last executing test programs: 9.267085804s ago: executing program 3 (id=4783): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x284242) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x41]}, 0x8) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS3F(r5, 0x8018457f, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) recvfrom(r6, &(0x7f0000000200)=""/158, 0x9e, 0x21, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r8, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r9 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) ioctl$VIDIOC_QUERYCTRL(r9, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000"}) lseek(r8, 0x0, 0x4) syz_usb_disconnect(r7) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8, 0xfc, 0xe9, 0x10, 0xb05, 0x18f0, 0x992f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 8.220992561s ago: executing program 3 (id=4790): socket(0x11, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100180000000007010000f0ffffffb702000005000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r3}, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x24) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x7, 0x5) 5.231103542s ago: executing program 3 (id=4815): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r1, 0x0) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x1002020, 0x1020884, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711208d37d4322db53099c2fe12500000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 4.758482192s ago: executing program 3 (id=4817): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x108, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x3c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x9}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0xa, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x108}}, 0x4004094) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x8, 0x3, 0xa40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x400000, 0x4, 0x4}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000021b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000942792d3a3083818053b30433de8f6"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.848616359s ago: executing program 3 (id=4821): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x3, 0x3) r0 = getpgid(0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 2.875995442s ago: executing program 3 (id=4824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x3, 0x10001, 0x64, 0x5, 0x9]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x4, 0x6, 0xdddd1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c744240200800000ff2c24f30f516797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4c}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x6) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x84000) 1.554824793s ago: executing program 1 (id=4833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) (async) listen(r0, 0x3) (async) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460054060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P\a\x00'], 0x0) 1.499644315s ago: executing program 1 (id=4834): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x164, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffff000}, @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x1, 0x1}, {0xc, 0x1}, {0x4, 0x1}, {0x1b, 0x1}, {0x1}, {0x60, 0x1}, {0x16, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x36, 0x1}, {0x16, 0x1}, {0x9, 0x1}, {0x18}, {0x18}, {0x5, 0x1}, {0x3}, {0x6}, {0x18}, {0x4}, {0xb}, {0x6, 0x1}, {0x9}, {0x60}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4}]}, @NL80211_ATTR_MESH_SETUP={0xb8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_IE={0xaf, 0x3, "feb1fda85be8cb3bd0d81ace1679d3d07c4589cb1a81ee1d249ac3dfea2f1c79d1d0e4b5a189d8e41f0972f747dfd38073327a3ba2e1c68d0bf5ec724c0cee92eb8b5ea1e3309744d39fd5bb694e47a66498407c6a0e4044a98a61807707eca10d4fb25c04dee0bcf0b3e8e7c902b412e47fbc5f803c6b6727aec2e9e7449036634ec37d010cfc43efe6fc186322ef1d770c9a57b92d1f6da8b3e1f8e1bab45e4765290d5b3aaf8a40f484"}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_TTL={0x5}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xa3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x9f}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_init_net_socket$x25(0x9, 0x2, 0x10) (async) syz_init_net_socket$x25(0x9, 0x2, 0x10) 1.492027057s ago: executing program 1 (id=4836): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x3, 0x3) r0 = getpgid(0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 837.551902ms ago: executing program 2 (id=4844): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000840), 0x2001, 0x0) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0) (async) ioctl$SG_BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x80000000, 0xffffffff, 0xcad5, 0x268, 0xfb1b}, {0x80000008, 0x0, 0xfffffff9, 0xf, 0x4}]}) (async) fcntl$getflags(r4, 0x40a) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x18b00, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r6, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000010c0)=[{0x0}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x1}}], 0x2, 0x0) (async) mount(&(0x7f00000000c0), 0x0, 0x0, 0x8c7c88, 0x0) (async, rerun: 64) open(&(0x7f00000002c0)='./bus\x00', 0x2002, 0x10) (async, rerun: 64) socket(0x80000000000000a, 0x2, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0x3}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) ioctl$int_in(r1, 0x5452, &(0x7f0000002480)=0x3) (async, rerun: 32) read$watch_queue(r1, &(0x7f0000000440)=""/140, 0x8c) 786.942516ms ago: executing program 2 (id=4846): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r2 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x184) r3 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x24000, 0x122) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x6, 0x3f58, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x4}, 0x50) setsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000600)="834d4e92adff756f55bd8ad9464dd73d65702de0ba5a2ab1fb34fda75f02ffb47672a684cc87ffa946d8632d282b46fa088cad33e1eae1cb8e64aee00e74597e51346cb869c327dbabed0846a942c41445610b4e25bf26a29985962e82e60c3fe5bbed33bea62e607e956ee3c5af1c485b399014bb660c8b39edff6aaed3510186840975f254a37add6635e85c943d155f5f74a2108711e690b48799df1d540cfa316582e06c8d2cfe881cb07a7c86229ebbe7b4586356fb4462cebffa8cd41266a6ac305973", 0xc6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83", 0xae) socket$key(0xf, 0x3, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = creat(&(0x7f00000011c0)='./file0\x00', 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x1, 0x3, 0xa, 0x3, 0x80, 0x1}, @jmp={0x5, 0x1, 0xb, 0x4, 0x5, 0x8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x99}, @jmp={0x5, 0x0, 0x8, 0x9, 0x3, 0xffffffffffffffc0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0xf, 0x4, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r8, 0x8932, &(0x7f0000000080)={'dummy0\x00'}) write$UHID_INPUT(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 739.728106ms ago: executing program 2 (id=4848): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) munlockall() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x8}, 0x38) (async) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/45, 0xa31000, 0x1000, 0x3, 0x1}, 0x1c) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="1c00000076001f03000000000000000008024b65a7ffffff04000d80"], 0x1c}], 0x1}, 0x0) (async) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x2}, 0x52, 0x0) landlock_restrict_self(r7, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') (async) close_range(r5, 0xffffffffffffffff, 0x0) 690.268738ms ago: executing program 0 (id=4849): r0 = openat$hpet(0xffffff9c, &(0x7f0000000000), 0x4080, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x64) ioctl$CDROM_DISC_STATUS(r0, 0x5327) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x7, [0xf19, 