last executing test programs: 30m19.327687002s ago: executing program 1 (id=3066): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ndctl0(0xffffff9c, &(0x7f0000002f80), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4814) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r5 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) write$FUSE_LK(r0, &(0x7f00000003c0)={0x28, 0xffffffffffffffda, r1, {{0xb78f, 0x14, 0x1, r2}}}, 0x28) r8 = eventfd(0x401) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000040)=r8, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r9, 0x400448e6, &(0x7f0000000240)="7c773d39aeef000000006dcffe32d6e49f") ioctl$sock_bt_hci(r9, 0x400448e7, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd=r5, 0x4, 0x6, 0xe, 0x14, 0x0, {0x1}}) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_io_uring_setup(0x2df7, &(0x7f00000000c0)={0x0, 0x3b6a, 0x4000, 0x2, 0x109, 0x0, r5}, &(0x7f0000000140), &(0x7f0000000200)) io_uring_enter(r10, 0x3a84, 0x4c1, 0x43, 0x0, 0x0) 30m18.422377201s ago: executing program 1 (id=3070): openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r1, 0x0, 0x0) writev(r1, &(0x7f00000021c0)=[{&(0x7f0000002080)="54b00e0a", 0x4}], 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x0, 0x3a, '$', 0x3a, '!-$M--', 0x3a, './file0', 0x3a, [0x4f, 0x4f, 0x50, 0x50, 0x43]}, 0x33) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x700}], 0x40000cf, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0xff9d, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xa2, 0xff, 0x20000000, 0x0, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x2c, 0x3ffa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) 30m18.129111283s ago: executing program 1 (id=3071): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000280)=0x8001) close(r4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r5 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r5}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000440), 0x0) unlink(&(0x7f0000000380)='./file0\x00') r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0xffff, 0x80600}) 30m16.653316571s ago: executing program 1 (id=3075): mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xa, 0x0, &(0x7f00000002c0)="d2ff030060010000009e", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = gettid() r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sysfs$2(0x2, 0x817fff, &(0x7f0000000300)=""/101) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 30m15.906755401s ago: executing program 1 (id=3081): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x0, 0x1, 0xa7a8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x0, 0x0, 0x0, 0x5e3, 0xfffffd87, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2, 0x5, 0x3831354f, 0x0, 0x5, [{0xfffffff2, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x40000001, 0x4}, {0x9, 0xd1}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0x8}], 0x6, 0x8, 0x3, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) open_by_handle_at(r0, &(0x7f0000000300)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x4, 0xc, "3053d7eab12f1ae7f0e8b6d3f932ea4f"}}}, 0x60002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000001000000010bbf92", @ANYRES32=r1, @ANYRES32=r1], 0x14, 0x4060019}, 0x20000841) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0xdc, 0xffffffff, 0x1c4, 0xffffffff, 0xffffffff, 0x1c4, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@private=0xa010102, @multicast2, 0xffffffff, 0xffffffff, 'ip6gre0\x00', 'syzkaller0\x00', {0xff}, {}, 0x21, 0x3, 0x60}, 0x0, 0x70, 0xdc}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x5, 0x58ad, 0x4, 0x0, 0x0, "2d6683395228ec9762890fe5c9d0107a77ce6283723e24ff5179e472000480a670bf0b82c97399e88181fea5f96abde0ff6abcfe24fb78cd3b74e7bb502f9f0e"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0xffffff00, 'netdevsim0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0x2, 0x28}, 0x0, 0xb4, 0xe8, 0x0, {}, [@common=@unspec=@nfacct={{0x44}, {'syz1\x00', 0x10001}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x2, 0x7}, {0x0, 0x3, 0x1}, {0x2, 0x4}, 0x0, 0x8}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) sync() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) accept4(r3, 0x0, 0x0, 0x0) 30m13.812031424s ago: executing program 1 (id=3088): syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x4, 0x1, 0x40024c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x4004800) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x4d, 0x4007, @fd_index=0xa, 0x8, 0x0, 0x0, 0x12}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}], 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x7, 0x10001]}, &(0x7f0000000100), 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e"], 0x6c}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000680)={{0x3, 0x0, 0x62, 0x3, 0x9936}}) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ad", 0x1) sendmmsg$inet6(r8, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}, 0xff03}], 0x1, 0x8000) rename(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 29m59.202320081s ago: executing program 32 (id=3088): syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x4, 0x1, 0x40024c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x4004800) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x4d, 0x4007, @fd_index=0xa, 0x8, 0x0, 0x0, 0x12}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}], 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x7, 0x10001]}, &(0x7f0000000100), 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e"], 0x6c}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000680)={{0x3, 0x0, 0x62, 0x3, 0x9936}}) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ad", 0x1) sendmmsg$inet6(r8, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}, 0xff03}], 0x1, 0x8000) rename(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9m18.604978827s ago: executing program 2 (id=7368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000002806"], 0xfdef) 9m18.484486968s ago: executing program 2 (id=7371): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 9m18.439920054s ago: executing program 2 (id=7373): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 9m18.227475478s ago: executing program 2 (id=7374): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0xb9) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) 9m18.179499295s ago: executing program 2 (id=7375): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = syz_create_resource$binfmt(&(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 9m18.178709621s ago: executing program 2 (id=7376): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f0000001040), 0x282d) 9m3.820304725s ago: executing program 33 (id=7376): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f0000001040), 0x282d) 8m41.194032335s ago: executing program 0 (id=7838): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 8m41.138673721s ago: executing program 0 (id=7840): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x29, 0x49e, 0xffffffffc426029c, 0x5, 0x40, 0xe, 0x1, 0x0, 0x0, 0x10, 0x876}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r2, r3, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file2\x00', 0x0, 0x200000, 0x0) 8m40.929244517s ago: executing program 0 (id=7841): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x44, 0xa, 0x3, 0x0, 0x9, 0x6, 0x21, 0x81, 0x4, 0x81, 0x4c, 0x2, 0x61}, 0xe) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8m40.024449875s ago: executing program 0 (id=7853): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x111509e, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 8m40.020850344s ago: executing program 0 (id=7854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) 8m39.734085474s ago: executing program 0 (id=7856): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000270001000000000000000000ac1e01"], 0x50}}, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4041) 8m39.617028479s ago: executing program 34 (id=7856): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000270001000000000000000000ac1e01"], 0x50}}, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4041) 8m6.970325352s ago: executing program 3 (id=8234): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 8m6.730357268s ago: executing program 3 (id=8235): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unshare(0x2c020400) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) 8m6.553650318s ago: executing program 3 (id=8236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x2c1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$binderfs(0xffffff9c, &(0x7f0000000a00)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r6, 0xc00c6211, &(0x7f0000000a40)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000023000000000000000000000000000000000000000000008dbe84165decc4e50e3163de85cc913193cf406090f6a9989c6b7d92e3e2911505670e74e8e1d18dc8abab760aa3633e68bdd2526c34eeedf61f1bb418133ef8a2a45fe5842d3d21c9e3c4f20a54600f2a047d1471fd84eb32913d10fed7d1679a868479991c082bc6a62cc55daf19be9addbfd84fdb1002c98b8a9e69a1a229c267e7e723c539980246c16cf586bd6aab0263cdb3c6cecbfc2a4b6f3a4f4d292c3d6feadac56f9774bd9ea5f36d35a1"], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xfffffefe, 0xffffff00]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 8m5.509977608s ago: executing program 3 (id=8241): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 8m5.467286529s ago: executing program 3 (id=8242): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000001200)='./file1\x00') 8m5.270375648s ago: executing program 3 (id=8243): openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0xa400, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000780)=[{r3, 0x3230}], 0x1, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 8m5.196795956s ago: executing program 35 (id=8243): openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0xa400, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000780)=[{r3, 0x3230}], 0x1, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 2m45.478560403s ago: executing program 6 (id=10133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x2c1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$binderfs(0xffffff9c, &(0x7f0000000a00)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r6, 0xc00c6211, &(0x7f0000000a40)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000023000000000000000000000000000000000000000000008dbe84165decc4e50e3163de85cc913193cf406090f6a9989c6b7d92e3e2911505670e74e8e1d18dc8abab760aa3633e68bdd2526c34eeedf61f1bb418133ef8a2a45fe5842d3d21c9e3c4f20a54600f2a047d1471fd84eb32913d10fed7d1679a868479991c082bc6a62cc55daf19be9addbfd84fdb1002c98b8a9e69a1a229c267e7e723c539980246c16cf586bd6aab0263cdb3c6cecbfc2a4b6f3a4f4d292c3d6feadac56f9774bd9ea5f36d35a1"], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xfffffefe, 0xffffff00]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2m44.339002501s ago: executing program 6 (id=10141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0xbf18, 0x2, 0xd2, 0x8, 0xa, 0x6, 0x5, 0x6, 0x0, 0xe, 0x4, 0xd, 0x6}, {0x265f, 0x1, 0x6c, 0x4, 0x4, 0x2, 0x7, 0xa, 0xa, 0x7, 0x0, 0x8, 0x8000000000000000}, {0x4, 0x680, 0x6, 0x8, 0xc, 0x12, 0x2, 0x4, 0x4, 0x7, 0x8, 0x2, 0x1}], 0x9}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x401], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0xff, 0x0, 0x81, 0x80}, {0x5000, 0xf000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x0, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m44.129628272s ago: executing program 6 (id=10143): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'}) 2m44.098241618s ago: executing program 6 (id=10145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0xd}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 2m43.992348203s ago: executing program 6 (id=10147): socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) creat(&(0x7f00000001c0)='./file0\x00', 0x102) 2m43.155222639s ago: executing program 6 (id=10151): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) listen(r1, 0x80000001) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 2m28.801531877s ago: executing program 36 (id=10151): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) listen(r1, 0x80000001) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 5.838259023s ago: executing program 5 (id=11011): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) mbind(&(0x7f00000d4000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x4, 0x8) 4.416619912s ago: executing program 4 (id=11016): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000021c000000000090200000100000083c4316ea36b46368a71289513fd8907db0101ed7d0ed588ae3e5eaef965448d"]) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = getpid() io_uring_setup(0x821, &(0x7f0000000000)={0x0, 0x209ddc, 0x2000, 0x1, 0x80000a6}) syz_pidfd_open(r4, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4058880) recvmmsg$unix(r7, &(0x7f000001b3c0)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000300)=""/28, 0x1c}], 0x1, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/34, 0x22}], 0x1, &(0x7f00000006c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000880)=""/149, 0x95}, {&(0x7f0000000640)=""/56, 0x38}, {&(0x7f0000000940)=""/84, 0x54}, {&(0x7f00000019c0)=""/32, 0x20}, {&(0x7f0000001a00)=""/100, 0x64}, {&(0x7f0000001a80)=""/15, 0xf}, {&(0x7f0000001ac0)=""/195, 0xc3}, {&(0x7f0000001bc0)=""/217, 0xd9}, {&(0x7f0000001cc0)=""/62, 0x3e}], 0x9, &(0x7f0000001dc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001e40)=@abs, 0x6e, &(0x7f000001b340)=[{&(0x7f0000001ec0)=""/162, 0xa2}, {&(0x7f0000001f80)=""/98, 0x62}, {&(0x7f000001b000)=""/236, 0xec}, {&(0x7f000001b100)=""/147, 0x93}, {&(0x7f000001b1c0)=""/96, 0x60}, {&(0x7f000001b240)=""/239, 0xef}], 0x6}}], 0x4, 0x42, &(0x7f000001b500)) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1}, 0x0) socket(0x10, 0x803, 0x0) 4.403214875s ago: executing program 5 (id=11017): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b488"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r1, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, 0x0, 0x0, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0xee00) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 4.36278075s ago: executing program 5 (id=11018): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c97"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, 0x0, 0x0, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0xee00) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 4.343092579s ago: executing program 4 (id=11019): syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) syz_init_net_socket$ax25(0x3, 0x2, 0xce) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x0, 0x44}, 0x28) r2 = fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x48) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000300)={'pcl816\x00', [0x2f00, 0x5, 0xb, 0xffffffff, 0x2, 0x9, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x7fff, 0x4, 0xfffe, 0x8, 0x5, 0x6, 0x82e, 0x30000, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffbfff, 0x40, 0x3, 0x4, 0x4, 0x5]}) mkdir(0x0, 0x103) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, 0x0, &(0x7f00000004c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 4.309810216s ago: executing program 5 (id=11020): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) dup(r1) r2 = mq_open(&(0x7f00000000c0)=']--.