last executing test programs: 2m21.885730568s ago: executing program 3 (id=751): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x11000000, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000480)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 2m21.824286978s ago: executing program 3 (id=758): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x2b) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m20.815544333s ago: executing program 3 (id=762): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1482, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) 2m19.619963127s ago: executing program 3 (id=766): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 2m19.618485208s ago: executing program 3 (id=769): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x400c090) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x9, &(0x7f0000000000)) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2m19.311347009s ago: executing program 3 (id=770): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x2b) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m19.310024567s ago: executing program 32 (id=770): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x2b) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m16.998987382s ago: executing program 0 (id=913): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400), 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc018620b, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0x0, 0x2000000, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000600)="7794168045f878713ad29bc6e8849c58f8f9405689bd2b27a86e284b582d925bdc05628bde899f8cb5b3164068098d71159553467e0e2b4b76a1de8f3d1e2bb211e9b826774f774ea5cc036ccc369df262cfda909769d89ddd595bb11ecf5243c24641d3582b1cde70476376fe11906596dfbf3af5c4d38ccd2f70f1143f6fecaa3f24a127cd531f0b859dde9d42809bd76028dd14028e16b160a3e07e6b87f6a52d3054a676a20afd110f493cb2ef2b36b8c4f2e1ec62e1ad0ab3329e08479d6ff5b0b7ebf3af5787704cd132e5754e810bbc367af65936519e8a6dad"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1a1081, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r5}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0xfffffffffffff005}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8001, 0x2) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x1}]) 1m16.777983821s ago: executing program 0 (id=915): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) openat$audio1(0xffffff9c, 0x0, 0x2041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="e9ff79f4881a10fcc1150c9438ac5520ba21b1edf405357279e0a848d1dd155aa517f0b82197f217c9329f38f81ea4f0fee72f935ae2fa1a07d954a0c6f82a91d4f65aff437bb816b7966f5e796198e63392f6514f28e2d69cc1265b759dd06863eeb3aefa90b2bcda4d7d994f121933037cbf1e6dd2fe06059791741c801ca765909c1a7074b4952f8d15352ccabb3d7857275ea4592c43fc5927690def63a9a9e82e8c6f11e1a6fa2f8b3123ea1ac78e446ad51b6b5becacf61e18d781dc7309267d049b9b43f30dada0c026935642c62dd987bebfaa8fe172c45cfbe7cfa8b37cef59b4711c6a376bc610c205e20f0178de"], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r5, 0x804c4700, 0x20000000) ioctl$TCFLSH(r4, 0x404c4701, 0x20000000) 1m15.523005343s ago: executing program 0 (id=920): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, 0x0, 0x44084) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa, 0x0, 0x0, 0x4}}, 0x26) r5 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5) 1m14.388939819s ago: executing program 0 (id=924): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 1m14.288924425s ago: executing program 0 (id=926): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200ff0050a245d5cde0080045000028000000000002907800000000ffffffff11009078e00000020000000000000000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="018079cc000050a245d5cdde080045000028000000000002907800"], 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) request_key(0x0, &(0x7f0000000540)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x2, "fdffffffffffffff"}) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) 1m14.288706736s ago: executing program 0 (id=927): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_io_uring_setup(0x2955, &(0x7f0000000400)={0x0, 0xfffffffe, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000864000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x118, &(0x7f00000000c0)=0x3ff, 0x0, 0x4) write$binfmt_script(r7, 0x0, 0x0) close_range(r6, r7, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000000)={0x2, 0xeeee0000, 0x9, 0xe26622ba09e29e9e, 0x400}) 1m14.195712329s ago: executing program 33 (id=927): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_io_uring_setup(0x2955, &(0x7f0000000400)={0x0, 0xfffffffe, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000864000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x118, &(0x7f00000000c0)=0x3ff, 0x0, 0x4) write$binfmt_script(r7, 0x0, 0x0) close_range(r6, r7, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000000)={0x2, 0xeeee0000, 0x9, 0xe26622ba09e29e9e, 0x400}) 52.905512099s ago: executing program 2 (id=1004): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x8000000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @acquire], 0x0, 0x0, 0x0}) iopl(0x5) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 51.127982915s ago: executing program 2 (id=1011): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200ff0050a245d5cde0080045000028000000000002907800000000ffffffff11009078e00000020000000000000000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="018079cc000050a245d5cdde080045000028000000000002907800"], 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000540)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) read$msr(r2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x2, "fdffffffffffffff"}) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) 49.050366769s ago: executing program 2 (id=1020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x7f630000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) syz_80211_inject_frame(0x0, 0x0, 0x26) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 47.643793592s ago: executing program 2 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 47.530180839s ago: executing program 2 (id=1028): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200ff0050a245d5cde0080045000028000000000002907800000000ffffffff11009078e00000020000000000000000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="018079cc000050a245d5cdde080045000028000000000002907800"], 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000540)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) read$msr(r2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x2, "fdffffffffffffff"}) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) 47.300949282s ago: executing program 2 (id=1029): socket$kcm(0x10, 0x2, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11080, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xf0}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) unshare(0x40000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) gettid() timer_create(0x0, 0x0, 0x0) 47.237362187s ago: executing program 34 (id=1029): socket$kcm(0x10, 0x2, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11080, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xf0}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) unshare(0x40000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) gettid() timer_create(0x0, 0x0, 0x0) 38.439371293s ago: executing program 5 (id=1056): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1482, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r5) 37.271892092s ago: executing program 5 (id=1067): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1482, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r5) 36.149452572s ago: executing program 5 (id=1064): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4, 0x0, 0x1}, 0x18) lsm_list_modules(0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, 0x0) lremovexattr(0x0, 0x0) 35.917815482s ago: executing program 1 (id=1065): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200ff0050a245d5cde0080045000028000000000002907800000000ffffffff11009078e00000020000000000000000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="018079cc000050a245d5cdde080045000028000000000002907800"], 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000540)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x2, "fdffffffffffffff"}) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) 35.025962435s ago: executing program 5 (id=1069): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x25840, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 34.880119915s ago: executing program 5 (id=1070): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="198865b60000000000000000008000e752000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18001bfc54a3938068681b2f2400"/23, @ANYRES64=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='workqueue_activate_work\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1}, 0x0, 0x0}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="4e1528058b63d300"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x1], &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x1, 0x2, 0xf, 0x7}, {0x5, 0x2, 0xf, 0x2}], 0x10, 0xfffffffb, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 34.653057558s ago: executing program 5 (id=1071): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1482, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) 34.578458445s ago: executing program 35 (id=1071): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1482, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) 33.14672782s ago: executing program 1 (id=1075): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1482, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) 32.565889786s ago: executing program 1 (id=1083): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1482, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) 32.069734828s ago: executing program 1 (id=1078): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x25840, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 31.998988217s ago: executing program 1 (id=1079): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000480)={r4}, &(0x7f00000004c0)=0x8) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r5, r5, 0x21) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000023c0)=""/241, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='wlan1\x00') syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) 30.558494866s ago: executing program 1 (id=1082): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200ff0050a245d5cde0080045000028000000000002907800000000ffffffff11009078e00000020000000000000000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="018079cc000050a245d5cdde080045000028000000000002907800"], 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000540)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) 30.513098284s ago: executing program 36 (id=1082): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200ff0050a245d5cde0080045000028000000000002907800000000ffffffff11009078e00000020000000000000000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="018079cc000050a245d5cdde080045000028000000000002907800"], 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000540)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) 8.999829626s ago: executing program 6 (id=1156): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000005c0)=[{0x0, 0x1, 0x4, 0x8}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x1ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000380)=""/214) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) brk(0x55555ede6000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x8400, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r3) r4 = memfd_create(&(0x7f0000002280)='\xcaB\x89\xed`@>\x89=\x9e', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f00000002c0)) 8.202190824s ago: executing program 8 (id=1159): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x100000}) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@rand_addr=0x64010100, @private=0xa010102, 0xffffffffffffffff, "19f794b9a3d42eaa7ba7ad4ddc8c3633ba51ccaa39fd8934052e2331e8615ab3", 0x8, 0x3, 0x5702712a, 0x3}, 0x3c) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 7.328625442s ago: executing program 6 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, 0x0, 0x0) 7.214268305s ago: executing program 6 (id=1164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, &(0x7f0000000a40)="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"}}, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b4", 0x9}, {&(0x7f00000005c0)="c2c1", 0x2}], 0x2) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x3c}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, 0x0, &(0x7f00000000c0)=r4}, 0x1c) 6.830995909s ago: executing program 4 (id=1165): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) socket(0x2a, 0x2, 0xe2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000200)={0xa000000a}) finit_module(r7, 0x0, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 6.625218478s ago: executing program 8 (id=1167): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1482, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r5) 5.761052932s ago: executing program 4 (id=1171): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={0x0, r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000380)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r6) 5.527550786s ago: executing program 4 (id=1173): socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioperm(0x0, 0x6e, 0xe) lstat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "9dad82"}}}, 0xd) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x0, 0x2, 0x2, '\x00', 0xffffffffffffffe0}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x100, 0x0, 0x3, 0x0, 0x4, '\x00', 0xff, 0x2}) 5.525389706s ago: executing program 8 (id=1174): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000b40)={{0x1, 0x100, 0x9, 0x31, 0x1000, 0x74}, 0x31c, [0x3, 0x40, 0xfff, 0x1000, 0x8, 0x9, 0x5, 0x20000, 0x8, 0x10, 0x954c, 0x10000, 0x10, 0x7f, 0xff, 0xffffffff, 0xcc, 0x78, 0x10, 0x2d2, 0x4, 0x6, 0x2, 0x4, 0x7f, 0x9896, 0x12c, 0x1ff, 0x6, 0x3ff, 0x24, 0x70, 0x7, 0x3, 0x50, 0x2, 0x6, 0xae, 0x6d7, 0x10001, 0x7, 0x0, 0x5, 0x8, 0x6, 0x2, 0x9, 0x200, 0x9, 0x0, 0x9, 0x1, 0x3, 0x6, 0x5d, 0x9, 0x8, 0xf30, 0x7, 0xe2, 0x3, 0x2, 0x8, 0x3ff, 0xa, 0x2dc, 0x4, 0x5, 0x7, 0x0, 0xd7, 0xffffff15, 0xffffffff, 0x7, 0x7, 0xffff, 0x7, 0x0, 0x1000, 0xc, 0xa, 0x8, 0x2, 0x4, 0x1, 0x18000000, 0x1, 0x101, 0xebe, 0xaaa, 0xe, 0x7ff, 0xfffffffc, 0x0, 0x0, 0xb, 0x0, 0x6, 0x5, 0x7, 0x3, 0x401, 0x1, 0xdbf6, 0x7, 0x3f000000, 0xffff1eaa, 0x40000000, 0x8a, 0x8, 0x80000001, 0x7, 0x596, 0x83, 0x1ff, 0x5, 0x69, 0x0, 0xa, 0x7, 0xfffffff7, 0x0, 0x0, 0x0, 0x9b, 0x2, 0x2, 0x436, 0x6, 0xa7, 0x7fff, 0x2, 0x1780, 0x0, 0xdda, 0xffffff81, 0x8, 0x7, 0x0, 0x8, 0x173, 0x5fba0aa1, 0x6, 0x0, 0x5, 0xfffff0bd, 0x5, 0x8001, 0x401, 0x200, 0xff, 0x400, 0xb, 0x0, 0x9d5, 0x5, 0x6, 0x100, 0xfffffeff, 0x66dc091f, 0x9, 0x800, 0xe4bd, 0x9, 0x0, 0x0, 0x0, 0x8, 0xbd2, 0x8, 0x7fff, 0x114, 0x6, 0x1, 0x9, 0x3, 0x98a4, 0xfffffffc, 0x5a7, 0x3, 0x309, 0xffffffff, 0xa, 0x0, 0x8000, 0x5, 0x6, 0x9, 0x1, 0x8, 0x1, 0xb, 0x8, 0x1, 0xa7, 0x7, 0x1009, 0x2, 0x4, 0x7, 0x8, 0x9, 0x1, 0x10001, 0x6d, 0xc, 0x1a1, 0x1, 0x5, 0xffffffff, 0x3, 0x0, 0x6, 0x7a8, 0xfffffff9, 0x4, 0x83b, 0x2, 0x9, 0x5, 0x4, 0x0, 0x9, 0xefc8, 0x7, 0x4, 0x9, 0x6, 0x4, 0x3, 0x0, 0x7, 0x9c, 0xbcb, 0x1, 0x9c03, 0x373, 0x0, 0xffffff7f, 0x8, 0x74d, 0xe, 0xfff, 0x4, 0x4, 0x3, 0xffff460d, 0x5, 0x7, 0x6, 0x1, 0x7f451369, 0xb7c, 0x3, 0xa6, 0x5, 0xffffffc4, 0x4, 0x7, 0x1, 0xff, 0x8, 0x72f3bfd3, 0x1, 0x200, 0x2, 0x4, 0x1, 0x9, 0xd, 0x8, 0x49e, 0xf, 0x7fffffff, 0x7, 0x86, 0x0, 0x108000, 0x81, 0xffff, 0x7, 0x0, 0x9, 0x40, 0x2, 0x9, 0x1, 0x7f, 0xb, 0x83, 0x1ff, 0x7, 0x8, 0x1, 0x1, 0x7fffffff, 0xf6f3, 0x8, 0xfffffffd, 0x10001, 0xffffffff, 0x7, 0x5, 0xd, 0x4, 0x6, 0x6, 0xb0, 0x7, 0x1, 0xd, 0x7fffffff, 0xfffffff7, 0x1, 0x100000, 0x8d, 0xfffffffc, 0x4, 0x1, 0x3, 0x5, 0x9, 0x8, 0x6, 0x1, 0xffffffff, 0xdc1b, 0x79, 0x7, 0x2, 0x0, 0x4, 0x34, 0xffff, 0x7, 0x4, 0x7, 0x40, 0x80000001, 0x2, 0x7, 0x3b83, 0x5, 0x9, 0x7, 0x1, 0xa, 0x84, 0x9, 0x2, 0xfffffffa, 0x8, 0xd, 0x8, 0x3, 0x9, 0x7, 0x7fffffff, 0x9, 0xc01, 0x3, 0x0, 0xfffffffb, 0x3, 0x1, 0x1, 0x200, 0x7ff, 0x100, 0x7, 0x8, 0x1, 0x81, 0x8, 0x5, 0x80, 0xff78, 0x2ff5, 0x1, 0x244d182b, 0x2, 0x6, 0x6c000000, 0x4, 0x1, 0x6, 0xc0f7, 0x4d, 0x15, 0x8, 0x1, 0x0, 0x2, 0x3, 0x4, 0x1, 0x1, 0xffff, 0xfffffff9, 0x2e4, 0xfffffff9, 0x1e1b, 0xffff7fff, 0x4, 0x3ff, 0xfffff000, 0x501, 0x4, 0x9, 0x7, 0x401, 0x5, 0x2, 0x1, 0x8d, 0x1ff, 0x5, 0x7ff, 0x0, 0x7, 0x55c, 0x8, 0x0, 0x0, 0x1, 0x4, 0x1, 0xfffffff8, 0x0, 0x7f, 0x1ff, 0x0, 0x4, 0x20de, 0x17200, 0x0, 0xc6f, 0x2, 0x244f, 0x64a, 0x3, 0x5, 0x10001, 0x2, 0x0, 0x8, 0x5, 0x2, 0x8, 0xfff, 0x81, 0x6ca, 0x6, 0x3, 0x0, 0xcb25, 0x6, 0x8, 0x2, 0x8, 0x4, 0x5, 0xfffffa7c, 0x9, 0x7, 0x7fff, 0x5, 0x0, 0x1, 0x1ff, 0x9, 0x2, 0xe, 0xb, 0x6, 0x5, 0x1e, 0x1, 0x21, 0x4, 0x3, 0x400, 0x8, 0xfffffffc, 0x7, 0x7, 0x10, 0x65, 0x5, 0x10, 0xffff, 0x0, 0x5, 0x7, 0x9, 0x40, 0x0, 0x7fff, 0x5, 0x8000, 0x5, 0x7fff, 0x0, 0x400, 0x4, 0x1, 0xffffffff, 0x6, 0xffff, 0xffff, 0x53, 0x1, 0x3a069a6f, 0xabfc, 0x0, 0x7, 0x0, 0x800, 0x0, 0x2, 0xcbd, 0x4, 0x380000, 0x7, 0x6, 0xe7, 0x81, 0x4, 0x81, 0x9, 0x8, 0xfffffff7, 0x1, 0x9, 0x80000000, 0x5, 0x81, 0x6, 0x0, 0x3ff, 0x9, 0x7, 0x4, 0x7, 0x7, 0x0, 0xb2d, 0xfffffffd, 0x7, 0x80000001, 0x2, 0x4b5, 0xd64, 0x9, 0x7, 0x5, 0xb6, 0xfac, 0x80, 0xb2, 0x9, 0x7, 0xffff, 0x5, 0x5, 0x7ff, 0x1, 0x80000000, 0x61189570, 0x524e, 0x4, 0xb, 0xffff, 0x15, 0x2, 0x1, 0x2, 0x6643, 0x400, 0x4, 0x8d, 0x800, 0x80000001, 0x7fff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x8, 0x4, 0x997e, 0xff8, 0x7, 0x6, 0x1, 0x1e20, 0x80, 0x3, 0x5, 0x2, 0x3, 0xc000000, 0x3, 0x3, 0x7fffffff, 0xfffffffc, 0x4, 0x0, 0x8, 0x40, 0x81c, 0x9, 0xf, 0x400, 0x0, 0x100000, 0x6, 0x0, 0x7, 0x5, 0xfffffff7, 0x2, 0x1, 0x8, 0x10, 0x9, 0xd, 0x3, 0x3, 0x1000, 0x8, 0x4, 0x5, 0x2, 0x0, 0x1, 0xfffffe00, 0xffff, 0x0, 0x7, 0x6, 0x1, 0x0, 0x193b, 0x7, 0x3, 0x7fff, 0x7, 0x7, 0x3, 0x1, 0x200, 0x1, 0x2, 0xff, 0x3, 0x3e8, 0x1, 0x7, 0x100, 0x8, 0x88b, 0xca, 0x1000, 0x8, 0x7, 0x0, 0xa, 0x8, 0xe5, 0x8001, 0x7, 0xe21, 0x1, 0x1ff7, 0x100, 0x0, 0x5, 0x6, 0x5, 0x6, 0xf, 0x57, 0x400, 0x200, 0x8b, 0x4, 0x7, 0x8001, 0x5, 0x1, 0x7, 0x5bd0dbf3, 0x10, 0x6, 0x4, 0x9b28, 0x8, 0x8, 0x2, 0xfc0, 0x81, 0x6, 0x8, 0x2, 0x9, 0x3, 0x7, 0x3, 0x0, 0x3, 0x1, 0xc, 0x0, 0x8, 0x7, 0x55ab192a, 0xffda, 0x6, 0x756, 0x800, 0x5, 0x893, 0x3d0, 0x3, 0x5, 0x0, 0x6, 0x4, 0x10000, 0x80000000, 0x3, 0xf, 0x9, 0x3, 0x4, 0x2, 0x100, 0x63, 0x0, 0x97, 0x2, 0x2, 0x0, 0x8, 0x5, 0x1, 0x7, 0x1, 0x10000, 0x7f7, 0x100, 0x1, 0xff, 0x8, 0x7, 0xe, 0x8, 0x6, 0x7, 0xfffff800, 0x9, 0x4, 0x33debe10, 0x100, 0x8, 0x8, 0x9, 0x7f, 0x7, 0x3, 0x3, 0x7, 0x7, 0x3, 0x8001, 0x5, 0x5, 0x6, 0x1, 0x2, 0x4, 0x1, 0x345c, 0x3, 0x1, 0xffffff7f, 0x3, 0xd142, 0x96, 0x3, 0x8, 0x0, 0x4, 0x3, 0xffffffa5, 0x8, 0x6, 0x80, 0x4, 0x800, 0x7, 0x2, 0xfffffff7, 0x8, 0x8, 0x0, 0x3e99, 0x0, 0x0, 0x3, 0x6, 0x9, 0x7, 0xd9, 0x9, 0xfffffff8, 0x1, 0x0, 0x7, 0x2, 0x3, 0x3, 0x800, 0x3, 0x800, 0x8, 0x5, 0x9, 0x9e, 0x2, 0x3ff, 0x0, 0x100, 0x8, 0x7, 0x80000001, 0x6, 0x3, 0x2, 0x6, 0x7, 0x9, 0x3, 0x2b4, 0x2, 0xbb1, 0x6, 0xf, 0x0, 0x2000000, 0x8e2, 0x9, 0x7ff, 0x61, 0x8001, 0xffff, 0x2, 0xc27, 0x2, 0x2, 0xa, 0x627, 0x3a4c07d, 0x8000, 0xfffffff8, 0x9, 0xd, 0x6, 0x7ff, 0x5, 0x16, 0x5, 0xe, 0x2d8, 0x3, 0xffffffff, 0x2, 0x3, 0xfffffffa, 0x5, 0x8, 0x7, 0x9, 0x10000, 0x5, 0x5a50bac5, 0xc, 0x1, 0x32a1, 0x9212cf98, 0x6, 0x6, 0x10, 0x1, 0xfffffffa, 0x2, 0x80000000, 0x9, 0x0, 0x6, 0xb5, 0x0, 0x4, 0x1, 0xe, 0x8, 0x81, 0x99, 0x3, 0x5, 0x1, 0x1, 0xbd8, 0x6e0, 0x0, 0x5, 0x4, 0x3, 0x4, 0x670, 0x3ff, 0x7ff, 0x401, 0x400, 0x6, 0x3, 0x8, 0x3, 0x6, 0x80000000, 0x9, 0x2, 0x0, 0x40, 0x5, 0x10001, 0x10d8, 0x10, 0x4, 0x4, 0x0, 0x7, 0x8001, 0x1, 0x5, 0x4, 0x7, 0x6, 0x7, 0xd1, 0x1, 0x7, 0x7fff, 0x7f, 0x8, 0x245, 0x0, 0x81, 0xffff751a, 0xc943, 0x0, 0x7fff, 0xf, 0x2, 0x0, 0xef, 0x7, 0x1, 0x3, 0x6, 0xff, 0x1, 0xf, 0x6, 0x6, 0x6, 0x7fffffff, 0x8b1a, 0x1, 0x9e98, 0x80000001, 0xc88e, 0xcbe, 0x40, 0x3, 0xfffffff1, 0xd, 0x68, 0xfffffff9, 0x1, 0x3, 0xa5, 0x2, 0xffffffff, 0x5, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0x2, 0x2, 0x867d, 0x6f, 0x1, 0x3, 0x8, 0x1, 0x100, 0x6, 0xba49, 0x10, 0x1, 0x7, 0x4, 0x4, 0x0, 0x7c6, 0x0, 0x6, 0x4, 0x3]}) r3 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @private}}}}) ioprio_set$pid(0x3, 0x0, 0x2000) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r3, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmmsg(r3, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$unix(0x1, 