last executing test programs: 6m19.892869445s ago: executing program 3 (id=18): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/183, 0xb7) 6m19.880280894s ago: executing program 3 (id=20): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x400c084) 6m19.773235769s ago: executing program 3 (id=25): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x8}], 0x38) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 6m19.655289232s ago: executing program 3 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m19.511661473s ago: executing program 3 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m19.443365396s ago: executing program 3 (id=30): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet(0x2, 0x1, 0x100) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) 6m18.460766126s ago: executing program 1 (id=45): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6m18.414154033s ago: executing program 1 (id=46): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002880)=@newchain={0x43c, 0x64, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x8}, {0x4, 0xb}, {0x2, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3fd, 0x6, 0x5, 0x80000001, 0xffffffff, 0x0, 0x80000000, 0x4, 0x1, 0x3, 0xc71, 0x7, 0xff, 0xd4, 0xf03c, 0x6, 0xfedc, 0x8, 0xfbae, 0x2, 0x2, 0x433, 0x10, 0x6, 0x8, 0x9, 0x9, 0x3, 0x8000, 0x80000001, 0x8000, 0x81, 0x80000001, 0x7, 0x80000001, 0x5, 0x7, 0x4, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0x1ff, 0xffffffff, 0x1281, 0x3, 0x7, 0xfffffff8, 0x8, 0x702a6f0a, 0x7ffffffd, 0x1, 0x1ff, 0x8, 0x9, 0x1, 0x7fffffff, 0xfffffffd, 0x7ed5ddf1, 0xc00000, 0x2, 0x4, 0xb17, 0x200, 0x4, 0x7f, 0x4, 0x1, 0x8, 0xffffffff, 0x10001, 0x0, 0x6, 0xe93, 0x7604, 0x6, 0x4, 0x1, 0x1000, 0x8, 0x7, 0x22b3, 0x9b1, 0x5, 0x5, 0x0, 0x81, 0x55f, 0x3ff, 0x2, 0x10, 0xfff, 0x4, 0xc, 0x1ff, 0x8, 0x5, 0xe87, 0xffffffff, 0x8, 0x5, 0x374c, 0x5, 0xb, 0x6, 0x62d, 0x5, 0xdb0a, 0x5, 0xffffff01, 0x9, 0x157, 0xffffffff, 0x0, 0x9, 0x8, 0x7c, 0x3, 0xc2, 0x4, 0x9, 0x7, 0x1000, 0xa, 0x80, 0x3, 0x8, 0x5, 0x4, 0x8, 0x1, 0x2, 0xffffffff, 0x9, 0x0, 0x100000, 0x81, 0x9, 0x0, 0x1009, 0x4, 0x4, 0x6, 0x1, 0x20012c, 0x1, 0xc, 0x8, 0x0, 0xffff, 0x7, 0x0, 0xc, 0x1, 0x9, 0xff, 0x8b5d, 0x0, 0x401, 0x6, 0x27, 0xfffffffc, 0x4f, 0x0, 0x10000, 0x10, 0x40, 0x8, 0x4, 0x80000001, 0x3, 0x4, 0x73d, 0x7, 0x6, 0x8, 0x5, 0x8, 0x8, 0x100, 0x10, 0xa9c3, 0x40, 0x0, 0x8, 0x8, 0xc, 0x8, 0x41, 0x1, 0x2, 0x95, 0x4, 0x80, 0x1000, 0x8e72, 0x5d, 0x401, 0x2, 0x3, 0x7, 0x9, 0x4, 0x9, 0x2, 0x73b6eeb9, 0x2, 0x3, 0x6, 0x80, 0x3, 0x6, 0x5, 0x2, 0xf2, 0x2, 0xf73a, 0x9, 0x5, 0x2, 0xf3b7, 0x41, 0x1, 0x1, 0xb8f, 0x4, 0x784, 0xd9f5, 0x10001, 0x40, 0x5, 0x0, 0x8, 0x1, 0x9, 0x5c, 0x5, 0x0, 0x40, 0x99e5, 0xff, 0x7, 0x39767685, 0x3, 0x7, 0x7, 0x7ff, 0x3, 0x400, 0x0, 0xf, 0x2, 0x8f0, 0xf2]}]}]}}]}, 0x43c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x3, @empty, 0x80}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x68}}], 0x1, 0x14000000) recvmsg$unix(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/206, 0xce}], 0xce}, 0x40000000) 6m18.292335019s ago: executing program 1 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 6m18.194919467s ago: executing program 1 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x20000, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 6m18.170464989s ago: executing program 1 (id=52): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 6m16.988145744s ago: executing program 1 (id=66): mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000180)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a960, 0x0, 0x201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xdf}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) fchown(r1, 0xee00, 0x0) 6m16.920046523s ago: executing program 32 (id=66): mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000180)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a960, 0x0, 0x201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xdf}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) fchown(r1, 0xee00, 0x0) 6m8.652646554s ago: executing program 4 (id=132): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000240), 0x397840, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f00000000c0)={0xc9, 0x0, 0xc}) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) clock_gettime(0xffffffff, 0x0) fcntl$dupfd(r1, 0x406, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x1, @mcast1, 0xd}, 0x1c) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440), 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400000000010100", @ANYRES32=0x0, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="acced1b887e7c48f00a80fbccc4e00c9000f2dd2cc3ceb9746f5d2e9dd3839198cf586d380b29c6c907d7a36c4e406381ba725566f962d0851fdc95c50014ca8fd5fadc6b76f6fc9102d7b2864f643f029"], 0x48}}, 0x0) unshare(0x20020680) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r11, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="0380c20000000000000000000800450000380000000000019078ac1e0001ac1414aa03049078120003282500000000000000000100007f000001ac14140f0000b50800000000b2fef473c143350ffab94b0d69d668819cbc6fd85202ef987054d2a8634025b154c608c9616b9536d6e7a2873de974ea11cc99b2d0f99f4c9f286a9e4823b8c825de9e9d3d2e99225fe5b1c08b784bf01efaf9f64c80cdad33c1447dcec648f96c2078b42d9e1318fe83374424d0fef71d4c0feee55d961efa7e477ea3af04eab45d596f5791174161f64c4640dedb79b5fc774c1e92f04e1fb687486db6ebc0ba5b3283d354081744eb8def99"], 0x0) ioctl$IOC_PR_PREEMPT(r10, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="080000000a00000000000000ff0100000000000000000000000000c35dc14f68f801000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000fe80000000000000000000000000002300"/268], 0x10c) socket$inet_mptcp(0x2, 0x1, 0x106) 6m8.423263882s ago: executing program 4 (id=133): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000240), 0x397840, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f00000000c0)={0xc9, 0x0, 0xc}) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) clock_gettime(0xffffffff, 0x0) fcntl$dupfd(r1, 0x406, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x1, @mcast1, 0xd}, 0x1c) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440), 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400000000010100000000", @ANYRES32=0x0, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="acced1b887e7c48f00a80fbccc4e00c9000f2dd2cc3ceb9746f5d2e9dd3839198cf586d380b29c6c907d7a36c4e406381ba725566f962d0851fdc95c50014ca8fd5fadc6b76f6fc9102d7b2864f643f029"], 0x48}}, 0x0) unshare(0x20020680) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r11, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="0380c20000000000000000000800450000380000000000019078ac1e0001ac1414aa03049078120003282500000000000000000100007f000001ac14140f0000b50800000000b2fef473c143350ffab94b0d69d668819cbc6fd85202ef987054d2a8634025b154c608c9616b9536d6e7a2873de974ea11cc99b2d0f99f4c9f286a9e4823b8c825de9e9d3d2e99225fe5b1c08b784bf01efaf9f64c80cdad33c1447dcec648f96c2078b42d9e1318fe83374424d0fef71d4c0feee55d961efa7e477ea3af04eab45d596f5791174161f64c4640dedb79b5fc774c1e92f04e1fb687486db6ebc0ba5b3283d354081744eb8def99"], 0x0) ioctl$IOC_PR_PREEMPT(r10, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="080000000a00000000000000ff0100000000000000000000000000c35dc14f68f801000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000fe80000000000000000000000000002300"/268], 0x10c) socket$inet_mptcp(0x2, 0x1, 0x106) 6m8.223023836s ago: executing program 4 (id=134): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote, @in=@dev}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000480)=0xe4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44040) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000300)={{0x1, @name="c42a6838d28443227483ec8fe343db49cbeecd991aef557d83b98b12db1f5b3d"}, 0x8, 0x4, 0x47}) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 6m7.226804686s ago: executing program 4 (id=136): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 6m7.221985094s ago: executing program 4 (id=137): socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 6m6.982342378s ago: executing program 4 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x0, 0xffffffffbfffffff, 0x2004c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020000000, 0x6011, 0x0, 0x200000], 0x6000, 0x12002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 6m6.911183919s ago: executing program 33 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x0, 0xffffffffbfffffff, 0x2004c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020000000, 0x6011, 0x0, 0x200000], 0x6000, 0x12002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 6m4.470697359s ago: executing program 34 (id=30): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet(0x2, 0x1, 0x100) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) 5m30.499668577s ago: executing program 0 (id=459): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mount(0x0, 0x0, 0x0, 0x400080, 0x0) 5m29.618739202s ago: executing program 0 (id=463): migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="260f01cfbaf80c66b835b9ca8166efbafc0cec66640f32baf80c66b83065cd8966efbafc0c66b88f9b000066efbaf80c66b8a8a86e8866efbafc0c66b80100000066efbaf80c66b8983d448366efbafc0cb000eeea012b5d00660ff96700c4e2bddfdd0f01c2", 0x66}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m27.490930824s ago: executing program 0 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7600) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001100)={&(0x7f0000000480)=[{0x1, 0x2000, 0x1, &(0x7f0000001bc0)="a7"}, {0x2, 0x6a176561fffddd1e, 0x0, 0x0}], 0x2}) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x20000000) 5m27.443667875s ago: executing program 0 (id=472): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m27.435755948s ago: executing program 0 (id=473): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) r2 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) unshare(0x22020600) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x100800001) 5m27.3630729s ago: executing program 0 (id=474): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0xf01c, 0x40a02) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x3]}}) 5m27.307173601s ago: executing program 35 (id=474): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0xf01c, 0x40a02) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x3]}}) 8.188078169s ago: executing program 2 (id=1769): mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5}) 8.110086393s ago: executing program 2 (id=1770): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x20044005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xa00, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) openat$pfkey(0xffffff9c, &(0x7f0000000280), 0x8101, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e29, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7.825869576s ago: executing program 5 (id=1771): socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000002240)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x600, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x11, 0x6, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) unshare(0x62040200) 6.822109249s ago: executing program 2 (id=1773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000700)={0x6, 0x0, @ioapic={0x10000, 0x3, 0x1, 0x7, 0x0, [{0x6, 0x80}, {0xe7, 0x0, 0xfb, '\x00', 0x7f}, {0x0, 0x9, 0xc, '\x00', 0xa}, {0x2, 0x42, 0x12, '\x00', 0xfa}, {0x0, 0x3, 0x7, '\x00', 0x9}, {0x5, 0x8, 0x6, '\x00', 0x1}, {0x16, 0x83, 0x6, '\x00', 0xcd}, {0x2, 0x1, 0x2, '\x00', 0x48}, {0x9, 0x3, 0x1a, '\x00', 0x7}, {0x4, 0xa, 0xdb, '\x00', 0x1}, {0x0, 0x7, 0x5, '\x00', 0x75}, {0x8, 0x0, 0xb, '\x00', 0xf}, {0x2, 0x0, 0x9, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0xfa, 0x81, 0x6, '\x00', 0x8}, {0x1, 0x9, 0x2, '\x00', 0x1}, {0x5c, 0xc2, 0x40, '\x00', 0x8}, {0x4a, 0x6, 0x8, '\x00', 0x6}, {0xd, 0x3, 0x2, '\x00', 0x14}, {0x6, 0x4, 0xd, '\x00', 0x46}, {0x7, 0x4, 0xf1, '\x00', 0x8}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0x3}, {0xfb, 0x7f, 0x7, '\x00', 0x2}]}}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="4fd2b400000000000000085735988c642fe90de35e3e0fea9549c8d4a91a3c7ddddc7a03442fd9965ccf6733daf903e760c8ad39cd32b73416d913db04a33a88e452996f9ecefc9b673798e563e311fa8bebf76b6dceb67270a38653d2134e40281502123a06aa84bbf9bfd24efbf4", 0x6f}], 0x1) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000004c0)={{0x6, 0x4, 0x9, 0x5, '\x00', 0x7f}, 0x3, 0x40, 0xfffffffb, r2, 0x0, 0xffff, 'syz1\x00', 0x0}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f000048e000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendfile(r4, r4, 0x0, 0x140000000000) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$char_usb(r5, &(0x7f0000000100)="8e5cf8b447d0b1f7d04cd0c4f51f96e58a14cf4db8648e8f21c76ae723c6", 0x1e) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 6.73007439s ago: executing program 5 (id=1775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x70bd25, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x7fffffffffffef9, 0x40000002, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000400)="001d71d52a3879c9c7649475728f8a25a071a59c20c131e0364e8828e50cfb69d0561b1bf87522000e42847c81695082fb23c905f5713aa8cadb181f50020730a3af1cb5a2ec28f6a78f19956ad27fa369f8adf71664f8eaffe5", 0x5a, 0x4044000, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.620057265s ago: executing program 7 (id=1779): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5}) creat(&(0x7f00000004c0)='./bus\x00', 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@void, @void}}}, 0x14}}, 0x0) 4.605760804s ago: executing program 6 (id=1781): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffff9, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r7, &(0x7f0000003440)={0x2020}, 0x2020) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 4.604657038s ago: executing program 7 (id=1789): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5}) creat(&(0x7f00000004c0)='./bus\x00', 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@void, @void}}}, 0x14}}, 0x0) 4.438379047s ago: executing program 5 (id=1782): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f0000000140)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x80) openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) socket$nl_netfilter(0x10, 0x3, 0xc) 3.919832001s ago: executing program 2 (id=1783): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0x3, 0x0, 0x6, 0x55, 0x0, 0x7c}, 0x9c) unshare(0x22020400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000080)}], 0x1) readv(r6, &(0x7f0000000700)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1) 3.670042909s ago: executing program 7 (id=1784): r0 = socket$pppl2tp(0x18, 0x1, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101841) r1 = syz_open_procfs(0x0, &(0x7f0000002740)='net/igmp\x00') openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x70bd26, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x19e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() openat$sw_sync(0xffffff9c, &(0x7f0000002180), 0x40001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x100, 0x100, 0x89, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x8, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2061) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x2}}, 0x2e) 3.461319189s ago: executing program 6 (id=1785): socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffa}, 0x1c) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x24000840, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r3, 0x0, 0x0, 0x2000, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r4, 0x900) r6 = dup3(r5, r4, 0x0) read(r6, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) 2.797421701s ago: executing program 7 (id=1786): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$UHID_INPUT(r5, &(0x7f0000002140)={0x8, {"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", 0x1000}}, 0x1006) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x32}, {@in6=@loopback, 0x0, 0x6c}, @in=@empty, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21, 0x4}, {0xffffffff}, 0x80, 0x3502, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in6=@private2, @in6=@empty, 0x4000, 0x6, 0x3, 0x3, 0x0, 0x180}, {@in6=@mcast2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x20000000) r9 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000080)={0x6, 0x5b, 0x1, 0x4d393631, 0x11, "45025c416e02783f8c95dd4aaaad46a066591c"}) 2.605740133s ago: executing program 5 (id=1787): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000088c0)=[{{&(0x7f00000001c0)=@x25={0x9, @remote}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/207, 0xcf}], 0x1, &(0x7f00000003c0)=""/26, 0x1a}, 0x1ff}, {{&(0x7f0000000500), 0x80, &(0x7f00000005c0)=[{&(0x7f0000000640)=""/86, 0x56}, {&(0x7f00000006c0)=""/182, 0xb6}, {&(0x7f0000000780)=""/137, 0x89}, {&(0x7f0000000840)=""/177, 0xb1}, {&(0x7f0000000900)=""/245, 0xf5}, {&(0x7f0000000400)=""/23, 0x17}], 0x6, &(0x7f0000000a00)=""/32, 0x20}, 0x400}, {{&(0x7f0000000a40)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000ac0)}, 0x80}, {{&(0x7f0000000b00)=@generic, 