\\\xd8\x00', 0x40, 0x18f, &(0x7f0000006080)={0x4, 0x5, 0x3, 0x6}) mq_timedreceive(r2, &(0x7f00000060c0)=""/172, 0xac, 0xa, &(0x7f0000006180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000000000000200000001000000000000000b000000070000b29ba2"]) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) r11 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r11, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb9156560d5fe740e8000000082c0100000000000000000000000000000000ff02f1c22c61086f0ffb0000000000000001000000000001ff00000000000000"], 0x0) recvmmsg(r11, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 3.450947535s ago: executing program 5 (id=11024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fsopen(0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000340), &(0x7f0000048000)=0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000280)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @loopback}}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x60000000000000, 0x28011, r5, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x37, 0x800000000004}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x1000, 0x6, 0xe227, 0x5, 0x0, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x34, r7, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b15ee627dd9b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 3.365300439s ago: executing program 4 (id=11025): socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000009bc0)=@deltfilter={0x1760, 0x2d, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0x5b91022b76f2f148, 0x8}, {0xe, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e24}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e22}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x16f0, 0x2, [@TCA_MATCHALL_ACT={0x148, 0x2, [@m_bpf={0x144, 0x1e, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x7, 0x8, 0x9, 0xf428}}]}, {0x102, 0x6, "ce3d75ff64e15a9b44ada0326951094480793105fd2f0ed0782e0e3dc4aef98e9938e3adc5318b051bcb372c888a97ce06fe23229d6281c41b4f28368e4ca2f8721cf42864c373418c5425b68ef2533bef20ed46c5e89e8fb1c9a3c8c3044671a9e948b79f6b1d2e58f8653547aadb3024ce27accbaf44c3f1303b823af6ecffea2f876ccf4f6928e5cda8f734ddfdd01e539fa14df9cb9b9dafb0190e34c094323638e743e72fd766110eb9032ae6792dfdfa4ab16bc1722200802e8a45b69e1ead1eec9647a0b4fc031c2e6e1994243023c6e1ee4a58c11b44e11007fccdb1fab20a053452ac87898f117220d2377f19e95f2c247f4a9b4268500f2bc6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_ACT={0xd4, 0x2, [@m_sample={0xd0, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x75e}]}, {0x91, 0x6, "e60e00f8486b2657682db2dd05d732f6ab6f30499b428c94d6eabcc2406640b31f53ff9ff1a90dc90e3b6a7de64b2fda110e37616da83b51d5827bcd9d45d6ced348dcc5f3f360c02f14315fda8d9cf996299eac88fc74f52910547e8c4057ac76179ebb5dc4c9a009ed7e2f2cf4b68b7442b0d8a15fd292cb88b59663cd178b6752fdd1c6a0aa04a32639bb4d"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x14d0, 0x2, [@m_nat={0x100, 0x1c, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xe, 0x1, 0x9, 0x1}, @local, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x0, 0x3, 0x7}, @broadcast, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf13, 0x80000001, 0x5, 0x800, 0x1}, @empty, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff7, 0x2, 0x2, 0xfffffffa, 0x1}, @remote, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x4, 0x5, 0x80000001, 0x80000001}, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x1}}]}, {0x10, 0x6, "ffe2ef887bae4a5a790a7102"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x1050, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x100, 0xa5c, 0x7, 0x400}, 0x6}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x118, 0x14, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0xc2, 0x6, "6e55feb2d22fe8929eef00c0ee9fa4af90d91e73c213ce5ead2fd73c25f4acac5201c16f792e98e5f3a9b0135a83d974ad0a96c41ea3c15ad4a61734ca916c64919541424b08cb9b7490104a209c7db3f5d20db34163f4d7d331b4d4e9f86e9867776a3b11d03c5e0ccdf694624ba5a4e8ffff4d2e4944aa08a87d641a745c3d9fa5d0314bef63710b8426c7a8a4c3f38998c709879bcacee073113a1944695f6e3b183ce60b69ef9b93082c3834d58a84e5c5c22d76e3fb20d3bbf8594c"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0xc8, 0x13, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x81}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x3e, 0x6, "f4a828c9d423d35ad3dd93c4c9ce6a0253c83fb40263b7d9a60c3e477d59360e946b67e9e69d5cef58847174eb6138c7fdbe086761475e1e7cf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x90, 0x10, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8d}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xefd, 0xa43, 0x8, 0xfffffe01, 0x80000001}}]}, {0x3b, 0x6, "7c745e889a13e0c8812eb9fdd5786bd1a3c9e2fa3fadfa4b73250434065bcf5146bf3cdadf5f429d2cd4bbf5e4be446d5564e8713c2183"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x10c, 0x5, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8001}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x178d050f, 0x0, 0x0, 0x3}}}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x100}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x8, 0x5}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}]}, {0x4b, 0x6, "a84bfe4bdbe4718ad289bf48628fdb0c484cfa986d65df73657f9fd8c2016331a1f4514654c394938698901b61ed33864310729cad25a25dd608547f9002b208a00439261b5fea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x1760}, 0x1, 0x0, 0x0, 0x20088c4}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x80002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.774413971s ago: executing program 7 (id=11028): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b488"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r1, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, 0x0, 0x0, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0xee00) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 2.430555519s ago: executing program 4 (id=11029): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x423ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000080)={0x3a, 0x27, 0x12, 0x15, 0x1, 0x0, 0x6, 0xc}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x8, 0x7ffffdff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x4040004) sendto$inet6(r8, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 1.929507529s ago: executing program 7 (id=11031): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04030b008000aaaaaaaaaa0001"], 0xe) 1.823181955s ago: executing program 7 (id=11032): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000300)='Z\xf9qD\xf5\xe2\xdaC\xe97D\xec\x90\xdb&C$\xa7\x94\xeb\x99\xbe\x1b\x874\xe3_\xc94DY!\x98\rI\xe8\x90u\x95\xb2\x90&\xa2}\xc6\x8b\x9em{DL\x95\"fa\x15&\xd1]\x91\xbb\xa2J\x87\xa8A\x00') chdir(0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000100)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="05000000010001", 0x7) 1.597966277s ago: executing program 4 (id=11033): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x9c7cafe1, 0x28}, 0x50) 1.534225052s ago: executing program 4 (id=11034): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x7b7, 0x0, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050f1900020a1003020c000821f0000a1003020c0005030d004da38e7dfc1f30bf938ca6a065a07ceed8e91bca2f662c4f3b97f3d464ec3f02149a608cc92b4c5c00724b6b98fdac64c98f1565f68a358f31de4453587453208857a7b719859c73ab83bab16a3d3fbd4820d6976bca7ee73e4f8559f4678d980125aad23378dc7c3a9199d88727da481b5be7676d"], 0x4, [{0x0, 0x0}, {0x27, 0x0}, {0x7f, &(0x7f0000000d80)=@string={0x7f, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r10, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r10, 0x0) poll(&(0x7f0000000000)=[{r10, 0x5208}], 0x1, 0x800) 1.144400226s ago: executing program 8 (id=11039): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="fb6b0100"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000030a01020000000000000000020000090c000240000000000000000108000540fffffffe580008800c00014000000000000000050c00024000000000000000480c00014000000000000000020c00014000000000000000010c00024000000000001500080c00014000000000000000040c000140000000000000000e08000540fffffffe2c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000030000000060a010400000000000000000100000008000b40000000000900010073797a30000000000500074008000000140000001100010004000000000000000000000a"], 0x10c}, 0x1, 0x0, 0x0, 0x4c899}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$ptmx(0xffffff9c, &(0x7f0000000100), 0x101000, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x2, 0x200000000000004, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00030000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x82140, 0xf8) open_by_handle_at(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000008200000001000100000000000300000013050000000000000600000060a0c76979c29d9f2e8cdbf43166710ffa9e92d2e572f52ae98fab85abff42e30f26b52b4ee128919358845e439249fd4a6a6cd68a2b38a9688b67f7391a737dbf69f3d01d79bc7e23df372ddf4bad5bf337bde1"], 0x4203) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000380)={0x9}) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000002c80), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fanotify_init(0x200, 0x40000) 1.029826212s ago: executing program 8 (id=11040): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2000000000000, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000380)={0x1, 0x1, 0x5, 0x0, 0x200}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20082, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 884.387589ms ago: executing program 7 (id=11041): chown(0x0, 0x0, 0xffffffffffffffff) 883.580884ms ago: executing program 7 (id=11042): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x423ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000080)={0x3a, 0x27, 0x12, 0x15, 0x1, 0x0, 0x6, 0xc}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x8, 0x7ffffdff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x4040004) sendto$inet6(r8, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 490.767084ms ago: executing program 5 (id=11043): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) poll(&(0x7f0000000180), 0x0, 0x11ff) shutdown(r1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24082}, 0xa800) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x0, 0x7}]}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6}) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, 0x0, &(0x7f0000000400)) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000780), 0x12) bind$x25(r6, &(0x7f0000000080), 0x12) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000700)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbd6, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 135.055092ms ago: executing program 8 (id=11044): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0x2}}}, 0x7) 134.90521ms ago: executing program 8 (id=11045): syz_emit_vhci(&(0x7f00000012c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x8, 0x4}, {0xfffb, 0x1}}]}}, 0x11) 56.183487ms ago: executing program 8 (id=11046): syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_RESET={{0x6}}}}, 0x7) 55.366608ms ago: executing program 8 (id=11047): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a0009070000ffffffff0000000000000000000100000000001a0000190000000000368ba4088582", @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRES32=0x0], 0x38}}, 0x20000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2c, 0x2000, 0xffffffff, 0x8240, 0x0, r4}, &(0x7f0000000480)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x50, 0x2007, @fd=r5, 0x3ff, &(0x7f00000003c0)="9f4004d4cde78911e3c1460924a864eeb6155b15a78eadc25a5acbfb1858606026a7a76ad407ce45e5bd5274d02999e0ec56af1954c87834fb7808447af11fc29f4a998af59feab1b4fb574ace52da2e4e8772b57a51d8d091317e7bb82ce19a83c4767c879c2a2ad5237a1f6495afeba33d71a7bf770222ced3c80a847ef542ea56b1274b79e88c0e2ded59d1ca53e4ea15aa093e5cc9351b5d2524f852069f2638", 0xa2, 0x0, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r10}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}}, 0x2400c080) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) ioprio_get$uid(0x3, 0x0) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0128200702ffffffffffff1089a2ebc30b2850b4ae8c1ede6c3095c50167de2a395e7a8683366a2f68d49841c935bea4c8"], 0xb) r11 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read$alg(r12, &(0x7f0000000200)=""/96, 0x60) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r13, &(0x7f0000000700)="f5", 0x1) 0s ago: executing program 7 (id=11048): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b488"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, 0x0, 0x0, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0xee00) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): -b7:6' failed: Read-only file system [ 2713.345340][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9164'. [ 2713.813157][T32763] udevd[32763]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2714.146342][T10787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9165'. [ 2714.294423][T32763] udevd[32763]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2714.539700][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2715.506522][T10797] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2715.508595][T10797] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2715.511645][T10797] vhci_hcd vhci_hcd.0: Device attached [ 2715.532822][T32763] udevd[32763]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2715.537915][T10797] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9169'. [ 2715.761515][T32763] udevd[32763]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2715.822765][T24031] usb 52-1: SetAddress Request (18) to port 0 [ 2715.824816][T24031] usb 52-1: new SuperSpeed USB device number 18 using vhci_hcd [ 2715.971635][T10800] vhci_hcd: connection reset by peer [ 2715.975590][T18021] vhci_hcd: stop threads [ 2715.977780][T18021] vhci_hcd: release socket [ 2715.979494][T18021] vhci_hcd: disconnect device [ 2716.906059][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2717.051706][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2717.280313][T10834] random: crng reseeded on system resumption [ 2717.873447][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2717.966412][T10814] pim6reg: entered allmulticast mode [ 2718.001857][T10814] pim6reg: left allmulticast mode [ 2718.385259][ T40] audit: type=1326 audit(2000000936.007:7491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.5.9177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2718.401419][ T40] audit: type=1326 audit(2000000936.007:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.5.9177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2718.413180][ T40] audit: type=1326 audit(2000000936.007:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.5.9177" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2718.426477][ T40] audit: type=1326 audit(2000000936.007:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.5.9177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2718.437022][ T40] audit: type=1326 audit(2000000936.007:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.5.9177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2718.447444][ T40] audit: type=1326 audit(2000000936.007:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.5.9177" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2718.459699][ T40] audit: type=1326 audit(2000000936.007:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.5.9177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2718.478067][ T40] audit: type=1326 audit(2000000936.007:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.5.9177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2718.501319][ T40] audit: type=1326 audit(2000000936.007:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.5.9177" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2718.529204][ T40] audit: type=1326 audit(2000000936.007:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.5.9177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2718.609547][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2718.623161][T10869] netlink: 'syz.7.9179': attribute type 1 has an invalid length. [ 2718.626857][T10869] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9179'. [ 2718.634248][T10869] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9179'. [ 2718.639663][T10869] input: syz1 as /devices/virtual/input/input105 [ 2718.695990][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2719.007036][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2719.148877][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2719.252685][T10880] syz.6.9182 (10880): drop_caches: 2 [ 2719.256102][T10880] syz.6.9182 (10880): drop_caches: 2 [ 2719.645194][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2719.913156][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2720.198622][T10901] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 2720.550853][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2720.650273][T24031] usb 52-1: device descriptor read/8, error -110 [ 2721.008488][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2721.136990][T24031] usb usb52-port1: attempt power cycle [ 2721.476201][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2721.903021][T24031] usb usb52-port1: unable to enumerate USB device [ 2721.928781][T10939] lo speed is unknown, defaulting to 1000 [ 2722.129153][T10939] lo speed is unknown, defaulting to 1000 [ 2722.625705][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2723.138757][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9193'. [ 2723.252866][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9196'. [ 2723.699009][T10962] wireguard0: entered promiscuous mode [ 2723.701345][T10962] wireguard0: entered allmulticast mode [ 2723.958433][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2724.015420][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2724.523514][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2725.083385][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2725.678587][T11005] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 2725.681106][T11005] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2725.714457][T10968] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 2725.741976][T11005] vhci_hcd vhci_hcd.0: Device attached [ 2725.870177][T10968] usb 11-1: Using ep0 maxpacket: 8 [ 2725.875231][T10968] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2725.880032][T10968] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2725.883953][T11005] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9202'. [ 