last executing test programs: 8m37.199506057s ago: executing program 32 (id=117): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) close(r4) tee(r0, r5, 0x8f5, 0x0) write$binfmt_script(r5, 0x0, 0xd9) write(r2, 0x0, 0x0) 8m20.590540186s ago: executing program 33 (id=265): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) socket(0x21, 0x2, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 8m5.315504987s ago: executing program 34 (id=272): unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) 8m3.321062085s ago: executing program 35 (id=293): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1, 0x0, 0xd3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) 7m24.159967932s ago: executing program 36 (id=863): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 7m8.602933577s ago: executing program 37 (id=993): unshare(0x26020480) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = syz_io_uring_setup(0x649, &(0x7f0000000200)={0x0, 0x24c8, 0x80, 0x1, 0x5b}, &(0x7f00000003c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 6m24.728764186s ago: executing program 38 (id=1271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1ff}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) 6m8.710931559s ago: executing program 39 (id=1309): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x201e, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 5m56.075893465s ago: executing program 3 (id=1580): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) 5m56.064196691s ago: executing program 40 (id=1580): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) 4m37.071275892s ago: executing program 41 (id=2242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 4m20.34435671s ago: executing program 42 (id=2257): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r2 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc5b848d6fa38f7956549438addc5e", 0x70, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1m8.913164351s ago: executing program 5 (id=3364): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd, 0x7ff, 0x61b, 0x8001, 0x9}, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, 0x1c) r6 = dup2(r5, r5) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f0000000100)=@mmap={0x40000000, 0x2, 0x4, 0x0, 0x300000, {}, {0x5, 0x0, 0x0, 0x2, 0x9, 0x0, "2063569a"}}) 1m7.992631133s ago: executing program 5 (id=3367): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd, 0x7ff, 0x61b, 0x8001, 0x9}, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, 0x1c) r6 = dup2(r5, r5) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f0000000100)=@mmap={0x40000000, 0x2, 0x4, 0x0, 0x300000, {}, {0x5, 0x0, 0x0, 0x2, 0x9, 0x0, "2063569a"}}) 1m5.991680086s ago: executing program 5 (id=3379): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 1m5.960683037s ago: executing program 43 (id=3379): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 56.280632968s ago: executing program 8 (id=3422): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)="d800000019008111e0020f060d8107040a60000007000000000455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x40004000) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x10, 0x10, 0x4, 0xb5, {{0x16, 0x4, 0x1, 0x6, 0x58, 0x67, 0x0, 0x10, 0x2b, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x14, 0x94, 0x3, 0x4, [{@rand_addr=0x64010101, 0x9}, {@remote, 0x9}]}, @timestamp={0x44, 0xc, 0xf2, 0x0, 0xf, [0x2, 0x80000000]}, @lsrr={0x83, 0xb, 0xb0, [@local, @broadcast]}, @timestamp={0x44, 0x18, 0xe7, 0x0, 0x6, [0xb5cf, 0x43, 0x6, 0xcc72, 0x6]}]}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) bind$rose(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x1) gettid() timer_create(0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) 56.272800291s ago: executing program 8 (id=3423): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = io_uring_setup(0x50b4, &(0x7f0000002240)={0x0, 0x9f12, 0x0, 0x1}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, 0x0, 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 53.230492986s ago: executing program 8 (id=3439): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x4, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1e3d50de03aa3d1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/30, 0x1e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24054000) 52.352263803s ago: executing program 8 (id=3451): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 52.195604091s ago: executing program 8 (id=3454): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x1, 0x6, 0x2, 0x7fffffff}]}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000400)=0x13) poll(&(0x7f00000002c0)=[{r3, 0x400f}], 0x1, 0xe7f5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xd) ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64d0, &(0x7f0000000280)={0x1, 0x0, 0xffffffa4, 0xfffffff9, 0x87, 0x1}) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000000180)={0xa, 0x2, 0x3, @empty}, 0x1c) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229"], 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 51.912512201s ago: executing program 8 (id=3457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 51.876675697s ago: executing program 44 (id=3457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 47.841690377s ago: executing program 4 (id=3478): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.673522802s ago: executing program 4 (id=3481): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3fff, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x400, 0x8000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 47.122407611s ago: executing program 7 (id=3485): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x5, 0x10000, 0x100, 0x8000000000000001, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0xb, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x8890, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x4, 0x8, 0x5c3e, 0x622, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x6, 0xfffffffeffffffff, 0x8, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x9, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x5, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x2, 0x2293332f, 0x6, 0x34, 0x0, 0xd, 0x2, 0x0, 0x2, 0x2, 0x7, 0x8, 0xfffd, 0x10, 0x40000008, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 46.993079555s ago: executing program 7 (id=3486): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x30, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x47b, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff020500010007"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00038018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x20000) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x1, 0x3000) 46.777324262s ago: executing program 4 (id=3487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2f, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) fcntl$setlease(r3, 0x400, 0x0) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) 46.146437377s ago: executing program 7 (id=3491): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x800) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x101) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') accept4(r2, 0x0, 0x0, 0x800) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r3, 0x0) 46.03607794s ago: executing program 7 (id=3492): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) preadv(r4, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/152, 0x98}], 0x1, 0xc096, 0x2) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 45.93492646s ago: executing program 7 (id=3496): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "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"}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0x5452, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x800008d, 0x0) 45.891050029s ago: executing program 4 (id=3497): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 45.753922747s ago: executing program 4 (id=3499): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd, 0x7ff, 0x61b, 0x8001, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, 0x1c) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f0000000100)=@mmap={0x40000000, 0x2, 0x4, 0x0, 0x300000, {}, {0x5, 0x0, 0x0, 0x2, 0x9, 0x0, "2063569a"}}) 45.646639076s ago: executing program 7 (id=3501): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100001040000", @ANYRES32=r1, @ANYBLOB="0050198c4f05050000000c"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 45.618811384s ago: executing program 45 (id=3501): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100001040000", @ANYRES32=r1, @ANYBLOB="0050198c4f05050000000c"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 45.564236744s ago: executing program 4 (id=3503): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 45.564055271s ago: executing program 46 (id=3503): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 42.873225164s ago: executing program 3 (id=3510): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd, 0x7ff, 0x61b, 0x8001, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, 0x1c) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f0000000100)=@mmap={0x40000000, 0x2, 0x4, 0x0, 0x300000, {}, {0x5, 0x0, 0x0, 0x2, 0x9, 0x0, "2063569a"}}) 41.875318401s ago: executing program 3 (id=3520): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) bind$pptp(r0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) connect$pptp(r0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) 41.867551951s ago: executing program 3 (id=3521): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/152, 0x98}], 0x1, 0xc096, 0x2) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 41.726648694s ago: executing program 3 (id=3523): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) rt_sigsuspend(&(0x7f00000000c0)={[0x5]}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_newvlan={0x17, 0x70, 0x1}, 0x18}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e19, 0xffffffff, @private1, 0xe}, 0x1c) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) ftruncate(r4, 0x7fffffff) sendto(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0x8, 0x1, "1de1c362e40e45862096f6ff833fcafb18147d2e3cd81d1ad9ecbe24491ae1c94c2327452ddc21dddf7a069e45949beb4ad9c9543ad2759d129d12fe879a04", 0x13}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000740)) 39.892958415s ago: executing program 3 (id=3531): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/152, 0x98}], 0x1, 0xc096, 0x2) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 39.881048517s ago: executing program 47 (id=3531): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/152, 0x98}], 0x1, 0xc096, 0x2) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 35.184686838s ago: executing program 9 (id=3558): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d40)=@delchain={0x3098, 0x65, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xfff3, 0xfff0}, {0xf, 0xe}}, [@f_rsvp={{0x9}, {0x54, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x5, 0xf94c}, {0x8, 0x5, 0x2}, 0x2f, 0x3, 0xe}}, @TCA_RSVP_POLICE={0x2c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x220}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_RSVP_POLICE={0x4}]}}, @f_tcindex={{0xc}, {0x4}}, @f_tcindex={{0xc}, {0x2ff8, 0x2, [@TCA_TCINDEX_ACT={0x2ff4, 0x7, [@m_police={0x2fc0, 0x7, 0x0, 0x0, {{0xb}, {0x2f94, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x81}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x88e, 0x19b, 0x9, 0xfff, 0x4618, 0x8001, 0x7, 0xffffff01, 0xfffffa2b, 0x2, 0x200, 0x80000001, 0xffffffff, 0x61b9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xa6a, 0x0, 0x7f, 0x945, 0x5, 0x8, 0x18af, 0x7fffffff, 0x0, 0x173b, 0x8, 0x1000, 0xfff, 0xfffffffc, 0x7, 0xfffffff7, 0xf, 0x1, 0x800, 0x4, 0x2, 0xfffffff8, 0x0, 0x5, 0xee7, 0x7fffffff, 0x5, 0xfffffe01, 0x3dc71bb1, 0x401, 0x3, 0x2b3, 0x9, 0x7, 0x8, 0x7, 0x7, 0xa8e1, 0x5, 0x5, 0x5, 0x2, 0x1, 0x9, 0x0, 0x3, 0x10000, 0x0, 0x1ff, 0xb, 0x101, 0x81, 0x10001, 0xc89e, 0x8, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x6, 0x6, 0x80, 0x4, 0x7, 0x546, 0x3, 0x0, 0x81, 0xb, 0x10000, 0xfff, 0xe, 0x3, 0x7fff, 0x9, 0x64, 0x382, 0x9, 0x6, 0x3f4, 0x4000000, 0x5, 0x91, 0x6, 0x3, 0x9, 0x2, 0xc3b2, 0xc, 0x7, 0x8000, 0x0, 0x0, 0x1ff, 0x1, 0x2, 0xffffff01, 0x3, 0x1d, 0x0, 0x0, 0x7, 0xc6cc, 0x6e67, 0x4, 0xc591, 0x0, 0x0, 0x9, 0x7fff, 0x0, 0x4, 0x1, 0x1, 0xff, 0x7, 0x3c99, 0x0, 0x0, 0xffffffff, 0x875c, 0x2, 0xa0, 0x2, 0xfffffffb, 0x2, 0x10000, 0x5, 0x800, 0x7ff, 0x9, 0x1, 0x7, 0x80000001, 0x1, 0x1000, 0x10, 0x5, 0x0, 0x7, 0x0, 0xfff, 0xd5, 0xe, 0xe7, 0x200, 0xac, 0x80000001, 0xe9, 0x1, 0x4, 0x8, 0x25, 0x2, 0xfffffffe, 0x7, 0x6, 0x10000, 0x1, 0x7, 0x3, 0x10000, 0x3, 0x3, 0x1ff, 0x6, 0x951b, 0x3, 0x6, 0xe07, 0xffffffff, 0x5, 0x1, 0xc8e2, 0xc4, 0x0, 0x3, 0x7f, 0xff800000, 0x1, 0x1, 0x2, 0x6, 0x9, 0x5, 0x0, 0x0, 0xfffffff8, 0x4, 0x1, 0xf7, 0x10, 0x6, 0x8c2, 0x5, 0xda, 0x8, 0x3, 0xe369, 0x1, 0x1, 0x4, 0x0, 0x9, 0x8, 0x1, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x683b, 0x4, 0x6, 0x81ff0159, 0x3, 0x9, 0x4, 0x3, 0x100, 0xd, 0x1, 0xff, 0xb3d3, 0x7, 0xf5d7, 0x1d, 0x1000, 0x100, 0x2, 0x9, 0xffffffff, 0x4, 0x3, 0x4fd2]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x4d, 0x9, 0x1b, 0x1, 0xfffffffc, 0x2, 0x3, 0x9, 0x1, 0x3, 0x10, 0x5, 0x81, 0x9, 0xc, 0x1, 0xfffffff7, 0x8, 0x800, 0x1, 0x5, 0xa, 0x400, 0x8, 0x1, 0x7, 0x5, 0x8001, 0x37, 0xf9f0, 0xfffffffd, 0x0, 0x1000, 0x3, 0x0, 0x4, 0xb3, 0x2, 0x1b, 0x2547, 0x9, 0x7, 0xfffffe68, 0x1, 0xb7, 0x3, 0x5, 0x6, 0x4, 0x709c, 0xfff, 0x800, 0x8001, 0x800, 0xff, 0x3, 0x6, 0x4, 0xb, 0x1, 0x4, 0x40, 0xcb1a, 0x2, 0x21, 0x401, 0x101, 0x2d51, 0xfffff800, 0x1, 0x2, 0x3ff, 0x2be, 0x484d0c84, 0x1, 0x2, 0x3, 0x8, 0x7, 0x3, 0x422, 0xd, 0xf1, 0xe, 0x3, 0x15, 0x8, 0x1, 0x6, 0x9a77, 0x6, 0x6, 0x5, 0x9, 0xf, 0x80, 0x1, 0xfffffffd, 0x7f, 0x5, 0x9, 0x1, 0x97, 0x5, 0x5, 0x6, 0x3, 0x40e7, 0x0, 0x7, 0xfffffffc, 0x8, 0x3, 0x8, 0x7ae167ab, 0x80000000, 0x6, 0x3, 0xd8, 0x7f, 0x101, 0x5, 0x0, 0x6, 0x5, 0x1, 0x8000, 0xe0, 0x3, 0x7, 0x1, 0xffffffff, 0x8, 0x7fffffff, 0x45, 0x5, 0xff, 0x4, 0x2, 0x4, 0x4, 0x800, 0x2, 0xffffffa5, 0x0, 0x400, 0x7fff, 0x7fffffff, 0x6, 0x1, 0x6, 0x9, 0x6, 0x8, 0x476e4694, 0x5, 0x8, 0x9, 0xffffffff, 0x3, 0xd, 0xffffff84, 0x3, 0x16, 0x5, 0x8000, 0x1, 0x9, 0x43, 0x6, 0x9, 0xe6, 0x0, 0x8, 0x9, 0xfffffff7, 0x1, 0x1, 0x0, 0xa5, 0x9, 0x101, 0x5, 0x8001, 0x6, 0x8, 0x8001, 0xfffffe00, 0xfffffffd, 0x4, 0x8001, 0x3, 0x8001, 0x2, 0x0, 0x4, 0x10, 0x7, 0x7, 0x4, 0x5, 0x3, 0x6, 0xf, 0x789, 0x539, 0x205c, 0x4, 0x7, 0x0, 0x4, 0x6, 0x4, 0x1000, 0x4, 0x10000, 0x4, 0x9, 0x8000, 0x77b4, 0xbed, 0x3, 0xffffffff, 0x1, 0x2, 0xe0, 0xfff, 0x8, 0x8, 0x1ff, 0x400, 0x8, 0x6, 0x6, 0x8001, 0x7, 0x678e, 0x4, 0x7ff, 0xfa, 0x4, 0x4, 0x6, 0x5, 0x5, 0x9, 0x3, 0xfffffff9, 0x9, 0xfd6c, 0x4, 0x71df, 0x973a, 0x6, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2ce5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffff000, 0x7, 0x0, 0x7, 0x9, {0xfd, 0x2, 0x8, 0x7, 0x4, 0x1}, {0x0, 0x1, 0x5, 0x825, 0x4c1, 0x9}, 0x1, 0x80, 0x7}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x3, 0x7, 0x4, 0x7, 0x5278af49, 0xffffffff, 0x5, 0x0, 0x9c4, 0x7, 0x4, 0x6, 0x15, 0x7, 0x7, 0x4, 0x0, 0x200, 0x1, 0xa, 0x6, 0x7, 0xdfc9, 0x3, 0x0, 0xd57, 0x3, 0xac7, 0x2, 0xa1, 0x7f, 0x2, 0xf7, 0x2ee, 0x100, 0xf26, 0x77d6, 0xe, 0x3ff, 0x7, 0x9, 0x8, 0x4, 0x326, 0xc, 0x4d0, 0x1, 0x4, 0x9, 0x1, 0x7, 0x6c80e586, 0xfffffffc, 0x9, 0x0, 0x80000001, 0x1000, 0x1ff, 0x80000000, 0x3ff, 0x3, 0x5ca, 0xfffffff8, 0xb62, 0x0, 0x8, 0x1, 0xa, 0x3, 0x1, 0x8, 0x100, 0x3, 0x1, 0x1, 0x3d6d8f92, 0x100, 0x1, 0x9, 0x9, 0xdc2, 0x1, 0x3ff, 0x1, 0x7, 0x2, 0xfffffffc, 0x7, 0x1, 0x7, 0x9, 0x0, 0x8, 0x1, 0x9fd6, 0x101, 0x3, 0x901b, 0x200, 0x7f, 0x7, 0x1, 0x6, 0xffffffff, 0x4, 0x0, 0x3, 0xb32230d, 0x2, 0x3, 0x8, 0x0, 0xffffffff, 0x0, 0x1, 0x80, 0x401, 0x1000, 0x2, 0x6, 0x16, 0x1, 0x3, 0x1, 0x6, 0xdc4c, 0x8, 0xffff8da4, 0xc0000000, 0x2, 0xffffffff, 0x80, 0x1, 0xc68, 0xfffff69f, 0x6, 0x6b9, 0xff, 0x4, 0x1, 0x6, 0x6, 0x7, 0x1, 0x4, 0xf4, 0x2, 0xc, 0x0, 0xe, 0x7, 0x2, 0x40, 0x7a6, 0x8, 0xb59b, 0x40, 0x1, 0x2, 0x5, 0x6, 0x9, 0x7, 0x8000, 0x400, 0x7, 0x4, 0x0, 0x8, 0x6, 0x6838, 0x4, 0x100000, 0x3, 0x9, 0x2, 0x3, 0x6, 0x8001, 0x9, 0xa5, 0x6, 0x3, 0x80000000, 0x2, 0xf02, 0x8, 0x9, 0x1, 0x5, 0x1000, 0x5, 0x7, 0xfff, 0x2, 0x400, 0x1, 0x8000, 0x3, 0x6, 0x9, 0x5, 0xd5c, 0x9, 0x7fffffff, 0xaa82, 0x8, 0x647, 0x1, 0x80000000, 0x2, 0x80000001, 0x1000, 0xffff, 0x52, 0x1ff, 0x2, 0x0, 0x4, 0x2, 0x8, 0xffffffff, 0x5, 0x40, 0x9, 0x2, 0x9895, 0x0, 0xfffffffa, 0xfffffff1, 0x0, 0x1, 0x84, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x1, 0xffff, 0x1, 0xe09, 0x2, 0x7f, 0x8, 0x7, 0x3ff, 0xfffffffd, 0x898, 0x2, 0xa5, 0x5, 0x7, 0x48a, 0x40]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x74, 0x80000000, 0xcb74, 0x5, 0x8, 0x4, 0xfff, 0x4cc7, 0x0, 0x5, 0x5, 0x8, 0x6, 0x1, 0x7, 0xa28b, 0xeca, 0x8, 0x9, 0x2, 0x10, 0x1, 0xecbf, 0xd, 0x4, 0x5, 0x80000001, 0x401, 0x1, 0xc84, 0xf, 0xfffffbff, 0x1, 0x4, 0x6, 0xe, 0x0, 0x9, 0x8000, 0xb45d, 0x8, 0x9, 0x4, 0x3, 0x27, 0x0, 0x1a, 0x1, 0x5, 0x0, 0x4, 0xffff9f22, 0x2, 0x3, 0x7, 0x6e, 0x7, 0x6bbb, 0x1, 0xf, 0x0, 0x1000, 0xf, 0x4, 0x7, 0x3, 0x8, 0xf1b5, 0xfffffffd, 0x7f, 0x10000, 0x6, 0xf, 0x2, 0x7f, 0x7, 0xfffffffb, 0x800, 0x1, 0xf, 0x101, 0x8, 0x3, 0x4, 0xfffff0a6, 0x1, 0x3, 0x9, 0x2, 0x1, 0x10, 0x1ff, 0xfffffff8, 0xffff, 0x2, 0x200, 0x2, 0x6b47, 0x6, 0xa, 0x8, 0x85, 0x9, 0xfffffffd, 0x3ff, 0xfffffffa, 0x3, 0x67bf, 0x8001, 0x0, 0xefb, 0x8, 0x5, 0x8000, 0x1, 0xe46, 0xfffff001, 0x7fff, 0x0, 0xfbaf, 0x8, 0x2f, 0x7d, 0x7ff, 0x3, 0x8, 0x800, 0x1, 0x48, 0x6, 0x80000000, 0x58d5, 0x7, 0x7fff, 0x650, 0x3ff, 0x1, 0x3, 0x8cc4, 0x2, 0x9, 0x9, 0x8, 0x8, 0x46e, 0xfffff39b, 0x9, 0x7, 0x3, 0x2, 0x7ff, 0x80000000, 0x1ff, 0xd, 0x4, 0x1, 0x8, 0x5, 0x2, 0x7fffffff, 0x8, 0x7, 0x6230, 0x333a, 0x1ff, 0x80000000, 0x7f, 0x81, 0x2, 0xdc, 0x31, 0xf3a, 0x0, 0x7, 0x6, 0xffffff81, 0x8000, 0xe7, 0xb09, 0x826, 0x4, 0x4, 0x63a0, 0x2, 0x0, 0x6, 0x1, 0x9, 0xffff3406, 0x0, 0x8, 0x5, 0x719e3602, 0x9, 0x2, 0x5, 0xe7, 0x5000000, 0x2, 0x6, 0x80000001, 0x4, 0x2, 0x4, 0x2, 0x6, 0x80000001, 0x8, 0x0, 0x0, 0xd, 0x7, 0x2, 0xfe39, 0x7, 0xddc8, 0x8, 0x100, 0x2, 0x4, 0x2, 0x6, 0x6, 0x8, 0x4, 0x80000001, 0xc0000, 0x3, 0x8, 0x8, 0x3, 0xfc2d, 0x2, 0x5, 0x98, 0xfffffff9, 0x800, 0x1ff, 0x6, 0x5, 0x1, 0x0, 0x1000, 0x1d60, 0xfffffffa, 0x1000, 0xbd, 0x8, 0xa, 0x80000001, 0x9, 0x0, 0x7eed, 0xa00]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1db}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x191a}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbe}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x4, 0x5, 0x7, 0x10000, 0x3, 0x5, 0x8c, 0x0, 0x5, 0xba, 0x6, 0x8, 0xbbcc, 0x5, 0x4, 0x962, 0xfffffff7, 0x9, 0x81, 0x9, 0xb, 0x3, 0x8000, 0x1ff, 0x3, 0x9, 0x6, 0x0, 0x9, 0xe0d7, 0x4, 0x9, 0x2, 0xffffffff, 0x7, 0x2, 0x8, 0x9, 0x3, 0x5, 0xff, 0xffff, 0x2, 0x500000, 0x8, 0x2, 0x4, 0x5, 0x4, 0xd48, 0x10, 0x7d, 0x3, 0xc, 0x0, 0x0, 0x3, 0x10000, 0x8001, 0x6, 0x9, 0x0, 0x8, 0x800, 0x101, 0xf, 0xa, 0xb, 0x10001, 0x80000001, 0x7ff, 0x6, 0x6, 0x2, 0xe2, 0x8, 0x0, 0x2, 0x7, 0x7f, 0x0, 0x1000, 0x1e3, 0x5, 0xb, 0x9, 0x5, 0x4, 0x8, 0x4, 0xbd200000, 0x6, 0x6, 0x3ff, 0x0, 0x5, 0x6, 0x0, 0x6, 0x3efb, 0x9, 0xa, 0x0, 0x6, 0x4, 0xa9a2, 0x24000, 0x6, 0xa, 0x8, 0x9, 0x1, 0x100000, 0xf850, 0x0, 0x8, 0x1000, 0xfffffff8, 0x7, 0x7, 0x44d, 0x9, 0x7, 0x3, 0x24000000, 0x719, 0x1, 0x961a, 0x80000000, 0xb16, 0x9, 0x7, 0x800, 0xab, 0x8001, 0x0, 0x8, 0x400, 0xa0e7, 0xa4, 0x1, 0x0, 0x5, 0x0, 0xffffff4c, 0x0, 0x5, 0x7, 0x3, 0x9, 0x20, 0x100, 0x2, 0x4, 0x7, 0xfffffffd, 0xb, 0x9ff, 0x0, 0xffffffff, 0x81, 0x9, 0x8, 0x7, 0x1bd70d6, 0x9, 0x6, 0x2, 0xb, 0x100, 0x2d, 0x400, 0xfffffff3, 0xff, 0x6ef, 0x9, 0x1, 0x400, 0x85c, 0x5246, 0x68, 0x9, 0x1, 0xa, 0x2, 0x1, 0x8, 0x2, 0x6b0, 0x0, 0x400, 0x3, 0x7, 0x5, 0x200, 0x2, 0x4ff, 0x7ff, 0x6b, 0xea75, 0x1, 0xfffffff7, 0x81, 0x6, 0x5, 0x150e, 0x5, 0x401, 0x8, 0x3d, 0x1, 0x81, 0x3, 0x3, 0x2, 0x72b880df, 0x0, 0x9, 0x0, 0x5, 