0x5, 0x0) dup2(r7, r6) getsockname(r5, &(0x7f0000000040)=@ax25={{0x3, @null}, [@netrom, @default, @netrom, @bcast, @netrom, @null, @bcast, @null]}, &(0x7f0000000100)=0x80) 4.041137937s ago: executing program 7 (id=1176): getdents(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x2f) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffff9, 0x0, 0xffffffffffffff72, 0xc}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c081408"], 0xa) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7}, "5b842c0d80da9e"}, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',roo0000000040000,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x7fffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000009800)="c81a44e63986e08d99ccf23dc0ffa0818fa1b29e99c766114f54433926cc9086d6348367b02c96642668b5f3bbb112262d5712ed8054d5bdfce73f367d017a9fe5d0611a2095a2d64ea5f872e6a2e82823552a5d00e6082e192c9a65203f7b2ead5b76d5941092f89ebfb3af4f7eda2aed59b7954bde4c5aac060c0ac12c09eca75388b6a8179c4977dc61547dad45fbd56bf748286464af77701c3a9029c4b20184af67cf8928b6ce60192173baaf4c2dddf1184b3f22666a9f1ce962649f152fc1d81f46bc01e552e264bea7d558de6fc211353cc3033d74b1f277f40ff3d32b43df5be1660621248ea797ff8e32400c8114a0dbfdfd023924a1d6e35e335c903972c8b0d8e291f1f70996febc0bcd3fe9adc77eaec7e2922b0c1da784a98d3bb5be2afa19700eef6a89214c61e5f79f87edf6584c67031d65da8f1e2615e41b09bcb25c19288e1852d8198910c923e0b2e4d2bd09684028f157e6d512724f8d0da0c5253cd215c4802a7d24c019d4cbd4875904be09477406ce9ea11d1d8e4fb15c38e17e99f546a9b804c7f143a99c1f650a97c5dddaf43bc02839da9bc8201c086a8f83014aa838918f5788f3d52c3116c2b9ca72e8dafa94f9dd75110989e31d5dfd985a00cc3bc79e603e29113ccb7e7492bfd97ad7afdecd6f15c3b5d43ace4840105618679619db4906cf2ea7337bd27ac2de362633363bd8fa8dec3402e8e7663806d24f72b72a75e30e4633fcc78049fe47237a47b8d6393d2766c879189e6f379529c7e6cb38d24d5bcf99602e8205c83e17d8e859399df4aaed02f0ed1d0ba10a9bac073b27ec2b8cb0691080a1041732d3018d378c480878923e25991e599e97020c1b2e17e5759401f040ab398d8b4d216a07b9514ab547f0084e3b37869a2330af29fa894fb4434be6629edc8db63b95dd86e036064290297afe39869f399c2c7fedada7ca2202be1d4b7a095198b11a77429eb2ced2b7a131a207abd34bc311a88eaae478b79fff624178693c4af30706d94689ca692bd064c582278b2e08515738035c7bb5119821cb82f6aca4c0ce8884d1aa040db9d1b2579a4a5ca379ad973f54a9f68746bbc9261a3426889e70716b5c1a8f14f83d080b1c0e3c4be39906de065fab911c9628d9af546172740adaba5dc048c520871279bb0fe80cea62a57f7f59c8d034b66f1791c91b09a444bf4dde1e8520871ceadcd8307ae7a924ca0a24364853d5b87cecec18cd2081292e1939d69c8f03cfb7ae6aa553fe9a3d8bf32906b22fade678f6459383ee9d40968ab818b065985f55a314fbf5b54554e7b5a06947cf6671dc5ed1f78f087ac41dd7d382b93d7190cbbe119f4523ad769aa1c0c373e8a68375b8fc0b6add933718772c4c019646efb0be7959e7d53f3ab1bfde0d7a0e12c7efcacf19ed6809fd8c17613d36167d32b52a36127aaeef68071a142833f8e3e503c9195415ce8c53a82b39311e0790d09ee78417cc81886bac390abc59b8263509877faece16c6bb48e5ac75756f47f0d1f722ef64b88bdca0f495a6c718f3c8bb8e4c36d2c7421096dbbb575355bc69b957fef70122dbf4b7767753029367ba18b25c222ec10b236b83e15d736fba9d31948a5c4f624a490ffa520b23f75e9d2fe631706e92157226e52cc6fa5c1dafd7651450358e894948d1b2a5443c160270d5441913288946e21f42e872bf62a597767c2a96270b86e04ceeb9f84e3e61d077f79e2b9345187e54f20a78bbd8afd1b0f082a58e0d436012017c0045e12c514e9b0610236a1cc091f6e4500b388dc629516e53899489ea3abe2b5f39d59b7d303387aa2cc866aba5cde3faea9914870a74ec9fd9e034e2520fb1e9be06f3111750c161c0898f44f2c3d42584888bfa8bae0bddd6671df44c41272b870868bc53eece9424861460729e99b480eaa61f55d9a8da4c74d94fea85b1df9a10858fd38c25809f924d5f13910668fad16fc635c1996d125b110171e38cef8f06e277e0e8eccec36d25036dbb9ad0447f7116ebf6197c58f4bbf1a53ff5972f138cc7682e3059d9d3489726f038c5cc5900de4805be00bc4c545106558a3b4877de92848e4a4b1750399f19228a48fb1df6103b1d4b9cc5d1d10ba75ba53925a150a61744747043cea4ce192bb1e199a536d0654a91bc567852d260fb3db4b77d14eb9721e176cd4eb260bebc7868d0c9a1598ecf78aa58a363086c6841cba16e0ecd8316dfca3310f8ab0e9e11472fadb6b18a713796a1fa3a4f23003de3384c7756c9a59c74e7d4f4355589783ea9b9bd92f265697c838d8e2f749bd2929765ed7038a9ee7766a01c05881ca4b96f6baf6c14eb59a7090a3f876acfeabe8f30daf746e38faf33cea4f7ade758fc3680d7da99d04da4599f0d19981382b2c40c3aff6222c8e1bf688a96adfd934b5398cce4c6602f5235cd8abf0f7af2cb2c8771b23a6a34800be0b7d73264c9faf6e6a9721ce0ddac96616034f2244682a6984ddc41ab8bddb137f7b7386e550256d579b6ba677903fa8d177680be70eef89b150c147f5db9459c5a7214486dfd165c148a68c2b70881542efe4f78b5c6a7329918512cfb0bf07021b8fb76e1fca4503fbfbe06bc6dd776710bac8b9e57295cfe054c91815b01bdbacb450751491bc512a0a738f9260970bf2ef481e9b1134537eec67a109545ea3933fc5895bd2bacedf8e52549c8579b826f15390562c0637cc6bdd54d1930994f324a3ff46e471b2b66a651c1651750c2f038d513e0049f3c2bc86864712b6dff80b832c7039c6b2b90d80bfc155599b8751c5fdc2e5cd928a070ece0cfe5832d9d5115e2ed9d9c4da773d4d846db1de129babf535900d85e8a5b08aea019bb64cdef8cf58a0218af39d25b27e4d26c299cf62d058515e39de2e4ebc153d643253d66b8843c47f8795e11d37f190599ee61c89f84b674f5ee9819b20ecf58bbf44821dac0b1e49d42d4369dc9c1ddc17bc813a0b0069ef5f657033277003c7c448a375e6d38fc602c644fdd4dd7d354901bc683bb08c630b1aac188afc674bbd17deb6ce9b97ab59fc5be3e246838a9f2a59b3d23362b3a79710ec4ef7cd85047910e2681350f77140737f56bee146be8723388222dbabe71f40c42c6a8390c85187ab013bd99c2322f9131e5e8ffb99c741b8ac55f698adb643ac78262b5719e4092c0184c990b463c8cc993e9d9250a976c3bd4711e7793938a02830b157f148f1113bb89d9d8b3f85aa8ad084027d4fde1723fba973c17115b9b3ce64d5c03d79a8a78581de2c76342133ef721600334b85984b0c3b9abb4c945538af9bd7120c591997a9d1e670b78f75fa430b9f0e66c675d674932798380c27a7af9d478b33669a207dc17abb1bf7c35718e53f2c549a74d65d3126c40e3ac9793742ec6a4643480d265daba1a6d7991311ba3ba20f6a13391ec14cef0f2b94a15d85a61ed1b7c3ac8876bf93777cb31c7f34a5cf41cac7eab910e7c6198b9506daccf362e7a84d13ef2cd5f192d0568cf18f83a7a9963622702d0b0f8a9a1c72ad239ec99ccb148f00b5682c18a838fdafd37e1b47a9722d8af15d20311dae3c482295755d661a91b8c49de39e54b689b5cd7704d6525f3c02916037b60bf1ad97640a88d2fa975dc26c2ccf01d57b0918005d2203677b8d5324683384f23e3237a4ffe544a9a46214c10601f88a18c2fa8dbe62ce019ea9a53fba8c3142797795f9486df7262f25f80f96b4bdfa7a64de723716fe13beeb8ea79fa8f9c80d00bb5b391587dcde3955e4d707d1463c69c2d62908f43e9eaf5c75473d4cd7b48eaec0febdcfbb752182e2fe9048dbb7b27d65422748dcc83d8bd7dc2fc6aefcc6d4337d5935289e57a0bbd73cc3fe69024c13deafcb1358d986ea47720a2dcccdd8be97626e6821ddcdda2966e37ce0900d4c4de88d7f0e8732b85c891857a00682a44c8efdafccd3250c41c09f97dc9f72f6b9b8addf98e64dafe3deb7babf4a2a7e2efeafe79e28d825b4595ad46a7199213b4c318f408df66022706b89fba65031f4664e04ec351e078821002e20dbc4985e76a8f1f0c6499e0a4eb220caca1aebc6bf83f9ca2c47206f3026bc22fd8a134916852b21d899c970bc6e71b8ef4aaebfa0bf95a940b9ab2dd3ca3db77f26cb8e849b2027ea64e090239c368eec0599f835520dd6387132f60ebcb2d2079a3dcf55844591f9c4aa8b369c6083675fc4f0859dd30d360f0692e81799f605ac136fc1e3ba0efb88c77fe5779d67a055388e24e313108f37329bee59a330de780460a6dc71a130af1ab92892881e3e25a35b1fa0511b96fde25bd405db741f3b38738e49c59a75f41cc26b5c34aeb76c7659a160faf37813239176bf0e47b0c9be25c884e60a0e55d3253ef3674717a527fac817560e51335e9c3b18a487ab79ce4d3c0fc03277367b27c94eae5a790e6a0dabdcc393b98ae78198a378aa709791e0ad01d335cccda768254c2859ba5184ac1c111c88e434c6888281e97ad0ef97c0b3082b22fc6521eea2c6086fef2416a0c32e3f924cab7af288bda5097969b40cb646f0b77b783bcf2741263a6800d29bc68bb36b89f95b5f492116d551e986dbee994cbe8bddaeaf8cb024aab160e528e7aec1e354d05fdf512ba3f72a868e31725371b27cf47e6fd8b61e21dfaf66c2206241a324239dab02044a3a9ba367caa3fc689ea76eca022272f2925852b881a8b6e81d3b21cb499659c536eacb3b1624b4b9d47a625a95ab947bdc106f61208430b6b3d7e87f4a18abe4074453e310884725dd31199fe7b492b8ab0a4fc64d4aebcc936773884bc7512b3ddd6fb822bb7b75b9e1597eb6395362b2d4eeb6909084900c0de27200b2f9b699f2db9cd0edab619a7f545746f40c8d8fcb12d40e0eb7f4604103fd52eec0f6d43477728d59c51ef5ebeaa5c9a4b9787f2465307380a0011d0eabe77bf5e37423b48b59f910f1ad8c05436a07cdbad9f61ff099279b84429d7836fb7279ca67a3c17cef69b417c6ac583570836b97ba8ffcc47ec3838039ba33afea8d2c8b8815bc0d7ecc4665f43b67deaec4477287b18a5093fd5877099e9dae01b229cc79083e6bb27a7552b5e39602a1b0c123c1659c1359500937d5390bbcfe38ff4ed55a4424c017fd05d1f752e291a7dc90ca123ce7af02c0d952bccb236563ed8006d7e642c35497007632877445e397fbffd29a43c95983b67efdcd04fae575479b138c93048f15768eae61e117b0f42a40ce3f1ad664f833a9c2dddde0826f988429099960100ddefa7b96bc3bb6918d1b6fd29e851e6a1d58c880c36c4e7d2d63f916b655dd8563e5cdeaa6041cc81e3d2e853927761a3d7a91b0cbdbfc89a725bae5b7c14c3fb6a74ef2aa259e38723a56c7d82da287f3aa1357d3380931109123f9b0c1250a7447a5327f6f11ce42b5f0269ea94547f9d18e34b32de7e55e47e99b113c7296a535857c4c5d8e624e672a692394aa2937461ac3f5d202ec652afbec1a44cbb38afa423d8a1cc6ff0d70a509bae6f07a4ea9062ae09da3ac26db55c5a4b2430f3967fa2b952597e6d0226f3a9ec47c1b8f1da16452cddc3d5d32eaadd569fe1e4d8af95027aaa689f113bb72fdb398bfdc3a6696d12b305cd8219522223b5eac1e00eadc6db5a52518339e78cfd6aafbda6251ef2ef7f317bccaf8df8ab14099dfd73a21ff89a591dfd038e7cd46e662156fe3b05cb6c7167eb8200a121a05118bc7f9e61812cff90726e0cdc9b5c0042426f842fffd045f3f466ede3a657767a6f985fdfdacecb2a99fc5992a2451d51b91465129eb54f532767a8b7097ca36e585d6c1aebafb92cf5467da3438c806d942bdcc67bed758d9e238a7488d58b1ffd3ae5034794d9a96f527b05aedd85bed353df22807395287233cb278772d567e8a00d4c9b4d51633d865b659921aca08d805a82d575f545fd850caed0949ded172b3b406038f000ec2cf0df7257335e38686a64e5099e55f4b57d04305b0ae91d39d49288907d126fa6e7cd134fc27fedadc0e41d193252bf029d13c247dab620cf9c635029fff178f654ca8e444f718cd944f1ce4feed3ce36cdbfc5c6c6cf0c3c1c4d80daae1574ce74ad0770238bb4ea5c7d6aa72587d20308a2dd9c3af0e9fcda48ea68e917a9f290d5358cf94c06f8a496a4c1a0a16a2a67bef07a9b5bae98bfc5536b3733260fbb3a2f6b1f7b17736a2ad9b44a2c87a4a2f9b80688ebe284557e205f7598320aa10c4fb154c5c033b71884daa6e3bcaeed8818fe85ca39277bd5139d58c188749db5bcdcf2737fcbec402b19a336e1d7386e2dc28c00f9e444205bbc99dcb8a31845f97227114ec36b98608efe42afaaee942c2d8fe3035b400c3155f9766044512b733800f4797fe8de6dc352ebc7cb0033f1434259ff9067133d9b863478b2ab895a8300cc913715c84114ffd21f22d3ab696f28272022dbbe9b36eeff0e8665a8f850c4897575aa2f0086a8312ec6f19763f132049961b138d7bcf9a9c0ba90050c8d59e01508eecac71ce4b5c737eb3ce93f2af6c0a9189c30fdde9ea5f8a73c2d579cf259e99d8a32c4d322b626b0dcdb8083dcfab6d4eb57d845bd9b93813d56b949ca5a67b3554e66526aff1fee4764c62bc45e201291e64f053fdf154190cd35503fde9e39198b62f08028302ca7325f4b4ad0ece5d7efe545987d5f7a7bfaad30202cd5abc00dd14938ff4218a01a8592254b33c7b32d3a386d942ab09c72b1ec6336e27dc17fc67e6ba92b6cd99e489fe89586cb832cbf269071233199559ee4cfda5a133d8832e084ba85617c1ef77017f8cc7876013114ebff0f0245029dce608f8a86c1c73a8ce3b58b8a9604023ae1c24a0833bf7d9818d8169305e726711fb25a46ce510a0fb8ab5dcd524de7437bb0b26c3ef4c70d5dac1c01798038b0b7d0049ae6eb1fd0add472b76c03f326a92f76371e65e1da47f02ad3b84cff0c38c756333e927c5f18c0a3355fda90a933c734af9ebd387efc5c90f523d45e1331bc02b6b65386f1706a47d4320b6990fed79e648d85c295178fe36b5b1251db63be3b16be8c3a11cc3c1f593382839812a58253cc1f826a7c42a14f68516f4b5258034c4b8dd31df41c82b2c89bf87c268ab1b8915ed88806e047e129b590bb1fb381c7f79ccff50868a9925f5ce19fddb41e7a6ff9220e9828d2cb5bef4509bfdb6365d804ff73c396eea42e739180d2bbd097b717c1b0ec2807b6fdcf04f7b361aa2876f6126860e4d84a85482a7f71b01a6d836ad83e886b57e727d54eb4d5b2c57bad52f39a2d807fc76be9a860d0d9acc2361dd91fde333a1bb0bdc77d9b1fd9a537a40e12090ee2c236aa7e04a699788f0afb8b2620d250a942ec3471bf3bb5ff77baa2ee463347ccdf63ff55d3dbd59ee7b43225966812840189a85be9e77529975258e44c3d40c046dc962ed51993266d96d1f7ac60bd5cb0eccc4df27958d7a23371ec699c31e8b32e7c34a9726b95329a9313fd0a5e1280fdeb385bc4c4cb43f34f59b0360cee138900db8c0b9859b7dce1687367e3258c0c8c02cbb260de8740435a0edb4073e6e0816b55f2a21693123d6d08ed478b17e05ff4b7b43991177e952c5a1895e054466fed8d3a2d2d54351ca2da8315729f242dfa59cbc457f5b64b5df90dcdd3051f4665aca22a3b7cdf66df9a3d82c5c908b808ef5b606e8a70a9bcd46abed11fb3f7a940e5280d64b53c26ea1fa1e7aa5d1b9eb700e047e1150a44d27e9fa2f72930af2271a7f4f33ec8ff9a6234c04d1813b626d775bb890685dffa08207e87f5af528a601e938f782c9fd57611f90c46e8cef52c4dd1b9eaf6eab74f951d374195ff142728f795dab16d48f99255bd1241aef1ab2922e8b98c037e44de901ee98ee90ff9295151068966e894a1680065646399c72257e6f1edaea592c116a810a59fa84d062cfe09aabf9daf2aa8c5552cd3c4583eeda46730328a8aa00f260f5c857f696ccaefef069b0ca1f9be96e5028ea00f0124ca242b250a841574ce81c30aae7845335017c5e485ccd929c24b2805400f0703407c52297588e1b1385b898ac4c0f218864b2196e4db21bba024abab0aea0d9e03761e9c0ac3692730d4dc8d4fd16d63b1b95392b02966c77845dd0561e8ec5546e7d8f58019299faaf578e490d29aacd9632564133424d03c4f724a71640556379d8b36aeb83948a38b4a8e686dbb58cd451116bc07f9d7096bb3543aca26a0b137c9f7a18fc671b8bc67158ac64910d61bde226c90c8e019c64478d18523c0a4a9ebd5a32954e8449793397d2cee8fedb8e89a0e63ef7202745d98180025a95f6ff6145cce98ded7428ad5462fee7188387a2d3ce89d200d1247b84a4335b0be3e48b7d219900d4797c18e993969b800ac8c9e8ceeaaa2815b838fbc0f57cd749371d3bfc63fbf0943b77df8e2269b157eea5b17bc13f892984f403efd5209961c787caf79bc76010f1138e5371862d42019f9202035094b5dce365813286319fc174da07dfc6ce6bfab89a88c246934adc6733202def3a862fe6840f141241d8320faced105448334f9b2309a716a0c74c375554f9fe4a5bf29018f48b59c6dd789e3955caaf001391ad5c6e2be1ade7a37635ad5501389cb738decff82d3175bfad92b8d0f50d5c818ced8f018b238d149c04cb422612e2c658966cafea77ae4a2a0eaa48026b3987372c041f7ba8411dd3f0eee2355f019f17b806f52d72b143cf9721b78bc099bfc57b1749586b748a4314c73819072abfb5b56bc9050aaed5a31304e0452b227fa2bddc33b55d71f530e83ea6f051536167bd637d0cb0246b074e6b7cc3a08ef1eceaaabc842f99db8851ea938535b049eb248e75ce2860045247d3695048a0f677daf9e47797bdfe19c1979a6beb70fc5eb99af8f65e587d73cfb14b4164e31ecc3283209c86f3f1a05d6ef8ca6682fdf049d3e3874e12a11ce39bf77d0b8824c78d3fdab6656c0693a0dfb232335de3f7bbeb3380501b770b77c8375fa0901af046086ac5b373dbf0d0d4f5d4ca048138a33dd475050c307f77986fcc6ec79bbcdf72122cbec8bfb5fa7e37c899166ecae3de6e1a9f14d097fced460db12572e7b41ca8028f20a37a8893bfc92824d13cddcd5343930a21e485ba05cc52806e57888454c7e08928769941fc007c710bf132c026c9bc5cd34b0dd1bc946479f0b5dabc4a858037d73ed5c83d8d94c4fa76912df5c868142548a9eaeb67fea1c9338ecb2a05c8f129ed11228d8175f0e9f248c066cbb0dedb3a0625938b0026e8cbdcec04ba5e3d0e2eef90f0c46af9d722bc17b3ca0e4e7bbc97f93658eb57a68c53cb5a00d94fa2432ef6ec8c32d87b8a58cfb60c5636d0d09b809670ae2e068e708e21c6cb2c72aa2b95b771e5d076aeff5a1aac9de57388edf1394e18099fa4424a44853c513395d47186aa285157b4a15acbe8fa3766f90bb52d37dc3ab3cb291fc01c02428b063541fe8eaa786e41a7bc39d9884ede36235998cd15a9b1cecbef4886d0b79636afd7d018bf28d8f4b4386ecc663aa32710e1446739f3a837f5424bcf0aca30c429e0071b960381a8cccfd9cd36c3f76e609d53fe17549a659dda76513ce2674a1fe203f292be577e9f47d824a49e943cf20177b8b3e593a7ce8c85b43db60fc368bd15e4de619ea63f49f8b4deb9444c9a6c54a1435cd6c1cd789bd363d9c6cda72b7e6c193542db0ad9898270dd91ea268847352d295046744d374dba4440a27825ec81f19a7cc0197974802f48a0326b76e72c54f4acb9322fe691a08f85c0e7d6bb9fd11609d97825d19297ed6e2721cbee92324d28e4e47c11214500cb17c8cdf75095b0327fa66c901027794df2de7ca1af1ec578a44a1271fd4d544faf1b293e52c196e264fc90545d8311271dcf1fa43ee04ad5b866d6552d9525e09da558a9dd7da8be8c06636ceae3db522db17ffdc84118eb45c564d258edda3e800210567c22f8916822e12e195b6ec6ecf415ae6672f115e002f40fb0addd153d7efe01e429bfe6c667f546320110f10d9525418a6ecf27695279df78eca5f82a14d7e9f9764dd377ffb33103e7992260b882837d0de268c19624ef42739acab31ca409cd26172ba916eb08e81c957e56d80ba0fca8da6659bc1e33c2cd2d778fc36c4b42163c2758c0e5f9f4d02c4c1dca2e3fa6f777926da4d226aad23a208d1e1e58117aadd771a4aa88776825e166986f3e958e9c3eb2fdd8236b4caa23799885ee877f9564780e64cf0fd2c0ed2d904467566c514b24bf412580aec6b6fb9f55c9cc90480f870332bf4f650c1efc52d29076183163e79bc67f6f2d6ee1976fb00e9840bf6a92f20f4e5aa7bc1061e99add7c25e4c75d477b680ec0f19576b4c43e5d8f4bf5da1861b065eb50f4361ec3554bd7c1f7ec18b3c4510c31e51afdac40e78de077e4392c47164ce41458b768c6014e00b3614276147df64ed33242bc85163b65610809764983e117d7bcc4845ccda2c9beea259c9f369e2c58e713fdf08f6e377095a3a4c3028c016a01fc280d9eaefcfdf4c15cb96dcea6e9e349488a58dc3a529d372e64a788742447156543854acaf45bbedbf842cba8c8598c84f120300b6c583c725852a3ecdc9ee07fa2338c2c4e96a7f5067f9f6891d5045be4486c663ac35a80d3bd7e1cede8c78de7fc09b92ce3f3245404502013e7ba4a2326264ab10a443be6a6e86b61b004115f1d5db953b4a563fc9bbee76b2b9b27edaf131849c3fdabd8eb1ff80f649659031ea855046ca07d9f559bdbfe999eb8a0d2e4965dfe5f859ea83c5e5fa69afb7481f069363d490b8524f08b6416790dd4f8f9ef78e642708f7fdccd3bd757f112f817515563fc0926f751065556bac668768d999026ef7bde90579f39fe0c55785f5e95a0c31f732dbfb8743b8ed9d61183dc7264edb80260a0f6f107a275dcb5983b450bf8c21660e842433730fb2f32799c66741b36c7c414d84a0fa0653d71aa0a96551866603515701b7caffb2bc1c86fb3751f7ca1e9e69beb865bf34402ebcffec3dfa5813bb5e7aeaa0bf72f9f52a9e12ad19e8babbc2a3196ac56f8efb1c254fdbee2779723411bd4fa35e298deb2b23162197473df5c9c150b70027e49f05e3d0905133c87a1d6f39eba50159356a7dc179f6fccf461aac8416c2f2eb914587df9c4cef4bc171df5cf569983b5315b0c284c97662ce100fd4da1567a0aedb13cb051ba7f50616243e0ab865e92440d2b7dd5bc7f1248554c641a101230487575b8daa3dcdad23cba379a5d3d064fc679d9ff56997a93ccdce2e7afd76f848fd3a753cc7056ffda235a5efaf2f10dac4d056f0baa51f01a0ffbc547ece5434b5099b7c5fe62413121139e55ccefd18b3bf8cd3962b126ea1d68c808ba60b56da8467c360fa88d85cecfa47d9cef26129c0afe0a28b43a1bf5bf714aa4ea2dae3ce9bd86ce6764f29b232148291fbd2ebd3a213aca4b101dbab579e82624fb0148d9572fe41347fe711967544aeab03b219789e8c0aaa49fbfcb1", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0xb0, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 3.994865093s ago: executing program 7 (id=1177): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x18}, 0x18) write$FUSE_ENTRY(r2, &(0x7f0000000380)={0x90}, 0x90) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x400) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000440)) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x6b, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x12, @multicast2}, '\x00\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0) fcntl$setlease(r5, 0x400, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.94562958s ago: executing program 7 (id=1178): syz_open_dev$usbmon(0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="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", 0x2ae}, {0x0}], 0x2}}], 0x1, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.128323647s ago: executing program 4 (id=1179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x8902, &(0x7f00000002c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.973357267s ago: executing program 7 (id=1180): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x8000000000008, 0x4, 0x0, 0xfffffffffffffa5a, 0x4000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfff}, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a0000000000005467920034db81e7abdddc259aee6063e57dfee0dab308ac44bd02bae33aa428c21e8527c5b32e2c96d0a0d52393"], 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001600)=""/4099, 0x1003}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100)=0xffffffff, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000000c0)={0x0, r5, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000100)=[r6, r5, r6, r6], 0x4}) 2.791463846s ago: executing program 8 (id=1181): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1482, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r5) 2.22429252s ago: executing program 4 (id=1182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000002c0), &(0x7f0000000080)=0x80) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfffffffe}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000320001002abd7000fedbdb2505000000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) shutdown(r3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x0, 0x10000}) socket$nl_generic(0x10, 0x3, 0x10) r6 = epoll_create1(0x0) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r7, @ANYBLOB="05000008", @ANYRES32=r8, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0) 2.042322708s ago: executing program 7 (id=1183): socket(0x2a, 0x2, 0xe2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x3c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000000c0)={0x28, 0x4}, 0x28) 1.83533509s ago: executing program 6 (id=1166): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x100}], 0x0, 0xff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x7}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x10010, r1, 0xb5e9f000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) io_setup(0xa149, &(0x7f0000000300)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x400000000000150, 0x0, 0x0) io_destroy(r3) 1.342675685s ago: executing program 4 (id=1184): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x76, 0x8, 