0x4, 0x2, 0x1000, 0x4, 0x2, 0x401]}, 0x12) listen(r0, 0xf) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0x0, &(0x7f0000000100)={0x9, 0xb, 0x0, 0x6}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0x5}}, 0x7, 0xfee, 0x2, 0x5, 0x2, 0x6, 0x2}, &(0x7f0000000280)=0x9c) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f00000002c0)) recvfrom$inet(r0, &(0x7f0000000300)=""/13, 0xd, 0x40000160, &(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x118, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ad}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffe00}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x479}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdebc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendto$rose(r0, &(0x7f0000000580)="faf477333efbc1b53b02374041987c20f415ddbf5c8256c782a8fc83289c", 0x1e, 0x44880, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000600), 0x4) fallocate(r0, 0x38, 0x3, 0x8d3) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000640)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r3 = openat$userfaultfd(0xffffff9c, &(0x7f0000000680), 0x1, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40081}, 0xc090) r5 = getegid() mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}, {@cache_readahead}, {@loose}, {@access_user}, {@access_user}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@access_user}], [{@appraise}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/userfaultfd\x00'}}, {@obj_role={'obj_role', 0x3d, 'tls\x00'}}, {@context={'context', 0x3d, 'root'}}]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r0, 0x0, 0xe1, 0x85, &(0x7f0000000980)="939f5154240941d282a3c33bef412557077c1f45f0274247d7f52598a4ccc7ad014eda7fa498164af58a0a4b4f9bedd09917114f90fd4c02fb652144f0e5a171d18a413b9ddffd5c0f61626e4bb8ee426f2b8af35b4a1b040f9bf21ddb2f25153699b67a80315720e521445df3618ac54cd5d76f79a4021b39261826a971d3acce583e87f727f83c7efbf48e88494035302d024440baf93ccdd01f07fba9de07d1d2f7eb5a047aacc977fe97a95e31343079920e2ba4dee8d423134c44a9b4e06b22de7cdd7cc568c9ca4265c6c27b3e335631b6a8dc4c9f41c70022354d5e7886", &(0x7f0000000a80)=""/133, 0x1, 0x0, 0x1000, 0x64, &(0x7f0000000b40)="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", &(0x7f0000001b40)="c01671b13590c3f0359f09a90e864f953ce42398fe2b233ac8245b93cbf576b3577abd61a8f811eda56a374b428bf3f0529ad6aeeb0d6f3f29352bc32730011f59795891a3f2ddf09ec9d5c5dc265fc694b71ba5d79b998e8adecb3ac2767c133a4a9619", 0x7, 0x0, 0x81}, 0x4c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001d40)={&(0x7f0000001c40)=[0x0], &(0x7f0000001c80)=[0x0, 0x0, 0x0], &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x7}) fcntl$getownex(r0, 0x10, &(0x7f0000001d80)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000001dc0)='net/dev_mcast\x00') getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000001e00)={@private0, 0x0}, &(0x7f0000001e40)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=@base={0x16, 0xc, 0xffff, 0x48000, 0x0, r0, 0x780, '\x00', r8, r7, 0x3, 0x1, 0x1}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000003fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003f80)={&(0x7f0000001f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x1ec, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0xc9, 0x8, "84cb1d8dd008af75af71dd9440a5d697a9869f910410dd32abeef7874bc89ae28e276100d04b01abb8ccf3f03bf76591bd56c85ca4763966a9cd5953aa844164521120504cc6e485acd1a776c9c78e1bcf0213db28880f6c8f21b2a4311aa4983b52265e7bbd465fa53756702d69655e682ad02db439e49f3bcd5e4360f538524bf777af5dffaf105d49dec1b2d8c2f3c71938354bb6603c8c27e370e9ba7ab983631242978965c789e19e311426512140c3180a40dafbca8be348e90bff0d9967dab446f2"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0xdc, 0x8, "5da3bea045e16d439907c274449f9769fc732e675bba0b779714834d2e5d80d9ca12519a94ca6e4df078209cfe262907eb9af6e89ee7844ff1d6dc469cd122fe89cd3636d60921b75c8cc4f77b02cb11464c82dfea43825c209d21819c992d3d8474f88120daf3ddf0ec8b0e3c6098e61b3e8f01bae29dcb4199b6342416b6df29f9d5854d45688bf0caf0e04594e4b208e475932780d112911ba292835aa90d6cf02571ab20c382cdd106a3f248c0e5ffb121c9bf166b50dba4a3952528839235d841789f28fc428058f175d70201b1d8cf0d4b9d2ef906"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSET={0x194c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x18c8, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd44f}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x60, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}, {0xe4, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xd4, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_FROM_DATA={0xbc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb6, 0x1, "02b449363767f2e510db7b22a0fb1537d57d395821053872a90659c934bbb6e3de79b9c84e7cfae368dab151264ef8a023eac221c89d0d0e64841182dd5014c8ae1948dcb5b77e8f58178f6174ec50d253196a0297d113fa6625d39ab742a6bd4bdcbe3494a0ebc2b0e591295cd5f74beea2eb433751a11996aa49a9445005d0b43a160ff9a391b4e2955b9e899236e8503fab5f0aa60084c45a91dcd7e4613541c28de542bcde733405a4d2a2baab738dec"}]}, @NFTA_RANGE_OP={0x8}]}}}, {0x1724, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1714, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BITWISE_MASK={0x290, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "252623c61ea841f73690b62d762769ac7759979541c9db22d05d28d44cc18535a6ebca339281595917e23850c9b99472300cec402b79666ced91dc5bcbba30423c969960f37a18eae5d74e393d888725b874eea6042b5c7e222df2eae9e4d0c1d3e966cc25d0d4ed2781e53af132ac7eb5f6301db8545a10ba666228d554cb42d1a41db1295f2cda17b681e4aab5e7db3a3fb67a7c8a5c81224ee884c332a9d57883c25f10e152"}, @NFTA_DATA_VALUE={0xf6, 0x1, "ae7fe4d30f4225df31c7b065f71ec671b3a4694bb4ebe694460694a89965b2112d6c22d2f7d45c2aa91b8730369762bc66f65e1478dd449467f4b0d0733b05342e1402c1f29549496bda976d6ebf124a67efb6efba8097e6bb5ab4b548f1e3b5dd269e1e3c9f1ef3593678567cc02267f64460cc54f84c3ae6d945e3c698acbf1e3701908a516398fcbeb69fc1769f20cf67fbe7f27c551b9743f12d038368592c93d3851871bf45cb14871f77b44765658ae83c2ddbc4a436102f98b9181b88024c2d8a4d994a5b3d4e00f15333e8ef3a68e4e5a8dc41f83377fb0cd09e37a50eacec480a16c6b782296096ce9a5f5e637d"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_BITWISE_MASK={0x5c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_BITWISE_DATA={0x194, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "d38bf90c40cafec98f5f126595603059da7d3f1f5c0fca64acb405d856ee84cc5cc964dd4cd60c46ee286eb59d3a091e560b5be3c441ae3f514417a54d9e182a70b0396216e232c94b55e709f2f599c7d1e99e001ac6d9f90c20b32fde563920fd0367c53ba7256d4d831410c87e6ab719288b6b362859c8c5cc087f958a6d27039ffd50cc680f51859685a9d601f4a1b1d655588c85ec2b6d3d72cdc563870a805d5ae044b7c9dd8dda3c6dd275f423aef446b800dfe56b46a00a3c9fe8080d678a66918b1d403684ae72976692f61ec75ad999d9c7"}, @NFTA_DATA_VALUE={0xb2, 0x1, "04d064978e64ea210d0fb4511ccb0d1ff1a9439af9c5b971c9365a3314722bf3cb61bc83b4f63ce2f12526b84aa3793299715c99e23a6cb7e28f21b0585fc11327531ab49a9650b77d84905069545f33880d80f8ba3ada9dde221bfd8638657c5cf0e182fdfa14bf0d6898bd91470b11023ddd5d1ce9486bfb2c60656f8e184f65efa56deb691577321cb62708866128d6661d9b902a80ca967c601fc600605b849d8b0a38657e5e5b632f36f1b4"}]}, @NFTA_BITWISE_MASK={0x18c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x96, 0x1, "b2fe8712ef6a3da380df84083899a071632b179a3c4f740f9926a49800b63c6d04452eba9c122f8627f620f0648bac9b2a83e20cca4ea32d72d110c8c529cb1e7349aa285aff5b1a48fd016097c6e8d2bdcfe79f77ee1b5a4aac8be13f10e8d2d0138d415c14357acafcfb91b1d444224c8ec0d66d2c6c1f97cf13724b758a85f003c57ef6c20013f18134491b7d652c3ac3"}, @NFTA_DATA_VALUE={0x58, 