0x9, 0x2, 0x4, 0xc, 0x200, 0x2a6f254d, 0x2, 0x475a, 0x2, 0x43e, 0x0, 0x3, 0x3, 0xd, 0xfff, 0x7fff, 0x7, 0x0, 0x9, 0x4, 0x7ff, 0x0, 0x800, 0x8001, 0x2, 0x7ec2, 0x101, 0x7, 0x10001, 0x1, 0x30000, 0x81, 0x4, 0x4, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x0, 0x5, 0x2cc, {0xa, 0x2, 0x2, 0x4, 0x5, 0x8}, {0x3, 0x2, 0xe8b6, 0x3, 0x6, 0x8c}, 0xe3, 0x5, 0x4}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xbe5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x56, 0x830, 0x5f, 0x6, 0x9, 0x40d6, 0xd, 0x2, 0xfffffff8, 0x5, 0x59b, 0x8, 0x5, 0x0, 0x6, 0x1, 0xe3a8, 0x4, 0x101, 0x1939, 0xfbf3, 0x800, 0x8, 0x6, 0x0, 0x8, 0x8, 0xc, 0x3, 0x7ff, 0x81, 0x3, 0x1ff, 0x2, 0x7, 0x0, 0x1, 0x0, 0xff, 0x7, 0x30, 0x9, 0x1ff, 0xfffffff8, 0x2, 0x499, 0x9, 0x0, 0x3, 0x9, 0x4, 0x1000, 0x4, 0x1, 0x8, 0x10001, 0x3ff, 0x7f, 0x9, 0x7, 0xfffffff7, 0x2, 0x2, 0x0, 0x3, 0x2, 0x3, 0x5, 0x5, 0xf, 0xb, 0x7, 0x2f8895ce, 0x4, 0x6, 0x3f51f5d0, 0x4, 0x7, 0x31f, 0x401, 0x809, 0x1, 0x401, 0x101, 0x5, 0x101, 0x80000000, 0x9, 0x1, 0x3, 0x2, 0x7, 0x9, 0x5, 0x6, 0xad7, 0x3, 0x6, 0x5, 0xea, 0x5, 0x9, 0x7, 0x6, 0x2, 0x181e, 0xcea7b110, 0x0, 0x6, 0x5, 0xffffffde, 0x1000, 0x8, 0x337, 0x8, 0xd0, 0x8001, 0x4, 0xafa, 0x8, 0x100, 0x8, 0x9, 0xd00, 0xe00, 0xd, 0xfffff000, 0x9, 0xfffffff7, 0x6, 0x8, 0x1, 0x9, 0x10000, 0x2, 0x272e, 0x0, 0xf, 0x10000, 0xbf, 0x1, 0x0, 0x0, 0xaf2, 0xfdca, 0x58d, 0x0, 0xa27, 0x6ea3, 0xd, 0xe, 0x400, 0x5, 0x0, 0x0, 0x2, 0x401, 0x1, 0x61be, 0x0, 0x524, 0xd5a8, 0x0, 0x5, 0x5, 0x8458, 0x0, 0x3, 0x40, 0x5, 0xc, 0x81, 0x3, 0x100, 0xfff, 0x0, 0x1, 0x400, 0x1, 0x1, 0x7, 0x1, 0x7, 0x3ff, 0x0, 0x7, 0xced, 0x401, 0x7, 0x80, 0x7, 0x1, 0x0, 0x9, 0x1000000, 0x4, 0xa0, 0x9, 0x6, 0x80000000, 0x724f, 0x40000000, 0x2e1c, 0x7, 0x0, 0x7, 0x5, 0x4, 0x9, 0x7, 0x6, 0x4, 0x6, 0xd, 0x4, 0x1, 0x4, 0xfffffffa, 0x8a, 0xd9, 0x400, 0x9, 0x1, 0xffff566c, 0x0, 0x800, 0x10000, 0x33f6f463, 0x7f, 0x2, 0x1707, 0x8001, 0xb, 0x7, 0xfff, 0x4, 0x0, 0xfffff080, 0xff, 0xe, 0x6, 0x5, 0xa00a, 0x3, 0x400, 0x2, 0xd, 0x40, 0x81, 0x2, 0x7, 0x7, 0x7fffffff, 0xfffffff8, 0x6, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffdffffffc, 0x2, 0x9, 0x72, {0x2, 0x2, 0x1, 0xfcae, 0xff, 0xc6}, {0xff, 0x0, 0x5, 0x5, 0xffff, 0x401}, 0x81, 0x53e, 0x4e0}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe5c}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb1}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6d, 0x6, 0x4, 0x0, 0x0, {0x0, 0x0, 0x33, 0x4, 0x6, 0x2}, {0x1, 0x1, 0x7, 0x0, 0x400, 0x9}, 0x3, 0x1}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9d000, 0x0, 0x9, 0x7, 0x83, 0x0, 0x0, 0x0, 0x2, 0x46, 0x6, 0xd870, 0x1, 0x9, 0x7, 0x2, 0x80000000, 0x8001, 0xb, 0x8, 0xf3f, 0x19800000, 0x7, 0x8, 0x2, 0x101, 0x5, 0xfffffff9, 0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x0, 0x8000, 0x8000, 0x0, 0x9, 0x7, 0x8, 0x7f, 0x200, 0x89c, 0x2, 0x4, 0xb02, 0x7, 0x2, 0x400, 0x5, 0x13ff000, 0x5, 0xc61, 0x101, 0x3, 0x0, 0x81, 0x1, 0x2, 0x800, 0x8, 0x8, 0x8, 0x8, 0x0, 0xa719, 0xa, 0x7fffffff, 0x8, 0x7, 0x8, 0x6, 0x8, 0x6, 0x6, 0x10000, 0x40, 0x1, 0x4, 0xbbb, 0x7, 0xa, 0x1, 0x54df, 0x1, 0x7, 0x5af, 0x6b0, 0xfffffffd, 0x0, 0x4, 0x2, 0x9, 0x0, 0x3, 0x7, 0x3, 0x8, 0x1, 0x1, 0x65, 0xffffffff, 0x64, 0x2, 0xb, 0x1a5, 0x2, 0x101, 0x6, 0x7, 0x6, 0x0, 0x6, 0x1, 0x0, 0x3, 0xe, 0x98a7, 0xfc000000, 0x10001, 0x10000, 0x24e3, 0x1, 0x1, 0x6, 0x8, 0x1, 0x3, 0x10001, 0x1, 0x80000000, 0x6, 0x9f, 0x216, 0x1, 0x1ff, 0x4, 0x9, 0x9, 0x2, 0x9, 0xa, 0x7, 0x7fffffff, 0x8, 0x9, 0xffff, 0x5, 0x2740c065, 0x8, 0x8, 0x1, 0x1, 0x4, 0x1d69, 0x6, 0x9, 0x2, 0x6, 0x6, 0x4, 0x0, 0x8001, 0x610fdb3c, 0x7b800000, 0x6, 0x7, 0xffffffff, 0xfa2a00, 0xfffffe01, 0x99bf, 0x4, 0x0, 0x1000, 0x5, 0x9d, 0x5, 0x7, 0x2, 0x3ff, 0x8, 0x3ff, 0xc5e2, 0x1, 0x8, 0x8, 0xfffffffc, 0x882e, 0x0, 0x400, 0x100, 0x2, 0x7, 0x7, 0x400, 0x400, 0xffff, 0x400, 0x4, 0x5, 0x7, 0x9, 0x4, 0x800, 0x80000000, 0xf9, 0x2, 0x2, 0x12819a74, 0x1, 0x7fff, 0xe77d, 0x2, 0x1, 0x9, 0x0, 0x9, 0x0, 0x5e8, 0x9, 0x1, 0x0, 0x6, 0xe, 0x10001, 0x8, 0x1b, 0x69f, 0x7fffffff, 0x2, 0x9, 0x0, 0x9b, 0xfff, 0xfffff56b, 0xfffff001, 0x7, 0x4, 0x1, 0x5, 0x6, 0x8, 0xd, 0x0, 0x1, 0x6, 0xb9, 0x9, 0xfd7, 0xc, 0x1, 0x6, 0x200, 0x2, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7995e932}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x5, 0x4, 0x5, {0x0, 0x0, 0x800, 0x33, 0x355, 0xfd9}, {0x1, 0x2, 0xfffd, 0x401, 0x1000, 0x7}, 0x6, 0x857, 0xfffff801}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8bf7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd1c1, 0x8, 0xffff, 0x0, 0x3, {0x4, 0x2, 0x9, 0x38a, 0x80, 0x3}, {0x0, 0x1, 0x2, 0x2, 0xe7a, 0x40}, 0x7, 0x4, 0x1ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x4e90, 0x8, 0x4, {0x8, 0x0, 0xf9da, 0xe, 0xa, 0x2}, {0x2, 0x3, 0x8, 0xc, 0xfb3e, 0x8000}, 0xf, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xe, 0x9, 0x6, 0x7, 0x7, 0x1, 0x4, 0x6a, 0x5, 0x4, 0x81, 0x40, 0x4f26, 0x3, 0x6, 0x3, 0x1, 0xa49, 0x6, 0x9, 0x5, 0x1, 0x669, 0x7ff, 0x1, 0x4, 0x7, 0x4, 0x300000, 0x10000, 0x6, 0x5, 0x800, 0x9, 0x9, 0x9, 0x5, 0x2, 0x5, 0x1, 0x2, 0xa00, 0x6257, 0x6, 0x2, 0xfffffffb, 0x800, 0x5, 0x1, 0xfffffff9, 0x5, 0x100, 0x7dc4ff17, 0x8, 0x5, 0xfffffff2, 0x0, 0x5, 0x8, 0x5, 0x6, 0x0, 0x7, 0xce2d, 0xffff8001, 0x9, 0xf972, 0x8, 0x6, 0x7, 0x3, 0x8, 0x3e27, 0x7, 0x7, 0x5, 0x8, 0x8, 0x2, 0x701, 0x3, 0x2, 0x6, 0x8, 0xa18, 0xde8, 0x0, 0x6, 0x5, 0x1, 0x0, 0x10, 0x4, 0x5, 0x5, 0x2, 0x7fff, 0x8001, 0x0, 0x5, 0x2, 0x6, 0x7, 0x100, 0x7, 0x6, 0x3, 0xfffffffb, 0x3, 0x2, 0xffffffff, 0xdc, 0x0, 0x3, 0xc, 0x2, 0x432d, 0xa25, 0x3, 0x2, 0x7fff, 0x78, 0x9149, 0xd, 0x401, 0x0, 0x9, 0x0, 0xae, 0x5, 0x5, 0x8, 0x1, 0x1, 0x8ffe, 0xfc6e, 0x2, 0x2a3c, 0x3, 0x2, 0x1, 0x2, 0x2, 0x1, 0x500, 0xff, 0x3, 0xa207, 0x3, 0x4, 0xc5f, 0x100, 0xfffffff7, 0x6, 0x0, 0x40, 0x4, 0x7, 0x0, 0x3, 0x6, 0xe5, 0x265e, 0x10001, 0x2, 0x8000, 0x3, 0x4, 0x28, 0x8000, 0x736, 0x5, 0x6, 0xbd9, 0x7ff, 0xfe09, 0x1000, 0x9, 0x3, 0xfffffff7, 0x6, 0x101, 0x13f4, 0xee9, 0x55d, 0x7, 0x9, 0x1, 0x10001, 0x5, 0xb38, 0x9, 0xfffffff0, 0xa, 0x2, 0x4, 0x8000, 0x5c000000, 0x0, 0x3, 0xfffffffe, 0x0, 0xa, 0x180, 0x6834, 0x8, 0x67b, 0x1, 0x40, 0x8, 0x101, 0x5, 0xfffffffd, 0x0, 0x0, 0x49d4, 0x1d61, 0xfffffc00, 0x1, 0x4, 0x5, 0xfd51, 0x7fff, 0x6e4, 0x8, 0x2, 0x8, 0x94, 0xa, 0x400, 0x8, 0x8, 0x6, 0x7, 0xfff, 0x40, 0x7, 0x7af3, 0x5, 0x800, 0x0, 0x8, 0xe5e, 0x6, 0x6, 0x4, 0x7fff, 0x8, 0x8, 0x3, 0x3, 0x5, 0x6182, 0xfffffffe, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8a}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x8, 0x5, 0x200, 0x4, 0x54, 0x9, 0x1, 0x0, 0x7d, 0x5, 0x5, 0xd, 0x5, 0x200, 0xffff, 0x6, 0x8, 0x5, 0x40000000, 0x4, 0x9, 0x0, 0x9, 0x4, 0x6, 0xa, 0x9, 0x7f, 0x3ff, 0x6, 0xffff8001, 0x6, 0xc1, 0x7, 0x1, 0xffffffc0, 0x1ff, 0x15c, 0xd5ba, 0x0, 0x7, 0x8f4, 0x7, 0x7, 0x1ad, 0x9, 0x7dd, 0x428, 0x5, 0x77, 0x7, 0x9, 0x9, 0x7, 0x8, 0x3, 0x5c7, 0x3, 0x180, 0x1, 0x0, 0x3, 0xffffff4b, 0x2d86, 0x100, 0x7, 0x7, 0xeb, 0x9, 0x6, 0x1ff, 0xfffffffe, 0x7, 0x6, 0x7, 0x6, 0x6, 0x7, 0x6ec, 0x7fffffff, 0xa, 0x7, 0x80000000, 0x4, 0xfffffff9, 0x1d9, 0x9, 0x5, 0x9, 0xc237, 0x4, 0x6, 0x3, 0x4, 0x8001, 0x2, 0xf, 0xe, 0x1000, 0x4, 0x9, 0x0, 0x0, 0x2, 0x8001, 0x80, 0xfffffffa, 0xfffffff9, 0xb47b, 0x7, 0x80000001, 0x1, 0x9, 0x5, 0x78f, 0x2, 0x7fc, 0x8, 0x9, 0x4, 0x1, 0x6, 0xfffffff7, 0x1, 0xb34, 0x7, 0x0, 0x4, 0x81, 0x7, 0xffffffff, 0x6, 0xdf, 0x2, 0x1, 0x4, 0xfffffffd, 0x8000, 0x9, 0x9, 0x7, 0x6, 0x7, 0xb, 0x7f, 0xbc4c, 0x1, 0x1, 0x80000001, 0xd88, 0xee, 0x3, 0x7, 0x60000, 0x10, 0xbbd, 0x2, 0x0, 0x2, 0x10000, 0xffffff41, 0x7f, 0x8, 0x5, 0x1, 0xb4, 0x4, 0x5, 0x9, 0x3, 0x0, 0x1, 0xe, 0x4, 0xb, 0x9, 0x7ff, 0x7f, 0x5, 0x2, 0x7, 0x7, 0x9, 0x101, 0x26, 0x3, 0x80000001, 0x3, 0xfffff801, 0x2c5, 0x5, 0x4, 0x2, 0x8, 0xfffff000, 0x9, 0x7, 0x1, 0x5, 0x4, 0x80000001, 0x9, 0x1ff, 0x8, 0x6, 0x9, 0x5, 0x1, 0x5, 0x0, 0x401, 0x7fff, 0x8000, 0x9, 0x7f, 0x5, 0x4, 0x25, 0x6, 0x12db, 0x1, 0x0, 0x7fff, 0x9, 0x4, 0x8, 0x3ff, 0x7a3bb9ea, 0x1, 0x40, 0x9, 0x5, 0x101, 0x6, 0x9, 0x5, 0x7f, 0x1, 0x5, 0x7, 0xbf, 0x8, 0x2, 0x8, 0x4, 0x10001, 0x2, 0xd936, 0xb70, 0x1, 0x0, 0xfffffff9, 0x5, 0x6, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x4, 0x2, 0x99, 0x4, 0x7f9, 0x8000, 0x1, 0x1ff, 0x0, 0x6, 0xffff, 0x1d1b1e3b, 0x4, 0x7ff, 0x1, 0x2, 0x80000000, 0x5, 0xa1, 0x3, 0xff, 0xf, 0xe033, 0x7dac3b3e, 0x9, 0x2, 0x3, 0x2, 0x8, 0x80000000, 0x800, 0xc2, 0x7fff, 0x6, 0x3f4, 0xfffffffc, 0x809, 0x9, 0x8, 0x0, 0x24, 0x7, 0x9, 0x76, 0x5, 0x3ff, 0x6, 0x2, 0x8001, 0x0, 0x3, 0xfffffffa, 0x2, 0x401, 0x1, 0x5, 0x9a, 0x1, 0x4, 0xb7890000, 0xe04, 0x0, 0x45, 0x5, 0xffff, 0x9, 0x6, 0x0, 0xabc, 0x1ff, 0xfffffffd, 0x5, 0x7, 0x0, 0x7, 0x1, 0x6, 0x9, 0x5, 0x1, 0x3, 0x6, 0x6, 0x2, 0x1000, 0xbb5, 0x2, 0xb0f, 0xb00, 0xfff, 0x6, 0x6, 0x268ad358, 0x3, 0x7f, 0x8, 0x5, 0x80000001, 0x3ff, 0x80000001, 0x8, 0x8001, 0x1d, 0x1, 0x4, 0x8, 0x101, 0x10, 0x4, 0xfffffff8, 0x1, 0x9, 0x80, 0x81, 0x9, 0x7, 0xfffffffb, 0x9, 0x4, 0xb25a, 0x2, 0x5, 0x6, 0xfffffff7, 0x4, 0xfffff20f, 0x10000, 0x5, 0x4, 0x8, 0x0, 0x4, 0x200, 0x80, 0x84, 0x9, 0xa0c, 0x0, 0xc, 0xffffffff, 0x4, 0xc6, 0xa6, 0x0, 0x0, 0x7ff, 0x6, 0x49, 0x800, 0x429e, 0x3ff, 0x3, 0x3, 0x7fff, 0x6, 0xa, 0x44a, 0x40, 0x101, 0x8, 0x6, 0xd7, 0x3, 0x0, 0xe, 0x6, 0x73eb, 0x1, 0x1, 0x1, 0x554cfadb, 0x0, 0xd, 0x8, 0x80000001, 0x2, 0xc920, 0x200, 0x80000000, 0x5, 0x64e, 0x7e, 0x5, 0x5, 0x1ff, 0xb, 0x60, 0x6, 0x2, 0x80000001, 0xcd, 0x2d86, 0xad5c, 0xfffffff2, 0x1, 0x2, 0x7fc0f19d, 0x100, 0xffffffff, 0x44b6, 0x81, 0xc, 0x4, 0x0, 0xbca, 0xffffff2c, 0x1, 0x0, 0x1, 0x7, 0x6, 0x4, 0x2, 0x1, 0x101, 0xfff, 0x217c3e65, 0x2, 0x3, 0x8, 0x6, 0x6, 0x4, 0x5, 0x7, 0x4, 0x7, 0x7, 0x4, 0x200, 0x5a4c, 0x8, 0x7, 0x1ff, 0x5, 0x0, 0xffffffff, 0x5, 0x401, 0x6, 0x10001, 0x367e, 0x80000001, 0x8, 0x7, 0x4, 0x100, 0x0, 0xf533, 0x400, 0x3, 0xd56, 0x10000, 0x81, 0x104]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffff31, 0x30000002, 0x3, 0x9, 0xffff, {0x5, 0x0, 0x3, 0x4, 0x100, 0xb}, {0x8, 0x1, 0x0, 0x38fa, 0x9fb, 0x1}, 0x641, 0x4, 0x9dd}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x1, 0x7, 0x9, {0x4, 0x2, 0xf2, 0x9, 0x100, 0x6}, {0x55, 0x1, 0x0, 0x3, 0x4, 0x1}, 0x8, 0x0, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x4, 0x8c8, 0x2, {0x2, 0x0, 0xe7, 0x2dff, 0x6, 0x28e}, {0x1, 0x1, 0x6, 0xff81, 0x6c8b, 0xf}, 0x80000001, 0xc706, 0x40}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8001, 0xa, 0x80000001, 0x1200, 0x4, 0x8, 0x3, 0x55f, 0x1, 0xb, 0x10000, 0x5, 0x6, 0x6, 0xe000000, 0x9, 0x8, 0x4, 0xe, 0xe24a, 0x1, 0xfffffb7a, 0x7, 0x2, 0x3edf, 0x8, 0x40, 0x0, 0xfffffbff, 0x3, 0x3, 0x0, 0x2, 0x1, 0xff0000, 0xfffffff7, 0x9, 0x3, 0x1, 0x6, 0x0, 0x5, 0x4, 0x1, 0x8, 0x2, 0xfff, 0x864c88ba, 0x100, 0x4, 0x4, 0x6, 0x3, 0x6, 0x9, 0x4ddceae1, 0x9, 0xffffff01, 0xfff, 0x40, 0x4, 0x7f, 0x4, 0x80000001, 0x9, 0x8, 0x9, 0x4, 0x2, 0xfffffff9, 0x55d57a2e, 0x1, 0x7, 0xb2c, 0x0, 0x3ff, 0x55, 0x80, 0x80000000, 0x80000000, 0x4, 0x6, 0xfffff000, 0x3, 0x3, 0x6, 0x1eea006, 0x3, 0x1, 0x7, 0x400, 0x7fff, 0x1000, 0xdd4, 0x3, 0x4, 0x401, 0x5, 0x4, 0x7, 0x4, 0x6, 0xa, 0x80, 0x1, 0xffffffff, 0x7, 0x381, 0x4, 0x4, 0x9, 0x0, 0x0, 0x6, 0x2, 0x2, 0x6, 0xdf44, 0x8, 0x5, 0x80000001, 0x3, 0x2, 0xc6, 0x200, 0x7f, 0x0, 0x80, 0x2, 0x44e9, 0x3, 0x7fffffff, 0xd, 0x1, 0x29b0, 0x5, 0x1, 0x6, 0xfffffffe, 0x9, 0xfffffffa, 0xffff8001, 0x5, 0x1, 0x80, 0x99, 0x101, 0x3, 0x1c000, 0x6, 0xffff0a30, 0x2, 0x8, 0xdd, 0x2, 0x0, 0x91c4, 0x5, 0x3, 0x25b7, 0x2, 0x0, 0x101, 0x7, 0x7, 0x4, 0x400, 0x5, 0x9, 0x0, 0x8305, 0x1, 0x8, 0x0, 0x3, 0x7ff, 0xce, 0x8, 0xa, 0x10, 0xc, 0x100, 0x1, 0x4, 0x1, 0x3, 0x1, 0xa, 0x4, 0x7, 0x80, 0x1, 0x9, 0xff, 0x3, 0x7, 0x6, 0x6, 0x3, 0xa3, 0x7fffffff, 0x6a8b, 0xf, 0x10001, 0xa, 0xdc, 0x9, 0x2, 0x100, 0x80010, 0xe6, 0x3ff, 0x0, 0x8, 0x4, 0x4, 0x9, 0x1ff, 0x5, 0x4134, 0x10001, 0x8, 0x2, 0x0, 0x9, 0x40, 0x4, 0xff, 0x7, 0x2, 0x2, 0x4, 0x7, 0x1000, 0x4, 0xb, 0xd, 0x8, 0x7, 0xffff, 0x8, 0x2, 0x1000, 0xdbe, 0x100, 0x1, 0x0, 0x8, 0x4, 0x0, 0x7fff, 0x6, 0x8, 0xb]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x30, 0xa, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}]}]}}]}, 0x3098}}, 0x0) recvmmsg$unix(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 34.266705988s ago: executing program 9 (id=3564): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x80, 0x3, 0x0, 0x717e387b, 0x42, "1ae34e0626b2fb12daba40794233a5bd00", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x0, 0x5, "3eccd8000000000000000010000000040100"}) 33.206218773s ago: executing program 9 (id=3570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0xffffffff, 0x204}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) io_uring_enter(r3, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 32.297713266s ago: executing program 9 (id=3574): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) preadv(r4, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/152, 0x98}], 0x1, 0xc096, 0x2) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 32.24798167s ago: executing program 9 (id=3575): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/48, 0x30) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)="0e", 0x1, 0x40000, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r4, 0x118, 0x0, 0x0, 0x0) 32.022773717s ago: executing program 9 (id=3576): creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) userfaultfd(0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x305e, &(0x7f00000005c0)={0x0, 0xbc23, 0x10000, 0x2, 0x403f, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x40}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x3c, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x3, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) 32.006167013s ago: executing program 48 (id=3576): creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) userfaultfd(0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x305e, &(0x7f00000005c0)={0x0, 0xbc23, 0x10000, 0x2, 0x403f, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x40}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x3c, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x3, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) 4.855265827s ago: executing program 2 (id=3680): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x4, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000d00)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 4.597123218s ago: executing program 0 (id=3682): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 4.591327376s ago: executing program 0 (id=3683): syz_io_uring_setup(0x70ca, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080), 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.541337235s ago: executing program 0 (id=3685): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb011c1800000000000000000000000000000003000000005f00"], 0x0, 0x1b, 0x0, 0x1}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_open_dev$video(0x0, 0x485, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.886444728s ago: executing program 2 (id=3686): iopl(0x3) pipe(&(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7fff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x100) 3.222823108s ago: executing program 0 (id=3688): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xffffffffffffff24, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000000000000000408000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 3.092657493s ago: executing program 1 (id=3689): r0 = syz_open_dev$vim2m(0x0, 0x1, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd, 0x7ff, 0x61b, 0x8001, 0x9}, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, 0x1c) r6 = dup2(r5, r5) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f0000000100)=@mmap={0x40000000, 0x2, 0x4, 0x0, 0x300000, {}, {0x5, 0x0, 0x0, 0x2, 0x9, 0x0, "2063569a"}}) 2.802963271s ago: executing program 2 (id=3690): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) dup(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 2.742613672s ago: executing program 6 (id=3691): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 2.737522821s ago: executing program 6 (id=3692): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "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"}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0x5452, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x800008d, 0x0) 2.336089129s ago: executing program 0 (id=3693): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 2.212519356s ago: executing program 1 (id=3694): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_pages(0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=[0x0], 0x2) r2 = inotify_init() syz_open_pts(0xffffffffffffffff, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r3, 0x0) 1.819764107s ago: executing program 2 (id=3695): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x52, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604dd308001c0600fc010000000800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020100907800"], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r2], 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000140)={0x3, 0xb}) 1.784750349s ago: executing program 6 (id=3696): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f00000001c0)=0x9) write$dsp(r2, &(0x7f0000000140)='u', 0x1) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, r1, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syslog(0x2, &(0x7f0000001500)=""/43, 0x2b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpgid(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a00010000000000000000000200000000000000001400ebc5130339b05bfcdbaee007fbbc6e5c6e569d7f03a0b36305a9f44b1bbd41d92e3cb2fa93a610b4cb4320f016d21b25f983d1ab9bc1241dc94b0e5ddb325a031320b3a7987b4aed"], 0x24}, 0x1, 0x0, 0x0, 0x4044081}, 0x80) 898.470836ms ago: executing program 2 (id=3697): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) read$dsp(r0, &(0x7f00000011c0)=""/4103, 0x1007) 898.218693ms ago: executing program 1 (id=3698): r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x74c920689c38ea7e) r2 = syz_pidfd_open(r0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2400) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe42}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r5, 0x0) ftruncate(r5, 0x796c) ioctl$VIDIOC_QBUF(r2, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x10, 0x200, {}, {0x3, 0x8, 0xe, 0x9f, 0x0, 0x7b, "c16599e2"}, 0xabdb, 0x1, {}, 0xbaa, 0x0, r5}) 897.983476ms ago: executing program 0 (id=3699): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 890.66059ms ago: executing program 6 (id=3700): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 876.72794ms ago: executing program 6 (id=3701): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x80800) r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 855.418426ms ago: executing program 1 (id=3709): syslog(0x2, &(0x7f0000001500)=""/43, 0x2b) 818.751369ms ago: executing program 1 (id=3710): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/119, 0x77) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 595.814455ms ago: executing program 6 (id=3702): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xffffffffffffff24, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000000000000000408000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 595.654465ms ago: executing program 1 (id=3703): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(0x0, 0x5) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 0s ago: executing program 2 (id=3704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x100f9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x4, &(0x7f0000000180)) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x4f2b, 0x5, 0x3, 0x4, 0x5, 0xcc7, 0xf, 0xb, 0xa, 0x100, 0x2, 0x1, 0xfffffffd, 0x40, 0x6, 0x101, 0x0, 0x1a449, 0x2, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0xa, 0xe69, 0x3f, 0x8, 0x2, 0x0, 0xfffffff8]}) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000140)=0xa, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r4, 0x209, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 8] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2420'. [ 324.767557][T14052] syzkaller0: entered promiscuous mode [ 324.769375][T14052] syzkaller0: entered allmulticast mode [ 324.995637][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.178701][T14071] netlink: 'syz.5.2431': attribute type 10 has an invalid length. [ 325.183348][T14071] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 325.284572][T14073] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 325.814163][T14092] binder: 14091:14092 ioctl c0306201 80000680 returned -14 [ 325.839045][T14096] bond1: entered allmulticast mode [ 325.841373][T14096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.496307][T14112] netlink: 'syz.0.2447': attribute type 12 has an invalid length. [ 327.444382][T14147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.483253][T14181] __nla_validate_parse: 4 callbacks suppressed [ 328.483288][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2466'. [ 328.498892][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 328.501856][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2466'. [ 328.760513][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 331.828922][T14236] netlink: 'syz.0.2486': attribute type 10 has an invalid length. [ 331.847678][T14236] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 332.103812][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2490'. [ 334.600099][T14275] netlink: 'syz.5.2497': attribute type 10 has an invalid length. [ 334.612548][T14275] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 334.646394][T14275] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 334.663655][T14277] netlink: 'syz.0.2499': attribute type 10 has an invalid length. [ 335.796863][ T40] audit: type=1326 audit(1755690210.912:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.0.2506" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e579 code=0x0 [ 336.173359][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2507'. [ 336.182166][T14303] dummy0: entered promiscuous mode [ 336.185819][T14303] dummy0: left promiscuous mode [ 336.702332][T14324] binder_alloc: 14318: binder_alloc_buf, no vma [ 336.967147][T14333] overlayfs: failed to clone upperpath [ 337.391974][T14341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.450417][T14341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.516741][T14343] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 337.961133][T14351] bridge: RTM_NEWNEIGH with invalid ether address [ 338.193932][T14367] MPI: mpi too large (124808 bits) [ 338.338322][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2535'. [ 338.538886][T14378] wireguard0: entered promiscuous mode [ 338.541369][T14378] wireguard0: entered allmulticast mode [ 338.634922][T14381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.701674][T14381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.373181][T14401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.430441][T14401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.317478][T14418] syzkaller0: entered promiscuous mode [ 340.319249][T14418] syzkaller0: entered allmulticast mode [ 341.349042][T14443] ALSA: mixer_oss: invalid OSS volume 'PHONEIÎ' [ 341.351075][T14443] ALSA: mixer_oss: invalid OSS volume '¢¢ð½ñL²Îýþ‰XTp0þ¥œý¦' [ 341.354339][T14446] siw: device registration error -23 [ 341.625701][ T6253] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 341.641451][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.785609][ T6253] usb 10-1: Using ep0 maxpacket: 32 [ 341.796962][ T6253] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 341.804723][ T6253] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 341.814827][ T6253] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 341.835096][ T6253] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 341.846933][ T6253] usb 10-1: config 0 interface 0 has no altsetting 0 [ 341.851935][ T6253] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 341.855859][ T6253] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 341.859775][ T6253] usb 10-1: Product: syz [ 341.861652][ T6253] usb 10-1: Manufacturer: syz [ 341.863767][ T6253] usb 10-1: SerialNumber: syz [ 341.876605][ T6253] usb 10-1: config 0 descriptor?? [ 341.879634][ T6253] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 341.883224][ T6253] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 342.108814][ T5981] usb 10-1: USB disconnect, device number 4 [ 342.113646][ T5981] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 342.283209][T13323] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.328499][T13323] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.369457][T13323] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.429530][T13323] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.160888][T13323] bond0 (unregistering): Released all slaves [ 343.170111][T13323] bond1 (unregistering): Released all slaves [ 343.179909][T13323] bond2 (unregistering): Released all slaves [ 343.190625][T14484] lo speed is unknown, defaulting to 1000 [ 343.248613][T13323] tipc: Disabling bearer [ 343.260622][T13323] tipc: Left network mode [ 343.438525][T13323] batadv_slave_0: left promiscuous mode [ 343.442633][T13323] hsr_slave_0: left promiscuous mode [ 343.453493][T13323] veth1_macvtap: left promiscuous mode [ 343.455343][T13323] veth0_macvtap: left allmulticast mode [ 343.458138][T13323] veth0_macvtap: left promiscuous mode [ 343.466373][T13323] veth1_vlan: left promiscuous mode [ 343.536507][T13323] vlan0 (unregistering): left allmulticast mode [ 343.538570][T13323] macvtap0 (unregistering): left allmulticast mode [ 343.541394][T13323] team0 (unregistering): Port device vlan0 removed [ 343.818655][T14511] netlink: 'syz.5.2577': attribute type 1 has an invalid length. [ 343.989879][T14511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.992430][ T6040] lo speed is unknown, defaulting to 1000 [ 343.994336][ T6040] syz2: Port: 1 Link DOWN [ 343.997843][T14512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.000285][T14512] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 344.004394][T14512] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 344.018369][T14513] bond2: entered promiscuous mode [ 344.020651][T14513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.023613][T14513] bond1: (slave bond2): Enslaving as an active interface with a down link [ 344.026514][ T46] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.031188][T14514] macvlan2: entered promiscuous mode [ 344.039181][T14514] macvlan2: entered allmulticast mode [ 344.043302][T14518] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 344.045866][ T6040] IPVS: starting estimator thread 0... [ 344.046446][T14514] bond1: entered promiscuous mode [ 344.051602][T14514] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 344.056202][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 344.062015][T14514] bond1: left promiscuous mode [ 344.067392][ T46] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.071031][ T46] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.074482][ T46] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.136095][T14520] IPVS: using max 56 ests per chain, 134400 per kthread [ 344.215741][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 344.225761][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.359496][T13323] IPVS: stop unused estimator thread 0... [ 344.385682][T14530] netlink: 'syz.0.2582': attribute type 1 has an invalid length. [ 344.394273][T14530] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.418253][T14530] vlan3: entered allmulticast mode [ 344.420388][T14530] veth1: entered allmulticast mode [ 344.423433][T14530] bond3: (slave vlan3): Opening slave failed [ 344.427853][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.432854][ T9] usb 9-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 344.437478][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.450371][ T9] usb 9-1: config 0 descriptor?? [ 345.118294][T14541] netlink: 'syz.5.2585': attribute type 1 has an invalid length. [ 345.144739][T14541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.166651][T14541] vlan2: entered promiscuous mode [ 345.169006][T14541] bond3: entered promiscuous mode [ 345.171347][T14541] vlan2: entered allmulticast mode [ 345.173629][T14541] bond3: entered allmulticast mode [ 345.198349][T14541] bond3: (slave gretap1): making interface the new active one [ 345.201812][T14541] gretap1: entered promiscuous mode [ 345.204433][T14541] gretap1: entered allmulticast mode [ 345.207718][T14541] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 345.301248][ T5986] Bluetooth: hci4: failed to read key size for handle 201 [ 346.129563][T14567] bond1: (slave erspan1): Releasing active interface [ 346.133092][T14567] bond2: (slave veth5): Releasing active interface [ 346.182812][T14567] team0: Mode changed to "activebackup" [ 346.186058][T14567] vlan0: entered promiscuous mode [ 346.189074][T14567] tipc: Enabled bearer , priority 0 [ 346.335640][ T6137] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 346.485737][ T6137] usb 6-1: Using ep0 maxpacket: 8 [ 346.488525][ T6137] usb 6-1: config 0 interface 0 has no altsetting 0 [ 346.490594][ T6137] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 346.493548][ T6137] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.497102][ T6137] usb 6-1: config 0 descriptor?? [ 346.814162][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 346.817443][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 346.822392][ T9] usb 9-1: USB disconnect, device number 3 [ 346.907594][ T6137] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 347.918870][T14592] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.921339][T14592] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.962946][T14592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.967776][T14592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.053050][ T1189] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.056952][ T1189] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.059877][ T1189] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.062739][ T1189] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.111277][ T53] usb 6-1: USB disconnect, device number 9 [ 349.315785][ T5986] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 349.318975][ T5986] Bluetooth: hci4: Injecting HCI hardware error event [ 349.321223][ T5986] Bluetooth: hci4: hardware error 0x00 [ 349.771479][T14637] binder_alloc: 14636: pid 14636 spamming oneway? 1 buffers allocated for a total size of 4096 [ 350.844211][T14661] netlink: 'syz.5.2623': attribute type 13 has an invalid length. [ 350.847096][T14661] netlink: 'syz.5.2623': attribute type 17 has an invalid length. [ 350.944097][T14661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.947146][T14661] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.968068][T14661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.016852][T14664] wireguard0: entered promiscuous mode [ 351.019501][T14664] wireguard0: entered allmulticast mode [ 351.396300][ T5986] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 351.939335][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2625'. [ 351.988873][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2626'. [ 351.996641][T14679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.326521][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 352.338950][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 352.465756][T14699] netlink: 'syz.1.2636': attribute type 10 has an invalid length. [ 352.468818][T14700] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2635'. [ 352.469428][T14699] batman_adv: batadv0: Adding interface: team0 [ 352.473882][T14699] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 352.480218][T14699] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 352.489917][T14699] netlink: 'syz.1.2636': attribute type 10 has an invalid length. [ 352.490111][T14700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.492651][T14699] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2636'. [ 352.499915][T14700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.503424][T14700] bond0 (unregistering): Released all slaves [ 352.510343][T14699] team0: entered promiscuous mode [ 352.512356][T14699] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.514738][T14699] batman_adv: batadv0: Interface activated: team0 [ 352.517163][T14699] batman_adv: batadv0: Interface deactivated: team0 [ 352.519484][T14699] batman_adv: batadv0: Removing interface: team0 [ 352.990584][ T53] hid_parser_main: 7 callbacks suppressed [ 352.990600][ T53] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 352.998346][ T53] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 353.229429][T14723] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2642'. [ 354.219551][ T53] libceph: connect (1)[c::]:6789 error -101 [ 354.221518][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 354.269856][T14736] ceph: No mds server is up or the cluster is laggy [ 354.625777][ T6064] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 354.785607][ T6064] usb 9-1: Using ep0 maxpacket: 16 [ 354.790469][ T6064] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.795023][ T6064] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.803110][ T6064] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 354.806990][ T6064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.811434][ T6064] usb 9-1: config 0 descriptor?? [ 355.013328][T14750] netlink: 'syz.5.2649': attribute type 1 has an invalid length. [ 355.016729][T14750] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2649'. [ 355.026822][ T6064] usbhid 9-1:0.0: can't add hid device: -71 [ 355.028737][ T6064] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 355.031769][ T6064] usb 9-1: USB disconnect, device number 4 [ 355.050954][T14752] input: syz1 as /devices/virtual/input/input16 [ 355.129866][T14756] netlink: 'syz.5.2651': attribute type 1 has an invalid length. [ 355.137407][T14756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.153128][T14756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.156701][T14756] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 355.160419][T14756] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 355.217479][T14758] veth3: entered promiscuous mode [ 355.221830][T14758] bond4: (slave veth3): Enslaving as an active interface with a down link [ 355.255190][T14756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2651'. [ 355.258472][T14756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 356.566778][T14802] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 356.626378][T14802] kvm: requested 21790 ns i8254 timer period limited to 200000 ns [ 356.631203][T14802] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 357.120708][T14772] Set syz1 is full, maxelem 65536 reached [ 358.028517][T14835] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 358.031304][T14835] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 358.034700][T14835] vhci_hcd vhci_hcd.0: Device attached [ 358.277697][ T6064] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 358.836794][T14836] vhci_hcd: connection reset by peer [ 358.841721][T13296] vhci_hcd: stop threads [ 358.843301][T13296] vhci_hcd: release socket [ 358.845882][T13296] vhci_hcd: disconnect device [ 359.276110][T14846] overlayfs: failed to resolve './file1': -2 [ 359.636189][ T5842] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 359.639336][T14855] netlink: 'syz.0.2674': attribute type 1 has an invalid length. [ 363.385633][ T6064] vhci_hcd: vhci_device speed not set [ 368.116579][T13298] bridge_slave_1: left allmulticast mode [ 368.119693][T13298] bridge_slave_1: left promiscuous mode [ 368.122310][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.126698][T13298] bridge_slave_0: left allmulticast mode [ 368.129143][T13298] bridge_slave_0: left promiscuous mode [ 368.131670][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.429585][T13298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.433186][T13298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.438040][T13298] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 368.442433][T13298] bond0 (unregistering): Released all slaves [ 368.449500][T13298] bond1 (unregistering): (slave veth3): Releasing active interface [ 368.454053][T13298] bond1 (unregistering): Released all slaves [ 368.543971][T13298] tipc: Left network mode [ 368.794045][T13298] hsr_slave_0: left promiscuous mode [ 368.797287][T13298] hsr_slave_1: left promiscuous mode [ 368.800131][T13298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.803896][T13298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.872040][T13298] team0 (unregistering): Port device team_slave_1 removed [ 368.879719][T13298] team0 (unregistering): Port device team_slave_0 removed [ 370.653866][ T40] audit: type=1804 audit(1755690245.762:94): pid=14953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2690" name="file0" dev="ramfs" ino=60361 res=1 errno=0 [ 371.267725][T14978] overlayfs: failed to clone upperpath [ 371.292902][T14981] 9pnet_fd: Insufficient options for proto=fd [ 371.459409][T14989] macsec0: entered promiscuous mode [ 371.511665][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2708'. [ 371.567129][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2708'. [ 372.898602][T15022] veth0_to_hsr: entered allmulticast mode [ 372.900661][T15022] veth0_to_hsr: left allmulticast mode [ 373.027627][T15027] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 373.034200][T15027] kvm: pic: non byte read [ 373.040640][T15027] pic_ioport_write: 9 callbacks suppressed [ 373.040651][T15027] kvm: pic: level sensitive irq not supported [ 373.043382][T15027] kvm: pic: non byte read [ 373.048711][T15027] kvm: pic: level sensitive irq not supported [ 373.049476][T15027] kvm: pic: non byte read [ 373.054816][T15027] kvm: pic: level sensitive irq not supported [ 373.055098][T15027] kvm: pic: non byte read [ 373.060827][T15027] kvm: pic: level sensitive irq not supported [ 373.061164][T15027] kvm: pic: non byte read [ 373.066391][T15027] kvm: pic: level sensitive irq not supported [ 373.066688][T15027] kvm: pic: non byte read [ 373.325926][T15041] netlink: 'syz.1.2720': attribute type 4 has an invalid length. [ 374.238812][T15057] vivid-000: ================= START STATUS ================= [ 374.241309][T15057] vivid-000: Test Pattern: 75% Colorbar [ 374.243180][T15057] vivid-000: Fill Percentage of Frame: 100 [ 374.245079][T15057] vivid-000: Horizontal Movement: No Movement [ 374.247141][T15057] vivid-000: Vertical Movement: No Movement [ 374.249058][T15057] vivid-000: OSD Text Mode: All [ 374.250640][T15057] vivid-000: Show Border: false [ 374.252243][T15057] vivid-000: Show Square: false [ 374.253894][T15057] vivid-000: Sensor Flipped Horizontally: false [ 374.256059][T15057] vivid-000: Sensor Flipped Vertically: false [ 374.258158][T15057] vivid-000: Insert SAV Code in Image: false [ 374.260106][T15057] vivid-000: Insert EAV Code in Image: false [ 374.262061][T15057] vivid-000: Insert Video Guard Band: false [ 374.263973][T15057] vivid-000: Reduced Framerate: true [ 374.265837][T15057] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 374.268418][T15057] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 374.270968][T15057] vivid-000: Enable Capture Cropping: true [ 374.273048][T15057] vivid-000: Enable Capture Composing: true [ 374.275145][T15057] vivid-000: Enable Capture Scaler: true [ 374.277285][T15057] vivid-000: Timestamp Source: End of Frame [ 374.279240][T15057] vivid-000: Colorspace: sRGB [ 374.280765][T15057] vivid-000: Transfer Function: Rec. 709 [ 374.282587][T15057] vivid-000: Y'CbCr Encoding: xvYCC 709 [ 374.284374][T15057] vivid-000: HSV Encoding: Hue 0-179 [ 