0x5}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x100300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) syz_usbip_server_init(0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x20020680) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 1.222174129s ago: executing program 8 (id=1185): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) chdir(&(0x7f0000000140)='./file0\x00') r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000d}) 139.950044ms ago: executing program 8 (id=1186): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x3}, 0xfffffffffffffcc1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) cachestat(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r5, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) r6 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x20, 0x961c0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0xb0601) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='2', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 139.707811ms ago: executing program 6 (id=1187): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x1, 'queue0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000030000180060002000000000006000400e5ffffff1300030000000000000000000000000000000000060001"], 0x44}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xe8) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x11, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r10, 0xffffffffffffffff) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1e) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f0000244000/0x3000)=nil, 0x0, 0x0, 0x0, 0x3, 0x0, 0x63, 0x0, 0x1}) read$char_usb(r5, &(0x7f00000001c0)=""/4068, 0xfe4) 135.734887ms ago: executing program 7 (id=1194): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r10, @ANYBLOB="0100ffffffff000000000100000008000100", @ANYRES32=r9, @ANYBLOB="b00002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYRES32=r3], 0xcc}, 0x1, 0xf000}, 0x0) r11 = socket$kcm(0x2, 0x5, 0x84) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x14, r13, 0x1, 0x70bd2b, 0x25dfdaff}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) sendmsg$inet(r11, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0) recvmsg$kcm(r11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002) 0s ago: executing program 6 (id=1188): socket$kcm(0x10, 0x2, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7", 0x7, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0), 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) kernel console output (not intermixed with test programs): link [ 201.775710][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 202.888879][ T8650] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 202.905619][ T8647] binder: 8646:8647 ioctl 40046205 0 returned -22 [ 203.017823][ T8654] batman_adv: batadv0: Adding interface: dummy0 [ 203.019667][ T8654] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.041367][ T8654] batman_adv: batadv0: Interface activated: dummy0 [ 203.072829][ T8654] batadv0: mtu less than device minimum [ 203.075251][ T8654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.079198][ T8654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.082943][ T8654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.086672][ T8654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.090343][ T8654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.094074][ T8654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.097838][ T8654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.101562][ T8654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.105206][ T8654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.813732][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 203.816113][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 203.974285][ T8674] binder: 8672:8674 ioctl 40046205 0 returned -22 [ 205.141819][ T8689] binder: 8688:8689 ioctl 40046205 0 returned -22 [ 205.817087][ T8704] binder: 8702:8704 ioctl 40046205 0 returned -22 [ 206.038561][ T8714] netlink: 'syz.2.569': attribute type 10 has an invalid length. [ 207.090693][ T8729] netlink: 'syz.2.573': attribute type 10 has an invalid length. [ 207.096636][ T8729] team0: Port device netdevsim0 added [ 207.114952][ T8729] netlink: 'syz.2.573': attribute type 10 has an invalid length. [ 207.118956][ T8729] team0: Port device netdevsim0 removed [ 207.667253][ T8740] binder: 8739:8740 ioctl 40046205 0 returned -22 [ 207.698217][ T8743] binder: 8742:8743 ioctl 40046205 0 returned -22 [ 208.649835][ T8761] netlink: 'syz.3.580': attribute type 10 has an invalid length. [ 208.953217][ T8761] team0: Port device geneve1 added [ 209.909153][ T8782] overlay: ./file1 is not a directory [ 210.272792][ T8794] netlink: 'syz.1.588': attribute type 10 has an invalid length. [ 210.280003][ T8794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.284551][ T8794] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 210.625330][ T8799] binder: 8798:8799 ioctl 40046205 0 returned -22 [ 210.626718][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 210.852435][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 212.033965][ T8824] binder: Unknown parameter 'fscontext' [ 212.038562][ T8826] ax25_connect(): syz.3.595 uses autobind, please contact jreuter@yaina.de [ 212.894097][ T8839] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 214.965092][ T8873] mmap: syz.3.606 (8873) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 215.749965][ T8883] binder: 8882:8883 ioctl 40046205 0 returned -22 [ 215.846084][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 217.163233][ T8906] binder: 8905:8906 ioctl 40046205 0 returned -22 [ 217.523141][ T8915] overlayfs: failed to resolve './file1': -2 [ 218.138707][ T1242] Bluetooth: hci4: Frame reassembly failed (-84) [ 218.845383][ T8931] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 218.908691][ T8933] binder: 8925:8933 ioctl 4018620d 0 returned -22 [ 218.952700][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.180249][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.244396][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.314027][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.319283][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.324844][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.329108][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.332238][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.334695][ T5954] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.337190][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.452016][ T8940] chnl_net:caif_netlink_parms(): no params data found [ 219.800745][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 219.803401][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 220.006276][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.009092][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.016484][ T8940] bridge_slave_0: entered allmulticast mode [ 220.019572][ T8940] bridge_slave_0: entered promiscuous mode [ 220.038621][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.041815][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.044738][ T8940] bridge_slave_1: entered allmulticast mode [ 220.047967][ T8940] bridge_slave_1: entered promiscuous mode [ 220.103755][ T8940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.122610][ T8940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.194250][ T8940] team0: Port device team_slave_0 added [ 220.198429][ T8940] team0: Port device team_slave_1 added [ 220.211043][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 220.211118][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 220.276044][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.278631][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.288090][ T8940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.294272][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.296814][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.306372][ T8940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.314603][ T12] hsr_slave_0: left promiscuous mode [ 220.317753][ T12] hsr_slave_1: left promiscuous mode [ 220.338265][ T12] veth1_macvtap: left promiscuous mode [ 220.340107][ T12] veth0_macvtap: left promiscuous mode [ 220.341963][ T12] veth1_vlan: left promiscuous mode [ 220.343638][ T12] veth0_vlan: left promiscuous mode [ 220.764659][ T8975] binder: 8974:8975 ioctl 40046205 0 returned -22 [ 221.417069][ T5953] Bluetooth: hci3: command tx timeout [ 222.187585][ T8998] binder: 8996:8998 ioctl 40046205 0 returned -22 [ 222.843546][ T8940] hsr_slave_0: entered promiscuous mode [ 222.848479][ T8940] hsr_slave_1: entered promiscuous mode [ 222.850633][ T8940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.854104][ T8940] Cannot create hsr debugfs directory [ 223.276523][ T9031] nbd3: detected capacity change from 0 to 67108884 [ 223.294093][ T7472] block nbd3: Send control failed (result -89) [ 223.295936][ T7472] block nbd3: Request send failed, requeueing [ 223.297805][ T8118] block nbd3: Dead connection, failed to find a fallback [ 223.298894][ T5953] block nbd3: Receive control failed (result -32) [ 223.299803][ T8118] block nbd3: shutting down sockets [ 223.303388][ T8118] blk_print_req_error: 24 callbacks suppressed [ 223.303396][ T8118] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.307777][ T8118] buffer_io_error: 23 callbacks suppressed [ 223.307784][ T8118] Buffer I/O error on dev nbd3, logical block 0, async page read [ 223.311848][ T7472] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.314429][ T7472] Buffer I/O error on dev nbd3, logical block 0, async page read [ 223.316750][ T7472] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.319306][ T7472] Buffer I/O error on dev nbd3, logical block 0, async page read [ 223.321684][ T7472] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.324295][ T7472] Buffer I/O error on dev nbd3, logical block 0, async page read [ 223.326672][ T7472] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.327272][ T12] IPVS: stop unused estimator thread 0... [ 223.329238][ T7472] Buffer I/O error on dev nbd3, logical block 0, async page read [ 223.334683][ T7472] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.337305][ T7472] Buffer I/O error on dev nbd3, logical block 0, async page read [ 223.339606][ T7472] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.342272][ T7472] Buffer I/O error on dev nbd3, logical block 0, async page read [ 223.344548][ T7472] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.347146][ T7472] Buffer I/O error on dev nbd3, logical block 0, async page read [ 223.350335][ T7472] ldm_validate_partition_table(): Disk read failed. [ 223.352355][ T7472] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.354923][ T7472] Buffer I/O error on dev nbd3, logical block 0, async page read [ 223.357243][ T7472] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.359671][ T7472] Buffer I/O error on dev nbd3, logical block 0, async page read [ 223.363413][ T7472] Dev nbd3: unable to read RDB block 0 [ 223.365150][ T7472] nbd3: unable to read partition table [ 223.388547][ T9040] ldm_validate_partition_table(): Disk read failed. [ 223.393018][ T9040] Dev nbd3: unable to read RDB block 0 [ 223.395428][ T9040] nbd3: unable to read partition table [ 223.399477][ T7472] ldm_validate_partition_table(): Disk read failed. [ 223.402128][ T7472] Dev nbd3: unable to read RDB block 0 [ 223.404044][ T7472] nbd3: unable to read partition table [ 223.420548][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 223.425288][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554441, location=33554441 [ 223.440346][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554185, location=33554185 [ 223.446020][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554440, location=33554440 [ 223.452116][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554184, location=33554184 [ 223.457281][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554439, location=33554439 [ 223.463072][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554183, location=33554183 [ 223.468230][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554291, location=33554291 [ 223.473288][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554035, location=33554035 [ 223.478535][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554289, location=33554289 [ 223.482572][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554033, location=33554033 [ 223.487347][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 223.492757][ T5953] Bluetooth: hci3: command tx timeout [ 223.508434][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 223.512506][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777220, location=16777220 [ 223.518123][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776964, location=16776964 [ 223.524871][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777219, location=16777219 [ 223.529902][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776963, location=16776963 [ 223.534258][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777218, location=16777218 [ 223.537879][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776962, location=16776962 [ 223.543513][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777070, location=16777070 [ 223.548538][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776814, location=16776814 [ 223.580201][ T8940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 223.584558][ T8940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 223.589289][ T8940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.592862][ T8940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.620599][ T8940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.631034][ T8940] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.635724][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.637777][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.644121][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.646272][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.663042][ T8940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.707441][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777068, location=16777068 [ 223.712668][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776812, location=16776812 [ 223.717477][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 223.722338][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 223.726036][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388609, location=8388609 [ 223.730094][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388353, location=8388353 [ 223.734467][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388608, location=8388608 [ 223.736412][ T8940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.738362][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388352, location=8388352 [ 223.744285][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388607, location=8388607 [ 223.748405][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388351, location=8388351 [ 223.758772][ T8940] veth0_vlan: entered promiscuous mode [ 223.765255][ T8940] veth1_vlan: entered promiscuous mode [ 223.776179][ T8940] veth0_macvtap: entered promiscuous mode [ 223.780628][ T8940] veth1_macvtap: entered promiscuous mode [ 223.782219][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388459, location=8388459 [ 223.789354][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388203, location=8388203 [ 223.794246][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.794643][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388457, location=8388457 [ 223.801965][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.806041][ T8940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.808729][ T8940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.812741][ T8940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.815358][ T8940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.829452][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388201, location=8388201 [ 223.844762][ T9040] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 223.850070][ T9040] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 223.859945][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.867579][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.880523][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.883090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.830761][ T9088] Bluetooth: MGMT ver 1.23 [ 225.581250][ T5953] Bluetooth: hci3: command tx timeout [ 225.610362][ T9099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'. [ 225.615657][ T9099] 9pnet_fd: Insufficient options for proto=fd [ 226.057097][ T9117] netlink: 256 bytes leftover after parsing attributes in process `syz.2.648'. [ 226.165114][ T9117] binder: 9114:9117 ioctl c0306201 20000400 returned -14 [ 227.152753][ T9147] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.155549][ T9147] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.158125][ T9147] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.160630][ T9147] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.163304][ T9147] vxlan0: entered promiscuous mode [ 227.164836][ T9147] vxlan0: entered allmulticast mode [ 227.172479][ T9147] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.175058][ T9147] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.177658][ T9147] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.180198][ T9147] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.653292][ T5953] Bluetooth: hci3: command tx timeout [ 228.548633][ T9170] binder: 9168:9170 ioctl 40046205 0 returned -22 [ 228.852197][ T9184] nbd2: detected capacity change from 0 to 67108884 [ 228.865027][ T9189] block nbd2: Send control failed (result -89) [ 228.866924][ T9189] block nbd2: Request send failed, requeueing [ 228.881837][ T52] block nbd2: Dead connection, failed to find a fallback [ 228.886107][ T52] block nbd2: shutting down sockets [ 228.888980][ T52] blk_print_req_error: 82 callbacks suppressed [ 228.889221][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.895968][ T52] buffer_io_error: 42 callbacks suppressed [ 228.895979][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 228.902934][ T9189] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.905652][ T9189] Buffer I/O error on dev nbd2, logical block 0, async page read [ 228.907974][ T9189] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.911535][ T9189] Buffer I/O error on dev nbd2, logical block 0, async page read [ 228.930178][ T9189] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.939905][ T9189] Buffer I/O error on dev nbd2, logical block 0, async page read [ 229.008041][ T9189] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.011236][ T9189] Buffer I/O error on dev nbd2, logical block 0, async page read [ 229.015396][ T9189] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.018843][ T9189] Buffer I/O error on dev nbd2, logical block 0, async page read [ 229.024847][ T9189] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.028176][ T9189] Buffer I/O error on dev nbd2, logical block 0, async page read [ 229.037988][ T9189] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.041304][ T9189] Buffer I/O error on dev nbd2, logical block 0, async page read [ 229.060765][ T9189] ldm_validate_partition_table(): Disk read failed. [ 229.074107][ T9189] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.084028][ T9189] Buffer I/O error on dev nbd2, logical block 0, async page read [ 229.094694][ T9189] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.101228][ T9189] Buffer I/O error on dev nbd2, logical block 0, async page read [ 229.122319][ T9189] Dev nbd2: unable to read RDB block 0 [ 229.140661][ T9189] nbd2: unable to read partition table [ 229.148006][ T7472] ldm_validate_partition_table(): Disk read failed. [ 229.150846][ T7472] Dev nbd2: unable to read RDB block 0 [ 229.153419][ T7472] nbd2: unable to read partition table [ 229.157258][ T7472] ldm_validate_partition_table(): Disk read failed. [ 229.160046][ T7472] Dev nbd2: unable to read RDB block 0 [ 229.166898][ T7472] nbd2: unable to read partition table [ 229.225146][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 229.274068][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554441, location=33554441 [ 229.282590][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554185, location=33554185 [ 229.293531][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554440, location=33554440 [ 229.309333][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554184, location=33554184 [ 