0x1, "a08c51c439d3457cc330d60917d282e4fb23234dfb66f483a18b529c4568759a4567692ca34f831b55d2618087a51ebf4a14b0e815f58935f9f5efc582f3adaf954880eb2a887187fc8162db0d5fb7165b327a64"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "08597889305185124114177ac47c49dcf9f95d323d47b16da738b3674a5c37374d6c2dcb48ba24a8ffc6f2e3937192b2ceacdaaef0df0f497bcfc2d5f5f348af1549e32e9a9ad4b0c616f6342ec4ce41ad04d65c0feaaed7b5f0536ebfe93d251245b47ee1552ce93c1f549f9cada0677dcae6aa6eeeabefd76a"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xb8}, @NFTA_BITWISE_MASK={0x10dc, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}}}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWSETELEM={0x47c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x400, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x3e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x3d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf5, 0x1, "a5c083f78f70d5c1bae730ed6aea3f963ebe1dd42333e9d15aa2149cb7b9100897072bfbd143e6a5e55fc9c96a97c16b78142a7a84ad6b2da7527185e3f2feb9586af33c4520beb947a285896701d0c18957c914dfc27675fe6a7b8b0c9a73fe6ea9887b9a62c72ec8885df96744af0318b9ac6304f8189b812dfdc18622b339bec8c094414eaac19b12a61938744e8e2a3a59b518acd08c01dc3be5b81129148500bfaef8bc45ad22ab7999dbbfd24fdb28ffb4912a8989bb1432548c83ce537b8fd54253f0cd5d0d0f9770b321264531933320d04ec9571cfbe2714b41ac0c6bd88c380a445313fa441047289ecdcae4"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "8ca4f20892266ae4562f0df9a57d8b4fb0487a3b615736f5261011e9bcb3426869e1b390bf41d623e486a060e6ada2a7de555414faab2b6df6de160b3205dd2fa78c9057497de1f54c91f9a74cb3c02c96aaa08eabc436872626859b0897365acb9ca49537a9e85378b125e10e3b6777dc3c5e623ea2e217da7136994378cfb62461c8a389839014508aef4a8a828b6cb22737659da8ae1769fa15f12f18f0dc4a509d"}, @NFTA_DATA_VALUE={0x54, 0x1, "d66d8b36c7f12277610988abde348ce947c35f473d02444ac3f5c64cb117d9bb2b671f879e65ec0b23f5751c5e554161fe9a1c3ddd8cb5a27a522c4f293be2d98398bbd544884e1b8992547e62430e07"}, @NFTA_DATA_VALUE={0x2f, 0x1, "e3e615e70a91e6c09d03c5380074482fd9cdc7fea8213ef7f7e5336bf2b2b6a6a0d4b00829341e9ce317d2"}, @NFTA_DATA_VALUE={0x96, 0x1, "4491e16821e9ca5fdff8b8f4ec697bf6236e2b9768eb79887a057586be542c22603bc0b0289846391247746bf38e5fcc986f37d899f01849826b36cdc3a764003efe3994d0bb1563e2e7c7702b0a90ea749d81027901df2fff63c1eaa64d4360506e42c21361ead94c53111307cafca0e7afb8ae4fc8de1ec3866cd9fb1e4791ac7a62213310af97024783e1be1d3f9aff75"}, @NFTA_DATA_VALUE={0x18, 0x1, "43f753882e0cbca389f6bd09819e47bb97174aff"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2018}, 0x1, 0x0, 0x0, 0x8040}, 0x40881) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000004000)={0xf, 0x36, 0x8, 0x9, 0x3, 0x9, 0x4, 0x111}) bpf$MAP_CREATE(0x0, &(0x7f0000004040)=@base={0x4, 0x5, 0x38c23919, 0x6, 0x803, r9, 0x2, '\x00', 0x0, r0, 0x4, 0x5, 0x5}, 0x50) 651.350915ms ago: executing program 1 (id=4850): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2000000, 0xd50, 0xd50, &(0x7f0000000140)="fef351f9675e49f6b11f421a5b5cd58c9a4edd15f91221692fca7d6fff7ba24f119415fde0cdfa5352f67278d07321ccffd485e1a41e302fc90f7d1c9624e6ced49a134460f194d79c9640737f718228b75d08d7efcf32f9457c4e3e6de292f676c04aa272e7e39b69c1ba56f9dd61000000000000", 0x0, 0x80, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) 645.84315ms ago: executing program 0 (id=4851): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@none, "054983187baac57b0b030922769db416", 0x1}}}, 0x1a) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x57}, "c4f5fdd4a66c55698603a5607acafe42ccfec7609e559c6ca584541fc68ed0672bb5c53f9ab21154b87aabc08a543ae622934f3464d54eeaa1aa718500a76d8a3f1b90bb55dae908446c7fb29a0f0c25c7178601a39efd"}, 0x5b) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x41c, 0x1, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0xb8, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT={0x13c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}]}]}, @CTA_EXPECT_NAT={0xc0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0x41c}}, 0x20000000) unshare(0x880) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r1 = openat$ppp(0xffffff9c, &(0x7f0000000600), 0xa08041, 0x0) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000640)=0xad9) r2 = openat$tun(0xffffff9c, &(0x7f0000000680), 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000006c0)={'pimreg1\x00', 0x6000}) r3 = accept4(r0, &(0x7f0000000700)=@qipcrtr, &(0x7f0000000780)=0x80, 0x800) sendmsg$kcm(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000007c0)="f099f8bbe29d10479c5d7d80e6f5abdeddb6344d7887703dd84f481bb669b09bbc69ce2b1e90590f3455421b0805828af3cbfe4febcd0c24160bca0f2231ca7f37e2de4b52643aedbbf059b4d27aa925525c68a4cb709191b923", 0x5a}, {&(0x7f0000000840)="8198", 0x2}, {&(0x7f0000000880)="ec3573628edb7042bd2f72be73f5c8bee44346c38d2cfea8fd795fcd58b5e4113b0c1fe3fca18db7b8ac7ce5dcd917bed270fb5c23b5d599f970eace6781423e0d679c301e52c1efc4794e86bea4b90b361685dd95055930c0b4e0ee816de94a875dcf8f0c", 0x65}, {&(0x7f0000000900)="a0ecb6661113004e681b91b07433c3bd17f9df3146629333ae8c072b0d7f48276dd2f15b59a0871ead48f1d0", 0x2c}, {&(0x7f0000000940)="5f7fe2a2d86dbe88168713b851560d6013a7181cae8793647a97a4216aa8e49d9f816f3bc33baf22c0b4f72c42afb0b84e6c3f4983a62bbce14131e6fccb3f6ff8e222bf61ff80a889f8562a114093937c4d7aad0bc19bfd66456b44f984a97171a5e0312a16b60cf065f60fbb35a5d03638cff7c47fc1438dc24996f8995e3a243fbf9730f3f479b906cd6acfa3f416d712d0c4eb1161a977495f2e4625e6ed3d9a08a13a03f96ae41fb704e4a5570c2db0be3964a1014027af3ab059712d6478e7ea5e0c840e976711f7eef54a22f97f49d93a2b912f56c4098ea1c05aa576f4ce84702bc25e81d900cb85ec8acda74aceab", 0xf3}, {&(0x7f0000000a40)="e28216771881c956bbc06c1d1a413f941814d59134a10c14ee232dff6bc4ddadb497038647156d248f145e78d49a151bb518244adead2aab0d0fe9a9bee51dcee10f70114bef8232f82fdb8cbb4a4d7b203c67ef478fa40904bd899157af5778b7b3c37e4553156b34add3d9a94baf66b234f521280954402106eff18bd6dc08f46d403dde7d7ff80df51852ee39a85f3b2a12b9e0daef08cdb4", 0x9a}, {&(0x7f0000000b00)="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", 0x1000}], 0x7, &(0x7f0000001b40)=[{0xc8, 0x4, 0x2, "ecc72683a94f3d4f86ecafc99de1af613b69ce4343ebe19be3840f037db5b04ecd5e8d416125dc9817dc8619a30b94bead9cdad1b748509d5a46587f6faa141f5276898c11342c7e1d33476dad569e8825e35529cc5c121f251ad63d2d7319aa54d15d1a312bdb92d1363353268fa179af323304991bf5862ec6ad4ce680a712a2c32275cf1f156f6afde55750e7e4cbac1faba2afc49a80ddad6d6e32117140e0372d16cbc64507e00c5c17a8cf1ebcc475a919d360339b51"}, {0xe8, 0x116, 0x3, "9e51154e8456182c82ee2353c3d8bfa974a655c4e99786dc73e58c933ffaf7c81707ab8e97cf8d594503c9ef103d5dbbf75b8b55b2e38434663e81a115c0eb5bfe993dce840d4d7bc77650626232e3b6fecc95d9790d49c1232158ef8d12c1caa4b264691d6e4b3a6390caf9cfdcf85077e4c26f9b444282487cb3edf205ad222296ba35a5ba4a239a25a675730b16da2a27ede1970a2b81d8ce8f7f4bd73340dc68a0b84c3b14a9eda37a8eedc7af6594d32cadc8002555df619416e9c1bd5e02a0607e754dacc3b0aa0c1a4c8e2e110ed781fafa24a7189626"}, {0xe0, 0x0, 0x9, "ba0887e9db3efd6a727fd92a5d726eb29838d41655dd04fc3f234874429e23eeb2c8ffac8a30d4e22e20a8ee5c5b897f353cca9ca8a3b55697620475b359a184b4711ea07fcfebdcbb031e0f01e0cb246c1bf2816e9b0fa234c9d8f9f449abdcf1d62fac3b4b15ba52161c688e76b49da13dc316a08047abb52fb2706e3e2968f9827ffc34f27691fa7fe10c2af18151f3afb955976b658d34ae05195677512f09ca2d5076cdf820eab9e75e3f343736fda038214a5fadd8e960613b319a847a653d6784b9f41fba7df1bbb5a57784c7493c9bd0"}], 0x290}, 0x804) r4 = openat$dsp1(0xffffff9c, &(0x7f0000001e40), 0x880, 0x0) write$dsp(r4, &(0x7f0000001e80)="a52b335bbf2c6cc317bb22430400172d6b14c5ecc4ca79021b77a1dce7d92da1c0186b71841dd3ab8877a4998e2a090a49a903939eb8d27aa747373fe438f6c559d616558a40c26c10d22aa895a4a7c88200f49d3b620f24205608651f354fcb0dee01fc4efbe4563c17ac926a73fcffde8544dfc1f18d4da20e1c0c0f8d27497b197d2c977433b5432dc8caeb2594dc42226f6afe78087219e3e57e2ce31906d8a8d703253a79d8d441f82ce08a7e46afdc6f2f7d45ec62d44ed3", 0xbb) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001f40)={{0x0, 0x7fffffffffffffff, 0x283, 0x9, 0x7a739591, 0x3, 0xb977, 0x1ff, 0xb5, 0xd, 0x1000, 0x4, 0x27bea299, 0x1, 0x97e}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001fc0)={r5, 0x3}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000002fc0)) r6 = dup(r1) recvfrom$inet6(r6, &(0x7f0000003000)=""/162, 0xa2, 0x40000120, 0x0, 