2725.884354][T10968] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2725.884377][T10968] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2725.884416][T10968] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2725.902653][T10968] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2726.022446][T24031] usb 52-1: SetAddress Request (22) to port 0 [ 2726.026668][T24031] usb 52-1: new SuperSpeed USB device number 22 using vhci_hcd [ 2726.216405][T11007] vhci_hcd: connection reset by peer [ 2726.223904][T18021] vhci_hcd: stop threads [ 2726.225496][T18021] vhci_hcd: release socket [ 2726.227327][T18021] vhci_hcd: disconnect device [ 2726.372058][T11017] tipc: Enabling of bearer rejected, failed to enable media [ 2726.876604][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2727.414872][T10968] usb 11-1: usb_control_msg returned -71 [ 2727.417086][T10968] usbtmc 11-1:16.0: can't read capabilities [ 2727.421433][T10968] usb 11-1: USB disconnect, device number 11 [ 2727.532508][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2727.549914][ T5271] IPVS: starting estimator thread 0... [ 2727.651301][T11041] IPVS: using max 32 ests per chain, 76800 per kthread [ 2728.341977][T11050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2728.347926][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2728.672787][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2728.909157][T10968] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 2729.063212][T10968] usb 12-1: config 0 has no interfaces? [ 2729.068505][T10968] usb 12-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2729.073535][T10968] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2729.076326][T10968] usb 12-1: Product: syz [ 2729.077762][T10968] usb 12-1: Manufacturer: syz [ 2729.079435][T10968] usb 12-1: SerialNumber: syz [ 2729.083642][T10968] usb 12-1: config 0 descriptor?? [ 2729.159124][T17492] Process accounting resumed [ 2730.046875][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2730.058402][T11090] overlayfs: failed to clone upperpath [ 2730.904962][T24031] usb 52-1: device descriptor read/8, error -110 [ 2731.280950][T26403] usb 12-1: USB disconnect, device number 17 [ 2731.415581][T24031] usb usb52-port1: attempt power cycle [ 2731.442094][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2731.891902][T11101] netlink: 'syz.5.9222': attribute type 10 has an invalid length. [ 2731.908147][T11101] team0: left promiscuous mode [ 2731.910818][T11101] team_slave_1: left promiscuous mode [ 2731.916946][T11101] batman_adv: batadv0: Adding interface: team0 [ 2731.921611][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2732.014851][T11101] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2732.014903][T11106] netlink: 'syz.5.9222': attribute type 10 has an invalid length. [ 2732.026277][T11101] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2732.034840][T11106] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9222'. [ 2732.050503][T11106] team0: entered promiscuous mode [ 2732.055860][T11106] team_slave_1: entered promiscuous mode [ 2732.061801][T11106] 8021q: adding VLAN 0 to HW filter on device team0 [ 2732.065079][T11106] batman_adv: batadv0: Interface activated: team0 [ 2732.067894][T11106] batman_adv: batadv0: Interface deactivated: team0 [ 2732.070849][T11106] batman_adv: batadv0: Removing interface: team0 [ 2732.228693][T24031] usb usb52-port1: unable to enumerate USB device [ 2732.539501][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2732.592273][T11118] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 2732.594544][T11118] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2732.665047][T11118] vhci_hcd vhci_hcd.0: Device attached [ 2732.905385][T11124] vhci_hcd: connection closed [ 2732.907567][T18021] vhci_hcd: stop threads [ 2732.911919][T18021] vhci_hcd: release socket [ 2732.913643][T18021] vhci_hcd: disconnect device [ 2732.916628][T24031] usb 52-1: enqueue for inactive port 0 [ 2733.143520][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2733.166955][T11132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9231'. [ 2733.284595][T11138] wireguard0: entered promiscuous mode [ 2733.286922][T11138] wireguard0: entered allmulticast mode [ 2733.363271][T11141] /dev/nullb0: Can't open blockdev [ 2734.161612][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9235'. [ 2734.178145][T11152] bond2: (slave geneve3): Releasing active interface [ 2734.184338][T11152] batman_adv: batadv0: Interface deactivated: gretap1 [ 2734.190804][T11152] batman_adv: batadv0: Removing interface: gretap1 [ 2734.195428][ T98] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2734.198726][ T98] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2734.205600][ T98] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2734.210612][ T98] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2734.263206][T24031] usb usb52-port1: attempt power cycle [ 2734.298767][T11152] netlink: 'syz.4.9235': attribute type 10 has an invalid length. [ 2734.577231][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2734.648355][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9235'. [ 2734.676625][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2734.967079][T24031] usb usb52-port1: unable to enumerate USB device [ 2735.109202][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9236'. [ 2736.070221][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2736.618158][T11191] lo speed is unknown, defaulting to 1000 [ 2736.770608][T11191] lo speed is unknown, defaulting to 1000 [ 2736.956049][T11192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2737.192407][T11192] lo speed is unknown, defaulting to 1000 [ 2737.287534][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2737.889761][T11192] lo speed is unknown, defaulting to 1000 [ 2738.162227][T11210] netlink: 'syz.5.9246': attribute type 16 has an invalid length. [ 2738.164722][T11210] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.9246'. [ 2738.182074][T11210] 9pnet_virtio: no channels available for device syz [ 2738.618209][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2738.852368][T11220] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9247'. [ 2738.865170][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9247'. [ 2739.081157][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2739.224768][T26391] usb 11-1: new full-speed USB device number 12 using dummy_hcd [ 2739.541163][T26391] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2739.545228][T26391] usb 11-1: config 0 interface 0 has no altsetting 0 [ 2739.557745][T26391] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2739.561506][T26391] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2739.564192][T26391] usb 11-1: Product: syz [ 2739.566590][T26391] usb 11-1: Manufacturer: syz [ 2739.573816][T26391] usb 11-1: SerialNumber: syz [ 2739.587642][T26391] usb 11-1: config 0 descriptor?? [ 2739.597729][T26391] usb 11-1: selecting invalid altsetting 0 [ 2739.931996][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9251'. [ 2739.935997][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9251'. [ 2739.955845][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2740.018474][T11232] netlink: 'syz.4.9249': attribute type 1 has an invalid length. [ 2740.834261][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2741.207056][T11244] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2741.429142][T11245] IPVS: ip_vs_edit_dest(): server weight less than zero [ 2741.457573][T10968] usb 11-1: USB disconnect, device number 12 [ 2741.548175][T32763] udevd[32763]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2741.809507][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2742.107221][T11259] lo speed is unknown, defaulting to 1000 [ 2742.249251][T11259] lo speed is unknown, defaulting to 1000 [ 2742.773192][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2743.011657][T11274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2743.320688][T11279] lo speed is unknown, defaulting to 1000 [ 2743.637806][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2743.740176][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9263'. [ 2743.797906][T11279] lo speed is unknown, defaulting to 1000 [ 2743.812060][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9263'. [ 2744.061606][T11293] netlink: 'syz.7.9261': attribute type 1 has an invalid length. [ 2744.161319][T11299] bond1: (slave geneve2): making interface the new active one [ 2744.165669][T11299] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2744.168777][ T1142] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2744.172663][ T1142] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2744.176601][ T1142] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2744.180241][ T1142] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2744.701006][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2745.021465][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2745.635774][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9270'. [ 2745.656176][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2746.546172][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2746.563401][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2746.708978][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2746.877745][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2747.559414][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2749.441369][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2749.483375][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2750.468528][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9282'. [ 2750.511926][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2750.556486][T11368] bond0: (slave bond_slave_0): Releasing backup interface [ 2750.585568][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2750.605405][T11368] bond0: (slave bond_slave_1): Releasing backup interface [ 2750.633599][T11368] team0: Port device team_slave_0 removed [ 2750.673949][T11368] team0: Port device team_slave_1 removed [ 2750.729718][ T8321] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 2750.777988][T11374] netlink: 'syz.4.9285': attribute type 10 has an invalid length. [ 2750.823432][T11368] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2750.829905][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9285'. [ 2750.850502][ T12] tipc: Resetting bearer [ 2750.860871][T11369] team0: Mode changed to "loadbalance" [ 2750.867553][T11379] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 2750.902031][T11383] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9286'. [ 2750.906847][ T5271] lo speed is unknown, defaulting to 1000 [ 2751.148969][T11368] netlink: 'syz.6.9282': attribute type 10 has an invalid length. [ 2751.158754][T11385] wireguard0: entered promiscuous mode [ 2751.160750][T11385] wireguard0: entered allmulticast mode [ 2751.197005][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9282'. [ 2751.284899][T11369] tipc: Resetting bearer [ 2751.533600][T11369] tipc: Disabling bearer [ 2751.956038][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2753.345891][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2753.381949][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2753.410801][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2753.432522][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2753.445094][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 2753.445111][ T40] audit: type=1326 audit(2000000972.803:7527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.6.9302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 2753.472886][ T40] audit: type=1326 audit(2000000972.803:7528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.6.9302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 2753.480403][ T40] audit: type=1326 audit(2000000972.803:7529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.6.9302" exe="/syz-executor" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 2753.481024][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9303'. [ 2753.488996][ T40] audit: type=1326 audit(2000000972.813:7530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.6.9302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 2753.500870][ T40] audit: type=1326 audit(2000000972.813:7531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.6.9302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 2753.520780][T32763] udevd[32763]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2753.597005][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2753.699494][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9305'. [ 2754.023249][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2754.045399][ T8321] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 2754.098056][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2754.214176][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9312'. [ 2754.221109][T11455] batman_adv: batadv0: Removing interface: dummy0 [ 2754.224522][T11455] bond0: (slave bond_slave_0): Releasing backup interface [ 2754.229234][T11455] team_slave_1: left promiscuous mode [ 2754.232464][T11455] team0: Port device team_slave_1 removed [ 2754.234824][T11455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2754.239063][T11455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2754.242797][T11455] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2754.272155][T11455] team0: Mode changed to "loadbalance" [ 2754.279262][T11455] netlink: 'syz.5.9312': attribute type 10 has an invalid length. [ 2754.282535][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9312'. [ 2754.742589][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2755.293588][T11479] overlayfs: failed to clone upperpath [ 2755.490205][T11485] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9322'. [ 2755.495871][T11485] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9322'. [ 2756.574460][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9327'. [ 2756.689606][T11502] batman_adv: batadv0: Interface deactivated: dummy0 [ 2756.692039][T11502] batman_adv: batadv0: Removing interface: dummy0 [ 2756.708078][T11502] bridge_slave_0: left promiscuous mode [ 2756.711114][T11502] bridge0: port 1(bridge_slave_0) entered disabled state [ 2756.795612][T11502] bridge_slave_1: left allmulticast mode [ 2756.801648][T11509] netlink: 'syz.7.9327': attribute type 10 has an invalid length. [ 2756.804494][T11502] bridge_slave_1: left promiscuous mode [ 2756.806961][T11502] bridge0: port 2(bridge_slave_1) entered disabled state [ 2756.815914][ T8321] Bluetooth: hci2: unexpected event for opcode 0x202f [ 2756.828778][T11502] bond0: (slave bond_slave_0): Releasing backup interface [ 2756.829001][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2756.862461][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9327'. [ 2756.917047][T11502] bond0: (slave bond_slave_1): Releasing backup interface [ 2756.990370][T11502] team0: Port device team_slave_0 removed [ 2756.998653][T11512] netlink: 'syz.5.9331': attribute type 1 has an invalid length. [ 2757.002016][T11512] netlink: 'syz.5.9331': attribute type 2 has an invalid length. [ 2757.006044][T11502] team0: Port device team_slave_1 removed [ 2757.013102][T11502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2757.018048][T11502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2757.031267][T11502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2757.034671][T11502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2757.048412][T11502] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2757.075198][T11505] team0: Mode changed to "loadbalance" [ 2757.350345][T11524] overlayfs: failed to clone upperpath [ 2758.228763][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2758.342164][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2758.376395][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2758.410055][ T8321] Bluetooth: hci0: unexpected event for opcode 0x2023 [ 2758.431248][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2759.426454][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2759.679164][T11554] netlink: 'syz.5.9343': attribute type 1 has an invalid length. [ 2759.775663][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2759.874301][T11559] bond1: (slave geneve2): making interface the new active one [ 2759.909347][T11559] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2759.919620][ T2179] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 2759.923655][ T2179] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 2759.934704][ T2179] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 2759.938472][ T2179] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 2760.023642][T11573] netlink: 'syz.7.9344': attribute type 1 has an invalid length. [ 2760.026253][T11573] netlink: 