_0 removed [ 214.962757][ T5454] 8021q: adding VLAN 0 to HW filter on device eth21 [ 215.344507][ T7774] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.436445][ T7774] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.514758][ T7774] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.570550][ T7774] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.678571][ T7774] bridge_slave_1: left allmulticast mode [ 215.680638][ T7774] bridge_slave_1: left promiscuous mode [ 215.682830][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.688981][ T7774] bridge_slave_0: left allmulticast mode [ 215.691460][ T7774] bridge_slave_0: left promiscuous mode [ 215.693699][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.751845][ T1192] smc: removing ib device syz1 [ 215.804777][ T1192] smbdirect: ib_dev[syz1] removed [ 215.889567][ T7774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.895717][ T7774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.900028][ T7774] bond0 (unregistering): Released all slaves [ 215.908818][ T7774] bond1 (unregistering): Released all slaves [ 215.922482][ T7774] bond2 (unregistering): Released all slaves [ 215.929557][ T7774] bond3 (unregistering): Released all slaves [ 215.948358][ T7774] bond4 (unregistering): Released all slaves [ 215.965674][ T34] xfrm0 speed is unknown, defaulting to 1000 [ 215.968225][ T34] syz1: Port: 1 Link DOWN [ 216.195465][ T5454] 8021q: adding VLAN 0 to HW filter on device eth22 [ 216.409918][ T5454] 8021q: adding VLAN 0 to HW filter on device eth23 [ 216.412439][ T7774] tipc: Left network mode [ 216.593970][ T5454] 8021q: adding VLAN 0 to HW filter on device eth24 [ 216.631174][ T7774] hsr_slave_0: left promiscuous mode [ 216.633482][ T7774] hsr_slave_1: left promiscuous mode [ 216.636605][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.639022][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.644723][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.647147][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.655439][ T7774] veth1_macvtap: left promiscuous mode [ 216.657273][ T7774] veth0_macvtap: left promiscuous mode [ 216.660794][ T7774] veth1_vlan: left promiscuous mode [ 216.662586][ T7774] veth0_vlan: left promiscuous mode [ 216.804159][ T7774] team0 (unregistering): Port device team_slave_1 removed [ 216.817977][ T7774] team0 (unregistering): Port device team_slave_0 removed [ 216.946824][ T5454] 8021q: adding VLAN 0 to HW filter on device eth25 [ 217.325796][ T7774] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 15:51:42 Registers: info registers vcpu 0 CPU#0 RAX=000000823f1bce5a RBX=ffff88802b223f80 RCX=00000000000006e0 RDX=0000000000000082 RSI=ffffffff81f7e255 RDI=ffff88801cbdca80 RBP=00000031999bf305 RSP=ffffc90007117a48 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000e22f53 R13=0000000000000001 R14=0000000000000001 R15=ffff88802b223fc0 RIP=ffffffff81f7e268 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809718b000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000350e9ff8 CR3=0000000066b24000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b23b408 RCX=ffffffff8b89a900 RDX=ffff88802b33c394 RSI=0000000000000002 RDI=ffff88802b23b40a RBP=dffffc0000000000 RSP=ffffc9000dc0f7f8 R8 =0000000000000001 R9 =ffffed1005647681 R10=ffff88802b23b40b R11=0000000000000000 R12=ffff88802b23b409 R13=0000000000000000 R14=ffff88802b33c380 R15=ffff88802b33c394 RIP=ffffffff8b89a99f RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809728b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080007000 CR3=000000006c327000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff9184913a RBX=ffffffff90f9599c RCX=dffffc0000000000 RDX=1ffffffff21f2b33 RSI=0000000000000000 RDI=ffffffff90f95990 RBP=ffffffff90f95990 RSP=ffffc900043f7218 R8 =ffffffff918491a0 R9 =0000000000000007 R10=0000000000000200 R11=00000000000174e8 R12=ffffffff90f959ac R13=ffffffff8274e86a R14=ffffffff90f95990 R15=ffffffff90f95990 RIP=ffffffff81b76680 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809738b000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f74852f0 CR3=0000000060cf7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000004ffffffe3 00000190000000c8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000021b8fb RBX=ffff88801c7da540 RCX=ffffffff8b86b285 RDX=0000000000000000 RSI=ffffffff8df19d81 RDI=ffffffff8c1c4380 RBP=0000000000000000 RSP=ffffc9000048fdf0 R8 =0000000000000001 R9 =ffffed10056a67b5 R10=ffff88802b533dab R11=0000000000000000 R12=0000000000000003 R13=ffffed10038fb4a8 R14=0000000000000003 R15=ffffffff90d73250 RIP=ffffffff8b8698df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809748b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fce521cd51 CR3=000000006cf48000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0ffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000002000020 Opmask04=00000000fffff7ff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000637379730031 3d656c6261003200 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdcd9f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373797300313d65 6c6261003200393a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff00000000ff00 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 0000000000ff0000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c6174735f7563 725f78616d006c74 6373797300313d65 6c6261003200393a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005f01 0000561847df5130 000000322d633269 2f7665642d633269 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a5f393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33515f4350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f3030443d003900 3000313200373031 2f32003d00504400 00613630342f3436 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000