0x0) syz_emit_vhci(&(0x7f00000030c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xeb}, "c6fdcfd40f39b27a50fbab4d3f639010ccadfd06b6c23c80f87906cd03edbbcbba689af04a8398d5c485930743497ab9a0666548d20cece2bf7fa4f8553ee0ac802ac4b3b568e8fd9a975e90dd69094a6fdb6eb2c8994e07e3bc8b2dedbd01831a99609cd3db7fa4bc6f10f78a172e6e019b1d98eabd4252703cdc9fa13cfccceefcde53559d7fd520f0a665c14797a5dff52472b8b703838d183b39326d681d22bc494d8c1fc537cefd604627c64724c8bf297e31055f59715010af5cbe3a74d6d5fc950cfcb26e5914ffe96d0d161ff0f5d89797162ccebc663f4fdc9ae6aca062aeacbabd3363a605eb"}, 0xef) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f00000031c0)=0x1) fsetxattr(r0, &(0x7f0000003200)=@random={'trusted.', '/dev/ppp\x00'}, &(0x7f0000003240)='/dev/dsp1\x00', 0xa, 0x1) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc04c5611, &(0x7f0000003300)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x100000, 0x40, {0x77359400}, {0x2, 0x8, 0xbb, 0x1, 0x4, 0x2, "fee3017a"}, 0x7fff, 0x1, {&(0x7f0000003280)=[{0x8, 0x8, {0xce}, 0x1}, {0x101, 0x2, {0x2}, 0x4}]}, 0x6, 0x0, r2}) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0186405, &(0x7f0000003380)={0x0, 0x1ff, {0xffffffffffffffff}, {0xee00}, 0x8, 0x8}) sched_setscheduler(r7, 0x1, &(0x7f00000033c0)=0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000003400)={0x8, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @jumbo={0xc2, 0x4, 0x3c}]}, 0x18) msgget$private(0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003440)) 586.016653ms ago: executing program 1 (id=4852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/143, &(0x7f0000000000)=0x8f) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="c01803001d02040009053582c120c43e370248078000f01700d1bd7fb56f6e26e014ea67a0d29fa1d5faa09fc6396dac85c0bf6b00004ea64ccade00000000000000000000000020", 0x48}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000010) 573.718118ms ago: executing program 0 (id=4853): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5f720800001600000000", @ANYRES16=r2, @ANYBLOB="010025bd7000000000000100000008000800e0000001080007000a0101010500010000000000080002000000000014000600fc010000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 567.837317ms ago: executing program 2 (id=4854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r2, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r2, 0x0) 530.22122ms ago: executing program 1 (id=4855): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x11e, 0x82, 0x0, &(0x7f0000000380)=0xfffffffffffffd61) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) socket(0x10, 0x400000000080803, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f0000000100)={0x1, 0x4}, 0x0) landlock_restrict_self(r3, 0x0) ioctl$I2C_SLAVE(0xffffffffffffffff, 0x703, 0x3b0) landlock_restrict_self(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x31) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1b, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fcffffff000000000600000018110000", @ANYRES32=0x1, @ANYBLOB="0100000000000000b702000014000000b70300000000f6ea285f179bd8270b00bf7502f4252a7545ea09010000004000950000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000245906001000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018390000050000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x503, 0x0, &(0x7f0000000180), 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x0, 0x5, 0xf, 0x11}, {0x1, 0x1, 0xc, 0xa}, {0x4, 0x4, 0xe, 0xa}, {0x5, 0x3, 0xd, 0x8}], 0x10, 0x1}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x48) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 525.152982ms ago: executing program 0 (id=4856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = io_uring_setup(0x1946, &(0x7f0000000440)={0x0, 0xa94e, 0x2, 0x0, 0x1ea, 0x0, r1}) r3 = socket$inet6(0xa, 0x11, 0x7) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000003940)=[{{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000dc0)="c322c2f975b44b420c0b24717b22778c82d4b63c5506f3ad3802e4ac722974f886f486f0ee10a96f23fb5c2f6da572f9a4107784a2cd9f463e98d054e8078019b56990e8bcf7daa7b2b235df945e5b5c81d568acab8caa6d724c4e78b6ee57d878432f2fd1945cd39a563a5927300099e5c0965f73554d2f743b0b5aec9085876e4a0e253740d6a95eb2503593cb0a695405cd8fe2ec4f644ad27f77134bd29584456606a56d8757bf232cfbae831f6e494d5d6c6821944efd34badfe939c1b83f9d6faa1783600abeede93d0157aa400570af94ff8b95d985405d38b713c4b960cbf47ddb505abad595316a0bc8a0c4edcd0ca466e2a5874c6323c80d1dc058ffcbed7eaa8765bc6c9afac992d70c7c3d792af1ecf572356c7f43aba2c32604e75fdccc432b069881b53fa60d074015e6bb1e5e3144ac457c830b17acf29b8ba39999299db1f70461573730e463ddc402d966321b6f0109b4051f5f931ed3f473b6a92ab9ab01f6475fef9480fd14c00da2a680d7cc99f667e70a5fdaa54933ca90d8900dc5f29b9d6cdb745160496978ea3879b340c92b75bc2936a8326790abf8575582ec81638f36f2bf9b55e65cdb82bb5da0e20dc2124d1510d5eefe1fd4b8257fc5afafc0ad48f2c5e28186cf17a3f8af08d763481bfe9233215d9289209af0ac8250086038c2d65e2eceb9f3438b5ef36e8d99eaff668e117543d2819ddb352fe02bcc4e6f51f56ac9a86cf8f97172a137bcec4a14ec60147cf6a8d5c8b79dd87203ac7e765d10c98bc3f06302213bd3c9649246b1cfeacf6a42549e855a159cdcec1ea0ab472eb17088cbe16876ac727ef402fb71351cf8245111a0e6c5d3dbe666b20e15d9779a810aaa56c929f2ff30ac5939f82c0b61bdf5f59ab593939591813bbdf2c41678054c9fed4342157a5ead0c30336dc0c37bd179ffd208d3f5708ee87cddaa9bbe95038fe96613a402e12d59f4afdeafa8adf22e5fa00bb28cf1fdb5a8194da63c40d587e4df6a1799d512de24fbb8a2de556808f51a26c92fefdf80c1fb6c3326ff2bc6e78fee29d398d2b45232b83ae9a901643e38a9920361f5e4590d2c623d9594b21bcffb489e51747ac9832930dfa38a60ac95681c8a2598c7aa38fe2a626c2636ae45784c9d6307dd31bfd395c7dd4f7d512ff79e1623231e67dbe239f6980b06416b92fe7b7e81746a04ce0f3bcf31e0caac56f456f9e3b06f956cfeafcf31cd4f1a11b6c0d0589c1e8d5984195ea70e92b6a5f6362a3744daef38d21969fd0adc56d4f2c4d93dc6b841fddbc26aa1d74286dd6bb22c55b16d876b9ea52659967cd8383aee6472989d82fd0a2fdc69f7029f0f3e5daee323a1549f722fa5c1b33b01478c8a588bf31c8f23ac80e28a095275b7fb245ec7ae7c90d62df33f9fd180df529f7d6fb90af67e24a3db5867bc72dfe744acbf1a3644892477d53f905e40c1f40632e56eb8f7a6233c372b93b486d4f57b0d4e0135271276ee1360295978508d18246188e1e2a8ca324bbfffb057483524cfed6c6815f39532c4959743c0dd8deb0da3bd0e1ece6af4ae396a8da41da1c2dea74bd0e3bbfa38d9e33c29da3c1ff82c12e62dc55cf6817ba578069606b8e928c37cd7127b9e220fdd4f0a11b4f179bf9abc7df5a9da083d5cbd9c90376b70ceb1f8de71ff6fae4b4b368240b93250e9a62e5123a3a463c3f638f97d42ac1421551681ad76f9988b3987bfc12c920e6f0a071d1ccd5f0030259b5c69cf94dc1d0b9348e5e0a59cb2cc81774c948a3259d16bf7e1ea519aa9c5b99ea489b348100c5835e7a119e338dee850228684e926d9190fe52238cc25c86deffe4b7480f72f9b16d1444c5f7d0db37893f1eb8e50202d2531e0b454447b681f749e19bd0703e24adc4fdbf1327786e640457209bda1a2bf9ace2d7fdcc5fad57c696f914c0388171c4a31a78943ec855d9f654013532114530decd9dc6344e8bf4258aa1dc4da9166c38658eea2dc274b0e53554d30a1ad96e61165005f5aa1390952079de2b92459d8e2d1a04963ff072335e6ef502662e2400fab7e7c2b012f96ad8949cc579de690a25433f5c487148ef86ce57af1350f06fa13f732481a756722c838a64fe20c54a079692e3078b33dc258b65bd24c89e3bb680653a4c4fe2aff3d5eaf83d97f4d89f6c1025b3577ddc4a2ac83a4f5b7e5ab48c0a1d6eaef31c4e29809fcba6384956872e67ca8f045d7fed98223b7a5f5f1cd42071605ee4bec10ed18cea9b6080da894e44de9ffc63e972dc10dd8c801f2b7499933f8c6278a1fc8d8d8e648bf4503be6c233a967070a177babc7fbd3f8668d21df7725a521a738e15894827c9fbff3906bdbc394d5b7d0ba5a5bc3a31f6d218ed53336f81332343b998b6a12b18d5fa97a21a7ec7f460ab5af0d8f3c3cd910b0ad7071da9e5148d3a20091edc79e98fbaa6063d4f8fd99c30fa1cfadd111dfaacfc5b8ecc782130615104b0ad290af0473d5ace67e0e163f524458be75cded527cac0af1fad900aae39444cf99207b33cd6e57d307ae8e48d00a77c24b14dedfafcd87724f1e6f7c304526bb07e368247619716823f34ec9f261988c385c58d0d43e5788522f50a6dcb09984b91a39ac37e6399797d45e25810b09408a2b66e4d83f173b20f4ea385f6f57ae2e42a9532e9557e4a11b0f8e2e7bd09808c6acb2b5c22850af168d112d18ec30a9f037586968b6345e06b94bb3bba28dc1e407ba225315b530a6380eeef820b1522284a9ed49379e28bf1c5e5783385ceaaf49bf46c1f84ee59406333720d23246b56d5f79034a782e9f968af4f74160ab5554cd3a3654