229.315635][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554439, location=33554439 [ 229.319065][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554183, location=33554183 [ 229.322512][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554291, location=33554291 [ 229.325859][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554035, location=33554035 [ 229.329054][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554289, location=33554289 [ 229.332281][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554033, location=33554033 [ 229.335566][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 229.340051][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 229.347076][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220 [ 229.350775][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964 [ 229.354222][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219 [ 229.477378][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963 [ 229.481325][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218 [ 229.485168][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962 [ 229.488775][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070 [ 229.497588][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814 [ 229.504065][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068 [ 229.508946][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812 [ 229.513400][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 229.517767][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 229.521820][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609 [ 229.529311][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353 [ 229.534174][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608 [ 229.537512][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352 [ 229.541219][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607 [ 229.544801][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351 [ 229.548115][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459 [ 229.552319][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203 [ 229.555619][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457 [ 229.563173][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201 [ 229.566789][ T9189] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 229.569790][ T9189] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 229.900799][ T9] IPVS: starting estimator thread 0... [ 229.903318][ T9195] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 229.991117][ T9198] IPVS: using max 38 ests per chain, 91200 per kthread [ 230.282637][ T9200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.670'. [ 230.553134][ T1146] IPVS: stop unused estimator thread 0... [ 230.559699][ T68] Bluetooth: hci4: Frame reassembly failed (-84) [ 231.272968][ T9223] netlink: 'syz.0.664': attribute type 10 has an invalid length. [ 231.279852][ T9223] team0: Port device netdevsim0 added [ 231.286519][ T9223] netlink: 'syz.0.664': attribute type 10 has an invalid length. [ 231.295466][ T9223] team0: Port device netdevsim0 removed [ 231.302420][ T9223] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 231.803578][ T9228] binder: 9227:9228 ioctl 40046205 0 returned -22 [ 232.621284][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 233.083767][ T9248] nbd1: detected capacity change from 0 to 67108884 [ 233.109930][ T7472] block nbd1: Send control failed (result -89) [ 233.112481][ T7472] block nbd1: Request send failed, requeueing [ 233.114444][ T52] block nbd1: Dead connection, failed to find a fallback [ 233.116596][ T52] block nbd1: shutting down sockets [ 233.118516][ T7472] ldm_validate_partition_table(): Disk read failed. [ 233.120846][ T7472] Dev nbd1: unable to read RDB block 0 [ 233.122886][ T7472] nbd1: unable to read partition table [ 233.126097][ T7472] ldm_validate_partition_table(): Disk read failed. [ 233.128598][ T7472] Dev nbd1: unable to read RDB block 0 [ 233.131243][ T7472] nbd1: unable to read partition table [ 233.286720][ T9257] ldm_validate_partition_table(): Disk read failed. [ 233.291459][ T9257] Dev nbd1: unable to read RDB block 0 [ 233.293811][ T9257] nbd1: unable to read partition table [ 233.300198][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 233.307998][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554441, location=33554441 [ 233.311792][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554185, location=33554185 [ 233.315115][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554440, location=33554440 [ 233.318488][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554184, location=33554184 [ 233.322516][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554439, location=33554439 [ 233.326005][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554183, location=33554183 [ 233.331470][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554291, location=33554291 [ 233.335465][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554035, location=33554035 [ 233.339068][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554289, location=33554289 [ 233.342800][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554033, location=33554033 [ 233.346308][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 233.368435][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 233.379162][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777220, location=16777220 [ 233.387737][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776964, location=16776964 [ 233.395040][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777219, location=16777219 [ 233.402329][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776963, location=16776963 [ 233.406125][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777218, location=16777218 [ 233.414260][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776962, location=16776962 [ 233.430355][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777070, location=16777070 [ 233.435326][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776814, location=16776814 [ 233.439154][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777068, location=16777068 [ 233.443274][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776812, location=16776812 [ 233.447320][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 233.452571][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 233.455532][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388609, location=8388609 [ 233.459105][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388353, location=8388353 [ 233.463646][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388608, location=8388608 [ 233.468099][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388352, location=8388352 [ 233.473059][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388607, location=8388607 [ 233.476240][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388351, location=8388351 [ 233.479342][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388459, location=8388459 [ 233.482929][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388203, location=8388203 [ 233.485991][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388457, location=8388457 [ 233.489067][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388201, location=8388201 [ 233.499097][ T9257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 233.503111][ T9257] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 233.866969][ T9265] binder: 9264:9265 ioctl 40046205 0 returned -22 [ 235.784860][ T9294] binder: 9293:9294 ioctl 40046205 0 returned -22 [ 236.943836][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 237.553280][ T9340] netlink: 284 bytes leftover after parsing attributes in process `syz.2.691'. [ 237.757899][ T9348] netlink: 'syz.1.692': attribute type 1 has an invalid length. [ 237.760162][ T9348] netlink: 224 bytes leftover after parsing attributes in process `syz.1.692'. [ 238.522740][ T9361] binder: 9360:9361 ioctl 40046205 0 returned -22 [ 239.049679][ T9371] binder: 9370:9371 ioctl 40046205 0 returned -22 [ 239.052551][ T9371] binder: 9370:9371 ioctl c0306201 0 returned -14 [ 240.118400][ T9401] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.121052][ T9401] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.123608][ T9401] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.126196][ T9401] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.128781][ T9401] vxlan0: entered promiscuous mode [ 240.130283][ T9401] vxlan0: entered allmulticast mode [ 240.136062][ T9401] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.138686][ T9401] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.141314][ T9401] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.143929][ T9401] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.097288][ T9417] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 241.107196][ T9417] binder: 9412:9417 ioctl 4018620d 0 returned -22 [ 241.726232][ T9422] binder: 9421:9422 ioctl 40046205 0 returned -22 [ 241.791040][ T9422] binder: 9421:9422 ioctl c0306201 0 returned -14 [ 242.094073][ T9433] input: syz0 as /devices/virtual/input/input8 [ 242.784315][ T9450] binder: 9449:9450 ioctl 40046205 0 returned -22 [ 243.633016][ T9467] input: syz0 as /devices/virtual/input/input9 [ 245.392682][ T9496] binder: 9495:9496 ioctl 40046205 0 returned -22 [ 245.397335][ T9496] binder: 9495:9496 ioctl c0306201 0 returned -14 [ 246.927414][ T832] IPVS: starting estimator thread 0... [ 246.933571][ T9517] 9pnet_fd: Insufficient options for proto=fd [ 247.011486][ T9518] IPVS: using max 40 ests per chain, 96000 per kthread [ 247.091843][ T9521] binder: 9520:9521 ioctl 40046205 0 returned -22 [ 247.234030][ T9522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.729'. [ 247.973262][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 247.975987][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 249.975802][ T9563] binder: 9562:9563 ioctl 40046205 0 returned -22 [ 251.417055][ T9595] net_ratelimit: 10 callbacks suppressed [ 251.417068][ T9595] batman_adv: batadv0: Local translation table size (124) exceeds maximum packet size (-320); Ignoring new local tt entry: 24:02:48:ff:05:00 [ 251.423280][ T9595] batman_adv: batadv0: Local translation table size (124) exceeds maximum packet size (-320); Ignoring new local tt entry: 24:02:48:ff:05:00 [ 251.427811][ T9595] batman_adv: batadv0: Local translation table size (124) exceeds maximum packet size (-320); Ignoring new local tt entry: 24:02:48:ff:05:00 [ 251.431801][ T56] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 251.462490][ T9595] bond0: entered promiscuous mode [ 251.464097][ T9595] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 251.466637][ T9595] batadv0: entered promiscuous mode [ 251.924205][ T1134] Bluetooth: hci4: Frame reassembly failed (-84) [ 252.735078][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 252.990859][ T40] kauditd_printk_skb: 510 callbacks suppressed [ 252.990876][ T40] audit: type=1326 audit(1735251696.501:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 253.002893][ T40] audit: type=1326 audit(1735251696.501:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 253.009625][ T40] audit: type=1326 audit(1735251696.521:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 253.016392][ T40] audit: type=1326 audit(1735251696.521:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 253.024769][ T40] audit: type=1326 audit(1735251696.521:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 253.032015][ T40] audit: type=1326 audit(1735251696.521:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 253.038251][ T40] audit: type=1326 audit(1735251696.521:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 253.046245][ T40] audit: type=1326 audit(1735251696.521:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 253.052579][ T40] audit: type=1326 audit(1735251696.521:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 253.058922][ T40] audit: type=1326 audit(1735251696.521:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 253.981086][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 253.981116][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 255.092045][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.591321][ T9671] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 260.560716][ T9713] input: syz0 as /devices/virtual/input/input10 [ 260.933066][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.936634][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.939486][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.951112][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.962226][ T5953] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 260.964681][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.048388][ T9718] chnl_net:caif_netlink_parms(): no params data found [ 261.100397][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.103270][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.106750][ T9718] bridge_slave_0: entered allmulticast mode [ 261.109094][ T9718] bridge_slave_0: entered promiscuous mode [ 261.113449][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.115603][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.117703][ T9718] bridge_slave_1: entered allmulticast mode [ 261.119915][ T9718] bridge_slave_1: entered promiscuous mode [ 261.146446][ T9718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.150483][ T9718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.174882][ T9718] team0: Port device team_slave_0 added [ 261.178728][ T9718] team0: Port device team_slave_1 added [ 261.197778][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.199820][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.209643][ T9718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.214563][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.216488][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.223952][ T9718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.247025][ T9718] hsr_slave_0: entered promiscuous mode [ 261.249060][ T9718] hsr_slave_1: entered promiscuous mode [ 261.253177][ T9718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.255410][ T9718] Cannot create hsr debugfs directory [ 261.335291][ T9718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.349680][ T9718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.359483][ T9718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.365021][ T9718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.387791][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.390581][ T9718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.393598][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.396464][ T9718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.432199][ T9732] binder: 9731:9732 ioctl 40046205 0 returned -22 [ 261.448614][ T9718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.457744][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.463617][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.478997][ T9718] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.487519][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.489691][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.497776][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.500615][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.629318][ T9718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.735568][ T9718] veth0_vlan: entered promiscuous mode [ 261.744561][ T9718] veth1_vlan: entered promiscuous mode [ 261.763884][ T9718] veth0_macvtap: entered promiscuous mode [ 261.767978][ T9718] veth1_macvtap: entered promiscuous mode [ 261.775002][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.778169][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.782152][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.785624][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.788809][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.792541][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.800778][ T9718] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.803569][ T9718] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.807844][ T9718] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.811892][ T9718] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.999980][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.006392][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.021151][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.024015][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.238333][ T56] IPVS: starting estimator thread 0... [ 262.240185][ T9752] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 262.321680][ T9755] IPVS: using max 40 ests per chain, 96000 per kthread [ 262.897865][ T1134] IPVS: stop unused estimator thread 0... [ 263.012562][ T5954] Bluetooth: hci2: command tx timeout [ 264.333126][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 264.614015][ T9796] binder: 9795:9796 ioctl 40046205 0 returned -22 [ 265.101163][ T5953] Bluetooth: hci2: command tx timeout [ 265.130461][ T9808] input: syz0 as /devices/virtual/input/input11 [ 265.785377][ T9822] block device autoloading is deprecated and will be removed. [ 267.171534][ T5953] Bluetooth: hci2: command 0x040f tx timeout [ 267.503622][ T9835] syzkaller0: entered promiscuous mode [ 267.505307][ T9835] syzkaller0: entered allmulticast mode [ 268.695605][ T9856] binder: 9855:9856 ioctl 40046205 0 returned -22 [ 269.263150][ T5954] Bluetooth: hci2: command 0x040f tx timeout [ 269.999575][ T9884] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 270.507306][ T9873] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.510265][ T9873] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.596172][ T9873] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 270.604240][ T9873] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 270.615562][ T9873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.617498][ T9873] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 270.648823][ T9873] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 271.783413][ T9958] netlink: 72 bytes leftover after parsing attributes in process `syz.0.809'. [ 271.812555][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 272.541146][ T5953] Bluetooth: hci3: command 0x0c1a tx timeout [ 272.691086][ T5953] Bluetooth: hci2: command 0x040f tx timeout [ 274.210010][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 274.210022][ T40] audit: type=1800 audit(1735251717.721:1006): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.817" name="file1" dev="overlay" ino=94 res=0 errno=0 [ 274.751213][ T5953] Bluetooth: hci3: command 0x0c1a tx timeout [ 274.772756][ T5953] Bluetooth: hci2: command 0x040f tx timeout [ 276.187216][T10024] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 276.771067][ T5953] Bluetooth: hci3: command 0x0c1a tx timeout [ 276.861865][ T5953] Bluetooth: hci2: command 0x040f tx timeout [ 278.372072][ T831] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 279.366560][T10072] random: crng reseeded on system resumption [ 279.500809][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 279.793349][T10078] binder: 10077:10078 ioctl 40046205 0 returned -22 [ 290.404317][T10100] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 290.417824][T10100] kvm: pic: non byte read [ 290.429500][T10100] kvm: pic: non byte read [ 290.436655][T10100] kvm: pic: non byte read [ 290.440752][T10100] kvm: pic: non byte read [ 290.454446][T10100] kvm: pic: non byte read [ 290.458929][T10100] kvm: pic: non byte read [ 290.470058][T10100] kvm: pic: single mode not supported [ 290.470310][T10100] kvm: pic: level sensitive irq not supported [ 290.474468][T10100] kvm: pic: non byte read [ 290.489724][T10100] kvm: pic: non byte read [ 290.496090][T10100] kvm: pic: non byte read [ 290.503712][T10100] kvm: pic: non byte read [ 290.510646][T10100] kvm: pic: single mode not supported [ 291.461280][T10124] tun0: tun_chr_ioctl cmd 1074025675 [ 291.465253][T10124] tun0: persist enabled [ 291.468261][T10124] tun0: tun_chr_ioctl cmd 1074025675 [ 291.469867][T10124] tun0: persist enabled [ 291.946688][ T56] libceph: connect (1)[c::]:6789 error -101 [ 291.949125][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 292.084983][T10142] ceph: No mds server is up or the cluster is laggy [ 292.906499][ T40] audit: type=1326 audit(1735251736.421:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000 [ 292.914916][ T40] audit: type=1326 audit(1735251736.421:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000 [ 292.926754][ T40] audit: type=1326 audit(1735251736.421:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.846" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f7f579 code=0x7ffc0000 [ 292.936915][ T40] audit: type=1326 audit(1735251736.421:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000 [ 292.946589][ T40] audit: type=1326 audit(1735251736.421:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000 [ 292.955705][ T40] audit: type=1326 audit(1735251736.421:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.846" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f7f579 code=0x7ffc0000 [ 292.962318][ T40] audit: type=1326 audit(1735251736.421:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000 [ 292.968550][ T40] audit: type=1326 audit(1735251736.421:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000 [ 292.974738][ T40] audit: type=1326 audit(1735251736.421:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.846" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f7f579 code=0x7ffc0000 [ 292.980831][ T40] audit: type=1326 audit(1735251736.421:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.4.