374.286846][T15057] vivid-000: Quantization: Default [ 374.288738][T15057] vivid-000: Apply Alpha To Red Only: false [ 374.291208][T15057] vivid-000: Standard Aspect Ratio: 4x3 [ 374.293006][T15057] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 374.295795][T15057] vivid-000: DV Timings: 640x480p59 inactive [ 374.297790][T15057] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 374.300170][T15057] vivid-000: Maximum EDID Blocks: 2 [ 374.301913][T15057] vivid-000: Limited RGB Range (16-235): false [ 374.303995][T15057] vivid-000: Rx RGB Quantization Range: Automatic [ 374.306741][T15057] vivid-000: Power Present: 0x00000001 [ 374.308502][T15057] tpg source WxH: 320x240 (Y'CbCr) [ 374.310191][T15057] tpg field: 1 [ 374.311302][T15057] tpg crop: (0,0)/320x240 [ 374.312672][T15057] tpg compose: (0,0)/320x240 [ 374.314147][T15057] tpg colorspace: 8 [ 374.315372][T15057] tpg transfer function: 1/0 [ 374.316941][T15057] tpg Y'CbCr encoding: 4/0 [ 374.318386][T15057] tpg quantization: 0/0 [ 374.319715][T15057] tpg RGB range: 0/2 [ 374.320965][T15057] vivid-000: ================== END STATUS ================== [ 376.031973][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2737'. [ 376.359873][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 376.383600][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 376.970042][T15113] netlink: 'syz.0.2745': attribute type 39 has an invalid length. [ 377.056970][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2747'. [ 377.106202][T15127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2749'. [ 377.635380][T15149] netfs: Couldn't get user pages (rc=-14) [ 377.774685][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2758'. [ 377.777604][T15153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2758'. [ 378.117709][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.576488][T15165] netlink: 'syz.1.2762': attribute type 1 has an invalid length. [ 378.604006][T15165] smc: adding net device bond0 with user defined pnetid SYZ2 [ 378.608371][T15165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.634484][T15165] bond0: (slave geneve2): making interface the new active one [ 378.638578][T15165] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 378.641729][T13308] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.646821][T13308] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.651159][T13308] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.659635][T13308] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.666120][T15165] bond0: entered promiscuous mode [ 378.667842][T15165] geneve2: entered promiscuous mode [ 378.840494][ T40] audit: type=1326 audit(1755690253.952:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15172 comm="syz.1.2765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 378.848389][ T40] audit: type=1326 audit(1755690253.952:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15172 comm="syz.1.2765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 378.855001][ T40] audit: type=1326 audit(1755690253.952:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15172 comm="syz.1.2765" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 378.861940][ T40] audit: type=1326 audit(1755690253.952:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15172 comm="syz.1.2765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 378.869654][ T40] audit: type=1326 audit(1755690253.952:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15172 comm="syz.1.2765" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 378.876798][ T40] audit: type=1326 audit(1755690253.952:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15172 comm="syz.1.2765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 378.883454][ T40] audit: type=1326 audit(1755690253.952:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15172 comm="syz.1.2765" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 378.890713][ T40] audit: type=1326 audit(1755690253.952:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15172 comm="syz.1.2765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 378.898176][ T40] audit: type=1326 audit(1755690253.952:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15172 comm="syz.1.2765" exe="/syz-executor" sig=0 arch=40000003 syscall=320 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 378.904919][ T40] audit: type=1326 audit(1755690253.952:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15172 comm="syz.1.2765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 379.164010][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2767'. [ 380.880501][T15213] bridge3: entered promiscuous mode [ 380.882935][T15213] bridge3: entered allmulticast mode [ 381.979745][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2779'. [ 381.991799][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2779'. [ 382.417263][ T6137] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 382.735504][T15232] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.820484][T15232] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.883165][T15232] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.943793][T15232] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.042433][ T1189] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.053777][ T1189] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.074002][ T1189] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.078737][ T1189] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.393444][T15276] bridge2: entered promiscuous mode [ 384.398649][T15276] bridge2: entered allmulticast mode [ 400.027838][T15302] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 400.729370][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2798'. [ 401.387004][ T40] kauditd_printk_skb: 246 callbacks suppressed [ 401.387015][ T40] audit: type=1804 audit(1755690276.502:351): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2801" name="/newroot/101/bus" dev="tmpfs" ino=588 res=1 errno=0 [ 401.956268][ T53] libceph: connect (1)[c::]:6789 error -101 [ 401.958239][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 402.142446][T15351] lo speed is unknown, defaulting to 1000 [ 402.216182][ T53] libceph: connect (1)[c::]:6789 error -101 [ 402.218241][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 402.727195][ T53] libceph: connect (1)[c::]:6789 error -101 [ 402.729974][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 402.794173][T15344] ceph: No mds server is up or the cluster is laggy [ 406.198164][T15440] 9p: Unknown Cache mode or invalid value fscach [ 407.337505][T15447] syz.1.2827 (15447) used greatest stack depth: 19960 bytes left [ 408.351023][T15484] overlayfs: failed to clone upperpath [ 409.825128][T15499] 9pnet_fd: Insufficient options for proto=fd [ 412.065873][ T59] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 412.217629][ T59] usb 10-1: config 0 has no interfaces? [ 412.220034][ T59] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 412.223872][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.228326][ T59] usb 10-1: config 0 descriptor?? [ 412.461637][ T6024] usb 10-1: USB disconnect, device number 5 [ 412.644719][T15544] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2851'. [ 413.571031][T15561] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 413.634244][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2854'. [ 414.209759][ T40] audit: type=1326 audit(1755690289.322:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.5.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 414.217584][T15570] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2857'. [ 414.219904][ T40] audit: type=1326 audit(1755690289.322:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.5.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 414.227217][T15572] netlink: 'syz.0.2866': attribute type 1 has an invalid length. [ 414.229318][ T40] audit: type=1326 audit(1755690289.322:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.5.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 414.237568][T15572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.241034][ T40] audit: type=1326 audit(1755690289.322:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.5.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 414.252083][ T40] audit: type=1326 audit(1755690289.322:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.5.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 414.262359][ T40] audit: type=1326 audit(1755690289.322:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.5.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 414.269645][ T40] audit: type=1326 audit(1755690289.322:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.5.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 414.287238][ T40] audit: type=1326 audit(1755690289.322:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.5.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 414.295460][ T40] audit: type=1326 audit(1755690289.322:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.5.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 414.307501][T15572] bond4: (slave veth9): Enslaving as an active interface with a down link [ 414.323747][ T40] audit: type=1326 audit(1755690289.322:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.5.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 414.331457][T15572] vlan3: entered allmulticast mode [ 414.333253][T15572] veth0_to_bond: entered allmulticast mode [ 414.335647][T15572] bond4: (slave vlan3): Opening slave failed [ 415.122240][T15591] lo speed is unknown, defaulting to 1000 [ 415.274678][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2863'. [ 415.352024][T15599] binder: 15598:15599 ioctl 4018620d 0 returned -22 [ 416.422537][T15614] team0: left promiscuous mode [ 416.428117][T15614] vxcan1: left allmulticast mode [ 416.451562][T15614] xfrm0: left promiscuous mode [ 416.453300][T15614] xfrm0: left allmulticast mode [ 416.456890][T15614] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 417.366984][T15634] tipc: Started in network mode [ 417.369251][T15634] tipc: Node identity , cluster identity 4711 [ 417.372259][T15634] tipc: Failed to obtain node identity [ 417.374726][T15634] tipc: Enabling of bearer rejected, failed to enable media [ 418.090477][T15644] tipc: Disabling bearer [ 418.341758][T15649] 9p: Unknown Cache mode or invalid value fscach [ 419.387333][T15679] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.389679][T15679] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.455428][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.460700][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.514580][T15679] bond1: left allmulticast mode [ 419.517799][T15679] wireguard0: left promiscuous mode [ 419.519340][T15679] wireguard0: left allmulticast mode [ 419.547020][T13281] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.549870][T13281] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.552508][T13281] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.555378][T13281] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.071058][T15681] lo speed is unknown, defaulting to 1000 [ 420.071945][T15684] netlink: 'syz.1.2887': attribute type 1 has an invalid length. [ 420.083512][T15684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.106038][T15684] bond1: (slave veth9): Enslaving as an active interface with a down link [ 420.139398][T15684] vlan3: entered allmulticast mode [ 420.141553][T15684] veth0_to_bond: entered allmulticast mode [ 420.146271][T15684] bond1: (slave vlan3): Opening slave failed [ 421.205782][ T6040] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 421.331365][T15705] 9p: Unknown Cache mode or invalid value fscach [ 421.385642][ T6040] usb 10-1: Using ep0 maxpacket: 8 [ 421.388781][ T6040] usb 10-1: config index 0 descriptor too short (expected 260, got 27) [ 421.391555][ T6040] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 421.394930][ T6040] usb 10-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 421.398085][ T6040] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 421.401178][ T6040] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.614911][T15697] team0 (unregistering): Port device team_slave_0 removed [ 421.619136][T15697] team0 (unregistering): Port device team_slave_1 removed [ 421.691979][ T6040] usb 10-1: string descriptor 0 read error: -71 [ 421.695474][ T6040] usb 10-1: USB disconnect, device number 6 [ 422.391496][T15716] netlink: 'syz.0.2896': attribute type 1 has an invalid length. [ 422.402834][T15716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 422.413282][T15719] vxcan1: entered allmulticast mode [ 422.430819][T15716] bond5: (slave veth11): Enslaving as an active interface with a down link [ 422.452222][T15716] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 422.461264][T15716] vlan2: entered allmulticast mode [ 422.463223][T15716] veth0_to_bond: entered promiscuous mode [ 422.465190][T15716] veth0_to_bond: left promiscuous mode [ 422.467003][T15716] veth0_to_bond: entered promiscuous mode [ 422.468911][T15716] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 422.473963][T15716] veth0_to_bond: left promiscuous mode [ 423.245005][T15738] netlink: 'syz.5.2902': attribute type 1 has an invalid length. [ 424.202603][T15755] netlink: 'syz.0.2905': attribute type 5 has an invalid length. [ 424.205893][T15755] netlink: 'syz.0.2905': attribute type 7 has an invalid length. [ 424.217615][T15755] : entered promiscuous mode [ 424.857705][T15767] overlayfs: failed to clone upperpath [ 425.016600][T15775] fuse: Unknown parameter '18446744073709551615ÿ' [ 426.140086][T15792] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370955 [ 426.283418][T15799] bridge0: failed insert local address into bridge forwarding table [ 426.697353][T15805] tipc: Started in network mode [ 426.699059][T15805] tipc: Node identity 6e4f8b3fe2fa, cluster identity 4711 [ 426.701538][T15805] tipc: Enabled bearer , priority 0 [ 426.705062][T15805] syzkaller0: entered promiscuous mode [ 426.707308][T15805] syzkaller0: entered allmulticast mode [ 426.713432][T15805] tipc: Resetting bearer [ 426.717488][T15804] tipc: Resetting bearer [ 426.722024][T15804] tipc: Disabling bearer [ 427.144111][T15812] tipc: Enabling of bearer rejected, failed to enable media [ 427.225489][T15818] tipc: Enabled bearer , priority 0 [ 427.231209][T15818] syzkaller0: entered promiscuous mode [ 427.233668][T15818] syzkaller0: entered allmulticast mode [ 427.239226][T15818] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 427.243597][T15818] tipc: Resetting bearer [ 427.247352][T15817] tipc: Resetting bearer [ 427.250985][T15817] tipc: Disabling bearer [ 428.385720][ T6137] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 428.535672][ T6137] usb 10-1: Using ep0 maxpacket: 8 [ 428.540334][ T6137] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 428.542960][ T6137] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 428.547425][ T6137] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 428.555411][ T6137] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.561068][ T6137] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.565355][ T6137] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 428.576248][ T6137] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.824671][ T6137] usb 10-1: GET_CAPABILITIES returned 0 [ 428.827114][ T6137] usbtmc 10-1:16.0: can't read capabilities [ 429.028204][ T7442] usb 10-1: USB disconnect, device number 7 [ 430.006281][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2935'. [ 430.405662][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 430.555706][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 430.558534][ T9] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 430.561171][ T9] usb 9-1: config 0 has no interface number 0 [ 430.563641][ T9] usb 9-1: config 0 interface 12 has no altsetting 0 [ 430.567415][ T9] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 430.570276][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.573056][ T9] usb 9-1: Product: syz [ 430.574550][ T9] usb 9-1: Manufacturer: syz [ 430.576697][ T9] usb 9-1: SerialNumber: syz [ 430.578946][ T9] usb 9-1: config 0 descriptor?? [ 430.658933][T15880] netlink: 'syz.5.2938': attribute type 1 has an invalid length. [ 430.673328][T15880] 8021q: adding VLAN 0 to HW filter on device bond5 [ 430.716305][T15880] bond5: (slave veth5): Enslaving as an active interface with a down link [ 430.741613][T15880] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 430.753122][T15880] vlan3: entered allmulticast mode [ 430.755236][T15880] veth0_to_bond: entered allmulticast mode [ 430.758070][T15880] veth0_to_bond: entered promiscuous mode [ 430.760282][T15880] veth0_to_bond: left promiscuous mode [ 430.762693][T15880] veth0_to_bond: entered promiscuous mode [ 430.764750][T15880] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 430.770172][T15880] veth0_to_bond: left promiscuous mode [ 431.051608][ T9] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 431.053988][ T9] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 431.056288][ T9] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 431.058757][ T9] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 431.062254][ T9] usb 9-1: USB disconnect, device number 5 [ 431.534048][T15888] delete_channel: no stack [ 432.407613][T15906] netlink: 'syz.1.2945': attribute type 5 has an invalid length. [ 432.410470][T15906] netlink: 'syz.1.2945': attribute type 7 has an invalid length. [ 432.422610][T15906] : entered promiscuous mode [ 432.931362][T15924] tipc: Enabling of bearer rejected, failed to enable media [ 433.671747][T15948] netlink: 'syz.5.2954': attribute type 1 has an invalid length. [ 434.484591][T15963] tipc: Enabling of bearer rejected, failed to enable media [ 434.559744][T15967] netlink: 'syz.1.2959': attribute type 1 has an invalid length. [ 434.594677][T15967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.640040][T15967] bond2: (slave veth11): Enslaving as an active interface with a down link [ 434.685978][T15967] vlan3: entered allmulticast mode [ 434.692709][T15967] bond2: (slave vlan3): Opening slave failed [ 435.013458][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2965'. [ 435.295810][ T53] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 435.445643][ T53] usb 10-1: Using ep0 maxpacket: 8 [ 435.449106][ T53] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.453060][ T53] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.457324][ T53] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 435.461324][ T53] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.466592][ T53] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 435.470237][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.684609][ T53] usb 10-1: usb_control_msg returned -32 [ 435.687659][T15989] tipc: Enabling of bearer rejected, failed to enable media [ 435.691272][ T53] usbtmc 10-1:16.0: can't read capabilities [ 435.756553][T15995] netlink: 'syz.1.2970': attribute type 11 has an invalid length. [ 435.839653][ T6040] usb 10-1: USB disconnect, device number 8 [ 436.643907][T16012] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2974'. [ 437.134433][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'. [ 437.138363][T16022] tipc: Enabling of bearer rejected, failed to enable media [ 437.167918][T16026] tipc: Enabling of bearer rejected, failed to enable media [ 437.208699][T16030] tipc: Enabling of bearer rejected, failed to enable media [ 437.406699][T16040] vxcan1: left allmulticast mode [ 437.410596][T16040] vlan2: left allmulticast mode [ 437.412258][T16040] hsr0: left allmulticast mode [ 437.414078][T16040] hsr_slave_0: left allmulticast mode [ 437.416043][T16040] hsr_slave_1: left allmulticast mode [ 437.419291][T16040] wireguard0: left