'syz.7.9344': attribute type 2 has an invalid length. [ 2760.301500][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2760.884497][ T8321] Bluetooth: hci2: unexpected event for opcode 0x080f [ 2761.074400][T11604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9361'. [ 2761.393783][T28186] udevd[28186]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2761.409322][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2761.604180][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2761.682452][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2761.727475][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2761.773178][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2762.322619][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2762.347429][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2762.382600][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2762.455966][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2762.538535][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2762.542127][T21814] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 2762.581073][T11651] lo speed is unknown, defaulting to 1000 [ 2762.732366][T11651] lo speed is unknown, defaulting to 1000 [ 2762.822091][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2764.710034][T21814] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2764.713315][T21814] Bluetooth: hci2: Injecting HCI hardware error event [ 2764.722700][T21814] Bluetooth: hci2: hardware error 0x00 [ 2765.172954][T26391] usb 11-1: new full-speed USB device number 13 using dummy_hcd [ 2765.327580][T26391] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2765.332271][T26391] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2765.336222][T26391] usb 11-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2765.340165][T26391] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2765.347960][T26391] usb 11-1: config 0 descriptor?? [ 2765.355640][T26391] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2765.359492][T26391] dvb-usb: bulk message failed: -22 (3/0) [ 2765.390213][T26391] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2765.402710][T26391] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2765.409601][T26391] usb 11-1: media controller created [ 2765.415766][T26391] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2765.458490][T26391] dvb-usb: bulk message failed: -22 (6/0) [ 2765.461757][T26391] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2765.467021][T26391] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input107 [ 2765.472741][T26391] dvb-usb: schedule remote query interval to 150 msecs. [ 2765.478286][T26391] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2765.587596][T10968] usb 11-1: USB disconnect, device number 13 [ 2765.683834][T10968] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2765.916614][ T5997] Bluetooth: hci3: command 0x0406 tx timeout [ 2766.213098][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9434'. [ 2766.467011][T32763] udevd[32763]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2766.495126][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2766.537588][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2766.599474][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2766.637253][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2766.675344][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2766.690603][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9453'. [ 2766.720554][T21814] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2766.735040][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2766.800363][T11823] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2767.335607][ T5271] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 2767.498867][ T5271] usb 11-1: Using ep0 maxpacket: 8 [ 2767.507665][ T5271] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2767.512296][ T5271] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2767.516626][ T5271] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2767.521036][ T5271] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2767.574157][ T5271] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2767.578079][ T5271] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2767.682586][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2767.726491][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2767.759798][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2767.904381][T11877] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 2767.940293][T11871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2768.817413][T11919] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 2768.824848][T11918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2769.310889][ T5271] usb 11-1: usb_control_msg returned -71 [ 2769.364738][ T5271] usbtmc 11-1:16.0: can't read capabilities [ 2769.369713][ T5271] usb 11-1: USB disconnect, device number 14 [ 2769.601686][T11959] 9pnet_fd: Insufficient options for proto=fd [ 2769.665096][T11966] IPVS: length: 43 != 8 [ 2770.292696][T11988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9519'. [ 2770.687944][ T5271] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 2770.830914][ T5271] usb 12-1: Using ep0 maxpacket: 8 [ 2770.835938][ T5271] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2770.841044][ T5271] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2770.845522][ T5271] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2770.851306][ T5271] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2770.857536][ T5271] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2770.861773][ T5271] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2771.741347][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2771.828270][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2771.923739][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2772.028392][T12056] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 2772.035671][T12055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2772.613770][ T5271] usb 12-1: usb_control_msg returned -71 [ 2772.616244][ T5271] usbtmc 12-1:16.0: can't read capabilities [ 2772.637396][ T5271] usb 12-1: USB disconnect, device number 18 [ 2772.681828][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2772.846716][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2772.870598][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2772.922322][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2772.999999][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2773.002479][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2773.043171][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9561'. [ 2773.083708][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2773.378185][T12096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2775.182064][T12167] lo speed is unknown, defaulting to 1000 [ 2775.313157][T12167] lo speed is unknown, defaulting to 1000 [ 2776.431955][T12202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2776.465068][ T40] audit: type=1326 audit(2000000996.969:7532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.6.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 2776.479938][ T40] audit: type=1326 audit(2000000996.969:7533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.6.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 2776.489589][ T40] audit: type=1326 audit(2000000996.969:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.6.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 2776.499385][ T40] audit: type=1326 audit(2000000996.969:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.6.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 2776.505830][ T40] audit: type=1326 audit(2000000996.969:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.6.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 2776.512651][ T40] audit: type=1326 audit(2000000996.969:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.6.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 2776.525565][ T40] audit: type=1326 audit(2000000996.969:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.6.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 2776.537500][ T40] audit: type=1326 audit(2000000996.969:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.6.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 2776.553387][ T40] audit: type=1326 audit(2000000996.969:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.6.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 2776.555614][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2776.563489][ T40] audit: type=1326 audit(2000000996.969:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.6.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 2776.657281][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2776.704927][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2776.825262][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2777.011549][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2777.073666][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2777.245799][T12236] netlink: 'syz.6.9610': attribute type 1 has an invalid length. [ 2777.359635][T12248] bond2: (slave geneve2): making interface the new active one [ 2777.364811][T12250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9616'. [ 2777.373037][T12248] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 2777.386056][ T98] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2777.390185][ T98] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2777.397727][ T98] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2777.401559][ T98] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2777.924237][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2778.034039][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2778.111234][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2778.169196][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2778.614163][T12285] overlayfs: failed to clone upperpath [ 2778.817696][T12291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2779.400781][T12310] lo speed is unknown, defaulting to 1000 [ 2779.501300][T12310] lo speed is unknown, defaulting to 1000 [ 2779.743720][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9646'. [ 2779.918823][T17492] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 2780.097840][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9655'. [ 2780.098376][T17492] usb 12-1: config index 0 descriptor too short (expected 45, got 36) [ 2780.104437][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9655'. [ 2780.117034][T17492] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2780.135031][T17492] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2780.140463][T17492] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2780.146579][T17492] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2780.151305][T17492] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2780.154127][T17492] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.163250][T17492] usb 12-1: config 0 descriptor?? [ 2780.174878][T12330] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2780.968018][T17492] hid_parser_main: 33 callbacks suppressed [ 2780.968043][T17492] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2780.974294][T17492] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2780.979662][T17492] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2780.982934][T17492] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2780.987912][T17492] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2780.991632][T17492] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2780.994523][T17492] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2780.997966][T17492] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2781.001127][T17492] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2781.004212][T17492] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2781.014771][T17492] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2781.023415][T17492] usb 12-1: USB disconnect, device number 19 [ 2781.065894][ T5104] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 2781.113193][T12388] fido_id[12388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb12/report_descriptor': No such file or directory [ 2781.214029][ T5104] usb 11-1: Using ep0 maxpacket: 32 [ 2781.234067][ T5104] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2781.239508][ T5104] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2781.244763][ T5104] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2781.248109][ T5104] usb 11-1: Product: syz [ 2781.249607][ T5104] usb 11-1: Manufacturer: syz [ 2781.251173][ T5104] usb 11-1: SerialNumber: syz [ 2781.255686][ T5104] usb 11-1: config 0 descriptor?? [ 2781.257937][T12387] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2781.263192][ T5104] hub 11-1:0.0: bad descriptor, ignoring hub [ 2781.266290][ T5104] hub 11-1:0.0: probe with driver hub failed with error -5 [ 2781.372548][T12395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2781.455061][T12411] 9pnet_fd: Insufficient options for proto=fd [ 2781.535532][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2781.677690][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9684'. [ 2781.783346][T26391] usb 11-1: USB disconnect, device number 15 [ 2781.865978][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2781.951190][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2782.116213][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2782.127682][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2782.141939][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2782.172058][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2782.332908][T12456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2782.878816][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2782.912157][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2782.948701][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2783.552616][T12541] lo speed is unknown, defaulting to 1000 [ 2783.689568][T12541] lo speed is unknown, defaulting to 1000 [ 2784.369543][T26391] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 2784.509616][T26391] usb 12-1: Using ep0 maxpacket: 16 [ 2784.513956][T26391] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2784.518563][T26391] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2784.523075][T26391] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2784.528876][T26391] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2784.535153][T26391] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2784.558741][T26391] usb 12-1: config 0 descriptor?? [ 2784.807891][T12575] /dev/loop0: Can't lookup blockdev [ 2784.921440][T12580] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9741'. [ 2784.973613][T26391] input: HID 0955:7214 Haptics as /devices/virtual/input/input108 [ 2785.008190][T26391] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 2785.014296][T26391] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 2785.161088][T12555] netlink: 'syz.7.9734': attribute type 2 has an invalid length. [ 2785.167352][T12555] netlink: 244 bytes leftover after parsing attributes in process `syz.7.9734'. [ 2785.175175][T12583] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2785.175493][T17492] usb 12-1: USB disconnect, device number 20 [ 2785.186389][T12583] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2785.192028][T12583] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2785.201462][T12583] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2786.315489][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2786.421342][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2786.669797][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2786.804662][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2786.925379][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2787.034467][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2787.118913][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2787.280407][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2787.332708][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2787.349647][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2787.660029][T12704] overlayfs: failed to clone upperpath [ 2789.782183][T12772] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 2789.785775][T12772] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2790.004520][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9821'. [ 2790.371809][T12796] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9825'. [ 2791.083611][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2791.599699][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2791.844859][ T483] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 