0x80, &(0x7f0000003e00)=[{&(0x7f0000000b80)=""/76, 0x4c}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/44, 0x2c}, {&(0x7f0000003d40)=""/88, 0x58}, {&(0x7f0000003dc0)=""/18, 0x12}], 0x8, &(0x7f0000004000)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/247, 0xf7}, {&(0x7f0000003f40)=""/4, 0x4}, {&(0x7f0000000ac0)}], 0x4, &(0x7f0000006040)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000007040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000074c0)=[{&(0x7f00000070c0)=""/86, 0x56}, {&(0x7f0000007140)=""/139, 0x8b}, {&(0x7f0000007200)}, {&(0x7f0000007240)=""/56, 0x38}, {&(0x7f0000007280)=""/109, 0x6d}, {&(0x7f0000007300)=""/43, 0x2b}, {&(0x7f0000007340)=""/37, 0x25}, {&(0x7f0000007380)=""/220, 0xdc}, {&(0x7f0000007480)=""/18, 0x12}], 0x9, &(0x7f0000007540)=""/83, 0x53}, 0x8001}, {{&(0x7f00000075c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000087c0), 0x0, &(0x7f0000008800)=""/155, 0x9b}, 0xfffffff7}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x1, 0x20, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfa0f, 0xfffffdff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x13) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x52, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r7}, 0x18) 2.090748945s ago: executing program 2 (id=1788): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x6, r0, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x189000, 0x0) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000000040)=@type=0x2) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000400)=""/204, 0xcc}) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000000340)={0x5, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=[0x8001, 0x3, 0x6, 0x778d, 0x777, 0x5, 0xc04]}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x811}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) 2.088975658s ago: executing program 6 (id=1790): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x6, r0, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x189000, 0x0) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000000040)=@type=0x2) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(r2, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getregset(0x4204, r4, 0x4, &(0x7f0000000100)={&(0x7f0000000400)=""/204, 0xcc}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000000340)={0x5, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=[0x8001, 0x3, 0x6, 0x778d, 0x777, 0x5, 0xc04]}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x811}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) 1.813176498s ago: executing program 7 (id=1791): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f00000000c0)={{0xa, 0x5, 0x9, 0x0, 'syz0\x00', 0x6}, 0x1, [0x400, 0xc52, 0x400, 0xa1, 0x9, 0x3, 0x8, 0xe, 0x4f, 0x8000, 0x4a3, 0x8, 0x1, 0x401, 0xfffffc00, 0xa9, 0x1, 0x7a, 0x0, 0x7, 0x7, 0x0, 0xa41, 0xfff, 0x5, 0x3, 0x9679, 0x10000, 0x5, 0xb, 0x4, 0x800, 0x7, 0x4, 0x5, 0x168, 0x81, 0x2, 0x6f6, 0x2d509e61, 0x0, 0x9, 0x3, 0x80000001, 0x200, 0x9, 0x1, 0x6, 0x8000, 0xfffffffc, 0x731, 0x4, 0x23f, 0x9, 0x8, 0x3, 0x6cd, 0x9, 0x6, 0xa5d, 0x40000000, 0x4, 0xffff8db5, 0x3, 0x3, 0x4, 0x0, 0x2, 0x80000000, 0x3, 0x2, 0x4, 0x4, 0x5, 0x5, 0xfff, 0x3, 0x1ff, 0x280000, 0x5, 0x6, 0x8f, 0x9a8, 0x100, 0xfffffeff, 0xff, 0x1, 0x3, 0x0, 0x7, 0x7, 0x3, 0x3, 0x5496, 0x7, 0xc0000000, 0x4, 0xfffffff9, 0x8, 0x2, 0x4, 0x5, 0x6, 0x100, 0x95, 0x30, 0xffffffff, 0x10001, 0xfffffffe, 0x1, 0x3, 0x9, 0x5, 0x8, 0x8, 0x4, 0x5, 0x2, 0xd, 0x0, 0x40000000, 0x10000, 0xb, 0x6, 0x7f, 0xa398, 0x55, 0x1]}) add_key(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x1}) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001008000140000000020900010073797a30000000000900020073797a32000000001400000011"], 0x78}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x308, 0x1, 0x24}, 0x9c) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003180), 0x80043, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, &(0x7f0000000000)) ioperm(0xd97, 0x7, 0x3000) sync() r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) 1.748310678s ago: executing program 6 (id=1792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000700)={0x6, 0x0, @ioapic={0x10000, 0x3, 0x1, 0x7, 0x0, [{0x6, 0x80}, {0xe7, 0x0, 0xfb, '\x00', 0x7f}, {0x0, 0x9, 0xc, '\x00', 0xa}, {0x2, 0x42, 0x12, '\x00', 0xfa}, {0x0, 0x3, 0x7, '\x00', 0x9}, {0x5, 0x8, 0x6, '\x00', 0x1}, {0x16, 0x83, 0x6, '\x00', 0xcd}, {0x2, 0x1, 0x2, '\x00', 0x48}, {0x9, 0x3, 0x1a, '\x00', 0x7}, {0x4, 0xa, 0xdb, '\x00', 0x1}, {0x0, 0x7, 0x5, '\x00', 0x75}, {0x8, 0x0, 0xb, '\x00', 0xf}, {0x2, 0x0, 0x9, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0xfa, 0x81, 0x6, '\x00', 0x8}, {0x1, 0x9, 0x2, '\x00', 0x1}, {0x5c, 0xc2, 0x40, '\x00', 0x8}, {0x4a, 0x6, 0x8, '\x00', 0x6}, {0xd, 0x3, 0x2, '\x00', 0x14}, {0x6, 0x4, 0xd, '\x00', 0x46}, {0x7, 0x4, 0xf1, '\x00', 0x8}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0x3}, {0xfb, 0x7f, 0x7, '\x00', 0x2}]}}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="4fd2b400000000000000085735988c642fe90de35e3e0fea9549c8d4a91a3c7ddddc7a03442fd9965ccf6733daf903e760c8ad39cd32b73416d913db04a33a88e452996f9ecefc9b673798e563e311fa8bebf76b6dceb67270a38653d2134e40281502123a06aa84bbf9bfd24efbf4", 0x6f}], 0x1) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000004c0)={{0x6, 0x4, 0x9, 0x5, '\x00', 0x7f}, 0x3, 0x40, 0xfffffffb, r2, 0x0, 0xffff, 'syz1\x00', 0x0}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f000048e000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendfile(r4, r4, 0x0, 0x140000000000) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$char_usb(r5, &(0x7f0000000100)="8e5cf8b447d0b1f7d04cd0c4f51f96e58a14cf4db8648e8f21c76ae723c6", 0x1e) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.674688612s ago: executing program 5 (id=1793): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000040)={0x0, 0x5, 0x5}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c00}, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180), &(0x7f0000000300)=ANY=[@ANYBLOB="040d0e7d27f66200e88da1e2ac5414fa02ab746047a95eaa4863173768e9176c27b49cd1d31d856d9d008d9f31cbb47fac0e83d195745dfdd9796f154f1601c0781afa9d765900cfb102d188a18ac82eef36af"], 0x2, 0x1) dup3(r2, r1, 0x0) finit_module(r2, 0x0, 0x0) 662.281552ms ago: executing program 7 (id=1794): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5}) creat(&(0x7f00000004c0)='./bus\x00', 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@void, @void}}}, 0x14}}, 0x0) 529.232685ms ago: executing program 2 (id=1795): syz_init_net_socket$netrom(0x6, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)=0x1a4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x48050) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x3) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="437550b523af1a7f2da599e5139f10a0f56401a09a7d028e470e28217045a0db9dba02d08dfe3937f513c950593b1b21f1a9", 0x32, 0x20004801, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x5) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80000000, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 469.771771ms ago: executing program 6 (id=1796): r0 = socket$kcm(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, &(0x7f0000000400), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x28, 0x1, 0x0) syz_io_uring_setup(0x112, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r9, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 122.632973ms ago: executing program 5 (id=1797): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x6, r0, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x189000, 0x0) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000000040)=@type=0x2) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ptrace$getregset(0x4204, r4, 0x4, &(0x7f0000000100)={&(0x7f0000000400)=""/204, 0xcc}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000000340)={0x5, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=[0x8001, 0x3, 0x6, 0x778d, 0x777, 0x5, 0xc04]}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x811}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) 0s ago: executing program 6 (id=1798): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xa8, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000200)={"784ec25e4df5ac86e6adaa4c", &(0x7f0000000140)="ccb10d8435244acc742ec1a9c0a3d86a7a00bc80bed276df249187b0c253f141c0a2ecbd25dffbddce4465dcb8b5a725a5c175", 0x33, 0x9d5, &(0x7f0000000180)={0x13, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '#_/\v', 0xf3, "918e4e8e", 0x7, 0x1, 0x3, "9f053c", "eda3e92eaa0520fbf95aabd94235f9295ec3dc6074f796a7209b050e52189c63da8cc0062b930f2598bf938857cc"}, 0x2, 0x3, 0x2, 0x0}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) nanosleep(0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f00000002c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=""/37, &(0x7f0000000080)=0x25) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="00010000000000001c001a8018000a8014000700"/36], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): ip6gretap2: entered allmulticast mode [ 154.987107][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 154.989761][ T9159] ip6gretap3: entered allmulticast mode [ 154.992729][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap4 [ 154.996602][ T9159] ip6gretap4: entered allmulticast mode [ 154.999913][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap5 [ 155.002919][ T9159] ip6gretap5: entered allmulticast mode [ 155.006575][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap6 [ 155.009627][ T9159] ip6gretap6: entered allmulticast mode [ 155.013142][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap7 [ 155.016632][ T9159] ip6gretap7: entered allmulticast mode [ 155.021645][ T9159] bond1: entered allmulticast mode [ 155.025016][ T9159] veth2: entered allmulticast mode [ 155.027302][ T9159] veth3: entered allmulticast mode [ 155.030248][ T9159] ip6erspan0: left promiscuous mode [ 155.032675][ T9159] vlan2: entered allmulticast mode [ 155.036003][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap8 [ 155.038985][ T9159] ip6gretap8: entered allmulticast mode [ 155.042526][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap9 [ 155.045666][ T9159] ip6gretap9: entered allmulticast mode [ 155.048816][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap10 [ 155.051960][ T9159] ip6gretap10: entered allmulticast mode [ 155.056186][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap11 [ 155.059130][ T9159] ip6gretap11: entered allmulticast mode [ 155.062360][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap12 [ 155.065432][ T9159] ip6gretap12: entered allmulticast mode [ 155.069333][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap13 [ 155.073585][ T9159] ip6gretap13: entered allmulticast mode [ 155.076808][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap14 [ 155.079695][ T9159] ip6gretap14: entered allmulticast mode [ 155.083392][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap15 [ 155.086846][ T9159] ip6gretap15: entered allmulticast mode [ 155.091217][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap16 [ 155.094326][ T9159] ip6gretap16: entered allmulticast mode [ 155.097987][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap17 [ 155.100981][ T9159] ip6gretap17: entered allmulticast mode [ 155.104549][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap18 [ 155.107816][ T9159] ip6gretap18: entered allmulticast mode [ 155.111327][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap19 [ 155.114132][ T9159] ip6gretap19: entered allmulticast mode [ 155.118510][ T9159] batman_adv: batadv0: Interface deactivated: ip6gretap20 [ 155.131628][ T9159] ip6gretap20: entered allmulticast mode [ 155.146754][ T9167] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap9 [ 155.155136][ T9167] batman_adv: batadv0: Adding interface: ip6gretap9 [ 155.158181][ T9167] batman_adv: batadv0: The MTU of interface ip6gretap9 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.167954][ T9167] batman_adv: batadv0: Interface activated: ip6gretap9 [ 155.855388][ T5306] Bluetooth: hci4: command tx timeout [ 156.245051][ T9190] netlink: 56 bytes leftover after parsing attributes in process `syz.5.819'. [ 156.254282][ T9190] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap21 [ 156.276304][ T9190] batman_adv: batadv0: Adding interface: ip6gretap21 [ 156.278543][ T9190] batman_adv: batadv0: The MTU of interface ip6gretap21 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.286979][ T9190] batman_adv: batadv0: Interface activated: ip6gretap21 [ 156.876675][ T9205] netlink: 'syz.6.824': attribute type 39 has an invalid length. [ 156.991127][ T9209] netlink: 56 bytes leftover after parsing attributes in process `syz.7.825'. [ 157.007686][ T9209] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap10 [ 157.013050][ T9209] batman_adv: batadv0: Adding interface: ip6gretap10 [ 157.015630][ T9209] batman_adv: batadv0: The MTU of interface ip6gretap10 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.023269][ T9209] batman_adv: batadv0: Interface activated: ip6gretap10 [ 157.814918][ T9227] lo: entered promiscuous mode [ 157.818279][ T9227] tunl0: entered promiscuous mode [ 157.820721][ T9227] gre0: entered promiscuous mode [ 157.823908][ T9227] gretap0: entered promiscuous mode [ 157.825991][ T9227] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 158.042584][ T9237] netlink: 56 bytes leftover after parsing attributes in process `syz.2.834'. [ 158.063113][ T9237] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap10 [ 158.070372][ T9237] batman_adv: batadv0: Adding interface: ip6gretap10 [ 158.072876][ T9237] batman_adv: batadv0: The MTU of interface ip6gretap10 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.089630][ T9237] batman_adv: batadv0: Interface activated: ip6gretap10 [ 158.845359][ T63] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 159.005320][ T63] usb 7-1: Using ep0 maxpacket: 16 [ 159.009933][ T63] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 159.013720][ T63] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 159.017806][ T63] usb 7-1: Product: syz [ 159.019569][ T63] usb 7-1: Manufacturer: syz [ 159.021502][ T63] usb 7-1: SerialNumber: syz [ 159.025852][ T63] usb 7-1: config 0 descriptor?? [ 159.244501][ T6099] usb 7-1: USB disconnect, device number 3 [ 159.426460][ T63] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 159.445353][ T6003] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 159.450260][ T6003] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 159.453037][ T6003] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 159.456155][ T6003] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 159.459496][ T6003] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 159.461992][ T6003] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 159.465055][ T6003] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x3 [ 159.471827][ T6003] hid-generic 0005:16C0:5505.0004: hidraw1: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 159.575298][ T63] usb 11-1: Using ep0 maxpacket: 8 [ 159.580498][ T63] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 159.583975][ T63] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.587502][ T63] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.590769][ T63] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.594931][ T63] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.597978][ T63] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.817315][ T9277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.819650][ T9277] IPv6: NLM_F_CREATE should be set when creating new route [ 159.823125][ T9277] lo: entered allmulticast mode [ 159.825230][ T9277] tunl0: entered allmulticast mode [ 159.829193][ T9277] gre0: entered allmulticast mode [ 159.833836][ T63] usb 11-1: GET_CAPABILITIES returned 0 [ 159.835934][ T63] usbtmc 11-1:16.0: can't read capabilities [ 159.840191][ T9277] gretap0: entered allmulticast mode [ 159.851322][ T9277] erspan0: entered allmulticast mode [ 159.862405][ T9277] ip_vti0: entered allmulticast mode [ 159.872074][ T9277] ip6_vti0: entered allmulticast mode [ 159.877738][ T9277] sit0: entered allmulticast mode [ 159.883435][ T9277] ip6tnl0: entered allmulticast mode [ 159.888791][ T9277] ip6gre0: entered allmulticast mode [ 159.896240][ T9277] syz_tun: entered allmulticast mode [ 159.900668][ T9277] ip6gretap0: entered allmulticast mode [ 159.904303][ T9280] netlink: 56 bytes leftover after parsing attributes in process `syz.7.845'. [ 159.906271][ T9277] bridge0: entered allmulticast mode [ 159.909205][ T9277] vcan0: entered allmulticast mode [ 159.912636][ T9277] bond0: entered allmulticast mode [ 159.914389][ T9277] bond_slave_0: entered allmulticast mode [ 159.916401][ T9277] bond_slave_1: entered allmulticast mode [ 159.920808][ T9277] team0: entered allmulticast mode [ 159.922469][ T9277] team_slave_0: entered allmulticast mode [ 159.924273][ T9277] team_slave_1: entered allmulticast mode [ 159.927889][ T9277] dummy0: entered allmulticast mode [ 159.932683][ T9277] nlmon0: entered allmulticast mode [ 159.937324][ T9277] caif0: entered allmulticast mode [ 159.939260][ T9277] batadv0: entered allmulticast mode [ 159.947719][ T9277] vxcan0: entered allmulticast mode [ 159.950910][ T9277] vxcan1: entered allmulticast mode [ 159.955082][ T9277] veth0: entered allmulticast mode [ 159.969513][ T9277] veth1: entered allmulticast mode [ 159.979988][ T9277] wg0: entered allmulticast mode [ 159.984795][ T9277] wg1: entered allmulticast mode [ 159.989542][ T9277] wg2: entered allmulticast mode [ 159.994664][ T9277] veth0_to_bridge: entered allmulticast mode [ 160.001652][ T9277] veth1_to_bridge: entered allmulticast mode [ 160.008229][ T9277] veth0_to_bond: entered allmulticast mode [ 160.014354][ T9277] veth1_to_bond: entered allmulticast mode [ 160.021443][ T9277] veth0_to_team: entered allmulticast mode [ 160.031793][ T9277] veth1_to_team: entered allmulticast mode [ 160.038457][ T9277] veth0_to_batadv: entered allmulticast mode [ 160.043126][ T9277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.049914][ T9277] batadv_slave_0: entered allmulticast mode [ 160.051582][ C3] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 160.060601][ T6099] usb 11-1: USB disconnect, device number 5 [ 160.061207][ T9277] veth1_to_batadv: entered allmulticast mode [ 160.068632][ T9277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.072890][ T9277] batadv_slave_1: entered allmulticast mode [ 160.080039][ T9277] xfrm0: entered allmulticast mode [ 160.088820][ T9277] veth0_to_hsr: entered allmulticast mode [ 160.095105][ T9277] hsr_slave_0: entered allmulticast mode [ 160.107330][ T9277] veth1_to_hsr: entered allmulticast mode [ 160.112807][ T9277] hsr_slave_1: entered allmulticast mode [ 160.118684][ T9277] hsr0: entered allmulticast mode [ 160.123386][ T9277] veth1_virt_wifi: entered allmulticast mode [ 160.127841][ T9277] veth0_virt_wifi: entered allmulticast mode [ 160.130935][ T9277] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 160.134060][ T9277] veth1_vlan: entered allmulticast mode [ 160.138047][ T9277] veth0_vlan: entered allmulticast mode [ 160.144966][ T9277] vlan0: entered allmulticast mode [ 160.147352][ T9277] vlan1: entered allmulticast mode [ 160.149563][ T9277] macvlan0: entered allmulticast mode [ 160.152534][ T9277] macvlan1: entered allmulticast mode [ 160.156189][ T9277] ipvlan0: entered allmulticast mode [ 160.158547][ T9277] ipvlan1: entered allmulticast mode [ 160.162224][ T9277] veth1_macvtap: entered allmulticast mode [ 160.168763][ T9277] veth0_macvtap: entered allmulticast mode [ 160.173178][ T9277] macvtap0: entered allmulticast mode [ 160.178849][ T9277] macsec0: entered allmulticast mode [ 160.182612][ T9277] geneve0: entered allmulticast mode [ 160.188361][ T9277] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.192087][ T9277] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.196807][ T9277] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.200505][ T9277] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.204356][ T9277] geneve1: entered allmulticast mode [ 160.209169][ T9277] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 160.214217][ T9277] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 160.221203][ T9277] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 160.227494][ T9277] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 160.241254][ T9277] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 160.252839][ T9277] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 160.257702][ T9277] gtp0: left promiscuous mode [ 160.261032][ T9277] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 160.264397][ T9277] ip6gretap1: entered allmulticast mode [ 160.268133][ T9277] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 160.271312][ T9277] ip6gretap2: entered allmulticast mode [ 160.274719][ T9277] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 160.278134][ T9277] ip6gretap3: entered allmulticast mode [ 160.281496][ T9277] batman_adv: batadv0: Interface deactivated: ip6gretap4 [ 160.284785][ T9277] ip6gretap4: entered allmulticast mode [ 160.289942][ T9277] batman_adv: batadv0: Interface deactivated: ip6gretap5 [ 160.293196][ T9277] ip6gretap5: entered allmulticast mode [ 160.297002][ T9277] batman_adv: batadv0: Interface deactivated: ip6gretap6 [ 160.300404][ T9277] ip6gretap6: entered allmulticast mode [ 160.304076][ T9277] batman_adv: batadv0: Interface deactivated: ip6gretap7 [ 160.307590][ T9277] ip6gretap7: entered allmulticast mode [ 160.311312][ T9277] batman_adv: batadv0: Interface deactivated: ip6gretap8 [ 160.314561][ T9277] ip6gretap8: entered allmulticast mode [ 160.318355][ T9277] batman_adv: batadv0: Interface deactivated: ip6gretap9 [ 160.321631][ T9277] ip6gretap9: entered allmulticast mode [ 160.325368][ T9277] batman_adv: batadv0: Interface deactivated: ip6gretap10 [ 160.328599][ T9277] ip6gretap10: entered allmulticast mode [ 160.337518][ T9280] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap11 [ 160.342752][ T9280] batman_adv: batadv0: Adding interface: ip6gretap11 [ 160.345467][ T9280] batman_adv: batadv0: The MTU of interface ip6gretap11 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.355751][ T9280] batman_adv: batadv0: Interface activated: ip6gretap11 [ 160.439521][ T9284] syz.2.847: attempt to access beyond end of device [ 160.439521][ T9284] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 160.443464][ T9284] qnx6: unable to read the first superblock [ 160.446118][ T9284] syz.2.847: attempt to access beyond end of device [ 160.446118][ T9284] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 160.449999][ T9284] qnx6: unable to read the first superblock [ 160.451797][ T9284] qnx6: unable to read the first superblock [ 160.659508][ T9300] netlink: 56 bytes leftover after parsing attributes in process `syz.6.851'. [ 160.671645][ T9300] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap12 [ 160.678820][ T9300] batman_adv: batadv0: Adding interface: ip6gretap12 [ 160.680970][ T9300] batman_adv: batadv0: The MTU of interface ip6gretap12 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.689604][ T9300] batman_adv: batadv0: Interface activated: ip6gretap12 [ 160.693576][ T9302] bond0: entered promiscuous mode [ 160.701187][ T9302] bond_slave_0: entered promiscuous mode [ 160.704171][ T9302] bond_slave_1: entered promiscuous mode [ 160.707109][ T9302] bond0: left allmulticast mode [ 161.551152][ T9313] netlink: 56 bytes leftover after parsing attributes in process `syz.7.854'. [ 161.570693][ T9313] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap12 [ 161.576135][ T9313] batman_adv: batadv0: Adding interface: ip6gretap12 [ 161.578305][ T9313] batman_adv: batadv0: The MTU of interface ip6gretap12 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.586692][ T9313] batman_adv: batadv0: Interface activated: ip6gretap12 [ 162.445638][ T9328] netlink: 'syz.6.856': attribute type 1 has an invalid length. [ 162.448049][ T9328] netlink: 'syz.6.856': attribute type 2 has an invalid length. [ 163.406903][ T9351] netlink: 56 bytes leftover after parsing attributes in process `syz.6.862'. [ 163.452754][ T9351] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap13 [ 163.464901][ T9351] batman_adv: batadv0: Adding interface: ip6gretap13 [ 163.468260][ T9351] batman_adv: batadv0: The MTU of interface ip6gretap13 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.481171][ T9351] batman_adv: batadv0: Interface activated: ip6gretap13 [ 164.325855][ T9363] netlink: 56 bytes leftover after parsing attributes in process `syz.7.866'. [ 164.332695][ T9363] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap13 [ 164.337039][ T9363] batman_adv: batadv0: Adding interface: ip6gretap13 [ 164.339594][ T9363] batman_adv: batadv0: The MTU of interface ip6gretap13 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.350178][ T9363] batman_adv: batadv0: Interface activated: ip6gretap13 [ 168.887986][ T9442] warning: `syz.7.887' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 170.554693][ T40] audit: type=1326 audit(1745490348.577:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.5.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 170.561822][ T40] audit: type=1326 audit(1745490348.577:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.5.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 170.570889][ T40] audit: type=1326 audit(1745490348.587:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.5.897" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 170.578387][ T40] audit: type=1326 audit(1745490348.587:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.5.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 170.585111][ T40] audit: type=1326 audit(1745490348.587:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.5.897" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 170.637994][ T40] audit: type=1326 audit(1745490348.587:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.5.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 170.645327][ T9487] netlink: 168 bytes leftover after parsing attributes in process `syz.2.896'. [ 170.645779][ T40] audit: type=1326 audit(1745490348.587:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.5.897" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 170.663087][ T40] audit: type=1326 audit(1745490348.587:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.5.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 170.670596][ T40] audit: type=1326 audit(1745490348.587:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.5.897" exe="/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 170.680835][ T40] audit: type=1326 audit(1745490348.587:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.5.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 170.933338][ T9492] serio: Serial port pts0 [ 171.348738][ T9503] netlink: 56 bytes leftover after parsing attributes in process `syz.7.900'. [ 171.363291][ T9503] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap14 [ 171.375632][ T9503] batman_adv: batadv0: Adding interface: ip6gretap14 [ 171.378995][ T9503] batman_adv: batadv0: The MTU of interface ip6gretap14 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.387101][ T9503] batman_adv: batadv0: Interface activated: ip6gretap14 [ 171.722581][ T9513] netlink: 56 bytes leftover after parsing attributes in process `syz.7.911'. [ 171.744808][ T9513] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap15 [ 171.755082][ T9513] batman_adv: batadv0: Adding interface: ip6gretap15 [ 171.758556][ T9513] batman_adv: batadv0: The MTU of interface ip6gretap15 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.769609][ T9513] batman_adv: batadv0: Interface activated: ip6gretap15 [ 173.623608][ T9549] netlink: 56 bytes leftover after parsing attributes in process `syz.2.913'. [ 173.650812][ T9549] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap11 [ 173.659431][ T9549] batman_adv: batadv0: Adding interface: ip6gretap11 [ 173.661728][ T9549] batman_adv: batadv0: The MTU of interface ip6gretap11 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.669604][ T9549] batman_adv: batadv0: Interface activated: ip6gretap11 [ 175.276534][ T9570] ISOFS: Unable to identify CD-ROM format. [ 176.562558][ T9594] netlink: 56 bytes leftover after parsing attributes in process `syz.2.925'. [ 176.568951][ T9594] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap12 [ 176.573106][ T9594] batman_adv: batadv0: Adding interface: ip6gretap12 [ 176.575361][ T9594] batman_adv: batadv0: The MTU of interface ip6gretap12 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.585462][ T9594] batman_adv: batadv0: Interface activated: ip6gretap12 [ 178.435472][ T9618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 178.736239][ T9625] ISOFS: Unable to identify CD-ROM format. [ 179.217230][ T9633] netlink: 56 bytes leftover after parsing attributes in process `syz.6.935'. [ 179.237419][ T9633] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap14 [ 179.243096][ T9633] batman_adv: batadv0: Adding interface: ip6gretap14 [ 179.245323][ T9633] batman_adv: batadv0: The MTU of interface ip6gretap14 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.253642][ T9633] batman_adv: batadv0: Interface activated: ip6gretap14 [ 179.554105][ T9641] random: crng reseeded on system resumption [ 180.508332][ T9663] ptrace attach of "/syz-executor exec"[7874] was attempted by ""[9663] [ 180.733006][ T9667] netlink: 56 bytes leftover after parsing attributes in process `syz.6.945'. [ 180.777242][ T9667] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap15 [ 180.782533][ T9667] batman_adv: batadv0: Adding interface: ip6gretap15 [ 180.785531][ T9667] batman_adv: batadv0: The MTU of interface ip6gretap15 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.796643][ T9667] batman_adv: batadv0: Interface activated: ip6gretap15 [ 180.819665][ T9662] Invalid ELF header magic: != ELF [ 184.267813][ T9719] ptrace attach of "/syz-executor exec"[6495] was attempted by ""[9719] [ 185.545577][ T5306] Bluetooth: hci2: command 0x0406 tx timeout [ 185.553132][ T9738] netlink: 56 bytes leftover after parsing attributes in process `syz.6.962'. [ 185.564770][ T9738] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap16 [ 185.579256][ T9738] batman_adv: batadv0: Adding interface: ip6gretap16 [ 185.582143][ T9738] batman_adv: batadv0: The MTU of interface ip6gretap16 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.598575][ T9738] batman_adv: batadv0: Interface activated: ip6gretap16 [ 187.785915][ T6003] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 189.834688][ T9822] Invalid ELF header magic: != ELF [ 190.655755][ T5306] Bluetooth: hci4: command 0x0406 tx timeout [ 193.709450][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.471287][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.980'. [ 198.782324][ T9856] : entered promiscuous mode [ 200.005437][ T65] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 200.165301][ T65] usb 10-1: Using ep0 maxpacket: 8 [ 200.169111][ T65] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 200.171761][ T65] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 200.174414][ T65] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 200.177544][ T65] usb 10-1: config 250 has no interface number 0 [ 200.181845][ T65] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 200.185810][ T65] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 200.205337][ T65] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.208578][ T65] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 200.211789][ T65] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 200.241992][ T65] usb 10-1: config 250 interface 228 has no altsetting 0 [ 200.256278][ T65] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 200.263855][ T65] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 200.295471][ T65] usb 10-1: Product: syz [ 200.297287][ T65] usb 10-1: SerialNumber: syz [ 200.302818][ T65] hub 10-1:250.228: bad descriptor, ignoring hub [ 200.305829][ T65] hub 10-1:250.228: probe with driver hub failed with error -5 [ 200.509112][ T65] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 200.578512][ T9869] kexec: Could not allocate control_code_buffer [ 200.939486][ T9894] Cannot find add_set index 0 as target [ 202.398666][ T9917] JFS: discard option not supported on device [ 202.402207][ T9917] Mount JFS Failure: -22 [ 202.403586][ T9917] jfs_mount failed w/return code = -22 [ 203.986527][ T9941] SET target dimension over the limit! [ 204.291205][ T7179] usb 10-1: USB disconnect, device number 4 [ 204.299720][ T7179] usblp0: removed [ 206.865355][ T65] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 207.015400][ T65] usb 7-1: Using ep0 maxpacket: 8 [ 207.021603][ T65] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 207.034444][ T65] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 207.041555][ T65] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 207.047696][ T5971] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 207.050881][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: kworker/u33:8 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 207.050897][ T5971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.050905][ T5971] Workqueue: hci1 hci_rx_work [ 207.050922][ T5971] Call Trace: [ 207.050926][ T5971] [ 207.050930][ T5971] dump_stack_lvl+0x16c/0x1f0 [ 207.050948][ T5971] sysfs_warn_dup+0x7f/0xa0 [ 207.050959][ T5971] sysfs_create_dir_ns+0x24b/0x2b0 [ 207.050969][ T5971] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 207.050979][ T5971] ? find_held_lock+0x2b/0x80 [ 207.050993][ T5971] ? do_raw_spin_unlock+0x172/0x230 [ 207.051003][ T5971] kobject_add_internal+0x2c4/0x9b0 [ 207.051022][ T5971] kobject_add+0x16e/0x240 [ 207.051031][ T5971] ? __pfx_kobject_add+0x10/0x10 [ 207.051043][ T5971] ? do_raw_spin_unlock+0x172/0x230 [ 207.051054][ T5971] ? kobject_put+0xab/0x5a0 [ 207.051073][ T5971] device_add+0x288/0x1a70 [ 207.051085][ T5971] ? __pfx_dev_set_name+0x10/0x10 [ 207.051098][ T5971] ? __pfx_device_add+0x10/0x10 [ 207.051109][ T5971] ? mgmt_send_event_skb+0x2fb/0x460 [ 207.051124][ T5971] hci_conn_add_sysfs+0x17e/0x230 [ 207.051138][ T5971] le_conn_complete_evt+0x1075/0x1d70 [ 207.051152][ T5971] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 207.051163][ T5971] ? hci_event_packet+0x43c/0x1190 [ 207.051177][ T5971] hci_le_conn_complete_evt+0x23c/0x370 [ 207.051191][ T5971] hci_le_meta_evt+0x2f3/0x5e0 [ 207.051203][ T5971] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 207.051217][ T5971] hci_event_packet+0x669/0x1190 [ 207.051228][ T5971] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 207.051241][ T5971] ? __pfx_hci_event_packet+0x10/0x10 [ 207.051253][ T5971] ? kcov_remote_start+0x3c9/0x6d0 [ 207.051275][ T5971] ? lockdep_hardirqs_on+0x7c/0x110 [ 207.051293][ T5971] hci_rx_work+0x2c5/0x16b0 [ 207.051306][ T5971] ? rcu_is_watching+0x12/0xc0 [ 207.051320][ T5971] process_one_work+0x9cc/0x1b70 [ 207.051337][ T5971] ? __pfx_process_one_work+0x10/0x10 [ 207.051351][ T5971] ? assign_work+0x1a0/0x250 [ 207.051370][ T5971] worker_thread+0x6c8/0xf10 [ 207.051384][ T5971] ? __kthread_parkme+0x19e/0x250 [ 207.051399][ T5971] ? __pfx_worker_thread+0x10/0x10 [ 207.051409][ T5971] kthread+0x3c2/0x780 [ 207.051425][ T5971] ? __pfx_kthread+0x10/0x10 [ 207.051439][ T5971] ? __pfx_kthread+0x10/0x10 [ 207.051454][ T5971] ? __pfx_kthread+0x10/0x10 [ 207.051468][ T5971] ? __pfx_kthread+0x10/0x10 [ 207.051482][ T5971] ? rcu_is_watching+0x12/0xc0 [ 207.051493][ T5971] ? __pfx_kthread+0x10/0x10 [ 207.051508][ T5971] ret_from_fork+0x45/0x80 [ 207.051518][ T5971] ? __pfx_kthread+0x10/0x10 [ 207.051533][ T5971] ret_from_fork_asm+0x1a/0x30 [ 207.051555][ T5971] [ 207.051568][ T5971] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 207.052596][ T65] usb 7-1: config 250 has no interface number 0 [ 207.055701][ T5971] Bluetooth: hci1: failed to register connection device [ 207.069120][ T65] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 207.071584][ T5971] Bluetooth: hci1: link tx timeout [ 207.078094][ T65] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 207.080214][ T5971] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.104109][ T65] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.106875][ T5971] Bluetooth: hci1: link tx timeout [ 207.106888][ T5971] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 207.173430][ T65] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 207.176849][ T65] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 207.182739][ T65] usb 7-1: config 250 interface 228 has no altsetting 0 [ 207.186343][ T65] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 207.191727][ T65] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 207.195457][ T65] usb 7-1: Product: syz [ 207.196797][ T65] usb 7-1: SerialNumber: syz [ 207.206058][ T65] hub 7-1:250.228: bad descriptor, ignoring hub [ 207.208034][ T65] hub 7-1:250.228: probe with driver hub failed with error -5 [ 207.429660][ T65] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 208.059188][T10009] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 208.065950][T10009] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1027'. [ 208.578979][ T6566] usb 7-1: USB disconnect, device number 4 [ 208.622928][ T6566] usblp0: removed [ 209.139450][ T5306] Bluetooth: hci1: command 0x0405 tx timeout [ 210.226827][T10044] netlink: 34 bytes leftover after parsing attributes in process `syz.7.1026'. [ 211.237246][T10053] bridge_slave_0: left allmulticast mode [ 211.239658][T10053] bridge_slave_0: left promiscuous mode [ 211.242349][T10053] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.258651][T10053] bridge_slave_1: left allmulticast mode [ 211.260616][T10053] bridge_slave_1: left promiscuous mode [ 211.263127][T10053] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.278301][T10053] bond0: (slave bond_slave_0): Releasing backup interface [ 211.290868][T10053] bond0: (slave bond_slave_1): Releasing backup interface [ 211.316952][T10053] team0: Port device team_slave_0 removed [ 211.331445][T10053] team0: Port device team_slave_1 removed [ 211.335315][T10053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.337952][T10053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.344835][T10053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.350803][T10053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.365126][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 211.371203][T10053] batman_adv: batadv0: Removing interface: ip6gretap1 [ 211.378055][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 211.384167][T10053] batman_adv: batadv0: Removing interface: ip6gretap2 [ 211.395689][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 211.398642][T10053] batman_adv: batadv0: Removing interface: ip6gretap3 [ 211.402291][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap4 [ 211.405127][T10053] batman_adv: batadv0: Removing interface: ip6gretap4 [ 211.408926][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap5 [ 211.411773][T10053] batman_adv: batadv0: Removing interface: ip6gretap5 [ 211.415149][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap6 [ 211.418273][T10053] batman_adv: batadv0: Removing interface: ip6gretap6 [ 211.421586][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap7 [ 211.424445][T10053] batman_adv: batadv0: Removing interface: ip6gretap7 [ 211.428787][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap8 [ 211.431632][T10053] batman_adv: batadv0: Removing interface: ip6gretap8 [ 211.434973][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap9 [ 211.439337][T10053] batman_adv: batadv0: Removing interface: ip6gretap9 [ 211.442973][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap10 [ 211.446625][T10053] batman_adv: batadv0: Removing interface: ip6gretap10 [ 211.450156][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap11 [ 211.453019][T10053] batman_adv: batadv0: Removing interface: ip6gretap11 [ 211.455405][ T5306] Bluetooth: hci1: command 0x0405 tx timeout [ 211.458864][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap12 [ 211.461759][T10053] batman_adv: batadv0: Removing interface: ip6gretap12 [ 211.467116][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap13 [ 211.474202][T10053] batman_adv: batadv0: Removing interface: ip6gretap13 [ 211.483356][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap14 [ 211.491184][T10053] batman_adv: batadv0: Removing interface: ip6gretap14 [ 211.494216][T10053] batman_adv: batadv0: Interface deactivated: ip6gretap15 [ 211.497962][T10053] batman_adv: batadv0: Removing interface: ip6gretap15 [ 213.287744][T10077] ISOFS: Unable to identify CD-ROM format. [ 214.330801][T10100] netlink: 'syz.7.1043': attribute type 1 has an invalid length. [ 215.304827][T10115] Cannot find add_set index 0 as target [ 216.220096][T10131] netlink: 'syz.2.1048': attribute type 4 has an invalid length. [ 216.725348][ T34] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 216.875310][ T34] usb 10-1: Using ep0 maxpacket: 32 [ 216.878675][ T34] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 216.883427][ T34] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 216.886672][ T34] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 216.889817][ T34] usb 10-1: Product: syz [ 216.891633][ T34] usb 10-1: Manufacturer: syz [ 216.893624][ T34] usb 10-1: SerialNumber: syz [ 216.898325][ T34] usb 10-1: config 0 descriptor?? [ 216.900921][T10142] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 216.905341][ T34] hub 10-1:0.0: bad descriptor, ignoring hub [ 216.907883][ T34] hub 10-1:0.0: probe with driver hub failed with error -5 [ 217.238557][ T65] usb 10-1: USB disconnect, device number 5 [ 218.239887][T10172] can0: slcan on ttyS3. [ 218.293833][T10174] ALSA: mixer_oss: invalid OSS volume '' [ 218.977174][T10168] can0 (unregistered): slcan off ttyS3. [ 219.513190][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.517246][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.519831][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.522584][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.524923][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.527989][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.530420][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.532736][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.535083][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.538397][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.540969][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.543731][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.548225][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.550590][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.553347][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.556478][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.559385][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.561702][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.564154][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.566572][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.568873][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.571173][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.573455][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.577070][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.579564][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.582293][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.584982][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.589103][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.591710][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.594353][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.597000][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.599434][ T65] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 219.607350][ T65] hid-generic 0001:0000:0000.0005: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 219.775333][ T34] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 219.927126][ T34] usb 11-1: config 0 has no interfaces? [ 219.928995][ T34] usb 11-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 219.931927][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.938823][ T34] usb 11-1: config 0 descriptor?? [ 220.195348][T10217] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.146606][T10233] Cannot find add_set index 0 as target [ 221.669190][T10239] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1069'. [ 221.672997][T10239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1069'. [ 221.676977][T10239] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1069'. [ 221.680293][T10239] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1069'. [ 222.691379][ T6018] usb 11-1: USB disconnect, device number 6 [ 222.748171][T10257] netlink: 'syz.5.1076': attribute type 10 has an invalid length. [ 222.750467][T10257] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 222.754005][T10257] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 222.756596][T10257] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 223.056572][T10268] Cannot find add_set index 0 as target [ 223.309493][T10273] sit0: left allmulticast mode [ 223.314915][T10273] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 223.327799][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1080'. [ 224.102919][T10278] ALSA: mixer_oss: invalid OSS volume '' [ 224.174937][T10281] Cannot find add_set index 0 as target [ 224.397975][T10289] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 228.552256][T10345] bridge_slave_0: left promiscuous mode [ 228.554644][T10345] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.564407][T10345] bridge_slave_1: left promiscuous mode [ 228.567038][T10345] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.591973][T10345] bond0: (slave bond_slave_0): Releasing backup interface [ 228.595848][T10345] bond_slave_0: left promiscuous mode [ 228.607143][T10345] bond0: (slave bond_slave_1): Releasing backup interface [ 228.610640][T10345] bond_slave_1: left promiscuous mode [ 228.632412][T10345] team0: Port device team_slave_0 removed [ 228.646437][T10345] team0: Port device team_slave_1 removed [ 228.651153][T10345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.660010][T10345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.668509][T10345] bond0: (slave wlan1): Releasing backup interface [ 228.673296][T10345] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 228.707345][T10345] batman_adv: batadv0: Removing interface: ip6gretap1 [ 228.711824][T10345] batman_adv: batadv0: Removing interface: ip6gretap2 [ 228.716043][T10345] batman_adv: batadv0: Removing interface: ip6gretap3 [ 228.720055][T10345] batman_adv: batadv0: Removing interface: ip6gretap4 [ 228.724415][T10345] batman_adv: batadv0: Removing interface: ip6gretap5 [ 228.728779][T10345] batman_adv: batadv0: Removing interface: ip6gretap6 [ 228.732793][T10345] batman_adv: batadv0: Removing interface: ip6gretap7 [ 228.739876][T10345] bond1: (slave veth3): Releasing active interface [ 228.742166][T10345] bond1: (slave veth3): the permanent HWaddr of slave - 2e:c3:70:01:9c:df - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 228.747735][T10345] ip6erspan0: entered promiscuous mode [ 228.755088][T10345] bond1: (slave ip6erspan0): Releasing active interface [ 228.757522][T10345] ip6erspan0: left promiscuous mode [ 228.763096][T10345] batman_adv: batadv0: Removing interface: ip6gretap8 [ 228.767205][T10345] batman_adv: batadv0: Removing interface: ip6gretap9 [ 228.771228][T10345] batman_adv: batadv0: Removing interface: ip6gretap10 [ 228.775193][T10345] batman_adv: batadv0: Removing interface: ip6gretap11 [ 228.779194][T10345] batman_adv: batadv0: Removing interface: ip6gretap12 [ 228.783098][T10345] batman_adv: batadv0: Removing interface: ip6gretap13 [ 228.787431][T10345] batman_adv: batadv0: Removing interface: ip6gretap14 [ 228.791448][T10345] batman_adv: batadv0: Removing interface: ip6gretap15 [ 228.795491][T10345] batman_adv: batadv0: Removing interface: ip6gretap16 [ 228.799253][T10345] batman_adv: batadv0: Removing interface: ip6gretap17 [ 228.803184][T10345] batman_adv: batadv0: Removing interface: ip6gretap18 [ 228.810157][T10345] batman_adv: batadv0: Removing interface: ip6gretap19 [ 228.816188][T10345] batman_adv: batadv0: Removing interface: ip6gretap20 [ 228.820971][T10345] batman_adv: batadv0: Interface deactivated: ip6gretap21 [ 228.826439][T10345] batman_adv: batadv0: Removing interface: ip6gretap21 [ 229.229924][T10354] : entered promiscuous mode [ 229.233895][T10355] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1107'. [ 229.901574][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 229.911200][T10364] random: crng reseeded on system resumption [ 230.145085][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'. [ 231.730095][T10398] bridge_slave_0: left promiscuous mode [ 231.732024][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.742689][T10398] bridge_slave_1: left promiscuous mode [ 231.745493][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.758836][T10398] bond0: (slave bond_slave_0): Releasing backup interface [ 231.772402][T10398] bond0: (slave bond_slave_1): Releasing backup interface [ 231.790405][T10398] team0: Port device team_slave_0 removed [ 231.799452][T10398] team0: Port device team_slave_1 removed [ 231.810634][T10398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.825511][T10398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.831111][T10398] batman_adv: batadv0: Removing interface: ip6gretap1 [ 231.836038][T10398] batman_adv: batadv0: Removing interface: ip6gretap2 [ 231.840267][T10398] batman_adv: batadv0: Removing interface: ip6gretap3 [ 231.844597][T10398] batman_adv: batadv0: Removing interface: ip6gretap4 [ 231.850311][T10398] batman_adv: batadv0: Removing interface: ip6gretap5 [ 231.854735][T10398] batman_adv: batadv0: Removing interface: ip6gretap6 [ 231.915590][T10402] ISOFS: Unable to identify CD-ROM format. [ 232.018058][T10398] batman_adv: batadv0: Removing interface: ip6gretap7 [ 232.042856][T10398] batman_adv: batadv0: Removing interface: ip6gretap8 [ 232.047772][T10398] batman_adv: batadv0: Removing interface: ip6gretap9 [ 232.060355][T10398] batman_adv: batadv0: Removing interface: ip6gretap10 [ 232.073080][T10398] batman_adv: batadv0: Interface deactivated: ip6gretap11 [ 232.080967][T10398] batman_adv: batadv0: Removing interface: ip6gretap11 [ 232.090124][T10398] batman_adv: batadv0: Interface deactivated: ip6gretap12 [ 232.093201][T10398] batman_adv: batadv0: Removing interface: ip6gretap12 [ 232.675322][ T63] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 232.838598][ T63] usb 10-1: config 0 has no interfaces? [ 232.841887][ T63] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 232.845116][ T63] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.851065][ T63] usb 10-1: Product: syz [ 232.854735][ T63] usb 10-1: Manufacturer: syz [ 232.857856][ T63] usb 10-1: SerialNumber: syz [ 