promiscuous mode [ 437.421155][T16040] wireguard0: left allmulticast mode [ 437.424933][T16040] bond0: left promiscuous mode [ 437.427173][T16040] geneve2: left promiscuous mode [ 437.430162][T16040] bridge3: left promiscuous mode [ 437.431741][T16040] bridge3: left allmulticast mode [ 437.435951][T13296] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.438595][T13296] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.441279][T13296] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.444165][T13296] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.627541][T16047] tipc: Enabled bearer , priority 0 [ 437.631171][T16047] syzkaller0: entered promiscuous mode [ 437.633394][T16047] syzkaller0: entered allmulticast mode [ 437.653077][T16047] tipc: Resetting bearer [ 437.657403][T16046] tipc: Resetting bearer [ 437.872888][T16046] tipc: Disabling bearer [ 437.988164][T16051] tipc: Enabled bearer , priority 0 [ 437.991604][T16051] syzkaller0: entered promiscuous mode [ 437.993433][T16051] syzkaller0: entered allmulticast mode [ 438.001596][T16051] tipc: Resetting bearer [ 438.005434][T16050] tipc: Resetting bearer [ 438.009089][T16050] tipc: Disabling bearer [ 439.511414][T16078] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2994'. [ 439.581617][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.631542][T16071] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 441.142264][T16090] netlink: 'syz.0.2999': attribute type 1 has an invalid length. [ 441.163271][T16090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 441.188742][T16090] bond6: (slave wlan0): Enslaving as an active interface with a down link [ 441.208761][T16090] vlan2: entered allmulticast mode [ 441.217479][T16090] bond6: (slave vlan2): Opening slave failed [ 441.272973][T16097] tipc: Enabling of bearer rejected, failed to enable media [ 441.334384][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 442.071012][T16113] syz_tun: entered allmulticast mode [ 442.078084][T16111] syz_tun: left allmulticast mode [ 442.116983][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3006'. [ 442.120854][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3006'. [ 442.124592][T16115] netlink: 50 bytes leftover after parsing attributes in process `syz.5.3006'. [ 442.805508][T16144] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.3012'. [ 443.478123][T16155] tipc: Enabled bearer , priority 0 [ 443.481987][T16155] syzkaller0: entered promiscuous mode [ 443.484535][T16155] syzkaller0: entered allmulticast mode [ 443.491754][T16155] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 443.568001][T16155] tipc: Resetting bearer [ 443.572185][T16152] tipc: Resetting bearer [ 443.581862][T16152] tipc: Disabling bearer [ 444.756560][T16182] netlink: 'syz.4.3022': attribute type 1 has an invalid length. [ 444.776887][T16182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.854179][T16182] bond2: (slave veth5): Enslaving as an active interface with a down link [ 444.898180][T16182] vlan2: entered allmulticast mode [ 444.899859][T16182] veth0_to_bond: entered allmulticast mode [ 444.901785][T16182] bond2: (slave vlan2): Opening slave failed [ 446.355821][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 446.434886][ T5986] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 446.667271][T16226] netlink: 'syz.5.3035': attribute type 1 has an invalid length. [ 446.676268][T16226] 8021q: adding VLAN 0 to HW filter on device bond6 [ 446.705334][T16226] bond6: (slave veth7): Enslaving as an active interface with a down link [ 446.734882][T16226] vlan3: entered allmulticast mode [ 446.737587][T16226] veth0_to_bond: entered promiscuous mode [ 446.739746][T16226] veth0_to_bond: left promiscuous mode [ 446.742504][T16226] bond6: (slave vlan3): Enslaving as an active interface with a down link [ 447.312506][T16245] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3040'. [ 447.394757][T16249] tipc: Enabling of bearer rejected, failed to enable media [ 448.027110][T16268] tipc: Enabled bearer , priority 0 [ 448.031747][T16268] syzkaller0: entered promiscuous mode [ 448.033706][T16268] syzkaller0: entered allmulticast mode [ 448.069538][T16268] tipc: Resetting bearer [ 448.072948][T16267] tipc: Resetting bearer [ 448.076985][T16267] tipc: Disabling bearer [ 450.219737][T16298] overlayfs: failed to clone upperpath [ 452.353969][T16332] tipc: Enabled bearer , priority 0 [ 452.357932][T16332] syzkaller0: entered promiscuous mode [ 452.359682][T16332] syzkaller0: entered allmulticast mode [ 452.368227][T16332] tipc: Resetting bearer [ 452.371818][T16331] tipc: Resetting bearer [ 452.374719][T16331] tipc: Disabling bearer [ 453.023466][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 453.023481][ T40] audit: type=1804 audit(1755690328.132:380): pid=16354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3073" name="/newroot/201/cgroup.controllers" dev="tmpfs" ino=1091 res=1 errno=0 [ 453.036874][ T40] audit: type=1800 audit(1755690328.142:381): pid=16354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3073" name="cgroup.controllers" dev="tmpfs" ino=1091 res=0 errno=0 [ 453.043554][ T40] audit: type=1800 audit(1755690328.152:382): pid=16354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3073" name="cgroup.controllers" dev="tmpfs" ino=1091 res=0 errno=0 [ 453.861325][T16368] tipc: Enabled bearer , priority 0 [ 453.864687][T16368] syzkaller0: entered promiscuous mode [ 453.866665][T16368] syzkaller0: entered allmulticast mode [ 453.873925][T16368] tipc: Resetting bearer [ 453.877923][T16367] tipc: Resetting bearer [ 453.881207][T16367] tipc: Disabling bearer [ 454.656523][T16386] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3082'. [ 454.937782][T16385] mac80211_hwsim hwsim32 : renamed from wlan1 [ 455.049977][T16394] tipc: Enabled bearer , priority 0 [ 455.055091][T16394] syzkaller0: entered promiscuous mode [ 455.057781][T16394] syzkaller0: entered allmulticast mode [ 455.094654][T16394] tipc: Resetting bearer [ 455.100711][T16393] tipc: Resetting bearer [ 455.104099][T16393] tipc: Disabling bearer [ 455.247598][T16400] netlink: 'syz.4.3087': attribute type 1 has an invalid length. [ 455.277755][T16400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.309917][T16400] bond3: (slave veth7): Enslaving as an active interface with a down link [ 455.334006][T16400] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 455.343853][T16400] vlan2: entered allmulticast mode [ 455.346463][T16400] veth0_to_bond: entered promiscuous mode [ 455.349515][T16400] veth0_to_bond: left promiscuous mode [ 455.352173][T16400] veth0_to_bond: entered promiscuous mode [ 455.355053][T16400] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 455.361401][T16400] veth0_to_bond: left promiscuous mode [ 456.036665][T16407] tipc: Started in network mode [ 456.038623][T16407] tipc: Node identity e2da7ba1fef6, cluster identity 4711 [ 456.041071][T16407] tipc: Enabled bearer , priority 0 [ 456.044209][T16407] syzkaller0: entered promiscuous mode [ 456.046094][T16407] syzkaller0: entered allmulticast mode [ 456.057479][T16407] tipc: Resetting bearer [ 456.195740][T16416] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 456.198615][T16416] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 456.203240][T16416] vhci_hcd vhci_hcd.0: Device attached [ 456.475660][ T6040] usb 48-1: SetAddress Request (2) to port 0 [ 456.478167][ T6040] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 456.795125][T16413] Set syz1 is full, maxelem 65536 reached [ 456.825042][T16418] vhci_hcd: connection reset by peer [ 456.827642][T13281] vhci_hcd: stop threads [ 456.829049][T13281] vhci_hcd: release socket [ 456.831872][T13281] vhci_hcd: disconnect device [ 457.065643][ T6137] tipc: Node number set to 472677281 [ 458.231907][T16452] netlink: 'syz.1.3100': attribute type 1 has an invalid length. [ 458.239572][T16452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.268149][T16452] bond3: (slave veth13): Enslaving as an active interface with a down link [ 458.294310][T16452] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 458.304089][T16452] vlan3: entered allmulticast mode [ 458.306576][T16452] veth0_to_bond: entered promiscuous mode [ 458.308738][T16452] veth0_to_bond: left promiscuous mode [ 458.310731][T16452] veth0_to_bond: entered promiscuous mode [ 458.312799][T16452] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 458.318724][T16452] veth0_to_bond: left promiscuous mode [ 459.303332][T16479] tipc: Enabling of bearer rejected, failed to enable media [ 459.829076][T16491] tipc: Enabling of bearer rejected, failed to enable media [ 461.071307][T16518] tipc: Enabling of bearer rejected, already enabled [ 461.555638][ T6040] usb 48-1: device descriptor read/8, error -110 [ 461.575391][T16524] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 461.578176][T16524] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 461.582058][T16524] vhci_hcd vhci_hcd.0: Device attached [ 461.796152][ T6040] usb 48-1: SetAddress Request (3) to port 0 [ 461.798881][ T6040] usb 48-1: new SuperSpeed USB device number 3 using vhci_hcd [ 461.908528][T16516] Set syz1 is full, maxelem 65536 reached [ 461.966038][T16529] vhci_hcd: connection reset by peer [ 461.974917][T13312] vhci_hcd: stop threads [ 461.976761][T13312] vhci_hcd: release socket [ 461.978746][T13312] vhci_hcd: disconnect device [ 462.718372][T16547] tipc: Enabling of bearer rejected, failed to enable media [ 462.883501][T16558] tipc: Enabling of bearer rejected, failed to enable media [ 462.967251][ T5986] Bluetooth: hci1: unexpected event for opcode 0x202d [ 463.628415][T16576] Set syz1 is full, maxelem 65536 reached [ 463.632301][T16576] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 463.634376][T16576] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 463.636998][T16576] vhci_hcd vhci_hcd.0: Device attached [ 463.640415][ T5986] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 463.643112][T16577] vhci_hcd: connection closed [ 463.643242][T13299] vhci_hcd: stop threads [ 463.646251][T13299] vhci_hcd: release socket [ 463.647684][T13299] vhci_hcd: disconnect device [ 463.940122][ T40] audit: type=1326 audit(1755690339.052:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.1.3139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 463.955686][ T40] audit: type=1326 audit(1755690339.052:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.1.3139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 463.962904][ T40] audit: type=1326 audit(1755690339.052:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.1.3139" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 463.970302][ T40] audit: type=1326 audit(1755690339.052:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.1.3139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 463.988202][ T40] audit: type=1326 audit(1755690339.052:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.1.3139" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 463.998236][ T40] audit: type=1326 audit(1755690339.052:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.1.3139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 464.010465][ T40] audit: type=1326 audit(1755690339.052:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.1.3139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 464.018454][ T40] audit: type=1326 audit(1755690339.052:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.1.3139" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 464.026124][ T40] audit: type=1326 audit(1755690568.061:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.1.3139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 464.032788][ T40] audit: type=1326 audit(1755690568.061:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.1.3139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 464.283472][T16591] tipc: Enabled bearer , priority 0 [ 464.287354][T16591] syzkaller0: entered promiscuous mode [ 464.289579][T16591] syzkaller0: entered allmulticast mode [ 464.299832][T16591] tipc: Resetting bearer [ 464.302894][T16590] tipc: Resetting bearer [ 464.308536][T16590] tipc: Disabling bearer [ 464.409941][T16595] tipc: Enabled bearer , priority 0 [ 464.413044][T16595] syzkaller0: entered promiscuous mode [ 464.414717][T16595] syzkaller0: entered allmulticast mode [ 464.421621][T16595] tipc: Resetting bearer [ 464.425116][T16594] tipc: Resetting bearer [ 464.428029][T16594] tipc: Disabling bearer [ 465.249825][T16608] comedi comedi0: Minor -2147450880 is invalid! [ 466.074985][T16626] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.3151'. [ 466.086228][T16626] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 466.811289][T16640] tipc: Enabling of bearer rejected, failed to enable media [ 466.845705][ T6040] usb 48-1: device descriptor read/8, error -110 [ 466.970432][ T6040] usb usb48-port1: attempt power cycle [ 467.523419][T16660] tipc: Enabling of bearer rejected, already enabled [ 467.551883][ T6040] usb usb48-port1: unable to enumerate USB device [ 467.739644][T16667] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.3164'. [ 467.751269][T16667] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 468.282230][T16673] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 468.284576][T16673] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 468.288510][T16673] vhci_hcd vhci_hcd.0: Device attached [ 468.303424][T16674] vhci_hcd: connection closed [ 468.304034][T13324] vhci_hcd: stop threads [ 468.307040][T13324] vhci_hcd: release socket [ 468.309116][T13324] vhci_hcd: disconnect device [ 468.840865][T16681] tipc: Enabling of bearer rejected, failed to enable media [ 469.599895][T16694] tipc: Enabling of bearer rejected, failed to enable media [ 469.806555][T16708] tipc: Enabled bearer , priority 0 [ 469.824238][T16708] syzkaller0: entered promiscuous mode [ 469.826518][T16708] syzkaller0: entered allmulticast mode [ 469.872941][T16708] tipc: Resetting bearer [ 469.878303][T16706] tipc: Resetting bearer [ 469.881394][T16706] tipc: Disabling bearer [ 470.031031][ T6137] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 470.034733][ T6137] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 470.223504][ T6040] libceph: connect (1)[c::]:6789 error -101 [ 470.226610][ T6040] libceph: mon0 (1)[c::]:6789 connect error [ 470.376027][T16718] ceph: No mds server is up or the cluster is laggy [ 470.434672][T16727] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 470.609343][T16732] tipc: Enabling of bearer rejected, failed to enable media [ 470.793781][T16740] syz.5.3185 (16740): drop_caches: 2 [ 471.451370][T16755] tipc: Enabling of bearer rejected, already enabled [ 473.327529][T16806] tipc: Enabled bearer , priority 0 [ 473.331509][T16806] syzkaller0: entered promiscuous mode [ 473.333399][T16806] syzkaller0: entered allmulticast mode [ 473.359488][T16806] tipc: Resetting bearer [ 473.364147][T16805] tipc: Resetting bearer [ 473.368006][T16805] tipc: Disabling bearer [ 473.464797][T16811] tipc: Enabled bearer , priority 0 [ 473.470908][T16811] syzkaller0: entered promiscuous mode [ 473.473402][T16811] syzkaller0: entered allmulticast mode [ 473.483359][T16811] tipc: Resetting bearer [ 473.490845][T16810] tipc: Resetting bearer [ 473.502787][T16810] tipc: Disabling bearer [ 473.643493][T16822] tipc: Enabled bearer , priority 0 [ 473.646811][T16822] syzkaller0: entered promiscuous mode [ 473.649232][T16822] syzkaller0: entered allmulticast mode [ 473.663509][T16822] tipc: Resetting bearer [ 473.679992][T16821] tipc: Resetting bearer [ 473.687980][T16821] tipc: Disabling bearer [ 475.786496][T16850] tipc: Enabling of bearer rejected, failed to enable media [ 475.848207][T16854] tipc: Enabling of bearer rejected, failed to enable media [ 477.340024][T16886] tipc: Enabling of bearer rejected, failed to enable media [ 478.652543][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 478.652560][ T40] audit: type=1326 audit(1755690582.761:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 478.664824][ T40] audit: type=1326 audit(1755690582.761:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 478.674145][ T40] audit: type=1326 audit(1755690582.761:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 478.683469][ T40] audit: type=1326 audit(1755690582.761:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 478.689719][ T40] audit: type=1326 audit(1755690582.761:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 478.696399][ T40] audit: type=1326 audit(1755690582.761:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 478.704210][ T40] audit: type=1326 audit(1755690582.761:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 478.711691][ T40] audit: type=1326 audit(1755690582.761:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 478.718390][ T40] audit: type=1326 audit(1755690582.761:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 478.730913][ T40] audit: type=1326 audit(1755690582.761:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 480.188572][T16948] tipc: Enabling of bearer rejected, failed to enable media [ 481.236656][T16974] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3238'. [ 481.244711][T16975] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 481.247200][T16975] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 481.250355][T16975] vhci_hcd vhci_hcd.0: Device attached [ 481.529605][T16984] tipc: Enabling of bearer rejected, failed to enable media [ 481.635807][ T53] usb 46-1: SetAddress Request (2) to port 0 [ 481.638468][ T53] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 481.705371][T16990] tipc: Enabling of bearer rejected, failed to enable media [ 481.751131][T16976] vhci_hcd: connection reset by peer [ 481.767172][T13302] vhci_hcd: stop threads [ 481.768604][T13302] vhci_hcd: release socket [ 481.772732][T13302] vhci_hcd: disconnect device [ 482.700884][T17007] tipc: Enabling of bearer rejected, failed to enable media [ 484.040115][T17032] tipc: Enabling of bearer rejected, failed to enable media [ 484.323591][T17040] lo speed is unknown, defaulting to 1000 [ 484.489539][T17049] tipc: Enabled bearer , priority 0 [ 484.492974][T17049] syzkaller0: entered promiscuous mode [ 484.494908][T17049] syzkaller0: entered allmulticast mode [ 484.508920][T17049] tipc: Resetting bearer [ 484.523389][T17048] tipc: Resetting bearer [ 484.528229][T17048] tipc: Disabling bearer [ 485.296767][T17062] tipc: Enabling of bearer rejected, already enabled [ 485.337680][T17064] loop6: detected capacity change from 0 to 524287999 [ 486.675823][ T53] usb 46-1: device descriptor read/8, error -110 [ 487.136514][ T53] usb usb46-port1: attempt power cycle [ 487.696197][ T53] usb usb46-port1: unable to enumerate USB device [ 488.888340][T17126] tipc: Enabling of bearer rejected, already enabled [ 490.022647][T17153] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3280'. [ 490.629278][T17167] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20001 [ 494.730126][T17237] geneve2: entered promiscuous mode [ 494.731830][T17237] geneve2: entered allmulticast mode [ 494.733989][T13292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.742281][T13292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.745301][T13311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.757012][T13311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.514086][T17262] netlink: 'syz.1.3314': attribute type 10 has an invalid length. [ 496.517487][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3314'. [ 496.547572][T17267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.551268][T17267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.555244][T17267] bond0 (unregistering): (slave ): Releasing backup interface [ 496.559370][T17267] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 496.562585][T17267] bond0 (unregistering): Released all slaves [ 