996f9ac9d76c160e08035ffbfd6d3486ae222c552d10fe8eac212296a4ae87763216e7dc41d1a7e1d6eb8fc273826d2e4e5059de030111c845ba41084df3d067c2abac4b53b2be7371e79e442b18210677091d660e9f8145966c37569cb62d6fe394b78da3b81336d293ceff4bd85f6233addd850ddb955ec54b398f73e887d8d98b6dbf566318ffd1dfe64b9ca83fbce3754bbd2487aaedb252ba4cc6b1cd987432ca9baf59d4a429fe8fe5147d44d685c09caebf4ca7683b4d8e10b8c8b84d74f56ce836265f1c23685b224c88b24f899ea38248ec7b783fdcc6cc17d969abb030153c99dccc1f3cad26961bf2e038ff58fd0fb1fb22f4ca98d3d74cd69ea86c1f6770ef1f7763e120aef5b0a90dcb3a41305514332fb92d6534dec120a43ca9d05657feb88b11302980dc00d64673e58811ad8b5f50d42ea00c307fe40447bc9f993d7013a2ff8fe4433ca2ae57b550b0456f4af5825c4483c73913e0d10dcdf92c138b2eda9c18370b3bca626303ddf1bae6dff800d1aca071116be7e3515d1cbe8868921054e7e5b67d5cd2305ad07819a69f50daeb4ae6aec5eb5a3fb1fbf1d4c7ed79ae55f595badec2d02335bc7771949e00e250ec864760c942d4cd28a521437b6fe62c2155772a58aef24fd549539279313f9f965edf300a8bafed707e88dbd1b8441996828629eaad315e5cdb4fa36b05bd5417f359d94bee1b40e805d61e2ccad763aebad03c40a58cd30672d8a3349ab20525c538691813ceb2fbe0794f341c53e11b4ff9decc0a68425558eca4bf81f0d80bef733022d2ce9559798e44d4ac21832ad41d5ba9833e7c765c362422775503aae5391076e902e124eb7a1ccb61038a6fa48fb4a648777f2ffa5e493489ad76bd3acdbfea51d8a51ac5cdfcb887d9e7cd3c72f4a3d90621a1b6eab1897a6a661f38fe04712d3a03067cb36d694dc45cd2d93ac9ee0c60a6bb1967e3677ebf34b23cfc5794e04016da63f5255cb147c4f4ab75933918b5087b063a2f1f00beab676ad4fb02d077cbdb3308aa059231116f8c9a6bd83a388362cc3bad537c95f66c40df4cdbb835b5812766eefd3fb9e742a7e87e5680b4a11174a4856ad43312b12cdb98f4f8e301c8735b0ed983b6d56d70f784f1da6348419f62b23bbf8483cde20c01b825b628727a9586717b912d8522759f23131bcdee5689404007a0ec2c0ebb5a22482b9a9bddcd2533a9db363459eaf9c974a44d3255409e5feb2a20ef948350e55a85115f86524d01bf9aeda04e16de8620c5ce2d2c63494c195bf897c96ce2e8a810c2c14af46ad52c79ea4a5275a0b2c8e29ab34bec0e52eb9a18e09a125ebabf1a3e9fe73ce302320ac76bcd78b6b9f7e42e08855ad51d6d92e46575cce17b1c7a1215298ea2c12f55a6912dd821cd433b5843e4e9980ad07d7c081e5285c617ec34853784191701d28b8c272f922d0eedf22d02bc04ffef90a66d9a08a1b12b5ded5632b82ff540f0546838472437e748c84b2c05c44019135d243cb0f20091b7d3c6ca7b347a7fc92b16440be6bef98412f3c21df09c2ecfb910defbc18d4e53f3c3c464b61b276b4fa70c4afbffbf1b320d6480f1bfe5af010b6cb2f31d8827a02daba484aaa3dc3570e9634f6b5d9cea6a4c2b01def29796dd237e39b154c62f47bb7147f56dac86dca52516761714871ef76f26d23a3024df8372ec89b5ba07862d68a77f6665f9bd605ec8a7222e4a28ee30617cafb8c802398d5318929d0ee3c672135cf7455010d86a60ba814e1bc8ffeb182d2b8564df8f22495f074631d5074252e5df3d405542e8309226bea74dfd1afb97d63694b8788ec4826d15c866222808b637a48541d32d31ca7623c8f38051d720b3fc67cf4d2359f4afb3240b53d60b56712a82e9cea8992c39252a9ff277deb10066357be590e79ef4af153a6ab11b2056061250f95d524241ff75787859df8a4e3a1c7c72953fe4e2b0e3a568735a8576cb1c81f2f1a4cd70c0794f806dd0343f379a277ceb2b7511761f54ffc2ac7d60101cb942c2a15ccd12b475c0fbb14f9659c895880f576ea1b1a064ec1ca2c0ad70747eba8d3c513df2ec6cc6cbb8929997559e30b144132c437dc07b3b3221078d691629180383de60ca3b571fce3cb8ffdd298dcb5308db440f66cd5ab0449705dfc7453fe51241a2098db105a53e7fe81dea679192efbc555e8e7ae02d2da2ada262213f48bc768b1e4db1074566492c19fb0eb4a85e348848e2723312f6865a9d95976ef0ad2ff7f718e4ebe0ebd3fd32913c446ea1186dba62241b8ed0939bf26c9b87bde68ce6dc17f66fa10ac0fc63ac69ab1e8d902f45a830a84f107aa2a244c396cd273dab0c1fbb3cb36398d3ff4932f4f24685449743bac4d84ffd5a4dee33539a14f93479d172f05ecb4d2930fbb5044fffb0c0e678ea7706e8bae5f0c4d073ff1689d3cf14e5dddc887fbe7be121bd9ab488de2088014b666c6edf083ef1702c91a006adb9fb7d0a34b89e5a8c8462c9684a0db875acaf153bd94fcc825ea4416a2d6252f6c5e43cea74bbe5534a21b99adc492836f658751ba479a57e392038c51df67e4cceec5ccce67aafdbef8447db59757ee4cfd4543cbba94ce2657f7f299c405148cd9a503e8bfb3a2cc7e0cdf7f361ccfe6b47c1b019244275796ce6856fcfbba78d1fa3650728547aeb600a1b0c454cfe300f15e8af463e46d9ab6584b16912d5fa07c8f31ce261ef682d9b6cda51a65ff5c693249e1bbdbde1dc213b6bafe489bb8985e8b632c6237f1af29eb40e6ed4829e10a4d15f7a3a49075681ff26496ec2ba015512d762736a1068e1c76d892788306353538c307ed2d67b0b84f21da0f5e18f9593f8f6752a2ce54e17bf6bad8c97fa7a54d557ad4f35bf968afe7389716deebb8591d54481a612e32bcdc73", 0x1000}, {&(0x7f0000001ec0)="4da6af92aafd07682e79db8b5fef2beeb1ea30a07d63f7d4365089bc6f978010d545a4f80d8f3f308264c13a0d6048e011d2c98c2dabdc8784a6d9ba71e937ddef7446bb28f5cad030f99fcff7df4008641a8270eba070c5c92dabe5e2697aa4d4602b98a85aa241c70a62a930e0575756f14b9414d0b71f99a1cfa4b95091d0e5f5daa78095e58dabb64c16a9b4bd6a26721c0acea02407d49a9261218a53a6a1974a89f61ab3d017f75801655343398d19144fbe3e55794f6a134ce7a0711ca8bf7b52c260a2737968cd38d34643ba3fc2752d57373c52d00502c45d875ce317cffd1e739d8c431ee728180ee9ddb63379395d10cb19f35606761775e008846a9918666b5c880bc9cb6eae2ad1ceff12498e6da5c5d7b3b1bc5be40b74a591b49edab4909565c1ee37bb655c2668235c5f2b4cc153bcd5b422404995d7519b9da5cf92b117eff22a5acc0927cf2c06853a339bf0ca10647df58c223e5c6791c2acb4da547ea4fd16a89590b1d12e46723c0b2957a09f20f75f6150f52e259b2210851abb6bc8a9b85ea6e33092f595b9a4a87c74ffa1c50ce2d21bfc5e30d96cb9b74361656f8d5ed0954dd9f38489f7141d9137ac1b5580dc4c28e56645a1c4827df9bc58f4aec465fc41ac881d014d76e69a49443959401f83323730af7603217d510c75f950098b034a5f161fbb6e7bfc6056644cb52e5fcd156138cae8044971dd01a1418112486a0d03a0801dd6970f3f9c0c6216283fa40026aed704354b0c965ad32d876c01dd36f36a8c9eeaf42e41073264baa26a2d753d26a610c8a9b4a621b4aeb53e640a78e0acb63c54f7c323dacc781d25e6373ffa5e5b7aad34cddd99f8333fdd5980eb11694b197bf34c323e4c52da4ea065042831e1048c163418b896d02285b9996fb13d0e366eec9cb2c697f34c4f921917cd6870e40aff60d0713ecfd2bfacb1c9fb3d6695f4ef29a3e4d22a38bb0ab578b6539759ea22adc5ecdaeee25fe2857d083dbd9b93101791c974778d4f9309b5913d5803f7281e662f2fd1e50f8c362de6f59bd6e91f2c4cf1317cceea9bec24d4b2bcc153b904f27b093564ad87603369a471580118992f1b571a90ec269551ae75bd28dd51ead2a03f7fdc7ff67878476a6817c6aa7964cd9725fe8c6ec53bbe504da46ee713a1df937682a1ca823c5e1bdcda890207c5723ba805bcb47b7f58e93020d66c5d2e8062d841e993956111c95d6ec33ba173a270abe4fb393d8c5fb7fa00b756a8ddc7a40d41110905c12b90553e64b863f56b746c8545c5022f4602d9acdc3d7e4ecab68a1da71b9c40e7fa6ff51f3d9b509b82a24dc74ccff02663cf2841a8ca7e2189d041e1509a6649e59a0995f54b04658cfae641c1337bac2ed8dfab182ad3fd911d30ecf5773a4887d311a7a0a49265d1f4dec8e2a8338b17cf078fa0638eb261beda9e7fe8c517593cb3d5704b3c9f965eb541fab04699ae4635db7e1256880f06def5e86741dacc770b9ec3ec3317d999c0fc0328afa8f6e16c3944fb85d9c7e72e8990b92451de0cbc1f6a4869052b49a4e16fe0e4742903e123fbdf0866b3bcbb4d26c27f20d80607b8e6acfa3be27901818e94bb0fe9ce92b9d0d1fc47cff818e5d97031f6eb56e5f4e597af102b5eafab3f7e43e7d1a11ee7185e85aa192aaae94f3de3dbfc3f2da39f61581b43d4af04de5b969f42741c2aed1a3448cfc280a74837e15a717c4b1c8edb08ca74631ee14655c2982be92620c90d039b36ae7f9fdb30e4b9ba6547cc48cbf16af0de6dc2050d44a3b96cdd10077116d135a3b48b79aca371f1adc3f7b9434761dc997ae553f89f19afb326d6833537178e78be98c778b9835649d945f310dbcaff9d5572ff9ef97f33cf6e33bd291b62e9bfa84c32300fa543ccca8b6591edb65695d1ca76b58ed70e9f5f75245cc3723b90f62c42a24989e68204fabc2bfa608143a8e1e27871f5de01e359a2b94c39bbbff9f7fa06db267800943d33359e936ccd8487aa142f82448fc4cc0787764286aeff7a2e7cdc5ec4ab2a20eeded0c0521ee65f65cf95cc0c1d169900cee1bbf385be4299406c60fcb03858cc60bda5f4b3bebae5d49798557234a1c46ca2acd7b67527e7088053ee694ede83bf787707bbf344a20b77e7926741844a9695a7f50e86885e46f53e12ae8c1aab580c9974836b005b6ad207401aef6cc13765d0311e7bca7fba4184b3b9491c21889bc31174ba7fcc4224e85c36f5f270c60d6de72f894be939e6805245760ed7508fec57c7878af566bc27744a5c6beff3434e75313451b23ccde714c275cfc061fc59d1f1d2f1dd893cf8d01b5d830c12b309666039914924523d6ce9a0a745d6d026d27bbbfc1faaaed108e439d938b80f667a9b571541ce660d8f00af2e15718da28b2b906e5b12f00661a5cf26fff744847d0e6c0c22e5f06ed313d6fd45fb0ac335f4064cd65550562e8f6a0929c8a78d9d0d99972b16ca83ef3a661a39737dce0b8761b5a62aef51f40c50673d096992a2b2a5438286e77327bf0ae1e5a3b2d87ba51265e4f5e638b32fd97935e0a1dc5bf52ab3383cc444838c377e47ca01d9344fffc21f42536