2791.910264][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2791.977939][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2792.015746][ T483] usb 12-1: Using ep0 maxpacket: 16 [ 2792.019026][ T483] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2792.022917][ T483] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2792.026653][ T483] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2792.031416][ T483] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2792.035079][ T483] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2792.039768][ T483] usb 12-1: config 0 descriptor?? [ 2792.397700][T12869] netlink: 'syz.5.9854': attribute type 4 has an invalid length. [ 2792.433496][ T483] hid_parser_main: 10 callbacks suppressed [ 2792.433511][ T483] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 2792.441613][ T483] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 2792.444453][ T483] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 2792.446991][ T483] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 2792.450028][ T483] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 2792.457540][ T483] input: HID 0955:7214 Haptics as /devices/virtual/input/input109 [ 2792.500406][T12873] overlayfs: failed to clone upperpath [ 2792.561258][ T483] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 2792.564194][ T483] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 2792.632930][T31134] usb 12-1: USB disconnect, device number 21 [ 2792.635802][ T483] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2792.639707][ T483] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2792.643468][ T483] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2792.650180][ T483] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2792.804719][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2792.908153][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2793.036748][T32763] udevd[32763]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2793.175215][T12898] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 2793.176012][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2793.178037][T12898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2793.186408][T12898] vhci_hcd vhci_hcd.0: Device attached [ 2793.192239][T12899] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 2793.196495][T31859] vhci_hcd: stop threads [ 2793.198339][T31859] vhci_hcd: release socket [ 2793.200004][T31859] vhci_hcd: disconnect device [ 2793.680046][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9869'. [ 2793.707685][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2793.856817][T12912] hsr_slave_1 (unregistering): left promiscuous mode [ 2793.883756][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2794.426027][T31134] usb 11-1: new low-speed USB device number 16 using dummy_hcd [ 2794.589632][T31134] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 2794.592411][T31134] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2794.595856][T31134] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2794.617447][T31134] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2794.621383][T31134] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2794.630482][T31134] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 2794.633195][T31134] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2794.638938][T31134] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2794.645376][T31134] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2794.648968][T31134] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2794.661940][T31134] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 2794.665205][T31134] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2794.668825][T31134] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2794.674729][T31134] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2794.680509][T31134] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2794.693144][T31134] usb 11-1: string descriptor 0 read error: -22 [ 2794.697284][T31134] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2794.701196][T31134] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2794.715907][T31134] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2794.905853][T17492] usb 11-1: USB disconnect, device number 16 [ 2795.431857][T12995] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 2795.823222][T13003] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 2795.871681][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2796.657376][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2796.670341][T13016] netlink: 'syz.5.9907': attribute type 10 has an invalid length. [ 2796.776543][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2796.837320][T13024] overlayfs: failed to clone upperpath [ 2796.911137][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2796.999377][T13037] netlink: 'syz.5.9913': attribute type 13 has an invalid length. [ 2797.002059][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2797.030726][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2797.054281][T13040] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9916'. [ 2797.061969][T13040] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9916'. [ 2797.067780][T13040] unsupported nlmsg_type 40 [ 2797.524974][T13033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2798.148634][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2798.285092][T13068] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9926'. [ 2798.341168][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2798.460023][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2798.560042][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2798.913198][ T5997] Bluetooth: hci1: command 0x1003 tx timeout [ 2798.913165][T21814] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2799.073655][T13101] overlayfs: failed to clone upperpath [ 2799.527696][T13134] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9948'. [ 2800.776026][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2800.796018][T13169] input: syz0 as /devices/virtual/input/input110 [ 2800.865055][T32763] udevd[32763]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2800.912373][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2800.913633][T13176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2800.942104][T32763] udevd[32763]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2801.274560][T13191] overlayfs: failed to clone upperpath [ 2801.437512][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2801.480734][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2801.567433][ T8763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2801.570825][ T8763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2801.588221][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2801.632511][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2801.718202][T32763] udevd[32763]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2801.737836][T13213] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2801.743766][T13213] block device autoloading is deprecated and will be removed. [ 2801.788191][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2802.037218][ T8321] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 2802.040711][T21814] Bluetooth: hci0: command 0x0405 tx timeout [ 2803.189854][T25431] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 2803.334230][T25431] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2803.337307][T25431] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2803.343212][T25431] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2803.347536][T25431] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2803.351935][T25431] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2803.357191][T25431] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2803.360133][T25431] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2803.363616][T25431] usb 12-1: Product: syz [ 2803.365153][T25431] usb 12-1: Manufacturer: syz [ 2803.375787][T25431] cdc_wdm 12-1:1.0: skipping garbage [ 2803.377641][T25431] cdc_wdm 12-1:1.0: skipping garbage [ 2803.381676][T25431] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 2803.385030][T25431] cdc_wdm 12-1:1.0: Unknown control protocol [ 2803.612710][T25431] usb 12-1: USB disconnect, device number 22 [ 2803.746125][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9996'. [ 2804.578655][T13290] syzkaller0: entered promiscuous mode [ 2804.581045][T13290] syzkaller0: entered allmulticast mode [ 2804.816390][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10009'. [ 2805.620110][T13306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2806.128018][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2806.188588][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2806.405355][T13343] netlink: 'syz.5.10022': attribute type 10 has an invalid length. [ 2806.408746][T13343] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10022'. [ 2806.509199][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2807.059162][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2807.223436][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2807.329013][T13343] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2807.331910][T13343] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2807.346560][T13343] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2807.364056][T13357] tipc: Enabling of bearer rejected, failed to enable media [ 2807.371601][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2807.580450][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2807.590530][T13383] kvm: pic: non byte read [ 2807.593710][T13383] kvm: pic: level sensitive irq not supported [ 2807.594031][T13383] kvm: pic: non byte read [ 2807.601755][T13383] pic_ioport_write: 14 callbacks suppressed [ 2807.601771][T13383] kvm: pic: single mode not supported [ 2807.605784][T13383] kvm: pic: non byte read [ 2807.619177][T13383] kvm: pic: non byte read [ 2807.622675][T13383] kvm: pic: level sensitive irq not supported [ 2807.622995][T13383] kvm: pic: non byte read [ 2807.629437][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2807.631337][T13383] kvm: pic: level sensitive irq not supported [ 2807.636290][T13383] kvm: pic: non byte read [ 2807.643922][T13383] kvm: pic: single mode not supported [ 2807.644508][T13383] kvm: pic: non byte read [ 2807.651416][T13383] kvm: pic: non byte read [ 2807.654775][T13383] kvm: pic: single mode not supported [ 2807.655090][T13383] kvm: pic: non byte read [ 2807.829757][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2808.465827][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2808.669309][T13421] binder: 13420:13421 unknown command 0 [ 2808.671247][T13421] binder: 13420:13421 ioctl c0306201 80000080 returned -22 [ 2809.404596][T13459] overlayfs: failed to clone upperpath [ 2809.836255][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 2809.836269][ T40] audit: type=1326 audit(2000001032.001:7566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.4.10064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2809.846587][ T40] audit: type=1326 audit(2000001032.001:7567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.4.10064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2809.854010][ T40] audit: type=1326 audit(2000001032.001:7568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.4.10064" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2809.862575][ T40] audit: type=1326 audit(2000001032.012:7569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.4.10064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2809.871629][ T40] audit: type=1326 audit(2000001032.012:7570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.4.10064" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2809.879648][ T40] audit: type=1326 audit(2000001032.012:7571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.4.10064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2809.887451][ T40] audit: type=1326 audit(2000001032.012:7572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.4.10064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2809.898990][ T40] audit: type=1326 audit(2000001032.012:7573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.4.10064" exe="/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2809.907222][ T40] audit: type=1326 audit(2000001032.012:7574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.4.10064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2809.915663][ T40] audit: type=1326 audit(2000001032.012:7575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.4.10064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2810.998711][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10069'. [ 2811.182740][T13473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2812.139403][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2812.201839][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2812.392715][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2812.535395][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2812.635408][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2813.179592][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2813.275742][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2813.296028][T13532] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 2813.453349][T32763] udevd[32763]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2813.461754][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2813.596471][T28298] udevd[28298]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 2813.656391][T13563] netlink: 129704 bytes leftover after parsing attributes in process `syz.5.10099'. [ 2813.756939][T13570] 9pnet_fd: Insufficient options for proto=fd [ 2813.958966][T13582] overlayfs: failed to clone upperpath [ 2814.819254][T13628] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10126'. [ 2815.563764][T13659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2816.974740][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2817.645677][T13713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2817.811089][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2818.638793][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2818.687316][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2818.721648][T13750] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10165'. [ 2818.728905][T13750] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10165'. [ 2818.799023][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2818.843018][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10167'. [ 2818.872969][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 2818.872982][ T40] audit: type=1804 audit(2000001041.491:7587): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.10166" name="/newroot/385/file1" dev="fuse" ino=1 res=1 errno=0 [ 2818.883466][ T40] audit: type=1800 audit(2000001041.491:7588): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10166" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2818.894700][ T40] audit: type=1800 audit(2000001041.491:7589): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10166" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2818.919112][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2818.994086][T28298] udevd[28298]: symlink '../../loop7' '/dev/disk/by-diskseq/129.tmp-b7:7' failed: Read-only file system [ 2819.330905][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10177'. [ 2819.336470][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10177'. [ 2819.344777][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10177'. [ 2819.394612][T13783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2819.397067][T13783] IPv6: NLM_F_CREATE should be set when creating new route [ 2820.480143][T13811] overlayfs: failed to clone upperpath [ 2820.687045][T13814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2823.226961][T13890] fuse: Bad value for 'fd' [ 2823.238557][ T8321] Bluetooth: hci0: unexpected event for opcode 0x080f [ 2823.646427][ T40] audit: type=1326 audit(2000001046.499:7590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13915 comm="syz.7.10227" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f47598 code=0x7ffc0000 [ 2823.657147][ T40] audit: type=1326 audit(2000001046.509:7591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13915 comm="syz.7.10227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2823.667099][ T40] audit: type=1326 audit(2000001046.509:7592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13915 comm="syz.7.10227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2823.676598][ T40] audit: type=1326 audit(2000001046.509:7593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13915 comm="syz.7.10227" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f47598 code=0x7ffc0000 [ 2823.685909][ T40] audit: type=1326 audit(2000001046.509:7594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13915 