497.597426][T17287] batman_adv: batadv0: Adding interface: gretap1 [ 497.600090][T17287] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 497.610683][T17287] batman_adv: batadv0: Interface activated: gretap1 [ 498.376274][T17308] netlink: 'syz.1.3320': attribute type 10 has an invalid length. [ 498.379452][T17308] syz_tun: entered promiscuous mode [ 500.927704][ T5332] Bluetooth: hci1: command 0x0405 tx timeout [ 500.998301][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.003103][T17316] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 501.027385][ T5986] Bluetooth: hci3: command 0x0c1a tx timeout [ 501.095577][T17355] tipc: Enabling of bearer rejected, failed to enable media [ 501.141590][T17358] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 501.186239][T17358] cramfs: wrong magic [ 501.536352][T17316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 503.085643][ T5986] Bluetooth: hci1: command 0x0405 tx timeout [ 503.128865][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 503.128880][ T40] audit: type=1326 audit(1755690607.231:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.4.3341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 507.615148][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 507.618121][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 507.692659][T17484] syz_tun: left promiscuous mode [ 507.768018][T17479] ceph: No mds server is up or the cluster is laggy [ 508.465669][T17494] netlink: 'syz.1.3369': attribute type 11 has an invalid length. [ 508.487463][T17496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3370'. [ 508.526310][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3370'. [ 508.541607][T17496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3370'. [ 508.732230][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3374'. [ 509.160972][ T40] audit: type=1804 audit(1755690613.271:438): pid=17511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3375" name="cgroup.controllers" dev="tmpfs" ino=2847 res=1 errno=0 [ 509.179662][ T40] audit: type=1800 audit(1755690613.271:439): pid=17511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3375" name="cgroup.controllers" dev="tmpfs" ino=2847 res=0 errno=0 [ 509.195225][ T40] audit: type=1800 audit(1755690613.291:440): pid=17511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3375" name="cgroup.controllers" dev="tmpfs" ino=2847 res=0 errno=0 [ 509.800633][ T5332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 509.803891][ T5332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 509.807462][ T5332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 509.811137][ T5332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 509.814623][ T5332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 509.830343][T17521] lo speed is unknown, defaulting to 1000 [ 509.907630][T17521] chnl_net:caif_netlink_parms(): no params data found [ 509.951510][T17521] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.954767][T17521] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.958240][T17521] bridge_slave_0: entered allmulticast mode [ 509.961592][T17521] bridge_slave_0: entered promiscuous mode [ 509.965745][T17521] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.968762][T17521] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.971869][T17521] bridge_slave_1: entered allmulticast mode [ 509.975200][T17521] bridge_slave_1: entered promiscuous mode [ 510.011650][T17521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.018846][T17521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.042311][T17521] team0: Port device team_slave_0 added [ 510.045193][T17521] team0: Port device team_slave_1 added [ 510.063442][T17521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.066827][T17521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.075015][T17521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.079445][T17521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.081954][T17521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.094304][T17521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.123291][T17521] hsr_slave_0: entered promiscuous mode [ 510.125274][T17521] hsr_slave_1: entered promiscuous mode [ 510.127257][T17521] debugfs: 'hsr0' already exists in 'hsr' [ 510.128903][T17521] Cannot create hsr debugfs directory [ 510.445891][T17521] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 510.449620][T17521] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 510.453549][T17521] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 510.456973][T17521] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 510.470711][T17521] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.473675][T17521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.476783][T17521] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.479776][T17521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.505887][T17521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.512022][T13281] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.514937][T13281] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.521573][T17521] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.528131][T13302] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.530708][T13302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.536396][T13297] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.538700][T13297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.633116][T17521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.735044][T17521] veth0_vlan: entered promiscuous mode [ 510.739834][T17521] veth1_vlan: entered promiscuous mode [ 510.750837][T17521] veth0_macvtap: entered promiscuous mode [ 510.754291][T17521] veth1_macvtap: entered promiscuous mode [ 510.762224][T17521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.767185][T17521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.772005][T13302] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.776040][T13302] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.783282][T13302] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.788004][T13302] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.804050][T13302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.807247][T13302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.815235][T13314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.818019][T13314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.846740][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3381'. [ 510.854049][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3391'. [ 510.866831][T17549] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.871560][T17549] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.875836][ T5986] Bluetooth: hci2: command tx timeout [ 513.955655][ T5986] Bluetooth: hci2: command tx timeout [ 515.137608][T17668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.045676][ T5986] Bluetooth: hci2: command tx timeout [ 516.783862][T17702] lo speed is unknown, defaulting to 1000 [ 517.040255][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3406'. [ 517.043381][T17706] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3406'. [ 517.064859][T13297] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.073235][T13297] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.076136][T13297] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.078782][T13297] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.125897][ T5986] Bluetooth: hci2: command tx timeout [ 518.233062][T17725] delete_channel: no stack [ 518.323421][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3414'. [ 518.376320][T17729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.330300][T17754] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3422'. [ 521.290072][T17810] bond3: (slave veth0_to_bond): Releasing active interface [ 521.302726][T17810] bond0: (slave geneve2): Releasing active interface [ 521.318323][T17810] bond1: (slave veth9): Releasing active interface [ 521.329463][T17810] bond2: (slave veth11): Releasing active interface [ 521.342134][T17810] bond3: (slave veth13): Releasing active interface [ 522.432127][ T40] audit: type=1800 audit(1755690626.541:441): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3443" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 522.511132][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'. [ 522.514053][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'. [ 522.550695][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3445'. [ 522.553839][T17841] batman_adv: batadv0: Interface deactivated: gretap1 [ 522.564573][T17841] batman_adv: batadv0: Removing interface: gretap1 [ 523.443778][T17883] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3453'. [ 523.704993][T13314] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.709052][T13314] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.752161][T13314] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.755723][T13314] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.843914][T13314] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.848077][T13314] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.861111][T17896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3459'. [ 523.869171][T17896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.872096][ T5332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 523.874792][ T5332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 523.877458][ T5332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 523.881742][ T5332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 523.884510][ T5332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 523.896282][T13314] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.899532][T13314] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.916639][T17898] lo speed is unknown, defaulting to 1000 [ 523.975925][T17898] chnl_net:caif_netlink_parms(): no params data found [ 524.003615][T17906] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 524.012000][T17906] kvm: pic: level sensitive irq not supported [ 524.012444][T17906] kvm: pic: non byte read [ 524.058230][T17898] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.060793][T17898] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.063342][T17898] bridge_slave_0: entered allmulticast mode [ 524.066502][T17898] bridge_slave_0: entered promiscuous mode [ 524.082320][T17898] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.084666][T17898] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.087155][T17898] bridge_slave_1: entered allmulticast mode [ 524.089615][T17898] bridge_slave_1: entered promiscuous mode [ 524.144530][T13314] bridge_slave_1: left allmulticast mode [ 524.157401][T13314] bridge_slave_1: left promiscuous mode [ 524.160136][T13314] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.163879][T13314] bridge_slave_0: left allmulticast mode [ 524.168636][T13314] bridge_slave_0: left promiscuous mode [ 524.170920][T13314] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.316276][T17917] block nbd4: not configured, cannot reconfigure [ 524.326899][T13314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.332613][T13314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.337575][T13314] bond0 (unregistering): Released all slaves [ 524.343461][T17898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.348276][T17915] sp0: Synchronizing with TNC [ 524.349203][T17898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.377487][T17898] team0: Port device team_slave_0 added [ 524.380802][T17898] team0: Port device team_slave_1 added [ 524.401117][T17898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.403341][T17898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.404872][T17915] sp0: Found TNC [ 524.412868][T17898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.417082][T17898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.419455][T17898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.428749][T17898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.463407][T17898] hsr_slave_0: entered promiscuous mode [ 524.465842][T17898] hsr_slave_1: entered promiscuous mode [ 524.468142][T17898] debugfs: 'hsr0' already exists in 'hsr' [ 524.470066][T17898] Cannot create hsr debugfs directory [ 524.528934][T17898] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.601963][T17898] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.667625][T13314] hsr_slave_0: left promiscuous mode [ 524.670025][T13314] hsr_slave_1: left promiscuous mode [ 524.672078][T13314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.674644][T13314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.684603][T13314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.688015][T13314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.697434][T13314] veth1_macvtap: left promiscuous mode [ 524.699738][T13314] veth0_macvtap: left promiscuous mode [ 524.701896][T13314] veth1_vlan: left promiscuous mode [ 524.704095][T13314] veth0_vlan: left promiscuous mode [ 524.800208][T13314] team0 (unregistering): Port device team_slave_1 removed [ 524.807213][T13314] team0 (unregistering): Port device team_slave_0 removed [ 524.857484][T17898] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.978722][T17898] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.061477][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3466'. [ 525.126644][T17898] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 525.132099][T17898] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 525.137234][T17898] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 525.140890][T17898] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 525.186394][T17898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.198919][T17898] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.205370][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.208608][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.217229][T13311] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.220423][T13311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.317755][T17898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.446975][T17898] veth0_vlan: entered promiscuous mode [ 525.451902][T17898] veth1_vlan: entered promiscuous mode [ 525.463207][T17898] veth0_macvtap: entered promiscuous mode [ 525.467453][T17898] veth1_macvtap: entered promiscuous mode [ 525.473944][T17898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.479589][T17898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.485164][T13314] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.487898][T13314] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.490653][T13314] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.493136][T13314] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.514898][T13314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.518530][T13314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.527392][T13311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.530459][T13311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.687979][T17950] usb usb4: usbfs: process 17950 (syz.7.3468) did not claim interface 0 before use [ 525.955965][ T5986] Bluetooth: hci2: command tx timeout [ 527.174004][T17976] netlink: 'syz.7.3476': attribute type 1 has an invalid length. [ 527.273582][T17977] veth3: entered promiscuous mode [ 527.532930][ T40] audit: type=1804 audit(1755690631.621:442): pid=17981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3477" name="/newroot/4/bus" dev="tmpfs" ino=38 res=1 errno=0 [ 528.035996][ T5986] Bluetooth: hci2: command tx timeout [ 528.111885][T17969] Set syz1 is full, maxelem 65536 reached [ 528.651259][T18006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3486'. [ 528.672400][T18006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.955326][T13281] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.064917][T13281] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.111292][ T5332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 530.114345][ T5332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 530.118816][ T5332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 530.121999][ T5332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 530.122108][T13281] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.128625][ T5332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.143202][T18049] lo speed is unknown, defaulting to 1000 [ 530.148338][ T5332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 530.151875][ T5332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 530.154728][ T5332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 530.157709][ T5332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 530.160633][ T5332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 530.172045][T18051] lo speed is unknown, defaulting to 1000 [ 530.187745][T13281] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.233471][T18049] chnl_net:caif_netlink_parms(): no params data found [ 530.273124][T18051] chnl_net:caif_netlink_parms(): no params data found [ 530.325577][T18049] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.328054][T18049] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.331133][T18049] bridge_slave_0: entered allmulticast mode [ 530.334567][T18049] bridge_slave_0: entered promiscuous mode [ 530.338663][T13281] bridge_slave_1: left allmulticast mode [ 530.341714][T13281] bridge_slave_1: left promiscuous mode [ 530.344302][T13281] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.351567][T13281] bridge_slave_0: left allmulticast mode [ 530.354365][T13281] bridge_slave_0: left promiscuous mode [ 530.357873][T13281] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.432002][T13281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.435680][T13281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.439366][T13281] bond0 (unregistering): Released all slaves [ 530.445259][T18049] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.448633][T18049] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.451769][T18049] bridge_slave_1: entered allmulticast mode [ 530.455157][T18049] bridge_slave_1: entered promiscuous mode [ 530.494135][T18051] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.496859][T18051] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.500060][T18051] bridge_slave_0: entered allmulticast mode [ 530.502559][T18051] bridge_slave_0: entered promiscuous mode [ 530.506610][T18049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.510907][T18049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.514213][T18051] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.517053][T18051] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.519483][T18051] bridge_slave_1: entered allmulticast mode [ 530.522509][T18051] bridge_slave_1: entered promiscuous mode [ 530.561709][T18049] team0: Port device team_slave_0 added [ 530.566663][T18051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.573321][T18049] team0: Port device team_slave_1 added [ 530.577645][T18051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.611875][T18049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.614488][T18049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.623524][T18049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.638282][T18049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.640851][T18049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.649242][T18049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.653595][T18051] team0: Port device team_slave_0 added [ 530.658047][T18051] team0: Port device team_slave_1 added [ 