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000 [ 293.103156][T10152] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 293.106160][T10152] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.108662][T10152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 294.451073][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 295.079325][T10195] input: syz0 as /devices/virtual/input/input12 [ 295.181029][ T5954] Bluetooth: hci3: command 0x0c1a tx timeout [ 295.182878][ T5953] Bluetooth: hci2: command 0x040f tx timeout [ 295.446594][ T5954] Bluetooth: hci2: unexpected event for opcode 0x6503 [ 295.585762][T10209] block nbd4: NBD_DISCONNECT [ 295.588173][T10209] block nbd4: Disconnected due to user request. [ 295.592414][T10209] block nbd4: shutting down sockets [ 297.640937][T10245] binder: 10244:10245 ioctl 40046205 0 returned -22 [ 298.929837][T10276] 9pnet_virtio: no channels available for device c::: [ 299.356939][T10287] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 299.370938][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.501913][ T5954] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 299.504221][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.504642][ T5954] Bluetooth: hci2: Injecting HCI hardware error event [ 299.511556][ T5953] Bluetooth: hci2: hardware error 0x00 [ 299.580922][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.670963][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.013447][T10289] bond0: entered promiscuous mode [ 300.015008][T10289] batadv0: entered promiscuous mode [ 300.136365][ T831] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 300.784502][T10313] smc: net device wg0 applied user defined pnetid SYZ0 [ 301.571030][ T5953] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 302.376526][T10337] random: crng reseeded on system resumption [ 302.487506][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 311.411554][ C0] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 24:02:48:ff:05:00 [ 316.536318][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.952834][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 318.235016][T10359] syz.2.888 (10359) used greatest stack depth: 19616 bytes left [ 318.743834][ T56] libceph: connect (1)[c::]:6789 error -101 [ 318.745658][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 318.749680][ T56] libceph: connect (1)[c::]:6789 error -101 [ 318.751546][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 318.910045][T10394] ceph: No mds server is up or the cluster is laggy [ 319.541111][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 319.691032][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 319.776168][ T30] usb 6-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 319.778812][ T30] usb 6-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 319.785705][ T30] usb 6-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 319.788386][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.790738][ T30] usb 6-1: Product: syz [ 319.792078][ T30] usb 6-1: Manufacturer: syz [ 319.793450][ T30] usb 6-1: SerialNumber: syz [ 319.808295][ T30] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 319.829758][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 319.889154][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 319.896085][ T30] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 319.899698][ T30] usb 6-1: media controller created [ 320.054528][T10420] netlink: 'syz.4.901': attribute type 2 has an invalid length. [ 320.065447][T10420] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 320.091742][T10420] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 320.142547][T10421] wireguard0: entered promiscuous mode [ 320.144203][T10421] wireguard0: entered allmulticast mode [ 320.184210][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.194437][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 320.196648][ T30] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 320.202153][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input13 [ 320.205785][ T30] dvb-usb: schedule remote query interval to 150 msecs. [ 320.207843][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 320.221076][ T30] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 320.362938][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 320.365189][ T30] dvb-usb: error while querying for an remote control event. [ 320.576391][T10431] syz.0.902: attempt to access beyond end of device [ 320.576391][T10431] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 320.580971][T10431] syz.0.902: attempt to access beyond end of device [ 320.580971][T10431] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 320.585136][T10431] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 320.586532][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.588690][T10431] syz.0.902: attempt to access beyond end of device [ 320.588690][T10431] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 320.592319][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 320.595344][T10431] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 320.604364][T10431] syz.0.902: attempt to access beyond end of device [ 320.604364][T10431] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 320.605256][ T30] dvb-usb: error while querying for an remote control event. [ 320.608060][T10431] syz.0.902: attempt to access beyond end of device [ 320.608060][T10431] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 320.613818][T10431] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 320.616606][T10431] syz.0.902: attempt to access beyond end of device [ 320.616606][T10431] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 320.621057][T10431] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 320.624654][T10431] syz.0.902: attempt to access beyond end of device [ 320.624654][T10431] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 320.628556][T10431] syz.0.902: attempt to access beyond end of device [ 320.628556][T10431] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 320.634614][T10431] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 320.639132][T10431] syz.0.902: attempt to access beyond end of device [ 320.639132][T10431] nbd0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 320.643310][T10431] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 320.647214][T10431] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 320.781012][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 320.784221][ T30] dvb-usb: error while querying for an remote control event. [ 320.942741][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 320.945217][ T30] dvb-usb: error while querying for an remote control event. [ 321.101047][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 321.103441][ T30] dvb-usb: error while querying for an remote control event. [ 321.244433][T10432] block nbd0: shutting down sockets [ 321.261056][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 321.262791][ T5827] dvb-usb: error while querying for an remote control event. [ 321.421077][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 321.422803][ T5827] dvb-usb: error while querying for an remote control event. [ 321.586840][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 321.589406][ T5827] dvb-usb: error while querying for an remote control event. [ 321.771091][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 321.772846][ T5827] dvb-usb: error while querying for an remote control event. [ 321.942949][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 321.944651][ T30] dvb-usb: error while querying for an remote control event. [ 322.089178][ T6002] usb 6-1: USB disconnect, device number 5 [ 322.110073][ T6002] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 322.184937][ T5953] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 323.158893][T10473] capability: warning: `syz.0.913' uses deprecated v2 capabilities in a way that may be insecure [ 323.163867][T10473] kernel profiling enabled (shift: 9) [ 323.739618][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 323.895769][T10499] netlink: 'syz.2.917': attribute type 10 has an invalid length. [ 323.914525][T10499] bond0: (slave wlan1): Opening slave failed [ 324.060408][T10494] ptrace attach of "/syz-executor exec"[8940] was attempted by "/syz-executor exec"[10494] [ 325.331004][ T5954] Bluetooth: hci3: command 0x0c1a tx timeout [ 325.784185][T10543] lo speed is unknown, defaulting to 1000 [ 325.787602][T10543] lo speed is unknown, defaulting to 1000 [ 325.789472][T10543] lo speed is unknown, defaulting to 1000 [ 325.843429][T10543] infiniband syz0: set active [ 325.845952][ T831] lo speed is unknown, defaulting to 1000 [ 325.848709][T10543] infiniband syz0: added lo [ 325.879802][T10543] RDS/IB: syz0: added [ 325.893735][T10543] smc: adding ib device syz0 with port count 1 [ 325.899800][ T1146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.900784][T10543] smc: ib device syz0 port 1 has pnetid [ 325.913546][ T35] lo speed is unknown, defaulting to 1000 [ 325.915719][T10543] lo speed is unknown, defaulting to 1000 [ 325.977094][ T1146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.981837][T10543] lo speed is unknown, defaulting to 1000 [ 326.019778][T10543] lo speed is unknown, defaulting to 1000 [ 326.044293][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.053394][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.061654][ T1146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.063325][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.068344][T10543] lo speed is unknown, defaulting to 1000 [ 326.069803][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.073355][ T5954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 326.075587][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.138505][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.930'. [ 326.164414][ T1146] bond0: (slave netdevsim0): Releasing backup interface [ 326.168627][ T1146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.177435][T10549] lo speed is unknown, defaulting to 1000 [ 326.194385][T10554] team0: Port device bridge1 added [ 326.198435][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'. [ 326.223255][T10543] lo speed is unknown, defaulting to 1000 [ 326.318761][T10549] chnl_net:caif_netlink_parms(): no params data found [ 326.778604][T10564] Bluetooth: hci4: Frame reassembly failed (-84) [ 326.785137][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 326.786980][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 326.895292][ T1146] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 326.900629][ T1146] bond0 (unregistering): Released all slaves [ 326.980515][ T1146] bond1 (unregistering): Released all slaves [ 327.020696][T10566] lo speed is unknown, defaulting to 1000 [ 327.138170][T10549] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.140408][T10549] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.144335][T10549] bridge_slave_0: entered allmulticast mode [ 327.146490][T10549] bridge_slave_0: entered promiscuous mode [ 327.172509][T10549] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.174490][T10549] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.176485][T10549] bridge_slave_1: entered allmulticast mode [ 327.191183][T10549] bridge_slave_1: entered promiscuous mode [ 327.309826][T10549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.315052][T10549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.360831][T10549] team0: Port device team_slave_0 added [ 327.376959][T10549] team0: Port device team_slave_1 added [ 327.453363][T10549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.455418][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.463023][T10549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.469005][ T1146] hsr_slave_0: left promiscuous mode [ 327.472451][ T1146] hsr_slave_1: left promiscuous mode [ 327.486840][ T1146] veth1_macvtap: left promiscuous mode [ 327.488491][ T1146] veth0_macvtap: left promiscuous mode [ 327.605711][T10582] netlink: 'syz.2.934': attribute type 13 has an invalid length. [ 327.607950][T10582] netlink: 152 bytes leftover after parsing attributes in process `syz.2.934'. [ 328.133838][ T5954] Bluetooth: hci1: command tx timeout [ 328.413970][ T1146] smc: removing net device wg0 with user defined pnetid SYZ0 [ 328.613862][T10549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.616084][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.623819][T10549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.634967][T10581] syz_tun: entered promiscuous mode [ 328.641825][T10581] batadv_slave_1: entered promiscuous mode [ 328.667370][T10582] syz_tun: refused to change device tx_queue_len [ 328.669180][T10582] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 328.675482][T10583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'. [ 328.743650][T10549] hsr_slave_0: entered promiscuous mode [ 328.745801][T10549] hsr_slave_1: entered promiscuous mode [ 328.851153][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 328.917879][T10592] netlink: 180 bytes leftover after parsing attributes in process `syz.2.935'. [ 328.921075][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.935'. [ 328.924453][T10592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.935'. [ 328.927127][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.935'. [ 328.958830][T10549] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 328.979154][T10549] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 329.006680][T10549] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 329.020395][T10549] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 329.104289][T10549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.122070][T10549] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.126647][ T1146] IPVS: stop unused estimator thread 0... [ 329.183879][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.185941][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.188603][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.190562][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.315038][T10549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.445708][T10549] veth0_vlan: entered promiscuous mode [ 329.456553][T10549] veth1_vlan: entered promiscuous mode [ 329.470731][T10549] veth0_macvtap: entered promiscuous mode [ 329.474554][T10549] veth1_macvtap: entered promiscuous mode [ 329.483750][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.486708][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.489520][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.504907][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.508431][T10549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.514215][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.517224][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.520007][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.525578][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.528808][T10549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.535017][T10549] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.537637][T10549] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.540220][T10549] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.546286][T10549] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.597203][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.600395][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.621735][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.624174][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.697015][T10636] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 329.891483][T10638] binder: 10637:10638 ioctl 40046205 0 returned -22 [ 330.164388][T10659] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 330.211063][ T5954] Bluetooth: hci1: command tx timeout [ 332.301108][ T5954] Bluetooth: hci1: command tx timeout [ 332.564470][T10713] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 332.566948][T10713] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 332.571577][T10713] vhci_hcd vhci_hcd.0: Device attached [ 332.751158][ T832] vhci_hcd: vhci_device speed not set [ 332.811069][ T832] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 333.812827][T10714] vhci_hcd: connection reset by peer [ 333.822855][ T68] vhci_hcd: stop threads [ 333.824717][ T68] vhci_hcd: release socket [ 333.827130][ T68] vhci_hcd: disconnect device [ 334.371211][ T5954] Bluetooth: hci1: command tx timeout [ 334.661584][T10744] ata1.00: invalid command format 189 [ 335.730077][T10757] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 335.732974][T10757] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 335.735756][T10757] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 336.980579][T10789] program syz.5.966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.978779][T10810] netlink: 168 bytes leftover after parsing attributes in process `syz.2.969'. [ 337.986762][T10810] loop9: detected capacity change from 0 to 6 [ 337.996924][T10810] Dev loop9: unable to read RDB block 6 [ 337.998841][T10810] loop9: unable to read partition table [ 338.000870][T10810] loop9: partition table beyond EOD, truncated [ 338.002805][T10810] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 338.002805][T10810] ) failed (rc=-5) [ 338.173071][ T832] vhci_hcd: vhci_device speed not set [ 338.504675][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 338.825106][T10819] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 340.314258][ T40] kauditd_printk_skb: 311 callbacks suppressed [ 340.314270][ T40] audit: type=1804 audit(1735251783.831:1328): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.976" name="/newroot/237/file0/file0" dev="9p" ino=38928569 res=1 errno=0 [ 344.167815][T10968] netlink: 'syz.4.993': attribute type 4 has an invalid length. [ 344.185042][T10968] infiniband syz0: set down [ 344.186702][ T1330] lo speed is unknown, defaulting to 1000 [ 344.201030][ T1330] lo speed is unknown, defaulting to 1000 [ 344.680737][ T40] audit: type=1800 audit(1735251788.191:1329): pid=10978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.995" name="file1" dev="overlay" ino=1300 res=0 errno=0 [ 346.343856][T10998] random: crng reseeded on system resumption [ 346.414888][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1000'. [ 346.417499][T10999] bridge_slave_1: left allmulticast mode [ 346.419131][T10999] bridge_slave_1: left promiscuous mode [ 346.420821][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.456595][T10999] bridge_slave_0: left allmulticast mode [ 346.458527][T10999] bridge_slave_0: left promiscuous mode [ 346.461427][T10999] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.528280][T11006] binder: 11004:11006 ioctl 4018620d 0 returned -22 [ 347.027021][T11012] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 347.035215][T11012] picdev_read: 2 callbacks suppressed [ 347.035232][T11012] kvm: pic: non byte read [ 347.039182][T11012] kvm: pic: non byte read [ 347.042617][T11012] kvm: pic: non byte read [ 347.045004][T11012] kvm: pic: non byte read [ 347.047579][T11012] kvm: pic: non byte read [ 347.049931][T11012] kvm: pic: non byte read [ 347.052155][T11012] kvm: pic: single mode not supported [ 347.052165][T11012] kvm: pic: level sensitive irq not supported [ 347.054123][T11012] kvm: pic: non byte read [ 