comm="syz.7.10227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2823.696381][ T40] audit: type=1326 audit(2000001046.509:7595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13915 comm="syz.7.10227" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f47598 code=0x7ffc0000 [ 2823.705533][ T40] audit: type=1326 audit(2000001046.509:7596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13915 comm="syz.7.10227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2823.715212][ T40] audit: type=1326 audit(2000001046.509:7597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13915 comm="syz.7.10227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2823.724570][ T40] audit: type=1326 audit(2000001046.509:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13915 comm="syz.7.10227" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f47598 code=0x7ffc0000 [ 2823.733897][ T40] audit: type=1326 audit(2000001046.509:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13915 comm="syz.7.10227" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f47598 code=0x7ffc0000 [ 2824.479465][T13964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2824.520377][T13961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2825.174292][T13986] lo speed is unknown, defaulting to 1000 [ 2825.259511][T13986] lo speed is unknown, defaulting to 1000 [ 2825.909729][T14004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2825.923277][T14003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2826.175137][T14010] fuse: Bad value for 'fd' [ 2826.596073][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10263'. [ 2826.671535][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10265'. [ 2826.829283][T14033] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10269'. [ 2826.862893][T14033] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2827.118275][ T8321] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2827.127857][ T8321] Bluetooth: hci0: Injecting HCI hardware error event [ 2827.135506][ T8321] Bluetooth: hci0: hardware error 0x00 [ 2827.829025][T14066] tipc: Enabling of bearer rejected, failed to enable media [ 2827.867025][T14070] tipc: Enabling of bearer rejected, failed to enable media [ 2828.172294][T14082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2828.495955][T14091] tipc: Enabling of bearer rejected, failed to enable media [ 2828.592632][T17492] lo speed is unknown, defaulting to 1000 [ 2828.594853][T17492] syz2: Port: 1 Link DOWN [ 2828.600483][T14096] netlink: 'syz.7.10290': attribute type 4 has an invalid length. [ 2828.646125][T14098] fuse: Bad value for 'fd' [ 2828.702862][T14102] overlayfs: failed to clone lowerpath [ 2828.708108][T14102] overlayfs: failed to clone upperpath [ 2829.089882][ T8321] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2829.414677][T14125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2830.063636][T14195] fuse: Bad value for 'fd' [ 2831.164433][T14204] tipc: Enabling of bearer rejected, failed to enable media [ 2831.169603][T14207] tipc: Enabling of bearer rejected, failed to enable media [ 2832.102358][T21814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2832.109465][T21814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2832.115523][T21814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2832.120592][T21814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2832.124155][T21814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2832.182303][T14254] lo speed is unknown, defaulting to 1000 [ 2832.433464][T24031] syz1: Port: 1 Link DOWN [ 2832.475469][T14254] lo speed is unknown, defaulting to 1000 [ 2832.838218][T14254] chnl_net:caif_netlink_parms(): no params data found [ 2833.117467][T14254] bridge0: port 1(bridge_slave_0) entered blocking state [ 2833.122233][T14254] bridge0: port 1(bridge_slave_0) entered disabled state [ 2833.126212][T14254] bridge_slave_0: entered allmulticast mode [ 2833.132915][T14254] bridge_slave_0: entered promiscuous mode [ 2833.139012][T14254] bridge0: port 2(bridge_slave_1) entered blocking state [ 2833.142554][T14254] bridge0: port 2(bridge_slave_1) entered disabled state [ 2833.146201][T14254] bridge_slave_1: entered allmulticast mode [ 2833.150443][T14254] bridge_slave_1: entered promiscuous mode [ 2833.248922][T14254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2833.255918][T14254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2833.354064][T14254] team0: Port device team_slave_0 added [ 2833.359771][T14254] team0: Port device team_slave_1 added [ 2833.426382][T14254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2833.429546][T14254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2833.441747][T14254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2833.446237][T14254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2833.448760][T14254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2833.457573][T14254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2833.522082][T14254] hsr_slave_0: entered promiscuous mode [ 2833.524821][T14254] hsr_slave_1: entered promiscuous mode [ 2833.526926][T14254] debugfs: 'hsr0' already exists in 'hsr' [ 2833.528812][T14254] Cannot create hsr debugfs directory [ 2833.664060][T14254] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2833.668401][T14254] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2833.673275][T14254] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2833.678137][T14254] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2833.725946][T14254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2833.752407][T14254] 8021q: adding VLAN 0 to HW filter on device team0 [ 2833.759516][T14164] bridge0: port 1(bridge_slave_0) entered blocking state [ 2833.762112][T14164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2833.771889][T14139] bridge0: port 2(bridge_slave_1) entered blocking state [ 2833.774472][T14139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2833.919043][T14254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2834.068759][T14254] veth0_vlan: entered promiscuous mode [ 2834.076578][T14254] veth1_vlan: entered promiscuous mode [ 2834.099539][T14254] veth0_macvtap: entered promiscuous mode [ 2834.104060][T14254] veth1_macvtap: entered promiscuous mode [ 2834.115242][T14254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2834.121651][T14254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2834.127595][T14173] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2834.131844][ T8321] Bluetooth: hci1: command tx timeout [ 2834.132657][T14173] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2834.143668][T14173] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2834.150274][T14173] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2834.204602][T14173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2834.207423][T14173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2834.225201][T14164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2834.228224][T14164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2834.322080][T14288] tipc: Started in network mode [ 2834.324917][T14288] tipc: Node identity faea14f75a46, cluster identity 4711 [ 2834.328806][T14288] tipc: Enabled bearer , priority 0 [ 2834.334639][T14288] syzkaller0: entered promiscuous mode [ 2834.336998][T14288] syzkaller0: entered allmulticast mode [ 2834.346037][T14288] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2834.614476][ T659] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 2834.760419][ T659] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2834.765030][ T659] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2834.769571][ T659] usb 13-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 2834.773199][ T659] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2834.786575][ T659] usb 13-1: config 0 descriptor?? [ 2834.790191][T14288] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2834.987170][T14288] tipc: Resetting bearer [ 2834.991202][ T659] usbhid 13-1:0.0: can't add hid device: -71 [ 2834.993219][ T659] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 2834.998152][ T659] usb 13-1: USB disconnect, device number 2 [ 2834.998797][T14287] tipc: Resetting bearer [ 2835.019635][T14287] tipc: Disabling bearer [ 2836.110403][ T8321] Bluetooth: hci1: command tx timeout [ 2837.038042][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10326'. [ 2837.041082][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10326'. [ 2837.271954][T14299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2838.082150][ T8321] Bluetooth: hci1: command tx timeout [ 2838.302847][T14348] lo speed is unknown, defaulting to 1000 [ 2838.306829][T14348] lo speed is unknown, defaulting to 1000 [ 2838.972125][T14360] lo speed is unknown, defaulting to 1000 [ 2838.975454][T14360] lo speed is unknown, defaulting to 1000 [ 2839.245754][T14369] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10344'. [ 2840.063101][ T8321] Bluetooth: hci1: command tx timeout [ 2841.630423][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10362'. [ 2841.698363][T14427] input: syz0 as /devices/virtual/input/input111 [ 2842.183418][T14440] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10366'. [ 2843.206254][T14470] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2845.475140][T14547] netlink: 'syz.5.10397': attribute type 1 has an invalid length. [ 2845.478878][T14547] netlink: 'syz.5.10397': attribute type 1 has an invalid length. [ 2847.855601][T14602] tipc: Enabling of bearer rejected, failed to enable media [ 2848.070714][T14613] fuse: Bad value for 'fd' [ 2848.262934][T31859] bridge0: port 2(bridge_slave_1) entered disabled state [ 2848.553750][T14622] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 2848.556814][T14622] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 2848.561908][T14622] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 2848.829664][T14631] netlink: 388 bytes leftover after parsing attributes in process `syz.4.10419'. [ 2850.102082][T14647] picdev_write: 176 callbacks suppressed [ 2850.102172][T14647] kvm: pic: non byte write [ 2850.111813][T14647] kvm: pic: non byte write [ 2850.116268][T14647] kvm: pic: non byte write [ 2850.119845][T14647] kvm: pic: non byte write [ 2850.127458][T14647] kvm: pic: non byte write [ 2850.131135][T14647] kvm: pic: non byte write [ 2850.137902][T14647] kvm: pic: non byte write [ 2850.141996][T14647] kvm: pic: non byte write [ 2850.145623][T14647] kvm: pic: non byte write [ 2850.148952][T14647] kvm: pic: non byte write [ 2850.282753][T14648] 8021q: VLANs not supported on ip6gre0 [ 2850.784930][T14667] overlayfs: failed to resolve './file1': -2 [ 2851.680422][T14698] tipc: Enabled bearer , priority 0 [ 2852.221081][ T40] kauditd_printk_skb: 90 callbacks suppressed [ 2852.221098][ T40] audit: type=1800 audit(2000001077.501:7690): pid=14719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10449" name="SYSV798dd830" dev="tmpfs" ino=0 res=0 errno=0 [ 2853.637839][T14748] tipc: Enabling of bearer rejected, failed to enable media [ 2853.894711][T14758] tipc: Enabling of bearer rejected, failed to enable media [ 2855.708510][T14803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2856.264308][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10481'. [ 2856.486251][T14831] vlan2: entered promiscuous mode [ 2856.488641][T14831] batadv0: entered promiscuous mode [ 2856.795412][T14837] netlink: 'syz.8.10486': attribute type 10 has an invalid length. [ 2856.807334][T14837] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2856.883089][T14839] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 2857.080387][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10488'. [ 2857.083843][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10488'. [ 2857.100152][T14849] syz_tun: entered allmulticast mode [ 2857.145938][T14847] syz_tun: left allmulticast mode [ 2857.200587][T14851] netlink: 'syz.5.10492': attribute type 4 has an invalid length. [ 2857.327695][T14860] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 2857.552800][T14845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2857.841533][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10499'. [ 2858.485807][T14885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2858.613177][T14904] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2861.146201][T14955] /dev/nullb0: Can't open blockdev [ 2862.679109][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10532'. [ 2862.687298][T14977] bridge0: port 1(bridge_slave_0) entered disabled state [ 2863.416854][T14993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2863.621208][ T40] audit: type=1804 audit(2000001089.469:7691): pid=15002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.10537" name="bus" dev="tmpfs" ino=2649 res=1 errno=0 [ 2864.096994][T15008] trusted_key: encrypted_key: insufficient parameters specified [ 2865.281272][T15033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2866.017625][T15045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2866.020310][T15045] IPv6: NLM_F_CREATE should be set when creating new route [ 2866.388637][T15070] tmpfs: Unknown parameter 'usrq*uota_block_hardlimit' [ 2866.436879][ T40] audit: type=1804 audit(2000001092.419:7692): pid=15071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.10553" name="/newroot/45/bus" dev="tmpfs" ino=258 res=1 errno=0 [ 2867.560604][T15087] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2868.274049][ T40] audit: type=1800 audit(2000001094.350:7693): pid=15096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10564" name="file1" dev="tmpfs" ino=11223 res=0 errno=0 [ 2868.466186][T15103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2869.334685][T15135] trusted_key: encrypted_key: insufficient parameters specified [ 2869.786526][ T40] audit: type=1804 audit(2000001095.946:7694): pid=15142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.10574" name="/newroot/48/file1" dev="fuse" ino=1 res=1 errno=0 [ 2869.794354][ T40] audit: type=1800 audit(2000001095.946:7695): pid=15142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10574" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2869.803567][ T40] audit: type=1800 audit(2000001095.946:7696): pid=15142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10574" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2869.848627][T15145] syzkaller0: entered promiscuous mode [ 2869.851608][T15145] syzkaller0: entered allmulticast mode [ 2870.427799][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10581'. [ 2870.518065][T15156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2870.807719][T15169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2870.812002][T15169] IPv6: NLM_F_CREATE should be set when creating new route [ 2871.346415][T15171] trusted_key: encrypted_key: insufficient parameters specified [ 2871.355619][ T40] audit: type=1800 audit(2000001097.594:7697): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10584" name="file1" dev="tmpfs" ino=4981 res=0 errno=0 [ 2871.635440][T15188] lo speed is unknown, defaulting to 1000 [ 2871.639293][T15188] lo speed is unknown, defaulting to 1000 [ 2873.188618][T15229] lo speed is unknown, defaulting to 1000 [ 2873.193809][T15229] lo speed is unknown, defaulting to 1000 [ 2873.228518][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10603'. [ 2875.102723][T15283] overlayfs: failed to clone lowerpath [ 2876.712665][T15323] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2876.820946][ T40] audit: type=1804 audit(2000001103.326:7698): pid=15331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10624" name="bus" dev="tmpfs" ino=11299 res=1 errno=0 [ 2878.844500][T15355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2879.604916][T15371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10642'. [ 2880.617655][T15385] overlayfs: failed to clone upperpath [ 2881.506685][T15394] lo speed is unknown, defaulting to 1000 [ 2881.510120][T15394] lo speed is unknown, defaulting to 1000 [ 2882.744102][T15420] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10658'. [ 2884.197423][T15443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2884.607668][T15455] tipc: Enabling of bearer rejected, failed to enable media [ 2885.755275][ T40] audit: type=1326 audit(2000001112.701:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.8.10673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2885.762937][ T40] audit: type=1326 audit(2000001112.701:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.8.10673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2885.769818][ T40] audit: type=1326 audit(2000001112.701:7701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.8.10673" exe="/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2885.776855][ T40] audit: type=1326 audit(2000001112.701:7702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.8.10673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2885.786368][ T40] audit: type=1326 audit(2000001112.701:7703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.8.10673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2885.796081][ T40] audit: type=1326 audit(2000001112.701:7704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.8.10673" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2885.804806][ T40] audit: type=1326 audit(2000001112.701:7705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.8.10673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2885.813911][ T40] audit: type=1326 audit(2000001112.701:7706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.8.10673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2885.823753][ T40] audit: type=1326 audit(2000001112.711:7707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.8.10673" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2885.833577][ T40] audit: type=1326 audit(2000001112.711:7708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.8.10673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2886.652590][T15488] kAFS: No cell specified [ 2886.807158][T15489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2888.546549][T15520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10684'. [ 2889.184282][T15531] netlink: 'syz.7.10687': attribute type 1 has an invalid length. [ 2889.209361][T15531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2889.673200][T21814] Bluetooth: hci1: command 0x0406 tx timeout [ 2889.946024][T15537] bridge2: entered promiscuous mode [ 2890.235055][T15538] overlayfs: failed to resolve './file1': -2 [ 2891.776731][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10696'. [ 2892.214283][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 2892.214300][ T40] audit: type=1326 audit(2000001119.483:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.7.10697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2892.225926][ T40] audit: type=1326 audit(2000001119.483:7721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.7.10697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2892.228541][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10697'. [ 2892.234545][ T40] audit: type=1326 audit(2000001119.493:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.7.10697" exe="/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2892.248355][ T40] audit: type=1326 audit(2000001119.493:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.7.10697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2892.256705][ T40] audit: type=1326 audit(2000001119.493:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.7.10697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2892.266244][ T40] audit: type=1326 audit(2000001119.504:7725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.7.10697" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2892.274382][ T40] audit: type=1326 audit(2000001119.504:7726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.7.10697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2892.285325][ T40] audit: type=1326 audit(2000001119.504:7727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.7.10697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2892.295786][ T40] audit: type=1326 audit(2000001119.504:7728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.7.10697" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2892.304141][ T40] audit: type=1326 audit(2000001119.504:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.7.10697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 2892.835134][ T5104] IPVS: starting estimator thread 0... [ 2892.921021][T15588] IPVS: using max 41 ests per chain, 98400 per kthread [ 2894.913619][T15624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2895.562602][T15637] lo speed is unknown, defaulting to 1000 [ 2895.566650][T15637] lo speed is unknown, defaulting to 1000 [ 2897.516560][T15669] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 2897.520512][T15669] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 2897.523627][T15669] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 2898.253838][T15672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2898.544814][T15686] overlayfs: failed to resolve './file1': -2 [ 2901.809155][T15735] overlayfs: failed to clone upperpath [ 2905.203913][T15779] overlayfs: failed to clone upperpath [ 2905.521555][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 2905.521574][ T40] audit: type=1804 audit(2000001133.455:7743): pid=15779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.10750" name="bus" dev="tmpfs" ino=2888 res=1 errno=0 [ 2905.926008][ T40] audit: type=1800 audit(2000001133.886:7744): pid=15785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10752" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 2907.146975][T15804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2907.311675][T15810] netlink: 84 bytes leftover after parsing attributes in process `syz.8.10754'. [ 2907.677590][T15817] netlink: 'syz.5.10761': attribute type 1 has an invalid length. [ 2907.732155][T15818] netlink: 'syz.5.10761': attribute type 10 has an invalid length. [ 2907.735042][T15818] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10761'. [ 2907.738730][T15818] dummy0: entered promiscuous mode [ 2907.949194][T15821] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2907.953110][T15821] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2910.021262][T15849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2911.668052][T15883] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10786'. [ 2912.250317][T15902] /dev/nullb0: Can't lookup blockdev [ 2912.274126][T15900] ceph: No mds server is up or the cluster is laggy [ 2912.278193][T10833] libceph: connect (1)[c::]:6789 error -113 [ 2912.280918][T10833] libceph: mon0 (1)[c::]:6789 connect error [ 2912.809741][T15913] netlink: 'syz.8.10783': attribute type 1 has an invalid length. [ 2913.103532][T15912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2913.208260][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10787'. [ 2913.386468][T15925] lo speed is unknown, defaulting to 1000 [ 2913.390032][T15925] lo speed is unknown, defaulting to 1000 [ 2913.920608][T15938] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10790'. [ 2914.574405][ T40] audit: type=1326 audit(2000001142.967:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.5.10794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2914.583204][ T40] audit: type=1326 audit(2000001142.967:7746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.5.10794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2914.592896][ T40] audit: type=1326 audit(2000001142.977:7747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.5.10794" exe="/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2914.601815][ T40] audit: type=1326 audit(2000001142.977:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.5.10794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2914.617949][ T40] audit: type=1326 audit(2000001142.988:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.5.10794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2914.630236][ T40] audit: type=1326 audit(2000001142.988:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.5.10794" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2914.638579][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10794'. [ 2914.649466][ T40] audit: type=1326 audit(2000001142.988:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.5.10794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2914.658792][ T40] audit: type=1326 audit(2000001142.988:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.5.10794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2914.665580][ T40] audit: type=1326 audit(2000001142.988:7753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.5.10794" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2914.675575][ T40] audit: type=1326 audit(2000001142.988:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.5.10794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2915.466294][T15960] tipc: Cannot configure node identity twice [ 2917.760516][ T6041] libceph: connect (1)[c::]:6789 error -113 [ 2917.763522][ T6041] libceph: mon0 (1)[c::]:6789 connect error [ 2917.802706][T15981] ceph: No mds server is up or the cluster is laggy [ 2917.804925][T15983] /dev/nullb0: Can't lookup blockdev [ 2919.605246][T16027] netlink: 388 bytes leftover after parsing attributes in process `syz.5.10811'. [ 2920.167552][T16037] tipc: Enabling of bearer rejected, failed to enable media [ 2923.016963][T10833] libceph: connect (1)[c::]:6789 error -101 [ 2923.019031][T10833] libceph: mon0 (1)[c::]:6789 connect error [ 2923.060667][T16071] ceph: No mds server is up or the cluster is laggy [ 2923.071107][T16071] /dev/nullb0: Can't lookup blockdev [ 2924.015719][T16101] netlink: 388 bytes leftover after parsing attributes in process `syz.8.10825'. [ 2926.188877][T16127] lo speed is unknown, defaulting to 1000 [ 2926.195128][T16127] lo speed is unknown, defaulting to 1000 [ 2926.350083][T16134] wireguard0: entered promiscuous mode [ 2926.352447][T16134] wireguard0: entered allmulticast mode [ 2928.714857][ T8763] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2928.718362][ T8763] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2928.784336][ T8763] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2928.789926][ T8763] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2928.881759][ T8763] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2928.890452][ T8763] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2928.987537][ T8763] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2928.991682][ T8763] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2929.031893][T16176] wireguard0: entered promiscuous mode [ 2929.034877][T16176] wireguard0: entered allmulticast mode [ 2929.124094][T16175] lo speed is unknown, defaulting to 1000 [ 2929.126734][T16175] lo speed is unknown, defaulting to 1000 [ 2930.936427][ T8763] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2930.999812][ T8763] bond2 (unregistering): (slave geneve2): Releasing active interface [ 2931.156324][ T8763] bond1 (unregistering): (slave bridge2): Releasing active interface [ 2931.504022][ T8763] bond0 (unregistering): Released all slaves [ 2931.516731][ T8763] bond1 (unregistering): Released all slaves [ 2931.530622][ T8763] bond2 (unregistering): Released all slaves [ 2931.550677][T16198] bridge4: entered allmulticast mode [ 2931.554609][T16200] : renamed from hsr0 (while UP) [ 2931.643673][ T8763] tipc: Disabling bearer [ 2931.646508][ T8763] tipc: Left network mode [ 2931.876854][T14168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2931.881194][T14168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2932.154589][ T8763] hsr_slave_0: left promiscuous mode [ 2932.158194][ T8763] hsr_slave_1: left promiscuous mode [ 2932.173797][ T8763] veth1_macvtap: left promiscuous mode [ 2932.176748][ T8763] veth0_macvtap: left allmulticast mode [ 2932.179186][ T8763] veth0_macvtap: left promiscuous mode [ 2932.188653][ T8763] veth1_vlan: left promiscuous mode [ 2932.191051][ T8763] veth0_vlan: left promiscuous mode [ 2936.080829][T16288] fuse: Bad value for 'fd' [ 2936.391347][T16306] trusted_key: encrypted_key: key user:syz not found [ 2936.634323][ T8763] IPVS: stop unused estimator thread 0... [ 2937.112333][T16325] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2938.046075][T16335] bridge0: entered allmulticast mode [ 2938.759754][T16349] netlink: 'syz.5.10878': attribute type 2 has an invalid length. [ 2938.763003][T16349] netlink: 'syz.5.10878': attribute type 1 has an invalid length. [ 2939.440762][T16362] ceph: No mds server is up or the cluster is laggy [ 2939.545223][T16361] /dev/nullb0: Can't lookup blockdev [ 2940.320785][T16381] tipc: Enabling of bearer rejected, failed to enable media [ 2940.668007][ T40] kauditd_printk_skb: 67 callbacks suppressed [ 2940.668031][ T40] audit: type=1326 audit(2000001170.356:7822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16382 comm="syz.8.10886" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f01579 code=0x0 [ 2941.436155][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10889'. [ 2942.663659][ T40] audit: type=1326 audit(2000001172.445:7823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.5.10890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2942.672367][ T40] audit: type=1326 audit(2000001172.455:7824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.5.10890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2942.759849][ T40] audit: type=1326 audit(2000001172.455:7825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.5.10890" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2942.769079][ T40] audit: type=1326 audit(2000001172.455:7826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.5.10890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2942.778892][ T40] audit: type=1326 audit(2000001172.455:7827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.5.10890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2942.787550][ T40] audit: type=1326 audit(2000001172.455:7828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.5.10890" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2942.795096][ T40] audit: type=1326 audit(2000001172.455:7829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.5.10890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2942.806391][ T40] audit: type=1326 audit(2000001172.455:7830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.5.10890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2942.815169][ T40] audit: type=1326 audit(2000001172.455:7831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.5.10890" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 2943.344010][ T6200] libceph: connect (1)[c::]:6789 error -101 [ 2943.347267][ T6200] libceph: mon0 (1)[c::]:6789 connect error [ 2943.383285][T16421] ceph: No mds server is up or the cluster is laggy [ 2943.786482][T16433] netlink: 'syz.5.10894': attribute type 30 has an invalid length. [ 2943.798641][T16433] bond2: option arp_missed_max: invalid value (0) [ 2943.800825][T16433] bond2: option arp_missed_max: allowed values 1 - 255 [ 2943.805892][T16433] bond2 (unregistering): Released all slaves [ 2944.006408][T16435] trusted_key: encrypted_key: key user:syz not found [ 2945.646737][T16463] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10902'. [ 2945.724728][T16463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2945.812614][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10902'. [ 2945.821646][T16463] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2945.825512][T16463] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2946.084736][T16463] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2946.099068][T16463] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2946.136602][T16480] tipc: Cannot configure node identity twice [ 2946.192368][T16463] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2946.196412][T16463] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2946.250499][T16463] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2946.255370][T16463] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2946.409470][T14173] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 2946.413210][T14173] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 2946.420110][T14173] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 2946.424805][T14173] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 2946.441186][T14173] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 2946.450837][T14173] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 2946.462539][T14173] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 2946.466477][T14173] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 2946.925639][T16500] siw: device registration error -23 [ 2948.197062][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 2948.197082][ T40] audit: type=1326 audit(2000001178.250:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.10911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2948.214359][ T40] audit: type=1326 audit(2000001178.250:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.10911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2948.226065][ T40] audit: type=1326 audit(2000001178.261:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.10911" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2948.237562][ T40] audit: type=1326 audit(2000001178.261:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.10911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2948.248564][ T40] audit: type=1326 audit(2000001178.261:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.10911" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2948.258974][ T40] audit: type=1326 