530.721694][T18051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.723889][T18051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.733024][T18051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.747180][T18051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.750054][T18051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.760849][T18051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.767108][T18049] hsr_slave_0: entered promiscuous mode [ 530.769283][T18049] hsr_slave_1: entered promiscuous mode [ 530.771277][T18049] debugfs: 'hsr0' already exists in 'hsr' [ 530.775627][T18049] Cannot create hsr debugfs directory [ 530.832245][T18051] hsr_slave_0: entered promiscuous mode [ 530.834476][T18051] hsr_slave_1: entered promiscuous mode [ 530.838314][T18051] debugfs: 'hsr0' already exists in 'hsr' [ 530.840223][T18051] Cannot create hsr debugfs directory [ 530.895940][T13281] hsr_slave_0: left promiscuous mode [ 530.901169][T13281] hsr_slave_1: left promiscuous mode [ 530.904060][T13281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.910739][T13281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.942580][T13281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.945748][T13281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.953375][T13281] veth1_macvtap: left promiscuous mode [ 530.955892][T13281] veth0_macvtap: left promiscuous mode [ 530.958399][T13281] veth1_vlan: left promiscuous mode [ 530.960794][T13281] veth0_vlan: left promiscuous mode [ 531.069913][T13281] team0 (unregistering): Port device team_slave_1 removed [ 531.077601][T13281] team0 (unregistering): Port device team_slave_0 removed [ 531.642704][T18049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.653475][T18049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.658232][T18049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.666941][T18049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.715372][T18049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.723224][T18049] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.737600][T13314] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.739903][T13314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.744716][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.747465][T13292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.822203][T18049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.838165][T18049] veth0_vlan: entered promiscuous mode [ 531.842091][T18049] veth1_vlan: entered promiscuous mode [ 531.853003][T18049] veth0_macvtap: entered promiscuous mode [ 531.856382][T18049] veth1_macvtap: entered promiscuous mode [ 531.862704][T18049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.871905][T18049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.883077][T13311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.887270][T13311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.890329][T13311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.894986][T13311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.931730][T13292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.934877][T13292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.944833][T13311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.948329][T13311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.966428][T18101] netlink: 'syz.0.3512': attribute type 1 has an invalid length. [ 531.973442][T18101] bond7: entered promiscuous mode [ 531.975196][T18101] 8021q: adding VLAN 0 to HW filter on device bond7 [ 531.989378][T18101] 8021q: adding VLAN 0 to HW filter on device bond7 [ 531.991673][T18101] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 531.994863][T18101] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 531.999443][T18101] bond7: (slave ip6gre1): making interface the new active one [ 532.002435][T18101] ip6gre1: entered promiscuous mode [ 532.005134][T18101] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 532.051985][T18051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 532.055631][T18051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 532.059271][T18051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 532.062704][T18051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 532.092073][T18051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.100140][T18051] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.110178][T13311] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.113268][T13311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.118106][T13311] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.120931][T13311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.196351][ T5332] Bluetooth: hci2: command tx timeout [ 532.198719][ T5332] Bluetooth: hci1: command tx timeout [ 532.414911][T13281] bridge_slave_1: left allmulticast mode [ 532.417146][T13281] bridge_slave_1: left promiscuous mode [ 532.419059][T13281] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.422120][T13281] bridge_slave_0: left allmulticast mode [ 532.424024][T13281] bridge_slave_0: left promiscuous mode [ 532.426429][T13281] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.561455][T13281] bond1 (unregistering): Released all slaves [ 532.566228][T13281] bond0 (unregistering): Released all slaves [ 532.583988][T13281] bond2 (unregistering): (slave veth5): Releasing active interface [ 532.588615][T13281] bond2 (unregistering): Released all slaves [ 532.593256][T13281] bond3 (unregistering): (slave veth7): Releasing active interface [ 532.599714][T13281] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 532.605424][T13281] bond3 (unregistering): Released all slaves [ 532.641704][T18051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.651856][T13281] tipc: Left network mode [ 532.657536][T18051] veth0_vlan: entered promiscuous mode [ 532.661789][T18051] veth1_vlan: entered promiscuous mode [ 532.674288][T18051] veth0_macvtap: entered promiscuous mode [ 532.678382][T18051] veth1_macvtap: entered promiscuous mode [ 532.684761][T18051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.691051][T18051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.699735][T13297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.702611][T13297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.707333][T13297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.710155][T13297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.732275][T13311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.735813][T13311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.747791][T13311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.750961][T13311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.971116][T13281] hsr_slave_0: left promiscuous mode [ 532.973191][T13281] hsr_slave_1: left promiscuous mode [ 532.975114][T13281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.026377][T13281] team0 (unregistering): Port device team_slave_1 removed [ 533.037334][T13281] team0 (unregistering): Port device team_slave_0 removed [ 533.752414][T18147] Bluetooth: MGMT ver 1.23 [ 534.285639][T18116] Bluetooth: hci1: command tx timeout [ 534.396808][T18159] netlink: 'syz.1.3524': attribute type 1 has an invalid length. [ 534.405344][T18159] bond4: entered promiscuous mode [ 534.407630][T18159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.426456][T18159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.429411][T18159] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 534.432836][T18159] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 534.437041][T18159] bond4: (slave ip6gre2): making interface the new active one [ 534.439379][T18159] ip6gre2: entered promiscuous mode [ 534.441572][T18159] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 535.706760][T13302] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.856237][ T5986] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 535.858852][ T5986] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 535.861422][ T5986] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 535.864242][ T5986] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 535.866911][ T5986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 535.905701][T18186] lo speed is unknown, defaulting to 1000 [ 535.965135][T18186] chnl_net:caif_netlink_parms(): no params data found [ 536.212399][T18186] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.214859][T18186] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.217393][T18186] bridge_slave_0: entered allmulticast mode [ 536.220138][T18186] bridge_slave_0: entered promiscuous mode [ 536.223404][T18186] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.225938][T18186] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.229457][T18186] bridge_slave_1: entered allmulticast mode [ 536.232732][T18186] bridge_slave_1: entered promiscuous mode [ 536.251474][T18186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.255963][T18186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.277646][T18186] team0: Port device team_slave_0 added [ 536.281599][T18186] team0: Port device team_slave_1 added [ 536.307326][T18186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.309820][T18186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.318414][T18186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.325932][T18186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.328869][T18186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.339523][T18186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.355762][T18116] Bluetooth: hci1: command tx timeout [ 536.364898][T18186] hsr_slave_0: entered promiscuous mode [ 536.368068][T18186] hsr_slave_1: entered promiscuous mode [ 536.370064][T18186] debugfs: 'hsr0' already exists in 'hsr' [ 536.371899][T18186] Cannot create hsr debugfs directory [ 536.420993][T18186] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.491528][T18186] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.548815][T18186] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.597977][T18186] netdevsim netdevsim9  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.617663][T13302] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.712328][T18186] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 536.716383][T18186] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 536.736600][T18186] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 536.742659][T13302] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.755138][T18186] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 536.797885][T18186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.801976][T13302] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.812805][T18186] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.817866][T13311] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.820666][T13311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.829180][T13311] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.832125][T13311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.949492][T13302] bridge_slave_1: left allmulticast mode [ 536.951344][T13302] bridge_slave_1: left promiscuous mode [ 536.953282][T13302] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.996517][T13302] bridge_slave_0: left allmulticast mode [ 536.998352][T13302] bridge_slave_0: left promiscuous mode [ 537.000238][T13302] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.080968][T13302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.086806][T13302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.096781][T13302] bond0 (unregistering): Released all slaves [ 537.107928][T18186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.254562][T18186] veth0_vlan: entered promiscuous mode [ 537.261686][T18186] veth1_vlan: entered promiscuous mode [ 537.277787][T18186] veth0_macvtap: entered promiscuous mode [ 537.283689][T18186] veth1_macvtap: entered promiscuous mode [ 537.293802][T18186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.300306][T18186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.305102][T13281] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.308862][T13281] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.317518][T13281] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.323818][T13281] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.352883][T13314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.355479][T13314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.368048][T13314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.370575][T13314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.392388][T13302] hsr_slave_0: left promiscuous mode [ 537.396822][T13302] hsr_slave_1: left promiscuous mode [ 537.399120][T13302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.402186][T13302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.406433][T13302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.409632][T13302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.417419][T13302] veth1_macvtap: left promiscuous mode [ 537.419255][T13302] veth0_macvtap: left promiscuous mode [ 537.421217][T13302] veth1_vlan: left promiscuous mode [ 537.423098][T13302] veth0_vlan: left promiscuous mode [ 537.612996][T13302] team0 (unregistering): Port device team_slave_1 removed [ 537.639192][T13302] team0 (unregistering): Port device team_slave_0 removed [ 537.965706][T18116] Bluetooth: hci2: command tx timeout [ 538.088440][T18248] netlink: 'syz.1.3542': attribute type 10 has an invalid length. [ 538.090942][T18248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3542'. [ 538.095151][T18248] team0: Port device geneve0 added [ 538.097816][T13302] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.100409][T13302] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.103145][T13302] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.105772][T13302] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.435848][T18116] Bluetooth: hci1: command tx timeout [ 538.703329][T18267] netlink: 'syz.2.3547': attribute type 1 has an invalid length. [ 540.035642][T18116] Bluetooth: hci2: command tx timeout [ 540.540273][T18320] netlink: 'syz.0.3560': attribute type 10 has an invalid length. [ 540.543469][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3560'. [ 542.115869][T18116] Bluetooth: hci2: command tx timeout [ 543.574160][ T1140] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.630910][ T1140] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.690045][ T1140] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.765820][ T5986] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.768378][ T5986] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.771086][ T5986] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.774616][ T5986] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.775468][ T1140] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.778274][ T5986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.808550][T18377] lo speed is unknown, defaulting to 1000 [ 543.876658][ T1140] bridge_slave_1: left allmulticast mode [ 543.879200][ T1140] bridge_slave_1: left promiscuous mode [ 543.881839][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.886929][ T1140] bridge_slave_0: left allmulticast mode [ 543.889304][ T1140] bridge_slave_0: left promiscuous mode [ 543.891742][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.989945][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.994154][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.997890][ T1140] bond0 (unregistering): Released all slaves [ 544.021859][T18383] batman_adv: batadv0: Adding interface: gretap1 [ 544.024525][T18383] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.032820][T18383] batman_adv: batadv0: Interface activated: gretap1 [ 544.037830][T18377] chnl_net:caif_netlink_parms(): no params data found [ 544.080826][T18377] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.083252][T18377] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.085671][T18377] bridge_slave_0: entered allmulticast mode [ 544.088347][T18377] bridge_slave_0: entered promiscuous mode [ 544.096923][T18377] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.099358][T18377] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.101857][T18377] bridge_slave_1: entered allmulticast mode [ 544.104337][T18377] bridge_slave_1: entered promiscuous mode [ 544.123441][T18377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.129136][T18377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.146954][T18377] team0: Port device team_slave_0 added [ 544.149729][T18377] team0: Port device team_slave_1 added [ 544.170590][T18377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.173301][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.182512][T18377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.192467][T18377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.194677][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.202691][T18377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.225716][T18377] hsr_slave_0: entered promiscuous mode [ 544.228053][T18377] hsr_slave_1: entered promiscuous mode [ 544.230075][T18377] debugfs: 'hsr0' already exists in 'hsr' [ 544.231974][T18377] Cannot create hsr debugfs directory [ 544.245700][ T1140] hsr_slave_0: left promiscuous mode [ 544.247894][ T1140] hsr_slave_1: left promiscuous mode [ 544.249859][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.252274][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.254806][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.257499][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.262530][ T1140] veth1_macvtap: left promiscuous mode [ 544.264349][ T1140] veth0_macvtap: left promiscuous mode [ 544.266334][ T1140] veth1_vlan: left promiscuous mode [ 544.268012][ T1140] veth0_vlan: left promiscuous mode [ 544.335010][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 544.341848][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 544.823185][T18377] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 544.827316][T18377] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 544.831584][T18377] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 544.836614][T18377] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 544.869390][T18377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.876844][T18377] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.882104][T13302] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.884943][T13302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.893177][T13311] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.896154][T13311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.978120][T18377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.081983][T18377] veth0_vlan: entered promiscuous mode [ 545.089109][T18377] veth1_vlan: entered promiscuous mode [ 545.105325][T18377] veth0_macvtap: entered promiscuous mode [ 545.110782][T18377] veth1_macvtap: entered promiscuous mode [ 545.118856][T18377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.127208][T18377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.134124][ T1140] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.137526][ T1140] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.141272][ T1140] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.144749][ T1140] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.174205][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.177474][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.188602][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.191469][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.556073][T18425] tipc: Started in network mode [ 545.558351][T18425] tipc: Node identity 4, cluster identity 4711 [ 545.560341][T18425] tipc: Node number set to 4 [ 545.796246][ T5986] Bluetooth: hci2: command tx timeout [ 546.216882][T18440] netlink: 'syz.6.3580': attribute type 1 has an invalid length. [ 546.964905][T18444] syz_tun: left allmulticast mode [ 546.967781][T18444] macvlan0: entered promiscuous mode [ 