c6edad913292523d172911396b0b1fbdf4da4033dbd6131fe4c54f28f582ddd9fed30557e7fed21c4900c53013698d7aed5374215ae36541fe8ef16874951557c9b3b98f905f8788ad28f8a9969960d9341aa615093e8ddb2a7bcd2382f42a3850cda1c5dd06038b9e57bc7ee2d2f4ff19ed2709f6a256f65fc4c65cecacfa674adee76d38bd8e3c8338258d311a59cd688669f8b51fa58c6c725ef4f8493dace6fb76c79b69134c5822eeb0152b27cc856c3cc9d3fc85b145b229444ab5a990f13b3076ea1afb6037c0b0290318388b4fd1f2c3f450ecabcb188110b131853f3913e590bb0c75fa55d39e8aca65156e2e9ec87a5daf386959019b00f87cfd519b6b82dfbebe977d88faa77e6caa09641d5bcb85dd2a19c2b8d65d6b6a127988e468f284dd45309260cd3dd51d64e6cf04e794b01d78c879647fb0cae6c09a018c8c4a3044c1307863d63ba96428bd60835e457b981a0bc8afe8d0f56dc8d7e6aca369cd217a055c4e23107bc7216c3f6ca83e8f3ad604d90816d06bd54e957c33cfa3e5f93ad73e497309e170a97b7ba3623be37348832b5b90574355c4d9d6cf2e6eaac9e0404bf2601b63974d7d046b7105eb24f87b807403e2a0bab008384ad909c05564e2fd6afb338d51312682910c2e21ce02e52422f0d795da22289ea5acc452c378a9247ca1e9533f003862607673b9f06ba8b949a6485bf02f6a7857253f5b16d828024a229b0db265252c4541dd2666f68b78260f1601e11baf28b4d2623f6663b343fdd33a9593c889bc04d50710ef1862c85cb1f39c147bc86201f28f380e27868e28b71af44eb314e24a5ff43eace4ded3cd63d25dad896f844e20ef780dea4722e1b1224c007d76ccc0ecd745a34489ea219d5c160ea50b6b126200268e1cf24dd9cd56e3d562c972cfb7e10ec96e8cc5bd4adb8e8695f1452f5ce1cc330ac120544439eddcc6ae1df1654367d947cb7ab7bf83ae57c185ddc21d46d2f1288409d82082c583bfaf222571e30062ac5b42b23148102a5b986151787956ef5c4f685c487e08b033ff81151f958972790505a6cba6e19c6cad2f6de74e0f2303b7f0ec28665d8717ebffe493ff13579c996dc47376e5c36bf6165785b8c7316256c348d628191a19a6eefaa7a66690430f8e5c7ef3ebc718f7c2cfea75c21d6502c89beb4ccdf139e9f6f0ca7cdcd73690ef8fc3b803614c04a05dcd2fb2ed446267de74e24ef7a6fd7ce019b6cca227bcf0094f2c8c5e7a066b35b371b48ad3d6eab75f72797ae5640052a7222d9f469656cd9a983da47f64560f19f835d009e6e0abf8e44fa74406849374c889d64ec36119354997a6b4bd4ab16b3264d1ee9419adc83b5adfc3f0f286009c81b8f6018c20b89c5814192be2e1d957dc3b39eaa4b5bc12c8b9a5c73bc39d6becaf62779b08a39bd3dd9a0abebf73ba6f79c2b4f765b23f3e2f1971189063c263079e942c04ced9210d8f5036d8ee5454883a89f468f7f0d816e9ee972285b776ca268679b4207c024b32a85c8bcf0a79ef39677c2035c232ec0f8b58493394663dc61e4c6ee4473ced5ba2412c302583b50f48db022ac17a68967859f23ae396a968cc8866f476c35a96cfa25f52592d30656baad333d4b044e8260b403cc450cced9c23acaafb86f543576602d1df205525c4bf1de88ee6e0b951aea60358951abedda4547e4681c916c854b582fcc6641d71a5223b714a152d818e2798a0d5a96bd8c5a709ee49ffdb2f036496271aaeab43db5977ac61baed9bfb9ad2d8213ab80fa7ef913a996ebaeaf698b5599ef77082dbef328168aa7ba7fc23f2eb93a7353d6cb6f950970fa4e73325d746c39b8ba87c5c87945cd0bcb175b8bbfec6f0d37d4c35b1082b23bf5b400f9bec96c3098ed2c232293c363ac3bd6c21588ce2f43f1e47d7176eaf992ef93f8742b779e5c6fa74c541ce44d95b86d52b437d204e7d0d4e891094d66ebcdfdfaaf224f8f02c156e9f0d80dcf185ca5a05c8e9604fe3c829c71f9bc94cbaf5e5b60ee1b5cfa6381ee968ecc0df4a48308faeb666e6055472c5fbe022e569af6bd5b635e97d16bc1936bd4e38c683b86e7c5f9efe211d7ae45ec7dfc41b88b731994d2bb9804680251973593f63eb71ba86b3b65135021165e1b550d11f339b158308a82b21a8bb90d3d0e1dd654f8e6b513f3fedbae1ac0128da382d67b669676667cd723b4eeb34f244305af0976d33b258ffb99d17c924f8dfa8760c9f934f008829f0eb8832f84889c1c0fafb1eed6b788bf93aa487765e1606c640f983312680c24f97eba4c07715467810a1bf5d01fa4a460e11cbb95df64f5da5102475297fdba7ba42d6053f51378ec505df558711cc4b8f79e035ea9158c3754e0189647fb812d7bc13fdfbfa0bab54a4f4297a1c3ca7d41c151c5626564863106678561353b5bfb1078f444064869b4f6bda5f6c5faea6058da09ffa17e50868e31ac7998ff459dbf0beb90f1cb7ea16c8f405fa0a0955a3f33b10a078ac86d9ee4399b718dc25e41ff9f4c8961a32cde99e7e28235708c5fd29e765a9f8a5b9f5115827935d5f6013e77272ef55aee5edf2084c11295b00f5e5233c440b7a03fc036adcf7ab0d686140c15a9a8602083a762731c2e2009377c422e1e87cbbe183c4370a6ffc8c1683ca07c6b0727e4d2d861cba28077d04a29e210e14eb6f53c796a3c585c5ee7a7e434dbac70c0f1ac8d063e070af24f678970d5a84e6da15056b321dd4d5da623c126f26d7939732aa32e1e162ac51e603fb155aa994ca4de48b7c3186126ece90ea5e247b3f93e9f591cbd333a222cd0f909fe926d3336b1f06dc84655fcabb742cbe20c7096ac2b2f8d3a109cfe821f5b7de54d85972dffc7ef2f7bfd9bf8dc2dca3fd6157f6cf0a6df2401e0ed18a66e5f5d4eb8b83e239bf54a401907dc4ef33e7259e608c6e286160f715c46ada4462bf4236fade5627773f23f5917fdb260f687c6ba7e6fbce82c7213e3cad1ede52f6123ba9c9ad2dcd7ecf6ce49abc345b9514cf5dcc4a4ce50366e82aee2817bc943fe41838d7a483edda3c6346684994e251691582dc8789ff938f22edb7af6722f620c39ba269d9689de15c3757feb110df2b7fd1f8f270e3ce171f8a61e88a3865ed189d2a63c0b3a42", 0x1000}, {&(0x7f00000005c0)="6b68b005bd2ba3689aae675b68794342a87eed0ad82104fb86f1f01977afde508c23ef1c777ebd902c0a618a8dff4c9bae16ece06f44c477c5c27789bc3e18bfc1fe1b1d9f03cfe6709769b3faf83e5c4aa2902fa35d4685d4760715605ddcfe909bb265a6b86caefbc892bb442a7a5fb657f2dff0aa6c97f78e00ae0eb7f9", 0x7f}, {&(0x7f0000000640)="d71cc0a2101a74a3d71493d5b45631646bfd128f271d54f5839dffd6410bd18c31b9c3c6e77a34b9be5922675ba97e61bb14f0d6507b15ba50c96b4478af21f8a3f7395830e16c9accfff0387644c4d6cc1366ce3198edff256f74e8c9b4ef860c1bd8c32dbd618810b2b8fe1ffbf1c21a3095be75165cd398b43ba93260e2be050e8d85b55baa0708aebabae0f3a94d", 0x90}, {&(0x7f0000000700)="7420e0e204ebc0b8c760ea27dd5a997a9912b0898d30f7246aff45d9fdf9976ae4200ee6df2c3fd7eaa5705cd408595aa8b7ef1af3e08db4815d78ff7354c5b7eca7ae2f275a821421e4286af085d7e29d9be6df", 0x54}, {&(0x7f0000000000)="4f8389acf7999944d2d9ef1e9e6991d91141d632a2823aff50865698c685c8104b0d391961367625a257d010e163d252122ece9084fba3421291fc", 0x3b}], 0x6, &(0x7f0000000800)=[@rights={{0x34, 0x1, 0x1, [r3, r1, r4, r4, r7, r1, r3, r2, r1, r2]}}, @cred={{0x18, 0x1, 0x2, {r5}}}], 0x4c, 0x80}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f00000004c0)}, {&(0x7f0000000900)="bc9d9dd35c1718f7d7b7f84ae34b2cfd2700c69e5b7aab8c25c1a8a6dcf8c3e59ee828a77501b8fe247d1619a2e8fb0fff3738af1862df2422d1cc51beb9ca5208f2ab56ac5a26637b5ea915c3", 0x4d}], 0x2, &(0x7f00000009c0)=[@cred={{0x18, 0x1, 0x2, {r5}}}, @cred={{0x18, 0x1, 0x2, {r5}}}], 0x30, 0x800}}, {{&(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000a80)="1fef77f29939943d78b2618eddd91cca8adc4e9eb47449efb7382a756b5b995053393fc4d56e415e51d777af6dd50e301772a62bfe890187851f7e411939e5f780bb41c74f869b16962df70ae394f252e0e131ed0c2afcb4e1b59d5c931581bc1ec9a0375c716d97d769ac970f376845759ddbc5009de96cf93520dc62161e7feb3f00a7c749fe5e4fecf2ef8e53684b262940fbb9ca2c9c1fa663181fa29e772cd6d82a5b6f0c4c009639a6f77b1be606853264e22c15f38d7847ba5f6d70ccf46a43013cef449731479191", 0xcc}, {&(0x7f0000000b80)="6bbc8952f0e857a590f6bbb64506e822d58067e201dd27255c87e72aa3434803f1b269d71675e8be19deb0597a9f800692f96d6dd830c185d2826ad799e74f320dbf3dd4cf93e6f6ee00bd2897239ed6ed62304180f013de9d342ffd2a86b35e321f7631f9f7073a40e91ccce9b6eebb038723bee2df9a957fd7c085e7875940a6afda22d0cae6c8fd003807e5ed173346e63fc4800a5e5e926a52ad9741fd2475b51f6b6700bbdebbdfdf25adccc760b74adc2ec332a48f9367cbd75e5f7f6c4b37c0b9a58c721b8dd1f7959aac2e36190c475958c9614ad2383af585df80333f2e6b", 0xe3}], 0x2, &(0x7f0000001e00)=[@rights={{0x10, 0x1, 0x1, [r6]}}, @cred={{0x18}}], 0x28, 0xc801}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002ec0)="792e4e333dd6fe6aac7f4f5b7f9b06e262e7b4ba23d9dd44e8833027019e3c52474b9bfdc45e9a91546f8fa6f0565c45cdf759aaaf1bfac41e3f295d102317d977d652c3a179c67057a65af62c13bf3bdc8982cefde19d779557982dc0c1c86c7c5d20ba91598173265f9626ccbb0a5e2440b062c6e4bf0ae2bd2235de78f5534d16ca94c718f2db4d78aef5e440d642192f93578e9383daf8772af1072c4c342b14b3e60cf19744", 0xa8}, {&(0x7f0000001e40)="7988092c2889b2", 0x7}, {&(0x7f0000002f80)='x', 0x1}, {&(0x7f0000002fc0)="17fa3e356583c6162c87d697899b603c5108cfa2867bcdd39432953579cd2656e89079c4d0b3997b2371143178b9538be6d58e44d869f85f24cf734a7d5afb846f312acd5cbf0580864b2b478a71465c391b7f771510c6f57ac487d935521a50b30582c061c81cd6f060fb7482474d11dced74293e8e80ea79932c8e44a77efc", 