audit(2000001178.261:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.10911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2948.269950][ T40] audit: type=1326 audit(2000001178.261:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.10911" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2948.282174][ T40] audit: type=1326 audit(2000001178.261:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.10911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2948.292167][ T40] audit: type=1326 audit(2000001178.261:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.10911" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2948.302495][ T40] audit: type=1326 audit(2000001178.261:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.10911" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 2949.463680][T16549] lo speed is unknown, defaulting to 1000 [ 2949.468375][T16549] lo speed is unknown, defaulting to 1000 [ 2952.908597][T16588] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10925'. [ 2954.126572][T16603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2954.798673][T16620] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2954.801799][T16620] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2955.319512][T16624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2956.750193][T16653] 9pnet_fd: Insufficient options for proto=fd [ 2957.162639][T26403] libceph: connect (1)[c::]:6789 error -101 [ 2957.165864][T26403] libceph: mon0 (1)[c::]:6789 connect error [ 2957.419287][T26403] libceph: connect (1)[c::]:6789 error -101 [ 2957.421982][T26403] libceph: mon0 (1)[c::]:6789 connect error [ 2957.463581][T16658] ceph: No mds server is up or the cluster is laggy [ 2957.503645][T16649] /dev/nullb0: Can't lookup blockdev [ 2958.352736][T16672] netlink: 'syz.4.10944': attribute type 4 has an invalid length. [ 2958.451129][T16676] netlink: 'syz.5.10945': attribute type 16 has an invalid length. [ 2958.453721][T16676] netlink: 'syz.5.10945': attribute type 17 has an invalid length. [ 2958.457363][T16676] dummy0: left promiscuous mode [ 2958.462672][T16676] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2958.470435][T16676] vlan1: left promiscuous mode [ 2958.472603][T16676] vlan1: left allmulticast mode [ 2958.474704][T16676] veth0_vlan: left allmulticast mode [ 2958.478789][T16676] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 2958.488197][T16676] batadv1: left allmulticast mode [ 2958.491404][T16676] bridge0: left promiscuous mode [ 2958.493345][T16676] macvlan2: left promiscuous mode [ 2958.522531][T31859] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2958.525949][T31859] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2958.528457][T31859] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2958.531000][T31859] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2958.584624][T16679] netlink: 'syz.4.10944': attribute type 4 has an invalid length. [ 2960.901403][T16704] 9pnet_fd: Insufficient options for proto=fd [ 2961.120414][T16710] overlayfs: failed to clone upperpath [ 2961.212252][T16713] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 2961.573838][T16712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2961.918747][T16720] autofs: Unknown parameter 'ZqDC7D&C$뙾4_4DY!Iu&}Ƌm{DL"fa&]JA' [ 2962.083119][T16717] Process accounting resumed [ 2962.141393][T16724] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10959'. [ 2962.178979][T16726] lo speed is unknown, defaulting to 1000 [ 2962.182380][T16726] lo speed is unknown, defaulting to 1000 [ 2962.238324][T16730] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2962.368443][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10959'. [ 2963.088649][T16747] overlayfs: failed to clone upperpath [ 2963.866115][T16765] tipc: Enabling of bearer rejected, already enabled [ 2964.916615][T16770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2965.492409][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10970'. [ 2966.908594][T16793] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10972'. [ 2967.373201][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10974'. [ 2967.805900][T16810] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10976'. [ 2967.895754][T16812] overlayfs: failed to clone upperpath [ 2968.566149][T16821] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10980'. [ 2968.956535][T16831] netlink: 84 bytes leftover after parsing attributes in process `syz.8.10982'. [ 2969.842737][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10986'. [ 2969.966756][T16840] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2969.970715][T16840] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2970.050791][T16852] overlayfs: failed to clone upperpath [ 2970.853928][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10994'. [ 2971.713778][T16870] Process accounting resumed [ 2971.905289][T16887] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2972.038250][T16890] overlayfs: failed to clone upperpath [ 2972.676680][T16900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2973.780733][T16917] futex_wake_op: syz.5.11006 tries to shift op by 144; fix this program [ 2975.749351][T14173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2975.754261][T14173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2976.116131][T16950] tipc: Enabling of bearer rejected, failed to enable media [ 2976.264102][T16954] netlink: 'syz.4.11016': attribute type 10 has an invalid length. [ 2976.268788][T16954] : (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2976.280601][T16954] : (slave lo): refused to change device type [ 2977.177605][T16977] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2977.182342][T16977] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2977.989834][T16990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2978.525720][T17004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2978.813896][T17009] autofs: Unknown parameter 'ZqDC7D&C$뙾4_4DY!Iu&}Ƌm{DL"fa&]JA' [ 2979.437038][ T8321] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 2979.473224][ T8321] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 2979.772949][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 2979.772968][ T40] audit: type=1326 audit(2000001211.403:7896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.8.11040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2979.810866][ T40] audit: type=1326 audit(2000001211.403:7897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.8.11040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2979.821262][ T40] audit: type=1326 audit(2000001211.445:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.8.11040" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2979.837419][ T40] audit: type=1326 audit(2000001211.445:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.8.11040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2979.847175][ T40] audit: type=1326 audit(2000001211.445:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.8.11040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2979.858512][ T40] audit: type=1326 audit(2000001211.456:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.8.11040" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2979.867938][ T40] audit: type=1326 audit(2000001211.456:7902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.8.11040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2979.878588][ T40] audit: type=1326 audit(2000001211.456:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.8.11040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2979.890881][ T40] audit: type=1326 audit(2000001211.456:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.8.11040" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2979.900551][ T40] audit: type=1326 audit(2000001211.456:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.8.11040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 2980.342864][T17044] infiniband syz1: set down [ 2980.344430][T17044] infiniband syz1: added bond0 [ 2980.364950][T17044] RDS/IB: syz1: added [ 2980.557162][T21814] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 2980.599971][T21814] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 2980.668135][T17053] team0: Device gtp0 is of different type [ 2980.738502][T21814] ------------[ cut here ]------------ [ 2980.741801][T21814] WARNING: CPU: 3 PID: 21814 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0x11a/0x210 [ 2980.746738][T21814] Modules linked in: [ 2980.749739][T21814] CPU: 3 UID: 0 PID: 21814 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 2980.757347][T21814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2980.762889][T21814] Workqueue: hci1 hci_conn_timeout [ 2980.765791][T21814] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 2980.768641][T21814] Code: 00 e8 fa 42 6b f7 4c 89 f1 4c 89 e2 48 c7 c6 40 9a b7 8c 48 c7 c7 c8 91 5b 90 e8 71 55 82 fa e9 4d ff ff ff e8 d7 42 6b f7 90 <0f> 0b 90 e8 ce 42 6b f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 2980.777305][T21814] RSP: 0018:ffffc90002d7fc30 EFLAGS: 00010293 [ 2980.779913][T21814] RAX: 0000000000000000 RBX: ffff888061a00948 RCX: ffffffff8a4f4f5f [ 2980.783348][T21814] RDX: ffff88802290c900 RSI: ffffffff8a4f5009 RDI: 0000000000000005 [ 2980.787006][T21814] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 2980.791925][T21814] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888061a00000 [ 2980.795894][T21814] R13: 0000000000000000 R14: ffffffff906021d4 R15: ffffc90002d7fd10 [ 2980.799222][T21814] FS: 0000000000000000(0000) GS:ffff888097f6f000(0000) knlGS:0000000000000000 [ 2980.803019][T21814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2980.806133][T21814] CR2: 00000000f53d5da4 CR3: 00000000645bc000 CR4: 0000000000352ef0 [ 2980.810006][T21814] Call Trace: [ 2980.811740][T21814] [ 2980.813396][T21814] process_one_work+0x9cc/0x1b70 [ 2980.816462][T21814] ? __pfx_process_one_work+0x10/0x10 [ 2980.818584][T21814] ? assign_work+0x1a0/0x250 [ 2980.820706][T21814] worker_thread+0x6c8/0xf10 [ 2980.822866][T21814] ? __pfx_worker_thread+0x10/0x10 [ 2980.825555][T21814] kthread+0x3c5/0x780 [ 2980.827688][T21814] ? __pfx_kthread+0x10/0x10 [ 2980.829908][T21814] ? rcu_is_watching+0x12/0xc0 [ 2980.832362][T21814] ? __pfx_kthread+0x10/0x10 [ 2980.834873][T21814] ret_from_fork+0x56a/0x730 [ 2980.836914][T21814] ? __pfx_kthread+0x10/0x10 [ 2980.838922][T21814] ret_from_fork_asm+0x1a/0x30 [ 2980.841430][T21814] [ 2980.843006][T21814] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2980.846470][T21814] CPU: 3 UID: 0 PID: 21814 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 2980.851297][T21814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2980.855950][T21814] Workqueue: hci1 hci_conn_timeout [ 2980.858675][T21814] Call Trace: [ 2980.860425][T21814] [ 2980.861775][T21814] dump_stack_lvl+0x3d/0x1f0 [ 2980.864453][T21814] vpanic+0x640/0x6f0 [ 2980.866645][T21814] ? hci_conn_timeout+0x11a/0x210 [ 2980.868904][T21814] panic+0xca/0xd0 [ 2980.870573][T21814] ? __pfx_panic+0x10/0x10 [ 2980.872668][T21814] ? check_panic_on_warn+0x1f/0xb0 [ 2980.874901][T21814] check_panic_on_warn+0xab/0xb0 [ 2980.877084][T21814] __warn+0xf6/0x3c0 [ 2980.878790][T21814] ? hci_conn_timeout+0x11a/0x210 [ 2980.881487][T21814] report_bug+0x3c3/0x580 [ 2980.883834][T21814] ? hci_conn_timeout+0x11a/0x210 [ 2980.886847][T21814] handle_bug+0x184/0x210 [ 2980.888853][T21814] exc_invalid_op+0x17/0x50 [ 2980.890786][T21814] asm_exc_invalid_op+0x1a/0x20 [ 2980.893085][T21814] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 2980.895599][T21814] Code: 00 e8 fa 42 6b f7 4c 89 f1 4c 89 e2 48 c7 c6 40 9a b7 8c 48 c7 c7 c8 91 5b 90 e8 71 55 82 fa e9 4d ff ff ff e8 d7 42 6b f7 90 <0f> 0b 90 e8 ce 42 6b f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 2980.903775][T21814] RSP: 0018:ffffc90002d7fc30 EFLAGS: 00010293 [ 2980.906493][T21814] RAX: 0000000000000000 RBX: ffff888061a00948 RCX: ffffffff8a4f4f5f [ 2980.910457][T21814] RDX: ffff88802290c900 RSI: ffffffff8a4f5009 RDI: 0000000000000005 [ 2980.914201][T21814] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 2980.917991][T21814] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888061a00000 [ 2980.921447][T21814] R13: 0000000000000000 R14: ffffffff906021d4 R15: ffffc90002d7fd10 [ 2980.925240][T21814] ? hci_conn_timeout+0x6f/0x210 [ 2980.927700][T21814] ? hci_conn_timeout+0x119/0x210 [ 2980.930445][T21814] process_one_work+0x9cc/0x1b70 [ 2980.933133][T21814] ? __pfx_process_one_work+0x10/0x10 [ 2980.935622][T21814] ? assign_work+0x1a0/0x250 [ 2980.937738][T21814] worker_thread+0x6c8/0xf10 [ 2980.939761][T21814] ? __pfx_worker_thread+0x10/0x10 [ 2980.941988][T21814] kthread+0x3c5/0x780 [ 2980.943925][T21814] ? __pfx_kthread+0x10/0x10 [ 2980.945913][T21814] ? rcu_is_watching+0x12/0xc0 [ 2980.948079][T21814] ? __pfx_kthread+0x10/0x10 [ 2980.950478][T21814] ret_from_fork+0x56a/0x730 [ 2980.952753][T21814] ? __pfx_kthread+0x10/0x10 [ 2980.954902][T21814] ret_from_fork_asm+0x1a/0x30 [ 2980.957357][T21814] [ 2980.959716][T21814] Kernel Offset: disabled [ 2980.961591][T21814] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:02:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8e1c2220 RCX=ffffc90003430001 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000342eff0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=000000000001057a R12=ffffffff816a4994 R13=0000000000000202 R14=ffff888026bf8000 R15=ffffc9000342f0dc RIP=ffffffff8196d4df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f28be23e300 ffffffff 00c00000 GS =0000 ffff888097c6f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005556a97bdf40 CR3=000000004ab21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feeff800 Opmask01=000000000000ffff Opmask02=00000000ff7fefbf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=ea3c6f5fd8e6ab02 5c276be5bbd16b6a ea3c6f5fd8e6ab02 5c276be5bbd16b6a ea3c6f5fd8e6ab02 5c276be5bbd16b6a ea3c6f5fd8e6ab02 5c276be5bbd16b6a ZMM18=893d19323045c107 a126d2bec3ffb251 893d19323045c107 a126d2bec3ffb251 893d19323045c107 a126d2bec3ffb251 893d19323045c107 a126d2bec3ffb251 ZMM19=b53e000000000000 0000000000000004 b53e000000000000 0000000000000003 b53e000000000000 0000000000000002 b53e000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030a880820007a0 0300209880820007 a003083080808200 07a0030008000798 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300040007940300 0200079203000200 0790030008000788 0300040007840300 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40a0808200078203 0040808082000782 0330020007800307 80040190030a0800 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02b0030fffffffff 0402a00310080002 9803010800029003 4a08000288030008 ZMM25=9359f4609359f460 9359f4609359f460 9359f4609359f460 9359f4609359f460 9359f4609359f460 9359f4609359f460 9359f4609359f460 9359f4609359f460 ZMM26=e5833787e5833787 e5833787e5833787 e5833787e5833787 e5833787e5833787 e5833787e5833787 e5833787e5833787 e5833787e5833787 e5833787e5833787 ZMM27=fb510588fb510588 fb510588fb510588 fb510588fb510588 fb510588fb510588 fb510588fb510588 fb510588fb510588 fb510588fb510588 fb510588fb510588 ZMM28=000000900000008f 0000008e0000008d 0000008c0000008b 0000008a00000089 0000008800000087 0000008600000085 0000008400000083 0000008200000081 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=687e0000687e0000 687e0000687e0000 687e0000687e0000 687e0000687e0000 687e0000687e0000 687e0000687e0000 687e0000687e0000 687e0000687e0000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88802334a480 RCX=ffffc900078ae46c RDX=1ffff11004669520 RSI=ffffffff82629658 RDI=ffff88802334a904 RBP=ffff88802334a480 RSP=ffffc900078ae490 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000005 R11=0000000000016268 R12=ffffffff81a5f190 R13=ffffc900078ae518 R14=0000000000000000 R15=ffff88802334a480 RIP=ffffffff819fb473 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097d6f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7136150 CR3=00000000645bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000336b58d RBX=0000000000000002 RCX=ffffffff8b4e2a59 RDX=0000000000000000 RSI=ffffffff8d8245fd RDI=ffffffff8bd04640 RBP=ffffed1003ad9920 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed10056c6655 R10=ffff88802b6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6cc900 R14=ffffffff905ff190 R15=0000000000000000 RIP=ffffffff8b4e157f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097e6f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7143c90 CR3=0000000064b40000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85207e05 RDI=ffffffff9ab610a0 RBP=ffffffff9ab61060 RSP=ffffc90002d7f5a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9ab61060 R15=ffffffff85207da0 RIP=ffffffff85207e2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097f6f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53d5da4 CR3=00000000645bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000