347.058593][T11012] kvm: pic: non byte read [ 347.061795][T11012] kvm: pic: non byte read [ 347.064310][T11012] kvm: pic: non byte read [ 347.067288][T11012] kvm: pic: single mode not supported [ 348.184359][T11039] ata1.00: invalid command format 189 [ 348.236355][T11042] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 350.595037][T11080] syz.4.1016: attempt to access beyond end of device [ 350.595037][T11080] nbd4: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 350.598975][T11080] XFS (nbd4): SB validate failed with error -5. [ 351.171110][ T5954] Bluetooth: hci1: command tx timeout [ 351.920739][T11092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.664616][ T8940] syz_tun (unregistering): left promiscuous mode [ 352.901207][ T1146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.999923][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.006059][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.011856][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.014931][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.017659][ T5953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 353.020784][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.041592][ T1146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.092765][T11129] lo speed is unknown, defaulting to 1000 [ 353.164483][ T1146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.299438][ T1146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.376773][T11129] chnl_net:caif_netlink_parms(): no params data found [ 353.527646][ T1146] bridge_slave_1: left allmulticast mode [ 353.529663][ T1146] bridge_slave_1: left promiscuous mode [ 353.533803][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.541654][ T1146] bridge_slave_0: left allmulticast mode [ 353.543837][ T1146] bridge_slave_0: left promiscuous mode [ 353.546428][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.982117][ T1146] team0: Port device bridge1 removed [ 354.176440][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.180966][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.184587][ T1146] bond0 (unregistering): Released all slaves [ 354.214854][T11129] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.217682][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.220603][T11129] bridge_slave_0: entered allmulticast mode [ 354.224799][T11129] bridge_slave_0: entered promiscuous mode [ 354.329456][T11129] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.335224][T11129] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.338213][T11129] bridge_slave_1: entered allmulticast mode [ 354.348879][T11129] bridge_slave_1: entered promiscuous mode [ 354.459325][T11129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.466053][T11129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.500171][T11129] team0: Port device team_slave_0 added [ 354.513856][T11129] team0: Port device team_slave_1 added [ 354.545577][T11129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.547725][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.556509][T11129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.560537][T11129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.564858][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.572197][T11129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.628218][ T1146] batadv_slave_1: left promiscuous mode [ 354.635960][ T1146] hsr_slave_0: left promiscuous mode [ 354.637994][ T1146] hsr_slave_1: left promiscuous mode [ 354.640100][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.643962][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.647117][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.649368][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.688134][ T1146] veth1_macvtap: left promiscuous mode [ 354.690146][ T1146] veth0_macvtap: left promiscuous mode [ 354.692064][ T1146] veth1_vlan: left promiscuous mode [ 354.693577][ T1146] veth0_vlan: left promiscuous mode [ 355.107070][ T5954] Bluetooth: hci3: command tx timeout [ 355.902198][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 356.743261][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 357.181001][ T5954] Bluetooth: hci3: command tx timeout [ 357.460320][T11129] hsr_slave_0: entered promiscuous mode [ 357.463423][T11129] hsr_slave_1: entered promiscuous mode [ 357.465517][T11129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.468092][T11129] Cannot create hsr debugfs directory [ 357.753405][T11129] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.764989][T11129] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.775451][T11129] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 357.815800][T11129] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 357.889163][T11129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.903233][T11129] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.909213][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.911981][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.919339][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.921735][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.940279][T11129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.954542][ T1146] IPVS: stop unused estimator thread 0... [ 358.018276][T11129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.123651][T11129] veth0_vlan: entered promiscuous mode [ 358.127480][T11129] veth1_vlan: entered promiscuous mode [ 358.137527][T11129] veth0_macvtap: entered promiscuous mode [ 358.140467][T11129] veth1_macvtap: entered promiscuous mode [ 358.150723][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.154843][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.157635][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.160687][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.164653][T11129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.169187][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.172313][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.175145][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.178101][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.182156][T11129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.187000][T11129] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.189842][T11129] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.193320][T11129] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.196503][T11129] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.244444][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.246883][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.259850][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.262899][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.369746][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1053'. [ 358.388786][T11252] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 359.251246][ T5954] Bluetooth: hci3: command tx timeout [ 359.360324][T11283] lo speed is unknown, defaulting to 1000 [ 359.905582][T11290] input: syz0 as /devices/virtual/input/input17 [ 360.563296][T11310] 9pnet_virtio: no channels available for device c::: [ 361.331183][ T5954] Bluetooth: hci3: command tx timeout [ 362.691043][T11334] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 362.694111][T11334] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ' [ 363.416355][T11348] tun0: tun_chr_ioctl cmd 1074025675 [ 363.417951][T11348] tun0: persist enabled [ 363.424803][T11348] tun0: tun_chr_ioctl cmd 1074025675 [ 363.426385][T11348] tun0: persist enabled [ 365.490082][T11291] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.608465][T11291] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.696328][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.700859][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.704801][T11291] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.709758][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.713184][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.716270][ T5953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 365.719156][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.745316][T11393] lo speed is unknown, defaulting to 1000 [ 365.792763][T11291] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.876999][T11393] chnl_net:caif_netlink_parms(): no params data found [ 366.019492][T11393] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.021723][T11393] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.024648][T11393] bridge_slave_0: entered allmulticast mode [ 366.027063][T11393] bridge_slave_0: entered promiscuous mode [ 366.029765][T11393] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.032266][T11393] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.035025][T11393] bridge_slave_1: entered allmulticast mode [ 366.037178][T11393] bridge_slave_1: entered promiscuous mode [ 366.385996][T11291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.391147][T11291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.396540][T11291] bond0 (unregistering): Released all slaves [ 366.482415][T11393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.499106][T11393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.521169][T11291] IPVS: stopping master sync thread 10636 ... [ 366.607303][T11393] team0: Port device team_slave_0 added [ 366.613667][T11393] team0: Port device team_slave_1 added [ 366.676750][T11393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.680102][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.689642][T11393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.700400][T11393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.706202][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.716331][T11393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.795358][T11393] hsr_slave_0: entered promiscuous mode [ 366.797540][T11393] hsr_slave_1: entered promiscuous mode [ 366.799762][T11393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.803998][T11393] Cannot create hsr debugfs directory [ 366.816026][T11291] hsr_slave_0: left promiscuous mode [ 366.818654][T11291] hsr_slave_1: left promiscuous mode [ 366.833234][T11291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.836293][T11291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.838928][T11291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.850972][T11291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.883365][T11291] veth1_macvtap: left promiscuous mode [ 366.885183][T11291] veth0_macvtap: left promiscuous mode [ 366.887036][T11291] veth1_vlan: left promiscuous mode [ 366.888565][T11291] veth0_vlan: left promiscuous mode [ 367.811107][ T5954] Bluetooth: hci1: command tx timeout [ 368.044329][T11432] random: crng reseeded on system resumption [ 368.148069][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 368.213749][ T5954] Bluetooth: hci3: command tx timeout [ 368.294682][T11291] team0 (unregistering): Port device team_slave_1 removed [ 368.299156][T11438] 9pnet_virtio: no channels available for device c::: [ 368.426837][T11291] team0 (unregistering): Port device team_slave_0 removed [ 369.325874][T11436] bridge_slave_1: left allmulticast mode [ 369.327401][T11436] bridge_slave_1: left promiscuous mode [ 369.328948][T11436] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.355611][T11436] bridge_slave_0: left allmulticast mode [ 369.358669][T11436] bridge_slave_0: left promiscuous mode [ 369.362393][T11436] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.671443][T11393] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 369.676415][T11393] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 369.687406][T11393] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 369.697531][T11393] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 369.797952][T11393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.811580][T11393] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.814168][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.817411][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.817456][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.828993][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.830471][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.834288][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.837394][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.851384][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.855526][ T5953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 369.860501][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.888517][T11455] lo speed is unknown, defaulting to 1000 [ 369.891223][ T5953] Bluetooth: hci1: command tx timeout [ 369.975343][T11291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.033760][T11455] chnl_net:caif_netlink_parms(): no params data found [ 370.053578][T11291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.079283][T11393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.121614][T11455] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.124424][T11455] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.127296][T11455] bridge_slave_0: entered allmulticast mode [ 370.130323][T11455] bridge_slave_0: entered promiscuous mode [ 370.160015][T11291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.166221][T11455] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.168953][T11455] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.172252][T11455] bridge_slave_1: entered allmulticast mode [ 370.175256][T11455] bridge_slave_1: entered promiscuous mode [ 370.201575][T11455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.205367][T11455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.237516][T11455] team0: Port device team_slave_0 added [ 370.254462][T11291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.264591][T11455] team0: Port device team_slave_1 added [ 370.317841][T11455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.320704][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.331881][T11455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.340152][T11455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.343559][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.352829][T11455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.415826][T11455] hsr_slave_0: entered promiscuous mode [ 370.435837][T11455] hsr_slave_1: entered promiscuous mode [ 370.482298][T11393] veth0_vlan: entered promiscuous mode [ 370.795266][T11291] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 370.798056][T11291] batadv0: left promiscuous mode [ 370.801849][T11291] bond0 (unregistering): Released all slaves [ 370.834661][T11393] veth1_vlan: entered promiscuous mode [ 370.884511][T11291] tipc: Disabling bearer [ 370.887802][T11291] tipc: Left network mode [ 370.907284][T11393] veth0_macvtap: entered promiscuous mode [ 370.916644][T11393] veth1_macvtap: entered promiscuous mode [ 370.953412][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.956580][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.959540][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.963167][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.966833][T11393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.969218][T11455] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 370.974444][T11455] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 370.983225][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.987185][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.990875][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.995691][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.001941][T11393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.005074][T11455] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 371.013004][T11455] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 371.020634][T11393] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.023885][T11393] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.026986][T11393] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.030066][T11393] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.117153][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.119988][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.128289][T11455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.135514][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.138672][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.143577][T11455] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.149863][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.152640][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.162219][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.164892][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.301095][T11291] hsr_slave_0: left promiscuous mode [ 371.321441][T11291] hsr_slave_1: left promiscuous mode [ 371.356485][T11291] veth1_macvtap: left promiscuous mode [ 371.358183][T11291] veth0_macvtap: left promiscuous mode [ 371.904877][ T5953] Bluetooth: hci0: command tx timeout [ 371.971327][ T5953] Bluetooth: hci1: command tx timeout [ 372.768804][T11532] netlink: 'syz.6.1086': attribute type 13 has an invalid length. [ 372.772326][T11532] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1086'. [ 373.214763][T11531] syz_tun: entered promiscuous mode [ 373.216887][T11531] batadv_slave_1: entered promiscuous mode [ 373.219621][T11532] syz_tun: refused to change device tx_queue_len [ 373.221529][T11532] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 373.226223][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1086'. [ 373.236668][T11455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.537405][T11455] veth0_vlan: entered promiscuous mode [ 373.543395][T11455] veth1_vlan: entered promiscuous mode [ 373.559265][T11291] IPVS: stop unused estimator thread 0... [ 373.571694][T11455] veth0_macvtap: entered promiscuous mode [ 373.574849][T11455] veth1_macvtap: entered promiscuous mode [ 373.583155][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.583168][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.583173][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.583180][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.583184][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.583190][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.583628][T11455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.586161][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.586187][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.586192][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.586199][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.586204][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.586210][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.586656][T11455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.592441][T11455] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.592512][T11455] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.592536][T11455] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.592560][T11455] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.655443][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.655456][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.681126][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.681141][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.001143][ T5953] Bluetooth: hci0: command tx timeout [ 374.022040][T11577] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 374.051060][ T5953] Bluetooth: hci1: command tx timeout [ 374.850711][T11602] binder: 11601:11602 ioctl 4018620d 0 returned -22 [ 374.914207][T11605] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 376.050983][ T5953] Bluetooth: hci0: command tx timeout [ 376.614043][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1101'. [ 377.416120][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1102'. [ 377.493537][T11721] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 377.973959][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.430497][T11743] lo speed is unknown, defaulting to 1000 [ 378.713135][T11752] syz.7.1107: attempt to access beyond end of device [ 378.713135][T11752] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 378.721920][T11752] syz.7.1107: attempt to access beyond end of device [ 378.721920][T11752] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 378.727411][T11752] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 378.734993][T11752] syz.7.1107: attempt to access beyond end of device [ 378.734993][T11752] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 