0x80}, {&(0x7f0000003040)="97d8ae02d5c3b310f0b5031c999fa60c5eee4a3c35ffbd7c66e5c2ca610910320da1fb7e54ba39dc489d61a30a8ec50606f0834e3effc8f75378a8b380e59d6af560a1014c24fdd9f9e98395f845ee64b6ce8cd3f18246c8be4ecc500e6deee0eedb471082034b5f4144823fdd809be8d3e6c7e2b303d538cd944bd8eb26c7294952f0f42589eac1aeef9063e56756bfbe3fc3e258807f356dd886bfd6f1707336a3425989b274584301412ddda0c5be3cf675422de2ee497290f7259fc2a78f34d14a8586301b640ef6ac911490b68a8297be09d7b9c141b1260aa4858ba44589", 0xe1}, {&(0x7f0000003140)="8fde182e1c9745c60deeb2d5986f70f259ca44769ea98d41e39f79fd94233e62646bd38233217cf086e6e39cd670bd15a69ef21edf979b106140ec60ad1897c36b8432fa53654f6e49b0658fce13835e6509755cb526e149273ab6c6a44243ca9ad9fc8c55ed09fd23108c8ec052a56ff9a5cfadf4f4ada1d422a3ff87cda703a94345e74285be23f768631af3ae17249905d24941debb179676ad5ba99c53433fd4bd66924e087137814c94e454b11435d6ebb1a66dfa7321089c3437b49311f92314474e5fb4d43884e755b4", 0xcd}, {&(0x7f0000003240)="891c0a02ecc7db39a50792cceb882ba057e0c8fb3b0ad56e12a63b2f9860f9d43740f91ddc3d952ca80fceecf0065dd4365f8f58ca4c8747f58e5b47cb05a52562c2744da8e9be9bae9e6776a54b09eb15cade76ef57fd1828b82dbe", 0x5c}, {&(0x7f00000032c0)="9d8733de1d008e1d005fb710b1f895753e9bf2ca39a951def8497c", 0x1b}, {&(0x7f0000003300)="bedf8c3d300b0c30a67fa0214e3325f19630594ec604eadffc74f22614aedf0433c32d432d068bd0fd6b060e1cf223666e547b32acb6bf63f71047407b2f01eed10add0266bfaccc044f202d079b71bcef2c6bdfd3e11be6a382c5a65c7cb44b2ceb914308cc10de3b028857d5eb42f48655fd3933", 0x75}], 0x9, &(0x7f0000003400)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9f683208081a2e9fcecf56c73217af8d42daf63834b51fbd61f7b5e8802a74e7654e250bd6d04de129d9b85eeb22fc7c2d718bd2b4149a6a74d2363838175b742c1f196720607dd44b0d93d6a076d466bac5e436ca9c642677504333dc2e46c293ae67", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r1, @ANYRES8=r2, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES16=r3, @ANYBLOB="200000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB="6cf432d5f13130c8", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0], 0xc0, 0x800}}, {{&(0x7f0000003680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000003700)="90aeca9ab36d30627474cab8d7f128cc5bfca2b9583f19d8f9e63109e3c1009da3aee2b3f6b591a70f417cf3ad059dd87117cb96c6f5544aac620244270e8ad52e76c3c111b7c7ec19c50904e53fed3839c571ad6cf7d038fd60dbec759d808b74b66a50d3808d5dac8588063fb6a3c6a2bfa7bf2ee36a33b47c1b165c8f9b980c2bcc2892a9573ed7cb94d940b62686b1a6e917c0f35e13f6d63495697d0c", 0x9f}, {&(0x7f00000037c0)="820a65b3cf65cded1d5fa61932edb3841d298fe50608057ee1fb45c394938c49bdf2b3152c0a51dbfba903ebc68f06ecaf6f923a576a192323ae7bba9e563abe8c29cb55251243724dba05438c58643d806121376ae0f9c6935752688e8782a6c81043e6bd2331f534af524ce010f23b9c5da58184671dca859d5b99ea35ed7a751c9e5ff35d9c39fd41c2042cdcb6637a600a1e780fa76c1b847b8b8687a775d4cdd3d4092b277e635f42fdadda9cff50a5847dd41fa92ecb", 0xb9}, {&(0x7f0000003880)="aa83146e93e278a3352ba14c26d41b8c37dd5b0ea0b262ed63dca1a20f4b9df2f151d4d16b13b4cf823c548a2fb9a84181177e", 0x33}], 0x3, &(0x7f0000003900)=ANY=[@ANYBLOB="1800ffb56a4f591f609e9f9c", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="280000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32], 0x40, 0x4080080}}], 0x5, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000c80)={r8, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) write(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000000280), 0x0, &(0x7f0000000400)) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040), 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5ce1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b330600000000000000fd6700"}, 0xd8) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 441.912982ms ago: executing program 2 (id=4857): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r2 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x184) r3 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x24000, 0x122) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x6, 0x3f58, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x4}, 0x50) setsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000600)="834d4e92adff756f55bd8ad9464dd73d65702de0ba5a2ab1fb34fda75f02ffb47672a684cc87ffa946d8632d282b46fa088cad33e1eae1cb8e64aee00e74597e51346cb869c327dbabed0846a942c41445610b4e25bf26a29985962e82e60c3fe5bbed33bea62e607e956ee3c5af1c485b399014bb660c8b39edff6aaed3510186840975f254a37add6635e85c943d155f5f74a2108711e690b48799df1d540cfa316582e06c8d2cfe881cb07a7c86229ebbe7b4586356fb4462cebffa8cd41266a6ac305973", 0xc6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83", 0xae) socket$key(0xf, 0x3, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = creat(&(0x7f00000011c0)='./file0\x00', 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x1, 0x3, 0xa, 0x3, 0x80, 0x1}, @jmp={0x5, 0x1, 0xb, 0x4, 0x5, 0x8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x99}, @jmp={0x5, 0x0, 0x8, 0x9, 0x3, 0xffffffffffffffc0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0xf, 0x4, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r8, 0x8932, &(0x7f0000000080)={'dummy0\x00'}) write$UHID_INPUT(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 58.317592ms ago: executing program 0 (id=4858): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7, 0x8007, 0x9, 0x200, {{0x2c, 0x4, 0x1, 0x9, 0xb0, 0x66, 0x0, 0x0, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@cipso={0x86, 0x4b, 0x0, [{0x5, 0x7, "6137a7a360"}, {0x7, 0xc, "ddcde25d34e080aa4d2e"}, {0x1, 0x7, "9f7332296c"}, {0x1, 0xe, "a3e09085d45e7616b14d7a35"}, {0x6, 0x4, "589c"}, {0x0, 0x6, "2b929668"}]}, @timestamp_prespec={0x44, 0xc, 0x20, 0x3, 0xe, [{@multicast1, 0x6}]}, @timestamp={0x44, 0x20, 0x47, 0x0, 0x5, [0xe1, 0x9a76, 0x5, 0xa0, 0x6, 0xe, 0x5]}, @rr={0x7, 0x13, 0x9b, [@remote, @rand_addr=0x64010102, @private=0xa010101, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x24, 0x6d, 0x3, 0xb, [{@multicast1, 0xb6c7}, {@loopback, 0x80000001}, {@local, 0x4}, {@remote, 0x7}]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000100)=""/213, 0xd5, 0x10000, &(0x7f0000000080)={0x11, 0x6, r0, 0x1, 0x7, 0x6, @broadcast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 15.208251ms ago: executing program 0 (id=4859): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 0s ago: executing program 2 (id=4860): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0xbc55b000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2004, @fd_index=0x8, 0x8000000, 0x0, 0x0, 0x3, 0x1, {0x3, r5}}) kernel console output (not intermixed with test programs): .0.3673" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 631.484861][ T29] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 631.506298][ T29] usb 7-1: device descriptor read/8, error -71 [ 631.715483][T19893] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.3676'. [ 631.718536][T19893] openvswitch: netlink: Message has 5 unknown bytes. [ 631.736007][T19892] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 631.740194][T19892] trusted_key: encrypted_key: master key parameter '' is invalid [ 631.760936][ T29] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 631.785501][ T29] usb 7-1: device descriptor read/8, error -71 [ 631.895150][ T29] usb usb7-port1: unable to enumerate USB device [ 633.316140][T19910] netlink: 'syz.3.3681': attribute type 1 has an invalid length. [ 633.335390][T19910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 633.339161][T19910] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3681'. [ 633.346817][T19910] netlink: 'syz.3.3681': attribute type 1 has an invalid length. [ 633.463514][T19918] binder: 19917:19918 ioctl c0306201 80000300 returned -14 [ 633.503256][T19921] cgroup: Name too long [ 633.552013][T19921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3684'. [ 634.407970][T19936] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 634.410034][T19936] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 634.412948][T19936] vhci_hcd vhci_hcd.0: Device attached [ 634.418260][T19936] netlink: 'syz.2.3687': attribute type 4 has an invalid