232.876466][ T63] usb 10-1: config 0 descriptor?? [ 232.953891][T10419] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1114'. [ 232.972051][T10419] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap16 [ 232.979550][T10419] batman_adv: batadv0: Adding interface: ip6gretap16 [ 232.981646][T10419] batman_adv: batadv0: The MTU of interface ip6gretap16 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.990164][T10419] batman_adv: batadv0: Interface activated: ip6gretap16 [ 233.858112][T10430] can0: slcan on ttyS3. [ 234.275873][T10426] can0 (unregistered): slcan off ttyS3. [ 235.490287][ T63] usb 10-1: USB disconnect, device number 6 [ 235.559104][T10468] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1125'. [ 235.570201][T10468] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap22 [ 235.578035][T10468] batman_adv: batadv0: Adding interface: ip6gretap22 [ 235.580160][T10468] batman_adv: batadv0: The MTU of interface ip6gretap22 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.588567][T10468] batman_adv: batadv0: Interface activated: ip6gretap22 [ 238.982570][T10515] ISOFS: Unable to identify CD-ROM format. [ 239.488418][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1139'. [ 240.592493][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 240.592508][ T40] audit: type=1326 audit(1745490418.617:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10544 comm="syz.2.1142" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x0 [ 240.999518][T10561] tipc: Started in network mode [ 241.001443][T10561] tipc: Node identity 4, cluster identity 4711 [ 241.004091][T10561] tipc: Node number set to 4 [ 242.843932][T10586] team0: No ports can be present during mode change [ 242.858180][T10586] vlan0: entered promiscuous mode [ 242.877278][T10586] team0: Port device vlan0 added [ 242.882819][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1152'. [ 242.979060][T10586] team0 (unregistering): Port device team_slave_0 removed [ 242.983686][T10586] team0 (unregistering): Port device team_slave_1 removed [ 242.992810][T10586] team0 (unregistering): Port device vlan0 removed [ 243.162140][T10594] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1153'. [ 243.199499][T10594] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap17 [ 243.208448][T10594] batman_adv: batadv0: Adding interface: ip6gretap17 [ 243.210876][T10594] batman_adv: batadv0: The MTU of interface ip6gretap17 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.218927][T10594] batman_adv: batadv0: Interface activated: ip6gretap17 [ 243.515568][ T57] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 243.675307][ T57] usb 7-1: Using ep0 maxpacket: 32 [ 243.679475][ T57] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 243.686722][ T57] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 243.690502][ T57] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 243.694017][ T57] usb 7-1: Product: syz [ 243.695455][ T57] usb 7-1: Manufacturer: syz [ 243.697053][ T57] usb 7-1: SerialNumber: syz [ 243.700690][ T57] usb 7-1: config 0 descriptor?? [ 243.704304][T10596] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 243.708949][ T57] hub 7-1:0.0: bad descriptor, ignoring hub [ 243.711930][ T57] hub 7-1:0.0: probe with driver hub failed with error -5 [ 244.089849][ T57] usb 7-1: USB disconnect, device number 5 [ 246.242191][T10640] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1164'. [ 246.263600][T10640] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap23 [ 246.273295][T10640] batman_adv: batadv0: Adding interface: ip6gretap23 [ 246.276587][T10640] batman_adv: batadv0: The MTU of interface ip6gretap23 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.286361][T10640] batman_adv: batadv0: Interface activated: ip6gretap23 [ 246.979730][T10648] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.1162'. [ 247.614300][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1171'. [ 247.619841][T10663] random: crng reseeded on system resumption [ 248.031839][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1171'. [ 252.297061][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1184'. [ 252.301650][T10722] random: crng reseeded on system resumption [ 252.661389][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1184'. [ 253.444768][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1189'. [ 253.565346][ T65] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 253.720728][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1190'. [ 253.723585][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1190'. [ 253.736790][ T65] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.742946][ T65] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 253.750008][ T65] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.756299][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 253.762927][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 253.771122][ T65] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.774265][ T65] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.781577][ T65] usb 7-1: Product: syz [ 253.783754][ T65] usb 7-1: Manufacturer: syz [ 253.807452][ T65] cdc_wdm 7-1:1.0: skipping garbage [ 253.810463][ T65] cdc_wdm 7-1:1.0: skipping garbage [ 253.819796][ T65] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 253.821815][ T65] cdc_wdm 7-1:1.0: Unknown control protocol [ 254.027545][T10739] overlayfs: missing 'lowerdir' [ 254.046726][ T6018] usb 7-1: USB disconnect, device number 6 [ 255.255715][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.534576][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1200'. [ 258.542816][T10791] random: crng reseeded on system resumption [ 259.175338][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1200'. [ 259.318282][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1205'. [ 259.322760][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1205'. [ 260.356091][T10828] netlink: 'syz.7.1207': attribute type 3 has an invalid length. [ 260.358765][T10828] netlink: 'syz.7.1207': attribute type 3 has an invalid length. [ 260.361390][T10828] netlink: 'syz.7.1207': attribute type 3 has an invalid length. [ 260.363928][T10828] netlink: 'syz.7.1207': attribute type 3 has an invalid length. [ 260.366588][T10828] netlink: 'syz.7.1207': attribute type 3 has an invalid length. [ 260.369143][T10828] netlink: 'syz.7.1207': attribute type 3 has an invalid length. [ 260.371684][T10828] netlink: 'syz.7.1207': attribute type 3 has an invalid length. [ 260.374256][T10828] netlink: 'syz.7.1207': attribute type 3 has an invalid length. [ 260.377277][T10828] netlink: 'syz.7.1207': attribute type 3 has an invalid length. [ 260.379959][T10828] netlink: 'syz.7.1207': attribute type 3 has an invalid length. [ 261.279010][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1210'. [ 261.405394][ T65] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 261.748481][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.752866][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.757060][ T65] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.762340][ T65] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.766306][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.771612][ T65] usb 7-1: config 0 descriptor?? [ 262.074361][T10849] fuse: Unknown parameter 'Ud' [ 262.181493][ T65] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 262.187879][ T65] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 262.437378][T10857] ISOFS: Unable to identify CD-ROM format. [ 262.568185][T10863] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 264.093743][T10890] kvm: Disabled LAPIC found during irq injection [ 264.417665][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1223'. [ 264.445816][ T7179] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 264.609699][ T7179] usb 7-1: device firmware changed [ 264.616846][ T6566] usb 7-1: USB disconnect, device number 7 [ 264.746586][ T6566] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 264.900544][ T6566] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 205, changing to 11 [ 264.904137][ T6566] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41949, setting to 1024 [ 264.918087][ T6566] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.922361][ T6566] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.925709][ T6566] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.929995][ T6566] usb 7-1: config 0 descriptor?? [ 265.145359][ T5306] Bluetooth: hci1: command 0x0405 tx timeout [ 265.351014][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.354809][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.357420][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.359907][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.362418][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.364972][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.367539][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.370239][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.372777][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.376506][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.378967][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.381414][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.383856][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.386543][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.389005][ T6566] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 265.392407][ T6566] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 265.397679][ T6566] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 265.729515][T10921] bridge_slave_0: left allmulticast mode [ 265.731393][T10921] bridge_slave_0: left promiscuous mode [ 265.733550][T10921] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.747885][T10921] bridge_slave_1: left allmulticast mode [ 265.749794][T10921] bridge_slave_1: left promiscuous mode [ 265.752490][T10921] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.767960][T10921] bond0: (slave bond_slave_0): Releasing backup interface [ 265.783636][T10921] bond0: (slave bond_slave_1): Releasing backup interface [ 265.802100][T10921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.804980][T10921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.818052][T10921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.821067][T10921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.877649][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 265.880198][T10921] batman_adv: batadv0: Removing interface: ip6gretap1 [ 265.889776][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 265.892314][T10921] batman_adv: batadv0: Removing interface: ip6gretap2 [ 266.067292][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 266.070195][T10921] batman_adv: batadv0: Removing interface: ip6gretap3 [ 266.077161][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap4 [ 266.080026][T10921] batman_adv: batadv0: Removing interface: ip6gretap4 [ 266.091800][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap5 [ 266.094189][T10921] batman_adv: batadv0: Removing interface: ip6gretap5 [ 266.106475][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap6 [ 266.108860][T10921] batman_adv: batadv0: Removing interface: ip6gretap6 [ 266.116974][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap7 [ 266.119228][T10921] batman_adv: batadv0: Removing interface: ip6gretap7 [ 266.123068][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap8 [ 266.125507][T10921] batman_adv: batadv0: Removing interface: ip6gretap8 [ 266.128495][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap9 [ 266.131452][T10921] batman_adv: batadv0: Removing interface: ip6gretap9 [ 266.135623][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap10 [ 266.138251][T10921] batman_adv: batadv0: Removing interface: ip6gretap10 [ 266.142095][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap11 [ 266.145163][T10921] batman_adv: batadv0: Removing interface: ip6gretap11 [ 266.150637][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap12 [ 266.153009][T10921] batman_adv: batadv0: Removing interface: ip6gretap12 [ 266.182199][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap13 [ 266.186936][T10921] batman_adv: batadv0: Removing interface: ip6gretap13 [ 266.193133][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap14 [ 266.198461][T10921] batman_adv: batadv0: Removing interface: ip6gretap14 [ 266.231996][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap15 [ 266.234662][T10921] batman_adv: batadv0: Removing interface: ip6gretap15 [ 266.240378][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap16 [ 266.243531][T10921] batman_adv: batadv0: Removing interface: ip6gretap16 [ 266.251230][T10921] batman_adv: batadv0: Interface deactivated: ip6gretap17 [ 266.254473][T10921] batman_adv: batadv0: Removing interface: ip6gretap17 [ 267.025352][ T65] usb 7-1: USB disconnect, device number 8 [ 267.175459][T10940] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1233'. [ 267.211327][T10934] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 267.213479][T10934] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 267.218061][T10934] vhci_hcd vhci_hcd.0: Device attached [ 267.415363][ T34] vhci_hcd: vhci_device speed not set [ 267.437941][T10945] netlink: 'syz.2.1233': attribute type 11 has an invalid length. [ 267.440407][T10945] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1233'. [ 267.475338][ T34] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 267.649014][T10942] vhci_hcd: connection reset by peer [ 267.655641][ T1138] vhci_hcd: stop threads [ 267.657102][ T1138] vhci_hcd: release socket [ 267.662101][ T1138] vhci_hcd: disconnect device [ 268.213255][T10973] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 268.479281][T10975] netfs: Couldn't get user pages (rc=-14) [ 268.489841][T10975] fuse: Bad value for 'user_id' [ 268.491482][T10975] fuse: Bad value for 'user_id' [ 268.744942][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1241'. [ 268.748949][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1241'. [ 269.644809][T11006] validate_nla: 43 callbacks suppressed [ 269.644849][T11006] netlink: 'syz.5.1242': attribute type 4 has an invalid length. [ 269.654437][T11006] netlink: 'syz.5.1242': attribute type 4 has an invalid length. [ 270.236010][T11012] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 270.466216][T11018] netlink: 'syz.7.1247': attribute type 10 has an invalid length. [ 270.468641][T11018] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1247'. [ 270.472975][T11018] batman_adv: batadv0: Adding interface: virt_wifi0 [ 270.475054][T11018] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.484051][T11018] batman_adv: batadv0: Interface activated: virt_wifi0 [ 270.815357][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1249'. [ 271.234642][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1250'. [ 271.240953][T11033] random: crng reseeded on system resumption [ 271.508105][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1250'. [ 271.735483][T11044] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 271.739839][T11043] IPVS: stopping backup sync thread 11044 ... [ 272.575461][ T34] vhci_hcd: vhci_device speed not set [ 272.601364][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1252'. [ 274.302230][ T40] audit: type=1326 audit(1745490452.327:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.2.1260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 274.335505][ T40] audit: type=1326 audit(1745490452.327:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.2.1260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 274.337566][T11083] ISOFS: Unable to identify CD-ROM format. [ 274.344436][ T40] audit: type=1326 audit(1745490452.347:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.2.1260" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 274.355570][ T40] audit: type=1326 audit(1745490452.347:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.2.1260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 274.364653][ T40] audit: type=1326 audit(1745490452.347:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.2.1260" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 274.374006][ T40] audit: type=1326 audit(1745490452.347:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.2.1260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 274.383487][ T40] audit: type=1326 audit(1745490452.347:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.2.1260" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 274.392492][ T40] audit: type=1326 audit(1745490452.347:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.2.1260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 274.401300][ T40] audit: type=1326 audit(1745490452.347:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.2.1260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 274.407989][ T40] audit: type=1326 audit(1745490452.347:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.2.1260" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 274.825372][ T7179] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 274.985524][ T7179] usb 12-1: Using ep0 maxpacket: 8 [ 274.998820][ T7179] usb 12-1: config index 0 descriptor too short (expected 5924, got 36) [ 275.002305][ T7179] usb 12-1: config 250 has an invalid interface number: 228 but max is -1 [ 275.005886][ T7179] usb 12-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 275.009658][ T7179] usb 12-1: config 250 has no interface number 0 [ 275.012335][ T7179] usb 12-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 275.019655][ T7179] usb 12-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 275.024065][ T7179] usb 12-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 275.031163][ T7179] usb 12-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 275.037705][ T7179] usb 12-1: config 250 interface 228 has no altsetting 0 [ 275.043715][ T7179] usb 12-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 275.048267][ T7179] usb 12-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 275.051731][ T7179] usb 12-1: Product: syz [ 275.053526][ T7179] usb 12-1: SerialNumber: syz [ 275.061093][ T7179] hub 12-1:250.228: bad descriptor, ignoring hub [ 275.063144][ T7179] hub 12-1:250.228: probe with driver hub failed with error -5 [ 277.685533][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 277.715904][T11118] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1275'. [ 277.725309][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1275'. [ 278.079220][ T6566] usb 12-1: USB disconnect, device number 3 [ 279.182150][T11149] 9pnet_fd: Insufficient options for proto=fd [ 279.618171][T11162] veth0_vlan: entered allmulticast mode [ 280.188124][T11166] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1278'. [ 280.539159][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1282'. [ 281.444706][T11193] netfs: Couldn't get user pages (rc=-14) [ 281.461033][T11193] fuse: Bad value for 'user_id' [ 281.463196][T11193] fuse: Bad value for 'user_id' [ 282.398568][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 282.398580][ T40] audit: type=1326 audit(1745490460.427:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.7.