546.969539][T18444] netlink: 'syz.1.3585': attribute type 1 has an invalid length. [ 546.972110][T18444] netlink: 'syz.1.3585': attribute type 2 has an invalid length. [ 547.414430][ T40] audit: type=1326 audit(1755690651.521:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18458 comm="syz.0.3594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 547.875674][ T5986] Bluetooth: hci2: command tx timeout [ 547.967533][ T40] audit: type=1326 audit(1755690652.081:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18458 comm="syz.0.3594" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e579 code=0x7fc00000 [ 548.060634][ T40] audit: type=1326 audit(1755690652.171:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18456 comm="syz.2.3593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7fc00000 [ 548.086302][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3598'. [ 548.247426][T18502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3600'. [ 549.965741][ T5986] Bluetooth: hci2: command tx timeout [ 549.978810][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 549.986001][T18538] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 550.400585][T18552] afs: Unknown parameter '' [ 550.527323][T18556] trusted_key: encrypted_key: insufficient parameters specified [ 552.035612][T18116] Bluetooth: hci4: command 0x1003 tx timeout [ 552.038876][ T5986] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 552.045972][ T5986] Bluetooth: hci2: command tx timeout [ 552.209572][T18583] tipc: Enabled bearer , priority 0 [ 552.213408][T18583] syzkaller0: entered promiscuous mode [ 552.215336][T18583] syzkaller0: entered allmulticast mode [ 552.223101][T18583] tipc: Resetting bearer [ 552.225121][T18583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.231710][T18582] tipc: Resetting bearer [ 552.235326][T18582] tipc: Disabling bearer [ 552.381120][T18588] netlink: 'syz.2.3628': attribute type 10 has an invalid length. [ 552.394722][T18588] syz_tun: entered promiscuous mode [ 552.449903][T18588] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 552.761640][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3637'. [ 553.193227][T18612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3633'. [ 553.198515][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3633'. [ 553.235457][T18612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3633'. [ 553.416247][ T5842] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 553.535613][ T40] audit: type=1326 audit(1755690657.641:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.1.3629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 562.437783][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.182734][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3645'. [ 566.825596][ T5981] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 566.987043][ T5981] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.990860][ T5981] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 566.994750][ T5981] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 566.998690][ T5981] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 567.004877][ T5981] usb 11-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 567.008912][ T5981] usb 11-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 567.012947][ T5981] usb 11-1: Manufacturer: syz [ 567.015947][ T5981] usb 11-1: config 0 descriptor?? [ 567.265615][ T5981] rc_core: IR keymap rc-hauppauge not found [ 567.267650][ T5981] Registered IR keymap rc-empty [ 567.269228][ T5981] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 567.285672][ T5981] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 567.305906][ T5981] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 567.312650][ T5981] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input17 [ 567.319664][ T5981] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 567.337093][ T5981] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 567.355694][ T5981] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 567.375679][ T5981] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 567.395657][ T5981] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 567.415654][ T5981] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 567.435644][ T5981] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 567.456778][ T5981] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 567.475788][ T5981] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 567.495665][ T5981] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 567.516453][ T5981] mceusb 11-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 567.521862][ T5981] mceusb 11-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 567.526725][ T5981] usb 11-1: USB disconnect, device number 5 [ 567.964514][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3664'. [ 568.903427][T18959] tipc: Enabling of bearer rejected, failed to enable media [ 568.909908][T18959] tipc: Enabling of bearer rejected, failed to enable media [ 568.968331][T18962] lo speed is unknown, defaulting to 1000 [ 572.381984][T19012] Set syz1 is full, maxelem 65536 reached [ 572.864567][T19096] bond5: (slave veth0_to_bond): Releasing active interface [ 572.872054][T19096] bond4: (slave veth9): Releasing active interface [ 572.877333][T19096] bond5: (slave veth11): Releasing active interface [ 572.882695][T19096] bond6: (slave wlan0): Releasing active interface [ 572.896177][T19096] bond7: (slave ip6gre1): Releasing backup interface [ 572.899256][T19096] ip6gre1: left promiscuous mode [ 573.513416][ T40] audit: type=1804 audit(1755690677.621:447): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3694" name="bus" dev="tmpfs" ino=3090 res=1 errno=0 [ 573.999595][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3696'. [ 574.725677][T19132] bond0: entered promiscuous mode [ 574.728278][T19132] bond0: entered allmulticast mode [ 574.731159][T19132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.183088][ T40] audit: type=1800 audit(1755690679.291:448): pid=19146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3699" name="nullb0" dev="tmpfs" ino=2711 res=0 errno=0 [ 575.302135][T19161] bridge_slave_0: left allmulticast mode [ 575.304159][T19161] bridge_slave_0: left promiscuous mode [ 575.327369][T19161] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.339716][T19161] bridge_slave_1: left allmulticast mode [ 575.351696][T19161] bridge_slave_1: left promiscuous mode [ 575.354023][T19161] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.365272][T19161] bond0: (slave bond_slave_0): Releasing backup interface [ 575.380160][T19161] bond0: (slave bond_slave_1): Releasing backup interface [ 575.407722][T19161] team0: Port device team_slave_0 removed [ 575.418657][T19161] team0: Port device team_slave_1 removed [ 575.424959][T19161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.432091][T19161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.438327][T19161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.445025][T19161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.657699][T19164] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.660149][T19164] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.686805][T19165] comedi comedi0: c6xdigio: I/O port conflict (0x4f2b,3) [ 575.689593][T19165] ------------[ cut here ]------------ [ 575.691885][T19165] kernfs: can not remove 'bind', no directory [ 575.694249][T19165] WARNING: CPU: 0 PID: 19165 at fs/kernfs/dir.c:1706 kernfs_remove_by_name_ns+0xff/0x110 [ 575.697843][T19165] Modules linked in: [ 575.699607][T19165] CPU: 0 UID: 0 PID: 19165 Comm: syz.2.3704 Not tainted syzkaller #0 PREEMPT(full) [ 575.704855][T19165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 575.706154][T19164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 575.708910][T19165] RIP: 0010:kernfs_remove_by_name_ns+0xff/0x110 [ 575.713902][T19165] Code: 48 89 df 31 db e8 61 a2 ff ff 48 89 ef e8 59 0c 37 ff eb b1 e8 42 7d 5b ff 90 48 c7 c7 80 56 c3 8b 4c 89 e6 e8 82 70 1a ff 90 <0f> 0b 90 90 eb b4 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 575.713908][T19164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.724695][T19165] RSP: 0018:ffffc9000764f700 EFLAGS: 00010282 [ 575.727640][T19165] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000c402000 [ 575.731038][T19165] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 575.734244][T19165] RBP: ffffffff8f503ba0 R08: 0000000000000001 R09: 0000000000000000 [ 575.737581][T19165] R10: 0000000000000000 R11: 203a73666e72656b R12: ffffffff8c426de0 [ 575.741227][T19165] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88804a5a4000 [ 575.744142][T19165] FS: 0000000000000000(0000) GS:ffff8880974c4000(0063) knlGS:00000000f546db40 [ 575.748128][T19165] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 575.750214][T19165] CR2: 00000000f73573fc CR3: 0000000000abc000 CR4: 0000000000352ef0 [ 575.752809][T19165] Call Trace: [ 575.753876][T19165] [ 575.754867][T19165] driver_remove_file+0x4a/0x60 [ 575.756586][T19165] bus_remove_driver+0x224/0x2c0 [ 575.758358][T19165] driver_unregister+0x76/0xb0 [ 575.759763][T19165] comedi_device_detach_locked+0x12c/0xa50 [ 575.761985][T19165] comedi_device_detach+0x67/0xb0 [ 575.764074][T19165] comedi_device_attach+0x43d/0x900 [ 575.766351][T19165] do_devconfig_ioctl+0x1b1/0x710 [ 575.768428][T19165] ? __mutex_lock+0x1c5/0x1060 [ 575.770410][T19165] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 575.772543][T19165] ? kasan_save_stack+0x42/0x60 [ 575.774573][T19165] ? kasan_save_stack+0x33/0x60 [ 575.776764][T19165] ? kasan_save_track+0x14/0x30 [ 575.778565][T19165] ? kasan_save_free_info+0x3b/0x60 [ 575.780760][T19165] ? __kasan_slab_free+0x60/0x70 [ 575.782879][T19165] ? kfree+0x2b4/0x4d0 [ 575.784736][T19165] ? tomoyo_path_number_perm+0x470/0x580 [ 575.787354][T19165] comedi_unlocked_ioctl+0x165d/0x2f00 [ 575.789787][T19165] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 575.792193][T19165] ? rcu_is_watching+0x12/0xc0 [ 575.793746][T19165] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 575.796025][T19165] ? tomoyo_path_number_perm+0x295/0x580 [ 575.797879][T19165] ? rcu_is_watching+0x12/0xc0 [ 575.799411][T19165] ? lock_release+0x201/0x2f0 [ 575.800956][T19165] ? tomoyo_path_number_perm+0x18d/0x580 [ 575.802740][T19165] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 575.804671][T19165] comedi_compat_ioctl+0x1d0/0x990 [ 575.806463][T19165] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 575.808210][T19165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 575.810075][T19165] ? do_vfs_ioctl+0x128/0x14f0 [ 575.812031][T19165] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 575.814158][T19165] ? rcu_is_watching+0x12/0xc0 [ 575.816161][T19165] ? __fget_files+0x204/0x3c0 [ 575.817719][T19165] ? hook_file_ioctl_common+0x145/0x410 [ 575.819482][T19165] ? __fget_files+0x20e/0x3c0 [ 575.821199][T19165] ? __ia32_compat_sys_openat+0xf0/0x210 [ 575.823793][T19165] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 575.826326][T19165] __ia32_compat_sys_ioctl+0x23f/0x370 [ 575.828972][T19165] __do_fast_syscall_32+0x7c/0x3a0 [ 575.831337][T19165] do_fast_syscall_32+0x32/0x80 [ 575.833446][T19165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 575.836187][T19165] RIP: 0023:0xf709e579 [ 575.837897][T19165] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 575.845872][T19165] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 575.849308][T19165] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040946400 [ 575.852641][T19165] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.855983][T19165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.859210][T19165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.862578][T19165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.865438][T19165] [ 575.866518][T19165] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 575.868948][T19165] CPU: 0 UID: 0 PID: 19165 Comm: syz.2.3704 Not tainted syzkaller #0 PREEMPT(full) [ 575.872169][T19165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 575.876472][T19165] Call Trace: [ 575.877651][T19165] [ 575.878889][T19165] dump_stack_lvl+0x3d/0x1f0 [ 575.880878][T19165] vpanic+0x6e8/0x7a0 [ 575.882908][T19165] ? __pfx_vpanic+0x10/0x10 [ 575.885287][T19165] ? kernfs_remove_by_name_ns+0xff/0x110 [ 575.888214][T19165] panic+0xca/0xd0 [ 575.889854][T19165] ? __pfx_panic+0x10/0x10 [ 575.891840][T19165] check_panic_on_warn+0xab/0xb0 [ 575.893928][T19165] __warn+0xf6/0x3c0 [ 575.895602][T19165] ? __pfx_vprintk_emit+0x10/0x10 [ 575.897585][T19165] ? kernfs_remove_by_name_ns+0xff/0x110 [ 575.899522][T19165] report_bug+0x3c3/0x580 [ 575.901231][T19165] ? kernfs_remove_by_name_ns+0xff/0x110 [ 575.903677][T19165] handle_bug+0x184/0x210 [ 575.905520][T19165] exc_invalid_op+0x17/0x50 [ 575.907456][T19165] asm_exc_invalid_op+0x1a/0x20 [ 575.909516][T19165] RIP: 0010:kernfs_remove_by_name_ns+0xff/0x110 [ 575.912238][T19165] Code: 48 89 df 31 db e8 61 a2 ff ff 48 89 ef e8 59 0c 37 ff eb b1 e8 42 7d 5b ff 90 48 c7 c7 80 56 c3 8b 4c 89 e6 e8 82 70 1a ff 90 <0f> 0b 90 90 eb b4 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 575.919556][T19165] RSP: 0018:ffffc9000764f700 EFLAGS: 00010282 [ 575.921899][T19165] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000c402000 [ 575.925444][T19165] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 575.928681][T19165] RBP: ffffffff8f503ba0 R08: 0000000000000001 R09: 0000000000000000 [ 575.932002][T19165] R10: 0000000000000000 R11: 203a73666e72656b R12: ffffffff8c426de0 [ 575.934899][T19165] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88804a5a4000 [ 575.937417][T19165] ? __warn_printk+0x1a5/0x350 [ 575.939029][T19165] driver_remove_file+0x4a/0x60 [ 575.940927][T19165] bus_remove_driver+0x224/0x2c0 [ 575.943030][T19165] driver_unregister+0x76/0xb0 [ 575.945078][T19165] comedi_device_detach_locked+0x12c/0xa50 [ 575.947531][T19165] comedi_device_detach+0x67/0xb0 [ 575.949600][T19165] comedi_device_attach+0x43d/0x900 [ 575.951789][T19165] do_devconfig_ioctl+0x1b1/0x710 [ 575.953901][T19165] ? __mutex_lock+0x1c5/0x1060 [ 575.956000][T19165] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 575.958483][T19165] ? kasan_save_stack+0x42/0x60 [ 575.960566][T19165] ? kasan_save_stack+0x33/0x60 [ 575.962695][T19165] ? kasan_save_track+0x14/0x30 [ 575.964767][T19165] ? kasan_save_free_info+0x3b/0x60 [ 575.967067][T19165] ? __kasan_slab_free+0x60/0x70 [ 575.969146][T19165] ? kfree+0x2b4/0x4d0 [ 575.970820][T19165] ? tomoyo_path_number_perm+0x470/0x580 [ 575.972750][T19165] comedi_unlocked_ioctl+0x165d/0x2f00 [ 575.974477][T19165] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 575.976342][T19165] ? rcu_is_watching+0x12/0xc0 [ 575.977871][T19165] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 575.979821][T19165] ? tomoyo_path_number_perm+0x295/0x580 [ 575.982045][T19165] ? rcu_is_watching+0x12/0xc0 [ 575.984079][T19165] ? lock_release+0x201/0x2f0 [ 575.986079][T19165] ? tomoyo_path_number_perm+0x18d/0x580 [ 575.988501][T19165] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 575.990960][T19165] comedi_compat_ioctl+0x1d0/0x990 [ 575.993258][T19165] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 575.995614][T19165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 575.998055][T19165] ? do_vfs_ioctl+0x128/0x14f0 [ 575.999987][T19165] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 576.002191][T19165] ? rcu_is_watching+0x12/0xc0 [ 576.004404][T19165] ? __fget_files+0x204/0x3c0 [ 576.006396][T19165] ? hook_file_ioctl_common+0x145/0x410 [ 576.008705][T19165] ? __fget_files+0x20e/0x3c0 [ 576.010665][T19165] ? __ia32_compat_sys_openat+0xf0/0x210 [ 576.012783][T19165] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 576.015108][T19165] __ia32_compat_sys_ioctl+0x23f/0x370 [ 576.017225][T19165] __do_fast_syscall_32+0x7c/0x3a0 [ 576.018844][T19165] do_fast_syscall_32+0x32/0x80 [ 576.020644][T19165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 576.022659][T19165] RIP: 0023:0xf709e579 [ 576.023967][T19165] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 576.029975][T19165] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 576.033335][T19165] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040946400 [ 576.036427][T19165] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.039590][T19165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.042159][T19165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.045225][T19165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.048052][T19165] [ 576.049707][T19165] Kernel Offset: disabled [ 576.051387][T19165] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:47:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616b45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc9000764f070 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552030203a555043 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b0f8640 R15=ffffffff85616ae0 RIP=ffffffff85616b6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73573fc CR3=0000000000abc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffffff8c59dfe0 RCX=ffffc90004269000 RDX=1ffffffff18b3c00 RSI=ffffffff8b729cad RDI=ffffffff8c59e000 RBP=00000000868fb900 RSP=ffffc9000774eb28 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=1ffff92000ee9d6b R13=ffff88805b7c8000 R14=ffffc9000774eb78 R15=0000000000000000 RIP=ffffffff8b729ce5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c8e4dfe CR3=0000000000abc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff88802aac5ce8 RBX=ffffc90002ce7320 RCX=0000000000000007 RDX=0000000000000008 RSI=ffff88802aac5cc1 RDI=ffff88802aac5ce9 RBP=ffff88802aac5ce8 RSP=ffffc90002ce7110 R8 =0000000000000001 R9 =ffffed1005558b9d R10=ffff88802aac5cef R11=0000000000000012 R12=0000000000000008 R13=0000000000000008 R14=0000000000000cc0 R15=0000000000000ce8 RIP=ffffffff8b909bcc RFL=00010202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f728ef5e300 ffffffff 00c00000 GS =0000 ffff8880976c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000560c7d1e4000 CR3=000000004b2da000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000e82 0000001800000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e01ffffffffff ffffffdb08000324 0000046c00000011 0000000d00000002 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff020580021c0800 00080008014edc02 9008000588031008 0005800301900800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffffff020008 00060102a8000800 1c8008000fffffff ff020580020fffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff020a016fe000 616d692e79746972 7563657301ffffff ffffffffffe50805 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800307fe08000002 01c70800060140f6 00307a79732f7465 6e2e70756f726763 ZMM24=8be4660f8be4660f 8be4660f8be4660f 8be4660f8be4660f 8be4660f8be4660f 8be4660f8be4660f 8be4660f8be4660f 8be4660f8be4660f 8be4660f8be4660f ZMM25=37a5ca7937a5ca79 37a5ca7937a5ca79 37a5ca7937a5ca79 37a5ca7937a5ca79 37a5ca7937a5ca79 37a5ca7937a5ca79 37a5ca7937a5ca79 37a5ca7937a5ca79 ZMM26=38fe81a338fe81a3 38fe81a338fe81a3 38fe81a338fe81a3 38fe81a338fe81a3 38fe81a338fe81a3 38fe81a338fe81a3 38fe81a338fe81a3 38fe81a338fe81a3 ZMM27=18bb51f018bb51f0 18bb51f018bb51f0 18bb51f018bb51f0 18bb51f018bb51f0 18bb51f018bb51f0 18bb51f018bb51f0 18bb51f018bb51f0 18bb51f018bb51f0 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ed370000ed370000 ed370000ed370000 ed370000ed370000 ed370000ed370000 ed370000ed370000 ed370000ed370000 ed370000ed370000 ed370000ed370000 info registers vcpu 3 CPU#3 RAX=00000000007543ac RBX=0000000000000003 RCX=ffffffff8b908bf9 RDX=ffffed10056a6656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003864000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801c320000 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080006680 CR3=000000004f720000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000