378.740411][T11752] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 378.745077][T11752] syz.7.1107: attempt to access beyond end of device [ 378.745077][T11752] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 378.749952][T11752] syz.7.1107: attempt to access beyond end of device [ 378.749952][T11752] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 378.755697][T11752] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 378.759507][T11752] syz.7.1107: attempt to access beyond end of device [ 378.759507][T11752] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 378.765211][T11752] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 378.772956][T11752] syz.7.1107: attempt to access beyond end of device [ 378.772956][T11752] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 378.777720][T11752] syz.7.1107: attempt to access beyond end of device [ 378.777720][T11752] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 378.789798][T11752] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 378.797014][T11752] syz.7.1107: attempt to access beyond end of device [ 378.797014][T11752] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 378.825710][T11752] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 378.856366][T11752] syz.7.1107: attempt to access beyond end of device [ 378.856366][T11752] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 378.878153][T11752] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 378.886298][T11752] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 378.890019][T11752] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 379.355647][T11763] rdma_rxe: rxe_newlink: failed to add lo [ 379.396421][T11750] block nbd7: shutting down sockets [ 379.568825][T11770] netlink: 'syz.8.1110': attribute type 10 has an invalid length. [ 379.585036][T11770] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 379.607419][T10364] udevd[10364]: setting mode of /dev/loop0 to 060660 failed: Read-only file system [ 379.610309][T10364] udevd[10364]: setting owner of /dev/loop0 to uid=0, gid=6 failed: Read-only file system [ 379.616661][T11769] block device autoloading is deprecated and will be removed. [ 379.623224][T11770] ptrace attach of "/syz-executor exec"[11455] was attempted by "/syz-executor exec"[11770] [ 379.672321][T11767] netlink: 'syz.6.1108': attribute type 2 has an invalid length. [ 379.688536][T11767] netlink: 'syz.6.1108': attribute type 10 has an invalid length. [ 379.715680][T11767] bond0: (slave wlan1): Opening slave failed [ 380.051764][T11756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.307095][T11786] netlink: 'syz.4.1123': attribute type 10 has an invalid length. [ 380.316389][T11786] ptrace attach of "/syz-executor exec"[9718] was attempted by "/syz-executor exec"[11786] [ 381.203977][T11793] lo speed is unknown, defaulting to 1000 [ 381.418935][T11804] lo speed is unknown, defaulting to 1000 [ 382.646215][T11825] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 382.648398][T11825] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ' [ 382.648776][T11820] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 382.655588][T11820] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 382.669587][T11820] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 382.673852][T11820] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 382.683253][T11820] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 382.687260][T11820] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 382.693081][T11820] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 382.695967][T11820] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 382.698761][T11820] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 382.891792][ T64] Bluetooth: hci0: command 0x0405 tx timeout [ 383.282856][T11824] block nbd8: shutting down sockets [ 383.614360][T11851] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 384.281869][T11852] netlink: 'syz.7.1127': attribute type 2 has an invalid length. [ 384.286604][T11852] netlink: 'syz.7.1127': attribute type 10 has an invalid length. [ 384.289149][T11852] bond0: (slave wlan1): Opening slave failed [ 384.430269][T11848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.621362][T11872] nbd8: detected capacity change from 0 to 67108884 [ 384.626160][T10364] block nbd8: Send control failed (result -89) [ 384.628677][T10364] block nbd8: Request send failed, requeueing [ 384.634612][ T5954] block nbd8: Receive control failed (result -32) [ 384.640659][ T6249] block nbd8: Dead connection, failed to find a fallback [ 384.643512][ T6249] block nbd8: shutting down sockets [ 384.645518][ T6249] blk_print_req_error: 183 callbacks suppressed [ 384.645529][ T6249] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.651056][ T6249] buffer_io_error: 103 callbacks suppressed [ 384.651067][ T6249] Buffer I/O error on dev nbd8, logical block 0, async page read [ 384.656405][T10364] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.660026][T10364] Buffer I/O error on dev nbd8, logical block 0, async page read [ 384.663919][T10364] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.667731][T10364] Buffer I/O error on dev nbd8, logical block 0, async page read [ 384.671332][T10364] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.674751][T10364] Buffer I/O error on dev nbd8, logical block 0, async page read [ 384.677756][T10364] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.681427][T10364] Buffer I/O error on dev nbd8, logical block 0, async page read [ 384.684484][T10364] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.687903][T10364] Buffer I/O error on dev nbd8, logical block 0, async page read [ 384.691047][T10364] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.694508][T10364] Buffer I/O error on dev nbd8, logical block 0, async page read [ 384.697503][T10364] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.701166][T10364] Buffer I/O error on dev nbd8, logical block 0, async page read [ 384.704130][T10364] ldm_validate_partition_table(): Disk read failed. [ 384.706727][T10364] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.710101][T10364] Buffer I/O error on dev nbd8, logical block 0, async page read [ 384.713176][T10364] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.716887][T10364] Buffer I/O error on dev nbd8, logical block 0, async page read [ 384.720198][T10364] Dev nbd8: unable to read RDB block 0 [ 384.722793][T10364] nbd8: unable to read partition table [ 384.738850][T11873] ldm_validate_partition_table(): Disk read failed. [ 384.743708][T11873] Dev nbd8: unable to read RDB block 0 [ 384.748249][T11873] nbd8: unable to read partition table [ 384.758107][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 384.763795][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554441, location=33554441 [ 384.763872][T10364] ldm_validate_partition_table(): Disk read failed. [ 384.768621][T10364] Dev nbd8: unable to read RDB block 0 [ 384.773338][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554185, location=33554185 [ 384.773469][T10364] nbd8: unable to read partition table [ 384.777757][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554440, location=33554440 [ 384.784974][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554184, location=33554184 [ 384.790427][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554439, location=33554439 [ 384.795395][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554183, location=33554183 [ 384.800192][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554291, location=33554291 [ 384.814643][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554035, location=33554035 [ 384.870032][T11878] netlink: 'syz.6.1129': attribute type 10 has an invalid length. [ 384.873894][T11878] bond0: (slave wlan1): Opening slave failed [ 384.884280][T11878] ptrace attach of "/syz-executor exec"[11129] was attempted by "/syz-executor exec"[11878] [ 384.900138][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554289, location=33554289 [ 384.912855][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554033, location=33554033 [ 384.919487][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 384.931764][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 384.935364][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777220, location=16777220 [ 384.939133][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776964, location=16776964 [ 384.943880][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777219, location=16777219 [ 384.947389][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776963, location=16776963 [ 384.950774][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777218, location=16777218 [ 384.954544][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776962, location=16776962 [ 384.958232][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777070, location=16777070 [ 384.963454][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776814, location=16776814 [ 384.966698][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777068, location=16777068 [ 384.969845][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776812, location=16776812 [ 384.974110][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 384.981045][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 384.984746][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388609, location=8388609 [ 384.988310][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388353, location=8388353 [ 384.992134][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388608, location=8388608 [ 384.995575][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388352, location=8388352 [ 384.999056][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388607, location=8388607 [ 385.002778][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388351, location=8388351 [ 385.008680][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388459, location=8388459 [ 385.016607][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388203, location=8388203 [ 385.020130][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388457, location=8388457 [ 385.026424][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388201, location=8388201 [ 385.030114][T11873] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 385.033057][T11873] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 386.086889][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1134'. [ 386.971121][T11916] block nbd6: Device being setup by another task [ 387.121715][T11916] block nbd6: shutting down sockets [ 387.817776][ T40] audit: type=1804 audit(1735251831.331:1330): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1143" name="/newroot/24/file0/file0" dev="9p" ino=38928569 res=1 errno=0 [ 389.526397][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 390.429871][T12061] bio_check_eod: 14 callbacks suppressed [ 390.429887][T12061] syz.4.1152: attempt to access beyond end of device [ 390.429887][T12061] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 390.440442][T12061] syz.4.1152: attempt to access beyond end of device [ 390.440442][T12061] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 390.445811][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 390.450576][T12061] syz.4.1152: attempt to access beyond end of device [ 390.450576][T12061] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 390.454895][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 390.471700][T12061] syz.4.1152: attempt to access beyond end of device [ 390.471700][T12061] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 390.479164][T12061] syz.4.1152: attempt to access beyond end of device [ 390.479164][T12061] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 390.485613][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 390.490785][T12061] syz.4.1152: attempt to access beyond end of device [ 390.490785][T12061] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 390.495112][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 390.507657][T12061] syz.4.1152: attempt to access beyond end of device [ 390.507657][T12061] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 390.512037][T12052] nbd4: detected capacity change from 0 to 67108884 [ 390.522716][T10364] block nbd4: Send control failed (result -89) [ 390.525767][T10364] block nbd4: Request send failed, requeueing [ 390.528284][ T5954] block nbd4: Receive control failed (result -32) [ 390.531019][ T6249] block nbd4: Dead connection, failed to find a fallback [ 390.533909][T12061] block nbd4: Dead connection, failed to find a fallback [ 390.538478][T12061] blk_print_req_error: 130 callbacks suppressed [ 390.538683][ T6249] block nbd4: shutting down sockets [ 390.539327][T12061] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.540598][ T6249] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.540637][ T6249] buffer_io_error: 90 callbacks suppressed [ 390.540646][ T6249] Buffer I/O error on dev nbd4, logical block 0, async page read [ 390.542792][T10364] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.546201][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 390.549269][T10364] Buffer I/O error on dev nbd4, logical block 0, async page read [ 390.553190][T12061] I/O error, dev nbd4, sector 67108872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.557020][T10364] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.565648][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 390.566763][T10364] Buffer I/O error on dev nbd4, logical block 0, async page read [ 390.574363][T12061] I/O error, dev nbd4, sector 67106824 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.577305][T10364] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.580375][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 390.583694][T10364] Buffer I/O error on dev nbd4, logical block 0, async page read [ 390.583805][T10364] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.583827][T10364] Buffer I/O error on dev nbd4, logical block 0, async page read [ 390.583916][T10364] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.583937][T10364] Buffer I/O error on dev nbd4, logical block 0, async page read [ 390.584018][T10364] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.589774][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 390.590530][T10364] Buffer I/O error on dev nbd4, logical block 0, async page read [ 390.590644][T10364] Buffer I/O error on dev nbd4, logical block 0, async page read [ 390.595766][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 390.596137][T10364] ldm_validate_partition_table(): Disk read failed. [ 390.596183][T10364] Buffer I/O error on dev nbd4, logical block 0, async page read [ 390.601673][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 390.604888][T10364] Buffer I/O error on dev nbd4, logical block 0, async page read [ 390.609320][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 390.611671][T10364] Dev nbd4: unable to read RDB block 0 [ 390.611976][T10364] nbd4: unable to read partition table [ 390.616372][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 390.644219][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 390.644633][T10364] ldm_validate_partition_table(): Disk read failed. [ 390.648450][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 390.650463][T10364] Dev nbd4: unable to read RDB block 0 [ 390.655026][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 390.656611][T10364] nbd4: unable to read partition table [ 390.660354][T12061] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 390.665851][T12061] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 392.668097][T12098] netlink: 'syz.4.1161': attribute type 10 has an invalid length. [ 392.680762][T12098] ptrace attach of "/syz-executor exec"[9718] was attempted by "/syz-executor exec"[12098] [ 392.933862][T11129] syz_tun (unregistering): left promiscuous mode [ 393.191748][ T39] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.289399][ T39] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.369086][ T39] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.450094][ T39] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.525113][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.528736][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 393.531437][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 393.533915][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 393.536144][ T5953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 393.538311][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 393.565720][T12112] lo speed is unknown, defaulting to 1000 [ 393.697489][ T39] bridge_slave_1: left allmulticast mode [ 393.699697][ T39] bridge_slave_1: left promiscuous mode [ 393.702467][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.708084][ T39] bridge_slave_0: left allmulticast mode [ 393.709622][ T39] bridge_slave_0: left promiscuous mode [ 393.714034][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.088466][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.103498][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.107673][ T39] bond0 (unregistering): Released all slaves [ 394.129009][T12112] chnl_net:caif_netlink_parms(): no params data found [ 394.191348][T12112] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.194210][T12112] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.196591][T12112] bridge_slave_0: entered allmulticast mode [ 394.199192][T12112] bridge_slave_0: entered promiscuous mode [ 394.203370][T12112] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.205596][T12112] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.207673][T12112] bridge_slave_1: entered allmulticast mode [ 394.209799][T12112] bridge_slave_1: entered promiscuous mode [ 394.228878][T12112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.242930][T12112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.334646][T12112] team0: Port device team_slave_0 added [ 394.352617][T12112] team0: Port device team_slave_1 added [ 394.408580][T12112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.411446][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.420569][T12112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.424799][T12112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.426832][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.434202][T12112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.489080][T12112] hsr_slave_0: entered promiscuous mode [ 394.491939][T12112] hsr_slave_1: entered promiscuous mode [ 394.494128][T12112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.496317][T12112] Cannot create hsr debugfs directory [ 394.591827][ T39] batadv_slave_1: left promiscuous mode [ 394.616618][ T39] hsr_slave_0: left promiscuous mode [ 394.621905][ T39] hsr_slave_1: left promiscuous mode [ 394.651413][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.653919][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.656553][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.658798][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.684418][ T39] veth1_macvtap: left promiscuous mode [ 394.686058][ T39] veth0_macvtap: left promiscuous mode [ 394.688054][ T39] veth1_vlan: left promiscuous mode [ 394.689574][ T39] veth0_vlan: left promiscuous mode [ 394.748395][T12149] block nbd7: shutting down sockets [ 394.881012][ T35] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 394.993828][T12164] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 394.995766][T12164] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 394.998238][T12164] vhci_hcd vhci_hcd.0: Device attached [ 395.041043][ T35] usb 13-1: Using ep0 maxpacket: 16 [ 395.043744][ T35] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.047857][ T35] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.052135][ T35] usb 13-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 395.054881][ T35] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.061544][ T35] usb 13-1: config 0 descriptor?? [ 395.557505][ T35] input: HID 05ac:8241 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:05AC:8241.0003/input/input19 [ 395.573166][ T5953] Bluetooth: hci3: command tx timeout [ 395.601122][ T8] vhci_hcd: vhci_device speed not set [ 395.671106][ T8] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 395.705075][ T35] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 395.907526][ T39] team0 (unregistering): Port device team_slave_1 removed [ 395.993104][ T39] team0 (unregistering): Port device team_slave_0 removed [ 396.076653][T12166] vhci_hcd: connection reset by peer [ 396.111692][T11291] vhci_hcd: stop threads [ 396.117584][T11291] vhci_hcd: release socket [ 396.119412][T11291] vhci_hcd: disconnect device [ 396.125532][T12174] fuse: Unknown parameter 'roo0000000040000' [ 396.175466][T12176] overlayfs: failed to resolve './file1': -2 [ 396.731852][ T35] usb 13-1: reset high-speed USB device number 2 using dummy_hcd [ 397.570571][T12112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 397.576106][T12112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.580158][T12112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 397.598651][ T832] usb 13-1: USB disconnect, device number 2 [ 397.602354][T12112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.651166][ T5953] Bluetooth: hci3: command tx timeout [ 397.664622][T12112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.675427][T12112] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.679493][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.681857][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.693984][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.696068][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.853484][T12112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.010322][T12237] netlink: 544 bytes leftover after parsing attributes in process `syz.4.1182'. [ 398.041978][T12112] veth0_vlan: entered promiscuous mode [ 398.047903][T12112] veth1_vlan: entered promiscuous mode [ 398.063860][T12112] veth0_macvtap: entered promiscuous mode [ 398.067186][T12112] veth1_macvtap: entered promiscuous mode [ 398.077023][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.080083][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.083927][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.087033][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.089894][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.099217][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.104240][T12112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.110515][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.117155][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.120048][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.123772][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.126692][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.129713][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.135621][T12112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.139997][T12112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.143634][T12112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.146295][T12112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.148887][T12112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.257649][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.259991][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.282350][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.285623][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.925852][T12261] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 398.927871][T12261] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 398.930194][T12261] vhci_hcd vhci_hcd.0: Device attached [ 399.131294][ T35] vhci_hcd: vhci_device speed not set [ 399.204143][ T35] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 399.421903][ T5953] Bluetooth: hci1: command tx timeout [ 399.731877][ T5953] Bluetooth: hci3: command tx timeout [ 400.013959][T12267] XFS (sr0): Invalid superblock magic number [ 400.031337][T12277] netlink: 'syz.6.1187': attribute type 10 has an invalid length. [ 400.064943][T12277] team0: Cannot enslave team device to itself [ 400.098618][T12279] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1194'. [ 400.142350][T12273] [ 400.143098][T12273] ====================================================== [ 400.145109][T12273] WARNING: possible circular locking dependency detected [ 400.147132][T12273] 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 Not tainted [ 400.150266][T12273] ------------------------------------------------------ [ 400.152932][T12273] syz.8.1186/12273 is trying to acquire lock: [ 400.154674][T12273] ffff8880245785d8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 400.157625][T12273] [ 400.157625][T12273] but task is already holding lock: [ 400.159690][T12273] ffff8880245780a8 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 400.162807][T12273] [ 400.162807][T12273] which lock already depends on the new lock. [ 400.162807][T12273] [ 400.165724][T12273] [ 400.165724][T12273] the existing dependency chain (in reverse order) is: [ 400.168555][T12273] [ 400.168555][T12273] -> #4 (&q->q_usage_counter(io)#57){++++}-{0:0}: [ 400.171327][T12273] blk_mq_submit_bio+0x1fb6/0x24c0 [ 400.173053][T12273] __submit_bio+0x384/0x540 [ 400.174544][T12273] submit_bio_noacct_nocheck+0x698/0xd70 [ 400.176298][T12273] submit_bio_noacct+0x93a/0x1e20 [ 400.177812][T12273] mpage_readahead+0x41d/0x590 [ 400.179320][T12273] read_pages+0x1a8/0xdc0 [ 400.179331][T12273] page_cache_ra_unbounded+0x3dc/0x750 [ 400.179343][T12273] force_page_cache_ra+0x24b/0x340 [ 400.179353][T12273] page_cache_sync_ra+0x110/0x9c0 [ 400.179364][T12273] filemap_get_pages+0xd7b/0x1be0 [ 400.179377][T12273] filemap_read+0x3ca/0xd70 [ 400.179389][T12273] blkdev_read_iter+0x187/0x480 [ 400.179399][T12273] vfs_read+0x87f/0xbe0 [ 400.179409][T12273] ksys_read+0x12b/0x250 [ 400.179419][T12273] do_syscall_64+0xcd/0x250 [ 400.194926][T12273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.196744][T12273] [ 400.196744][T12273] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 400.199158][T12273] down_read+0x9a/0x330 [ 400.200506][T12273] filemap_fault+0x2e0/0x2820 [ 400.201993][T12273] __do_fault+0x10a/0x490 [ 400.203379][T12273] do_pte_missing+0xebd/0x3e00 [ 400.204900][T12273] __handle_mm_fault+0x103c/0x2a40 [ 400.206508][T12273] handle_mm_fault+0x3fa/0xaa0 [ 400.208023][T12273] do_user_addr_fault+0x7a3/0x13f0 [ 400.209628][T12273] exc_page_fault+0x5c/0xc0 [ 400.211033][T12273] asm_exc_page_fault+0x26/0x30 [ 400.212522][T12273] _copy_from_user+0x95/0xd0 [ 400.214021][T12273] snd_rawmidi_kernel_write1+0x35e/0x860 [ 400.215580][T12273] snd_rawmidi_write+0x267/0xbe0 [ 400.217040][T12273] vfs_write+0x24c/0x1150 [ 400.218444][T12273] ksys_write+0x207/0x250 [ 400.219833][T12273] __do_fast_syscall_32+0x73/0x120 [ 400.221425][T12273] do_fast_syscall_32+0x32/0x80 [ 400.223014][T12273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.224956][T12273] [ 400.224956][T12273] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 400.227101][T12273] __might_fault+0x11b/0x190 [ 400.228566][T12273] _copy_from_user+0x29/0xd0 [ 400.230041][T12273] __blk_trace_setup+0xa8/0x180 [ 400.231599][T12273] blk_trace_setup+0x47/0x70 [ 400.233056][T12273] sg_ioctl+0x7a3/0x26b0 [ 400.234499][T12273] compat_ptr_ioctl+0x6b/0xa0 [ 400.235986][T12273] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 400.237655][T12273] __do_fast_syscall_32+0x73/0x120 [ 400.239268][T12273] do_fast_syscall_32+0x32/0x80 [ 400.240799][T12273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.242738][T12273] [ 400.242738][T12273] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 400.244968][T12273] __mutex_lock+0x19b/0xa60 [ 400.246414][T12273] blk_register_queue+0x13c/0x4f0 [ 400.248000][T12273] add_disk_fwnode+0x785/0x1300 [ 400.249538][T12273] brd_alloc.isra.0+0x50a/0x7c0 [ 400.251078][T12273] brd_init+0x12b/0x1d0 [ 400.252418][T12273] do_one_initcall+0x128/0x630 [ 400.253926][T12273] kernel_init_freeable+0x58f/0x8b0 [ 400.255550][T12273] kernel_init+0x1c/0x2b0 [ 400.256943][T12273] ret_from_fork+0x45/0x80 [ 400.258369][T12273] ret_from_fork_asm+0x1a/0x30 [ 400.259880][T12273] [ 400.259880][T12273] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 400.262036][T12273] __lock_acquire+0x249e/0x3c40 [ 400.263584][T12273] lock_acquire.part.0+0x11b/0x380 [ 400.265205][T12273] __mutex_lock+0x19b/0xa60 [ 400.266671][T12273] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 400.268521][T12273] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 400.270260][T12273] nbd_start_device+0x15b/0xd70 [ 400.271795][T12273] nbd_ioctl+0x21a/0xfd0 [ 400.273167][T12273] compat_blkdev_ioctl+0x2f7/0x750 [ 400.274788][T12273] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 400.276454][T12273] __do_fast_syscall_32+0x73/0x120 [ 400.278081][T12273] do_fast_syscall_32+0x32/0x80 [ 400.279638][T12273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.281597][T12273] [ 400.281597][T12273] other info that might help us debug this: [ 400.281597][T12273] [ 400.284501][T12273] Chain exists of: [ 400.284501][T12273] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#57 [ 400.284501][T12273] [ 400.288671][T12273] Possible unsafe locking scenario: [ 400.288671][T12273] [ 400.290781][T12273] CPU0 CPU1 [ 400.292296][T12273] ---- ---- [ 400.293835][T12273] lock(&q->q_usage_counter(io)#57); [ 400.295381][T12273] lock(mapping.invalidate_lock#2); [ 400.297594][T12273] lock(&q->q_usage_counter(io)#57); [ 400.299829][T12273] lock(&q->sysfs_lock); [ 400.301081][T12273] [ 400.301081][T12273] *** DEADLOCK *** [ 400.301081][T12273] [ 400.303384][T12273] 4 locks held by syz.8.1186/12273: [ 400.304885][T12273] #0: ffff888023513998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 400.307555][T12273] #1: ffff8880235138d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 400.310598][T12273] #2: ffff8880245780a8 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 400.313963][T12273] #3: ffff8880245780e0 (&q->q_usage_counter(queue)#41){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 400.317581][T12273] [ 400.317581][T12273] stack backtrace: [ 400.319290][T12273] CPU: 3 UID: 0 PID: 12273 Comm: syz.8.1186 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 400.322322][T12273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 400.325379][T12273] Call Trace: [ 400.326360][T12273] [ 400.327220][T12273] dump_stack_lvl+0x116/0x1f0 [ 400.328576][T12273] print_circular_bug+0x41c/0x610 [ 400.330031][T12273] check_noncircular+0x31a/0x400 [ 400.331467][T12273] ? __pfx_check_noncircular+0x10/0x10 [ 400.333035][T12273] ? save_trace+0x290/0xa10 [ 400.334369][T12273] ? add_lock_to_list+0x17d/0x390 [ 400.335838][T12273] __lock_acquire+0x249e/0x3c40 [ 400.337228][T12273] ? __pfx___lock_acquire+0x10/0x10 [ 400.338734][T12273] ? __pfx_stack_trace_save+0x10/0x10 [ 400.340270][T12273] ? stack_depot_save_flags+0x28/0x9e0 [ 400.341957][T12273] ? find_held_lock+0x2d/0x110 [ 400.343356][T12273] lock_acquire.part.0+0x11b/0x380 [ 400.344820][T12273] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 400.346578][T12273] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 400.348184][T12273] ? rcu_is_watching+0x12/0xc0 [ 400.349529][T12273] ? trace_lock_acquire+0x14e/0x1f0 [ 400.351025][T12273] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 400.352781][T12273] ? lock_acquire+0x2f/0xb0 [ 400.354120][T12273] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 400.355885][T12273] __mutex_lock+0x19b/0xa60 [ 400.357210][T12273] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 400.359068][T12273] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 400.360816][T12273] ? __pfx___mutex_lock+0x10/0x10 [ 400.362267][T12273] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 400.364030][T12273] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 400.365744][T12273] ? lock_acquire.part.0+0x11b/0x380 [ 400.367263][T12273] ? __mutex_trylock_common+0xea/0x250 [ 400.368819][T12273] ? __pfx___mutex_trylock_common+0x10/0x10 [ 400.370502][T12273] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 400.372117][T12273] ? rcu_is_watching+0x12/0xc0 [ 400.373508][T12273] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 400.375334][T12273] ? __pfx___mutex_trylock_common+0x10/0x10 [ 400.377026][T12273] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 400.378663][T12273] ? __pfx___mutex_lock+0x10/0x10 [ 400.380100][T12273] ? trace_contention_end+0xee/0x140 [ 400.381609][T12273] ? __mutex_lock+0x1cc/0xa60 [ 400.382962][T12273] ? nbd_ioctl+0x151/0xfd0 [ 400.384274][T12273] ? __pfx___mutex_lock+0x10/0x10 [ 400.385725][T12273] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 400.387306][T12273] nbd_start_device+0x15b/0xd70 [ 400.388702][T12273] ? bpf_lsm_capable+0x9/0x10 [ 400.390054][T12273] nbd_ioctl+0x21a/0xfd0 [ 400.391269][T12273] ? __pfx_nbd_ioctl+0x10/0x10 [ 400.392628][T12273] ? __pfx_lock_release+0x10/0x10 [ 400.394093][T12273] ? trace_lock_acquire+0x14e/0x1f0 [ 400.395585][T12273] ? __pfx_nbd_ioctl+0x10/0x10 [ 400.396960][T12273] compat_blkdev_ioctl+0x2f7/0x750 [ 400.398439][T12273] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 400.400040][T12273] ? __fget_files+0x206/0x3a0 [ 400.401388][T12273] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 400.403015][T12273] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 400.404557][T12273] __do_fast_syscall_32+0x73/0x120 [ 400.406043][T12273] do_fast_syscall_32+0x32/0x80 [ 400.407457][T12273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.409277][T12273] RIP: 0023:0xf7fa5579 [ 400.410474][T12273] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 400.415976][T12273] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 400.418356][T12273] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ab03 [ 400.420623][T12273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.422892][T12273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.425173][T12273] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 400.427424][T12273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.429687][T12273] [ 400.430676][ C3] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 400.534560][T12262] vhci_hcd: connection reset by peer [ 400.536293][ T39] vhci_hcd: stop threads [ 400.537554][ T39] vhci_hcd: release socket [ 400.538964][ T39] vhci_hcd: disconnect device [ 400.591152][T12278] block nbd8: shutting down sockets [ 400.761113][ T8] vhci_hcd: vhci_device speed not set [ 401.036819][ T1146] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.104841][ T1146] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.194110][ T1146] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.236341][ T1146] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.350314][ T1146] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.395078][ T1146] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.474854][ T1146] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.584437][ T1146] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.677954][ T1146] bridge_slave_1: left allmulticast mode [ 401.680049][ T1146] bridge_slave_1: left promiscuous mode [ 401.682436][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.685973][ T1146] bridge_slave_0: left allmulticast mode [ 401.688186][ T1146] bridge_slave_0: left promiscuous mode [ 401.690495][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.695686][ T1146] bridge_slave_1: left allmulticast mode [ 401.697791][ T1146] bridge_slave_1: left promiscuous mode [ 401.700074][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.703171][ T1146] bridge_slave_0: left allmulticast mode [ 401.705409][ T1146] bridge_slave_0: left promiscuous mode [ 401.707689][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.885857][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.890040][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.893393][ T1146] bond0 (unregistering): Released all slaves [ 401.900410][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.904523][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.908703][ T1146] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 401.912216][ T1146] bond0 (unregistering): Released all slaves [ 402.460753][ T1146] hsr_slave_0: left promiscuous mode [ 402.462819][ T1146] hsr_slave_1: left promiscuous mode [ 402.465058][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.467270][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.469735][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.472073][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.476209][ T1146] hsr_slave_0: left promiscuous mode [ 402.478428][ T1146] hsr_slave_1: left promiscuous mode [ 402.480374][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.483369][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.485908][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.488060][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.492379][ T1146] veth1_macvtap: left promiscuous mode [ 402.494120][ T1146] veth0_macvtap: left promiscuous mode [ 402.495812][ T1146] veth1_vlan: left promiscuous mode [ 402.497425][ T1146] veth0_vlan: left promiscuous mode [ 402.499529][ T1146] veth1_macvtap: left promiscuous mode [ 402.501580][ T1146] veth0_macvtap: left promiscuous mode [ 402.503337][ T1146] veth1_vlan: left promiscuous mode [ 402.505066][ T1146] veth0_vlan: left promiscuous mode [ 402.695635][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 402.767580][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 403.087986][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 403.151993][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 403.853681][ T1146] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.913301][ T1146] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.993786][ T1146] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.065123][ T1146] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.133576][ T1146] bridge_slave_1: left allmulticast mode [ 404.135788][ T1146] bridge_slave_1: left promiscuous mode [ 404.138006][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.142395][ T1146] bridge_slave_0: left allmulticast mode [ 404.144672][ T1146] bridge_slave_0: left promiscuous mode [ 404.146986][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.236955][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.240263][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.243576][ T1146] bond0 (unregistering): Released all slaves [ 404.280984][ T35] vhci_hcd: vhci_device speed not set [ 404.525107][ T1146] hsr_slave_0: left promiscuous mode [ 404.527615][ T1146] hsr_slave_1: left promiscuous mode [ 404.530157][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.533313][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.536580][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.538684][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.542139][ T1146] veth1_macvtap: left promiscuous mode [ 404.543727][ T1146] veth0_macvtap: left promiscuous mode [ 404.545339][ T1146] veth1_vlan: left promiscuous mode [ 404.546880][ T1146] veth0_vlan: left promiscuous mode [ 404.729127][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 404.777171][ T1146] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 22:24:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000f54104 RBX=0000000000000000 RCX=ffffffff8b1a3819 RDX=ffffed1005686fee RSI=ffffffff8bb16f80 RDI=ffffffff81702e79 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=ffff88802b53fb10 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce3d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000030e1bffc CR3=0000000057252000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000026800000000 0000000b00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802b43ed00 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000004 RDI=ffff88802b43ed02 RBP=dffffc0000000000 RSP=ffffc900255e7790 R8 =0000000000000001 R9 =ffffed1005687da0 R10=ffff88802b43ed03 R11=00000000000a201e R12=0000000000000000 R13=0000000000007f04 R14=ffff88802b53fc40 R15=ffffed1005687da0 RIP=ffffffff8b1cccd5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000207dd000 CR3=0000000072c1e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000064400000000 0000001300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b746700 RCX=ffffffff818d52cc RDX=ffff88801b78c880 RSI=ffffffff818d52a6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900006679a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10056e8ce1 R13=0000000000000001 R14=ffff88802b746708 R15=ffff88802b63ff80 RIP=ffffffff818d52a8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000207b0000 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142e15 RDI=ffffffff9a667240 RBP=ffffffff9a667200 RSP=ffffc9000ed1f000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000033 R14=ffffffff85142db0 R15=0000000000000000 RIP=ffffffff85142e3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002c1efffc CR3=0000000050250000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000