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 282.425953][ T40] audit: type=1326 audit(1745490460.427:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.7.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 282.432957][ T40] audit: type=1326 audit(1745490460.427:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.7.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 282.441865][ T40] audit: type=1326 audit(1745490460.427:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.7.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 282.461210][ T40] audit: type=1326 audit(1745490460.437:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.7.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 282.467850][ T40] audit: type=1326 audit(1745490460.437:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.7.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 282.474504][ T40] audit: type=1326 audit(1745490460.437:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.7.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 282.481207][ T40] audit: type=1326 audit(1745490460.437:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.7.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 282.487796][ T40] audit: type=1326 audit(1745490460.447:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.7.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 282.494576][ T40] audit: type=1326 audit(1745490460.447:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.7.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 283.669493][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'. [ 284.329129][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1298'. [ 284.332931][T11246] random: crng reseeded on system resumption [ 284.631930][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1298'. [ 287.056242][T11288] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1307'. [ 287.196697][T11290] hub 6-0:1.0: USB hub found [ 287.198494][T11290] hub 6-0:1.0: 1 port detected [ 287.513821][T11287] input: syz1 as /devices/virtual/input/input12 [ 288.093101][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 288.631182][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1313'. [ 288.634651][T11307] random: crng reseeded on system resumption [ 289.370062][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1313'. [ 290.058192][ T7179] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 290.067228][ T5971] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 290.141612][T11329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1318'. [ 290.216626][ T7179] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.225340][ T7179] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.229115][ T7179] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.235780][ T7179] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.239292][ T7179] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.246082][ T7179] usb 10-1: config 0 descriptor?? [ 290.657632][ T7179] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 290.664722][ T7179] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 291.059518][T11346] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 291.760667][T11348] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 292.237255][T11359] tmpfs: Bad value for 'nr_blocks' [ 292.937014][T11376] Cannot find add_set index 3 as target [ 292.939614][ T6018] usb 10-1: USB disconnect, device number 7 [ 293.159855][T11380] Falling back ldisc for ptm0. [ 293.603452][T11388] block device autoloading is deprecated and will be removed. [ 294.420830][T11402] netlink: 'syz.6.1332': attribute type 10 has an invalid length. [ 294.436799][T11402] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 294.487845][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1333'. [ 295.021629][ T40] audit: type=1326 audit(1745490473.047:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.6.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 295.030443][ T40] audit: type=1326 audit(1745490473.047:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.6.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 295.040547][ T40] audit: type=1326 audit(1745490473.047:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.6.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 295.051894][ T40] audit: type=1326 audit(1745490473.047:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.6.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 295.059246][ T40] audit: type=1326 audit(1745490473.047:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.6.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 295.067610][ T40] audit: type=1326 audit(1745490473.057:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.6.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 295.074717][ T40] audit: type=1326 audit(1745490473.057:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.6.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 295.086513][ T40] audit: type=1326 audit(1745490473.057:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.6.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 295.093390][T11412] ISOFS: Unable to identify CD-ROM format. [ 295.096025][ T40] audit: type=1326 audit(1745490473.057:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.6.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 295.102625][ T40] audit: type=1326 audit(1745490473.067:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.6.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 295.538297][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1336'. [ 299.493345][T11458] overlayfs: statfs failed on './file0' [ 299.832398][T11474] macsec0: entered promiscuous mode [ 299.958735][T11478] openvswitch: netlink: Missing key (keys=40, expected=80) [ 300.064047][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1349'. [ 302.341291][T11513] batman_adv: batadv0: Removing interface: virt_wifi0 [ 302.472628][T11513] batman_adv: batadv0: Interface deactivated: ip6gretap16 [ 302.491245][T11513] batman_adv: batadv0: Removing interface: ip6gretap16 [ 302.857963][T11522] can0: slcan on ptm0. [ 303.007777][T11520] can0 (unregistered): slcan off ptm0. [ 306.019135][T11585] bond2 (unregistering): Released all slaves [ 306.305438][ T34] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 306.455777][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 306.461056][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.466167][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.470386][ T34] usb 11-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 306.474176][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.482519][ T34] usb 11-1: config 0 descriptor?? [ 307.382389][ T34] usbhid 11-1:0.0: can't add hid device: -71 [ 307.384403][ T34] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 307.392299][ T34] usb 11-1: USB disconnect, device number 7 [ 307.742874][T11610] openvswitch: netlink: Missing key (keys=40, expected=80) [ 307.779612][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1374'. [ 308.202823][T11619] Cannot find add_set index 3 as target [ 309.448827][T11637] Cannot find add_set index 3 as target [ 310.378162][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 310.378177][ T40] audit: type=1326 audit(1745490941.408:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.6.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 310.387884][ T40] audit: type=1326 audit(1745490941.408:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.6.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 310.394903][ T40] audit: type=1326 audit(1745490941.408:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.6.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 310.401714][ T40] audit: type=1326 audit(1745490941.408:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.6.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 310.408602][ T40] audit: type=1326 audit(1745490941.408:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.6.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 311.470168][T11672] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 311.480060][T11672] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 313.998007][T11725] Cannot find add_set index 3 as target [ 314.249116][T11740] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1395'. [ 314.569373][T11745] No control pipe specified [ 314.573854][ T40] audit: type=1326 audit(1745490945.598:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11744 comm="syz.2.1397" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x0 [ 315.658914][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1402'. [ 316.254111][T11771] loop6: detected capacity change from 0 to 524287999 [ 316.594555][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.021700][T11783] --map-set only usable from mangle table [ 317.288781][T11788] Cannot find add_set index 3 as target [ 317.596228][T11792] netlink: 'syz.2.1409': attribute type 4 has an invalid length. [ 318.617124][T11815] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 318.624316][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1416'. [ 319.342228][T11825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1419'. [ 319.401142][T11826] vlan2: entered allmulticast mode [ 322.358886][ T40] audit: type=1326 audit(1745490953.388:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 322.376060][ T40] audit: type=1326 audit(1745490953.388:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 322.385500][ T40] audit: type=1326 audit(1745490953.388:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 322.405752][ T40] audit: type=1326 audit(1745490953.388:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 322.416287][ T40] audit: type=1326 audit(1745490953.388:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 322.422878][ T40] audit: type=1326 audit(1745490953.398:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 322.430222][ T40] audit: type=1326 audit(1745490953.398:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 322.438345][ T40] audit: type=1326 audit(1745490953.398:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 322.444685][ T40] audit: type=1326 audit(1745490953.398:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 322.451971][ T40] audit: type=1326 audit(1745490953.478:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 323.490155][T11893] kvm: vcpu 8: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 323.755500][ T7179] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 323.905415][ T7179] usb 10-1: Using ep0 maxpacket: 8 [ 323.911207][ T7179] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.915848][ T7179] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.919589][ T7179] usb 10-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 323.923058][ T7179] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.929394][ T7179] usb 10-1: config 0 descriptor?? [ 324.347707][ T7179] usbhid 10-1:0.0: can't add hid device: -71 [ 324.355467][ T7179] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 324.361658][ T7179] usb 10-1: USB disconnect, device number 8 [ 324.782474][T11923] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 326.986726][T11960] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 326.994918][T11960] CIFS mount error: No usable UNC path provided in device string! [ 326.994918][T11960] [ 327.005720][T11960] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 327.043093][T11962] wg1: entered promiscuous mode [ 327.235355][ T6018] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 327.385352][ T6018] usb 7-1: Using ep0 maxpacket: 8 [ 327.388238][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.391677][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.394732][ T6018] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 327.397639][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.401389][ T6018] usb 7-1: config 0 descriptor?? [ 328.162696][ T6018] usbhid 7-1:0.0: can't add hid device: -71 [ 328.164662][ T6018] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 328.172125][ T6018] usb 7-1: USB disconnect, device number 9 [ 329.152454][T11991] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1456'. [ 329.277294][T11998] vlan2: entered allmulticast mode [ 329.279071][T11998] bond0: entered allmulticast mode [ 330.036473][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1460'. [ 330.917245][T12031] loop6: detected capacity change from 0 to 524287999 [ 331.537387][ T7179] IPVS: starting estimator thread 0... [ 331.891617][T12043] IPVS: using max 46 ests per chain, 110400 per kthread [ 332.516905][T12057] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 332.629585][T12058] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1469'. [ 332.706489][T12061] vlan2: entered allmulticast mode [ 332.708200][T12061] bond0: entered allmulticast mode [ 332.709909][T12061] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 332.775370][T12060] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.535573][ T5306] Bluetooth: hci1: command 0x0405 tx timeout [ 335.282927][T12097] netlink: 'syz.7.1479': attribute type 10 has an invalid length. [ 335.291920][T12097] veth0_vlan: left promiscuous mode [ 335.294944][T12097] veth0_vlan: entered promiscuous mode [ 335.309018][T12097] team0: Device veth0_vlan failed to register rx_handler [ 335.531061][T12102] input: syz1 as /devices/virtual/input/input13 [ 337.215605][ T6018] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 337.377120][ T6018] usb 12-1: Using ep0 maxpacket: 32 [ 337.380505][ T6018] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 337.386316][ T6018] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 337.389743][ T6018] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 337.392258][ T6018] usb 12-1: Product: syz [ 337.393620][ T6018] usb 12-1: Manufacturer: syz [ 337.395652][ T6018] usb 12-1: SerialNumber: syz [ 337.402126][ T6018] usb 12-1: config 0 descriptor?? [ 337.405570][T12118] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 337.410904][ T6018] hub 12-1:0.0: bad descriptor, ignoring hub [ 337.412814][ T6018] hub 12-1:0.0: probe with driver hub failed with error -5 [ 338.685590][ T6018] raw-gadget.0 gadget.7: failed to queue suspend event [ 338.696408][T12128] netlink: 'syz.6.1487': attribute type 10 has an invalid length. [ 339.208126][T12117] raw-gadget.0 gadget.7: failed to queue disconnect event [ 339.315447][ T5997] usb 12-1: USB disconnect, device number 4 [ 339.718955][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1492'. [ 340.357717][ T7179] libceph: connect (1)[c::]:6789 error -101 [ 340.359929][ T7179] libceph: mon0 (1)[c::]:6789 connect error [ 340.618500][ T7179] libceph: connect (1)[c::]:6789 error -101 [ 340.620684][ T7179] libceph: mon0 (1)[c::]:6789 connect error [ 340.810483][T12192] ceph: No mds server is up or the cluster is laggy [ 341.257304][T12208] netlink: 'syz.6.1496': attribute type 10 has an invalid length. [ 341.277880][T12208] veth0_vlan: left allmulticast mode [ 343.391851][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1504'. [ 344.336952][T12259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.351500][T12278] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1513'. [ 345.425015][T12279] vlan3: entered allmulticast mode [ 345.426774][T12279] bond0: entered allmulticast mode [ 346.718820][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 346.718831][ T40] audit: type=1326 audit(1745490977.748:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.5.1518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 346.732486][ T40] audit: type=1326 audit(1745490977.748:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.5.1518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 346.739077][ T40] audit: type=1326 audit(1745490977.758:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.5.1518" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 346.748978][ T40] audit: type=1326 audit(1745490977.758:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.5.1518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 346.756305][ T40] audit: type=1326 audit(1745490977.758:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.5.1518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 346.773203][ T40] audit: type=1326 audit(1745490977.758:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.5.1518" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 346.779985][ T40] audit: type=1326 audit(1745490977.758:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.5.1518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 346.880564][ T40] audit: type=1326 audit(1745490977.758:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.5.1518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 346.935031][ T40] audit: type=1326 audit(1745490977.758:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.5.1518" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 346.943840][ T40] audit: type=1326 audit(1745490977.878:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.5.1518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 348.705332][ T34] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 348.915418][ T34] usb 10-1: Using ep0 maxpacket: 32 [ 348.919067][ T34] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 348.924365][ T34] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 348.927496][ T34] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 348.930116][ T34] usb 10-1: Product: syz [ 348.931523][ T34] usb 10-1: Manufacturer: syz [ 348.933126][ T34] usb 10-1: SerialNumber: syz [ 348.936251][ T34] usb 10-1: config 0 descriptor?? [ 348.939171][T12324] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 349.147916][T12324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.151312][T12324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.167719][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1523'. [ 349.639590][ T5997] usb 10-1: USB disconnect, device number 9 [ 349.895381][ T6018] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 350.075470][ T6018] usb 7-1: Using ep0 maxpacket: 8 [ 350.079723][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.084284][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.102981][ T6018] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 350.107236][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.116072][ T6018] usb 7-1: config 0 descriptor?? [ 350.134978][T12353] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 350.375467][T12342] syz.2.1526 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 350.390073][ T6018] usbhid 7-1:0.0: can't add hid device: -71 [ 350.392015][ T6018] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 350.405683][ T6018] usb 7-1: USB disconnect, device number 10 [ 351.294228][T12364] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1531'. [ 351.750826][T12372] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1534'. [ 351.827082][T12373] vlan3: entered allmulticast mode [ 352.504475][T12388] netlink: 'syz.7.1535': attribute type 10 has an invalid length. [ 352.565180][T12386] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 352.572878][T12388] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 352.577659][T12388] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 352.581383][T12388] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 353.878385][ T5306] Bluetooth: hci4: unexpected event for opcode 0x2011 [ 354.213179][ T34] IPVS: starting estimator thread 0... [ 354.315343][T12427] IPVS: using max 46 ests per chain, 110400 per kthread [ 355.193650][T12436] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1547'. [ 355.274985][T12437] vlan3: entered allmulticast mode [ 355.644235][T12446] netlink: 'syz.2.1548': attribute type 10 has an invalid length. [ 356.180288][T12448] mkiss: ax0: crc mode is auto. [ 356.778390][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1552'. [ 357.257213][T12466] netlink: 'syz.6.1553': attribute type 11 has an invalid length. [ 357.260601][T12466] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1553'. [ 357.451341][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1551'. [ 357.562262][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [ 357.937309][ T5306] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 357.941044][ T5306] Bluetooth: hci4: Injecting HCI hardware error event [ 357.945634][ T5306] Bluetooth: hci4: hardware error 0x00 [ 358.171904][T12504] random: crng reseeded on system resumption [ 358.217443][T12506] qrtr: Invalid version 5 [ 358.817533][T12510] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1559'. [ 359.125335][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 359.125347][ T40] audit: type=1326 audit(1745490990.148:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.7.1562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 359.134155][ T40] audit: type=1326 audit(1745490990.148:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.7.1562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 359.141098][ T40] audit: type=1326 audit(1745490990.148:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.7.1562" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 359.147875][ T34] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 359.150368][ T40] audit: type=1326 audit(1745490990.148:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.7.1562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 359.157534][ T40] audit: type=1326 audit(1745490990.148:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.7.1562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 359.164661][ T40] audit: type=1326 audit(1745490990.148:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.7.1562" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 359.171458][ T40] audit: type=1326 audit(1745490990.148:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.7.1562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 359.178193][ T40] audit: type=1326 audit(1745490990.148:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.7.1562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 359.184899][ T40] audit: type=1326 audit(1745490990.158:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.7.1562" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 359.191509][ T40] audit: type=1326 audit(1745490990.158:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.7.1562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 359.326596][ T34] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 359.329176][ T34] usb 11-1: config 0 has no interface number 0 [ 359.331214][ T34] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.334547][ T34] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 359.339167][ T34] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 359.342712][ T34] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 359.346352][ T34] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 359.350348][ T34] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 359.353288][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.357502][ T34] usb 11-1: config 0 descriptor?? [ 359.360897][T12517] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 359.366379][ T34] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 359.602825][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 360.015342][ T5306] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 360.162357][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1561'. [ 360.287510][T12540] capability: warning: `syz.5.1566' uses 32-bit capabilities (legacy support in use) [ 360.294104][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 360.297205][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 360.299619][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.301986][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.304652][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.307547][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.309962][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.312320][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.314705][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.317665][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.320036][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.322402][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.324755][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.327327][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.329694][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.332045][ T6019] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 360.337400][ T6019] hid-generic 0000:3000000:0000.0009: hidraw1: HID v0.00 Device [sy] on syz0 [ 360.940153][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 362.017789][ T6566] usb 11-1: USB disconnect, device number 8 [ 362.034035][ T6566] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 362.209951][T12614] overlay: ./file0 is not a directory [ 362.402007][T12612] "syz.7.1573" (12612) uses obsolete ecb(arc4) skcipher [ 362.548102][ T85] Bluetooth: hci3: Frame reassembly failed (-84) [ 362.554388][ T85] Bluetooth: hci3: Frame reassembly failed (-84) [ 362.815484][ T1018] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 363.015443][ T1018] usb 10-1: Using ep0 maxpacket: 16 [ 363.022591][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 363.033303][ T1018] usb 10-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 363.041807][ T1018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.048340][ T1018] usb 10-1: Product: syz [ 363.051581][ T1018] usb 10-1: Manufacturer: syz [ 363.056377][ T1018] usb 10-1: SerialNumber: syz [ 363.072269][ T1018] usb 10-1: config 0 descriptor?? [ 363.091837][ T1018] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 364.575502][ T5306] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 365.300639][ T1018] usb 10-1: USB disconnect, device number 10 [ 367.016758][T12497] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 369.288862][T12707] netlink: 'syz.5.1597': attribute type 11 has an invalid length. [ 369.292434][T12707] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1597'. [ 369.598866][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1595'. [ 369.601810][T12710] netlink: 'syz.7.1595': attribute type 9 has an invalid length. [ 369.604325][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1595'. [ 370.243767][T12727] lo speed is unknown, defaulting to 1000 [ 370.312793][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1600'. [ 370.320760][T12727] lo speed is unknown, defaulting to 1000 [ 370.363835][T12727] lo speed is unknown, defaulting to 1000 [ 370.390513][T12727] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 370.455387][T12727] lo speed is unknown, defaulting to 1000 [ 370.460538][T12727] lo speed is unknown, defaulting to 1000 [ 370.463037][T12727] lo speed is unknown, defaulting to 1000 [ 370.465612][T12727] lo speed is unknown, defaulting to 1000 [ 370.471858][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1599'. [ 371.020448][T12734] lo speed is unknown, defaulting to 1000 [ 371.055548][T12497] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 371.060144][T12497] Bluetooth: hci2: Injecting HCI hardware error event [ 371.063188][ T5306] Bluetooth: hci2: hardware error 0x00 [ 373.136218][ T5306] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 373.652630][T12788] random: crng reseeded on system resumption [ 373.692810][T12781] qrtr: Invalid version 5 [ 374.385020][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1615'. [ 375.726419][T12813] netlink: 'syz.7.1618': attribute type 11 has an invalid length. [ 375.728904][T12813] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1618'. [ 376.553314][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 376.553325][ T40] audit: type=1326 audit(1745491007.578:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.5.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 376.563427][ T40] audit: type=1326 audit(1745491007.578:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.5.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 376.585513][ T40] audit: type=1326 audit(1745491007.588:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.5.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 376.594259][ T40] audit: type=1326 audit(1745491007.588:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.5.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 376.621297][ T40] audit: type=1326 audit(1745491007.588:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.5.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 376.645538][ T40] audit: type=1326 audit(1745491007.588:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.5.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 376.664678][ T40] audit: type=1326 audit(1745491007.588:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.5.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 376.683882][ T40] audit: type=1326 audit(1745491007.588:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.5.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 376.703024][ T40] audit: type=1326 audit(1745491007.588:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.5.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 376.722140][ T40] audit: type=1326 audit(1745491007.588:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.5.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 378.033432][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.964617][T12879] "syz.6.1632" (12879) uses obsolete ecb(arc4) skcipher [ 380.000674][T12879] overlay: ./file0 is not a directory [ 380.580931][T12746] Bluetooth: hci1: command 0x0405 tx timeout [ 382.384982][T12914] ALSA: mixer_oss: invalid index 40000 [ 382.807979][T12922] No control pipe specified [ 382.810739][T12922] No control pipe specified [ 382.905296][T12926] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 382.909347][T12926] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 383.284291][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 383.284303][ T40] audit: type=1326 audit(1745491014.308:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 383.324378][ T40] audit: type=1326 audit(1745491014.308:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 383.335204][ T40] audit: type=1326 audit(1745491014.318:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 383.344082][ T40] audit: type=1326 audit(1745491014.318:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 383.355201][ T40] audit: type=1326 audit(1745491014.318:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 383.364065][ T40] audit: type=1326 audit(1745491014.318:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 383.375218][ T40] audit: type=1326 audit(1745491014.318:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 383.390975][ T40] audit: type=1326 audit(1745491014.318:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 383.399926][ T40] audit: type=1326 audit(1745491014.318:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 383.410727][ T40] audit: type=1326 audit(1745491014.318:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 383.641461][T12938] overlay: Unknown parameter 'appraise_type' [ 384.010013][T12945] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 384.151667][T12945] /dev/sr0: Can't open blockdev [ 384.247959][T12939] /dev/sr0: Can't open blockdev [ 386.030555][T12991] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 386.033432][T12991] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 386.300775][T12993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.309536][T12993] bond0: (slave rose0): Enslaving as an active interface with an up link [ 386.833946][T13020] CIFS mount error: No usable UNC path provided in device string! [ 386.833946][T13020] [ 386.838969][T13020] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 389.297948][T13040] wireguard0: entered promiscuous mode [ 389.300285][T13040] wireguard0: entered allmulticast mode [ 389.502247][T13074] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 389.505120][T13074] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 390.385338][ T1018] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 390.447017][T13082] CIFS mount error: No usable UNC path provided in device string! [ 390.447017][T13082] [ 390.450797][T13082] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 390.565304][ T1018] usb 10-1: Using ep0 maxpacket: 32 [ 390.619116][ T1018] usb 10-1: unable to get BOS descriptor or descriptor too short [ 390.644164][ T1018] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 390.646661][ T1018] usb 10-1: can't read configurations, error -71 [ 392.023954][T13094] siw: device registration error -23 [ 392.030735][T13094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1675'. [ 392.542428][T13100] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1676'. [ 392.832753][T13108] set match dimension is over the limit! [ 393.254305][T13116] IPVS: Error connecting to the multicast addr [ 393.474043][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1678'. [ 393.775606][T13128] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 393.778470][T13128] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 395.588653][T13147] siw: device registration error -23 [ 395.735817][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 395.735835][ T40] audit: type=1326 audit(1745491026.748:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.7.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 395.747793][ T40] audit: type=1326 audit(1745491026.748:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.7.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 395.755637][ T40] audit: type=1326 audit(1745491026.748:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.7.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 395.765653][ T40] audit: type=1326 audit(1745491026.748:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.7.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 395.775485][ T40] audit: type=1326 audit(1745491026.748:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.7.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 395.785443][ T40] audit: type=1326 audit(1745491026.748:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.7.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 395.795490][ T40] audit: type=1326 audit(1745491026.748:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.7.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 395.805848][ T40] audit: type=1326 audit(1745491026.748:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.7.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 395.815428][ T40] audit: type=1326 audit(1745491026.748:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.7.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 395.825848][ T40] audit: type=1326 audit(1745491026.748:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.7.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 397.320031][T13165] ALSA: mixer_oss: invalid index 40000 [ 401.293583][T13206] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1698'. [ 402.988339][T13234] netlink: 'syz.6.1703': attribute type 23 has an invalid length. [ 403.309418][T13242] tipc: Enabled bearer , priority 0 [ 403.380502][T13242] syzkaller0: entered promiscuous mode [ 403.382387][T13242] syzkaller0: entered allmulticast mode [ 403.386161][T13242] tipc: Resetting bearer [ 404.234626][T13240] tipc: Resetting bearer [ 404.381669][ T6000] tipc: Node number set to 1429377616 [ 404.552281][T13251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 405.554186][T13256] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 405.596114][T13256] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 405.602291][T13256] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 405.606881][T13256] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 406.452531][T13240] tipc: Disabling bearer [ 406.458562][T13238] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 407.295725][T13278] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 407.305510][T13278] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 407.380909][T13280] serio: Serial port ptm0 [ 409.579423][T13317] macsec0: entered promiscuous mode [ 409.582013][T13317] macsec0: entered allmulticast mode [ 409.583930][T13317] veth1_macvtap: entered allmulticast mode [ 411.290320][T13341] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 411.298386][T13345] sctp: [Deprecated]: syz.5.1730 (pid 13345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.298386][T13345] Use struct sctp_sack_info instead [ 411.320368][T13341] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 411.324088][T13341] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 411.328975][T13341] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 411.332541][T13341] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 411.358017][T13341] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 411.361956][T13341] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 411.365695][T13341] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 411.370735][T13341] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 411.374759][T13341] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 411.483613][T13347] tipc: Enabled bearer , priority 0 [ 411.507060][T13350] lo speed is unknown, defaulting to 1000 [ 412.020197][T13357] ALSA: mixer_oss: invalid OSS volume '/proc/asound/card2/oss_mixer' [ 412.120568][T13363] input: syz0 as /devices/virtual/input/input17 [ 412.143441][T13344] tipc: Resetting bearer [ 413.583782][T13344] tipc: Disabling bearer [ 414.088958][T13396] bridge0: port 1(netdevsim0) entered blocking state [ 414.091802][T13396] bridge0: port 1(netdevsim0) entered disabled state [ 414.094344][T13396] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 414.104604][T13396] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 414.110720][T13396] bridge0: port 1(netdevsim0) entered blocking state [ 414.113036][T13396] bridge0: port 1(netdevsim0) entered forwarding state [ 414.160908][T13387] fuse: Bad value for 'fd' [ 414.345203][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1742'. [ 414.778259][T13410] usb usb8: usbfs: process 13410 (syz.6.1744) did not claim interface 0 before use [ 415.223330][T13420] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 415.226312][T13420] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 416.912171][ T6566] hid-generic 00A0:0008:0005.000A: unknown main item tag 0x7 [ 416.914663][ T6566] hid-generic 00A0:0008:0005.000A: unknown main item tag 0x3 [ 416.919972][ T6566] hid-generic 00A0:0008:0005.000A: unknown main item tag 0x0 [ 416.973855][ T6566] hid-generic 00A0:0008:0005.000A: unknown main item tag 0x0 [ 417.059795][ T6566] hid-generic 00A0:0008:0005.000A: unknown main item tag 0x0 [ 417.077115][ T6566] hid-generic 00A0:0008:0005.000A: hidraw1: HID v0.05 Device [syz0] on syz0 [ 417.315314][ T57] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 417.417129][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 417.417141][ T40] audit: type=1326 audit(1745491048.448:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.5.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 417.426077][ T40] audit: type=1326 audit(1745491048.448:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.5.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 417.434192][ T40] audit: type=1326 audit(1745491048.448:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.5.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 417.441048][ T40] audit: type=1326 audit(1745491048.448:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.5.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 417.448031][ T40] audit: type=1326 audit(1745491048.448:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.5.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 417.455833][ T40] audit: type=1326 audit(1745491048.448:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.5.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 417.463164][ T40] audit: type=1326 audit(1745491048.448:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.5.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 417.473759][ T40] audit: type=1326 audit(1745491048.448:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.5.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 417.480662][ T40] audit: type=1326 audit(1745491048.448:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.5.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 417.487584][ T40] audit: type=1326 audit(1745491048.448:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.5.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 417.525513][ T57] usb 11-1: Using ep0 maxpacket: 16 [ 417.528848][ T57] usb 11-1: config 0 has an invalid interface number: 185 but max is 0 [ 417.531429][ T57] usb 11-1: config 0 has no interface number 0 [ 417.535375][ T57] usb 11-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=60.d8 [ 417.538079][ T57] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.540446][ T57] usb 11-1: Product: syz [ 417.541706][ T57] usb 11-1: Manufacturer: syz [ 417.543139][ T57] usb 11-1: SerialNumber: syz [ 417.551305][ T57] usb 11-1: config 0 descriptor?? [ 417.562707][ T57] gspca_main: spca506-2.14.0 probing 0734:043b [ 419.817703][ T6566] usb 11-1: USB disconnect, device number 9 [ 421.321270][T13513] tipc: New replicast peer: 255.255.255.255 [ 421.323553][T13513] tipc: Enabled bearer , priority 10 [ 421.712874][T13518] lo speed is unknown, defaulting to 1000 [ 423.477824][T13545] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 423.480578][T13545] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 424.606387][T13556] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 424.609866][T13556] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 426.396941][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1786'. [ 426.521567][T13594] bridge0: port 1(netdevsim0) entered blocking state [ 426.524850][T13594] bridge0: port 1(netdevsim0) entered disabled state [ 426.538355][T13594] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 427.575736][T13614] Invalid ELF header magic: != ELF [ 428.730320][T13621] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 428.733126][T13621] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 429.127336][ T45] BUG: sleeping function called from invalid context at mm/util.c:743 [ 429.130879][ T45] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 45, name: kcompactd1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 429.135104][ T45] preempt_count: 1, expected: 0 [ 429.137107][ T45] RCU nest depth: 0, expected: 0 [ 429.138720][ T45] 1 lock held by kcompactd1/45: [ 429.140492][ T45] #0: ffff88801dc237c8 (&mapping->i_private_lock){+.+.}-{3:3}, at: __buffer_migrate_folio+0x25b/0x690 [ 429.143973][ T45] Preemption disabled at: [ 429.143979][ T45] [<0000000000000000>] 0x0 [ 429.146912][ T45] CPU: 0 UID: 0 PID: 45 Comm: kcompactd1 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 429.146925][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 429.146932][ T45] Call Trace: [ 429.146936][ T45] [ 429.146940][ T45] dump_stack_lvl+0x16c/0x1f0 [ 429.146958][ T45] __might_resched+0x3c0/0x5e0 [ 429.146971][ T45] ? __pfx___might_resched+0x10/0x10 [ 429.146985][ T45] folio_mc_copy+0xfb/0x190 [ 429.147002][ T45] __migrate_folio.constprop.0+0xa1/0x3d0 [ 429.147018][ T45] __buffer_migrate_folio+0x5cd/0x690 [ 429.147035][ T45] ? __pfx_buffer_migrate_folio_norefs+0x10/0x10 [ 429.147050][ T45] move_to_new_folio+0x1d9/0x700 [ 429.147065][ T45] migrate_pages_batch+0x201d/0x31a0 [ 429.147082][ T45] ? __pfx_compaction_free+0x10/0x10 [ 429.147096][ T45] ? __pfx_migrate_pages_batch+0x10/0x10 [ 429.147116][ T45] migrate_pages_sync+0x12d/0x8a0 [ 429.147131][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 429.147140][ T45] ? __pfx_compaction_free+0x10/0x10 [ 429.147152][ T45] ? __pfx_migrate_pages_sync+0x10/0x10 [ 429.147172][ T45] migrate_pages+0x1b28/0x2350 [ 429.147188][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 429.147197][ T45] ? __pfx_compaction_free+0x10/0x10 [ 429.147209][ T45] ? __pfx_migrate_pages+0x10/0x10 [ 429.147227][ T45] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 429.147239][ T45] ? __pfx___might_resched+0x10/0x10 [ 429.147254][ T45] compact_zone+0x1f6c/0x45f0 [ 429.147269][ T45] ? __lock_acquire+0xaa4/0x1ba0 [ 429.147289][ T45] ? __pfx_compact_zone+0x10/0x10 [ 429.147303][ T45] compact_node+0x1a4/0x2d0 [ 429.147314][ T45] ? __pfx_compact_node+0x10/0x10 [ 429.147324][ T45] ? __pfx___might_resched+0x10/0x10 [ 429.147344][ T45] ? __pfx_extfrag_for_order+0x10/0x10 [ 429.147358][ T45] ? rcu_is_watching+0x12/0xc0 [ 429.147371][ T45] kcompactd+0x762/0xea0 [ 429.147383][ T45] ? __pfx_kcompactd+0x10/0x10 [ 429.147393][ T45] ? find_held_lock+0x2b/0x80 [ 429.147405][ T45] ? __pfx_autoremove_wake_function+0x10/0x10 [ 429.147417][ T45] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.147432][ T45] ? __kthread_parkme+0x19e/0x250 [ 429.147446][ T45] ? __pfx_kcompactd+0x10/0x10 [ 429.147456][ T45] kthread+0x3c2/0x780 [ 429.147471][ T45] ? __pfx_kthread+0x10/0x10 [ 429.147485][ T45] ? __pfx_kthread+0x10/0x10 [ 429.147504][ T45] ? __pfx_kthread+0x10/0x10 [ 429.147518][ T45] ? __pfx_kthread+0x10/0x10 [ 429.147532][ T45] ? rcu_is_watching+0x12/0xc0 [ 429.147542][ T45] ? __pfx_kthread+0x10/0x10 [ 429.147557][ T45] ret_from_fork+0x45/0x80 [ 429.147567][ T45] ? __pfx_kthread+0x10/0x10 [ 429.147582][ T45] ret_from_fork_asm+0x1a/0x30 [ 429.147603][ T45] [ 429.350359][T13629] geneve1: entered promiscuous mode [ 429.920683][ T1255] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.009173][ T1255] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.101109][ T1255] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.161812][ T1255] bridge0: port 1(netdevsim0) entered disabled state [ 430.171937][ T1255] netdevsim netdevsim7 netdevsim0 (unregistering): left allmulticast mode [ 430.174759][ T1255] netdevsim netdevsim7 netdevsim0 (unregistering): left promiscuous mode [ 430.178194][ T1255] bridge0: port 1(netdevsim0) entered disabled state [ 430.182175][ T1255] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.830950][ T1255] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 430.833950][ T1255] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 430.836670][ T1255] bond0 (unregistering): Released all slaves [ 430.957488][ T1255] IPVS: stopping backup sync thread 12057 ... [ 431.174391][ T1255] hsr_slave_0: left promiscuous mode [ 431.180890][ T1255] hsr_slave_1: left promiscuous mode [ 431.211067][ T1255] veth1_macvtap: left allmulticast mode [ 431.212990][ T1255] veth1_macvtap: left promiscuous mode [ 431.214725][ T1255] veth0_macvtap: left promiscuous mode [ 431.218559][ T1255] veth1_vlan: left promiscuous mode VM DIAGNOSIS: 10:30:07 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854afbc5 RDI=ffffffff9ae0cb80 RBP=ffffffff9ae0cb40 RSP=ffffc9000070ee90 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006f R14=ffffffff9ae0cb40 R15=ffffffff854afb60 RIP=ffffffff854afbef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000f000 CR3=000000005bee0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000000a DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff888020f60b40 RCX=0000000000000000 RDX=0000000000000000 RSI=ffff888020f60b18 RDI=ffff888020f60b40 RBP=ffff888020f60af0 RSP=ffffc9000110f9e0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=ffff88806e91f1b8 R12=0000000000000001 R13=0000000000000000 R14=ffff888020f60000 R15=0000000000000000 RIP=ffffffff8197865d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880978bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800010c0 CR3=0000000068028000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001d000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000001 RBX=ffffea0001723a40 RCX=ffffffff81f513a1 RDX=ffff888022294880 RSI=ffffffff81f5148f RDI=ffffea000171ffd0 RBP=ffffea00016e5788 RSP=ffffc9000359f2e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffea0001723a48 R13=ffffea0001723a50 R14=ffffea000171ffc8 R15=04fff00000020801 RIP=ffffffff81baaa2b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f66e40 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7402ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88801b4a8000 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88801b4a8002 RBP=dffffc0000000000 RSP=ffffc900005e8a48 R8 =0000000000000001 R9 =ffff88802b53ae54 R10=ffff88801b4a8003 R11=0000000000000000 R12=0000000000007bdf R13=0000000000000000 R14=ffff88802b53ae40 R15=ffffed1003695000 RIP=ffffffff8b71c348 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097abf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008038f000 CR3=0000000053afa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000