length. [ 634.420663][T19936] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3687'. [ 634.425760][T19936] : renamed from bond0 [ 634.675015][ T34] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 634.772571][ T5815] IPVS: starting estimator thread 0... [ 634.861525][T19946] IPVS: using max 42 ests per chain, 100800 per kthread [ 635.056409][T19953] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3690'. [ 635.060778][T19953] unsupported nla_type 256 [ 635.172930][T19937] vhci_hcd: connection reset by peer [ 635.178653][T10879] vhci_hcd: stop threads [ 635.181870][T10879] vhci_hcd: release socket [ 635.183445][T10879] vhci_hcd: disconnect device [ 635.806316][T19958] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 635.875002][T19959] loop2: detected capacity change from 0 to 7 [ 635.878839][T19959] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 635.883231][T19959] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 635.889238][T19959] Dev loop2: unable to read RDB block 7 [ 635.891587][T19959] loop2: AHDI p2 p3 [ 635.893449][T19959] loop2: partition table partially beyond EOD, truncated [ 635.896780][T19959] loop2: p3 start 335544320 is beyond EOD, truncated [ 636.034571][T19968] lo speed is unknown, defaulting to 1000 [ 636.106499][T19968] vxcan1 speed is unknown, defaulting to 1000 [ 636.177110][T19968] ip6_vti0 speed is unknown, defaulting to 1000 [ 636.315421][ T6023] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 636.481480][ T6023] usb 6-1: not running at top speed; connect to a high speed hub [ 636.496196][ T6023] usb 6-1: config 6 has an invalid interface number: 240 but max is 2 [ 636.499621][ T6023] usb 6-1: config 6 has an invalid descriptor of length 149, skipping remainder of the config [ 636.504077][ T6023] usb 6-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 636.508757][ T6023] usb 6-1: config 6 has no interface number 0 [ 636.511128][ T6023] usb 6-1: config 6 interface 240 altsetting 7 endpoint 0x5 has invalid maxpacket 9225, setting to 64 [ 636.514476][ T6023] usb 6-1: config 6 interface 240 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 636.518530][ T6023] usb 6-1: config 6 interface 240 has no altsetting 0 [ 636.523681][ T6023] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1101, bcdDevice=e3.13 [ 636.527918][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.530402][ T6023] usb 6-1: Product: ç ¯êžäš“è‰‰áµ–å§šì†šê ‚Ð’è­£ì¹œèµ§îˆ•æ²œæª­ã’æ­¥ï¸¡æµ²ìžà¯Ÿë «å·¥ë‹±îŠ—å¦ì”›æ‘–Ê»èˆá†äŸ¢ê®°ã”ﲇ嗑ㄜ籡జéªï€“骨ç­è¹½á˜³ë¨“렩璛泹暃ã²ï‹­ [ 636.542874][ T6023] usb 6-1: Manufacturer: á⑵쌋킷ë®ë”§ï⵮쑠꺇㕧帽Ê䯾掄誕ቾ挙劌䇉êŽâµ”ë—ꆀâ¢ï­´êŽæ ê€ï袣䧇㌭श׉惜ʿ敆︆䮮襀㸒嬘ã龸Ā瓽煮î­à¥ªï…‡ì†€ï¦± [ 636.548559][ T6023] usb 6-1: SerialNumber: 媖墲韴㫥䄄廑羛근⎔á‡é¯€ë´’쾊䎎ﰨ䕶ë”䨈缂ཛྷ紜ퟢ㣾録ï»â±ƒå—±ã€çŽ¥ï¬‹è¬§áº²è™‰ç´šë†î’‡ê‹îƒ à¿—ç‡ê«˜å“¶á°§ï¿Ÿâ´è®§â ¥ë–¬è„≫⒇é”á‹ì²¾ì‚›âŠ»å©€äŠ•å³–ç© å¼î‹Šç”¤èˆæ°Œè¼¤ïœ«à¤¾á“‹áœ³ç»³è¢«âƒ¾ê‚¹â½¤é î‹Çžà±ƒá°Ÿé ·ç²ç ’îœë©®ë¤ë†á½±è–‡éµ¥í‹§êš—鼰襛΅◱ê·ì™‡à´®è§µì¬ï‘†á¤› [ 636.560051][T19969] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 637.164269][ T40] kauditd_printk_skb: 126 callbacks suppressed [ 637.164282][ T40] audit: type=1326 audit(1752692506.229:17462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19994 comm="syz.3.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 637.186852][ T40] audit: type=1326 audit(1752692506.239:17463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19994 comm="syz.3.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 637.193892][ T40] audit: type=1326 audit(1752692506.249:17464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19994 comm="syz.3.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 637.204954][ T40] audit: type=1326 audit(1752692506.249:17465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19994 comm="syz.3.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 637.213011][ T40] audit: type=1326 audit(1752692506.249:17466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19994 comm="syz.3.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 637.221150][ T40] audit: type=1326 audit(1752692506.249:17467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19994 comm="syz.3.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 637.295289][ T40] audit: type=1326 audit(1752692506.329:17468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19994 comm="syz.3.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 637.304165][ T40] audit: type=1326 audit(1752692506.369:17469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19994 comm="syz.3.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 637.311462][ T40] audit: type=1326 audit(1752692506.369:17470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19994 comm="syz.3.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 637.318211][ T40] audit: type=1326 audit(1752692506.369:17471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19994 comm="syz.3.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 637.604346][T20010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3708'. [ 637.738907][T20012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.368608][T20028] input: syz0 as /devices/virtual/input/input38 [ 638.572960][T20035] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3714'. [ 638.842530][T20048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3718'. [ 638.971496][T20054] input: syz1 as /devices/virtual/input/input39 [ 638.974192][T20054] input: failed to attach handler leds to device input39, error: -6 [ 638.994052][ T6023] option 6-1:6.240: GSM modem (1-port) converter detected [ 638.999325][ T6023] usb 6-1: USB disconnect, device number 22 [ 639.002557][ T6023] option 6-1:6.240: device disconnected [ 639.775106][ T34] vhci_hcd: vhci_device speed not set [ 640.286871][T20062] veth1_virt_wifi: mtu less than device minimum [ 640.420909][T20087] loop2: detected capacity change from 0 to 7 [ 640.423993][T20087] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 640.430750][T20087] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 640.432991][T20087] Dev loop2: unable to read RDB block 7 [ 640.435273][T20087] loop2: AHDI p2 p3 [ 640.436583][T20087] loop2: partition table partially beyond EOD, truncated [ 640.438863][T20087] loop2: p3 start 335544320 is beyond EOD, truncated [ 640.439401][T20089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 640.554602][T20090] lo speed is unknown, defaulting to 1000 [ 640.844396][T20090] vxcan1 speed is unknown, defaulting to 1000 [ 640.939919][T20090] ip6_vti0 speed is unknown, defaulting to 1000 [ 641.327658][T20113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3736'. [ 641.589094][T15248] libceph: connect (1)[c::]:6789 error -101 [ 641.591088][T15248] libceph: mon0 (1)[c::]:6789 connect error [ 641.637780][T20115] ceph: No mds server is up or the cluster is laggy [ 641.864338][T20128] loop2: detected capacity change from 0 to 7 [ 641.867102][T20128] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 641.870290][T20128] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 641.872352][T20128] Dev loop2: unable to read RDB block 7 [ 641.874080][T20128] loop2: AHDI p2 p3 [ 641.875870][T20128] loop2: partition table partially beyond EOD, truncated [ 641.878100][T20128] loop2: p3 start 335544320 is beyond EOD, truncated [ 642.174908][T20148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3745'. [ 642.240291][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3745'. [ 642.470674][T20167] loop2: detected capacity change from 0 to 7 [ 642.474085][T20167] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 642.478289][T20167] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 642.481123][T20167] Dev loop2: unable to read RDB block 7 [ 642.483451][T20167] loop2: AHDI p2 p3 [ 642.485537][T20167] loop2: partition table partially beyond EOD, truncated [ 642.488578][T20167] loop2: p3 start 335544320 is beyond EOD, truncated [ 642.733266][T20183] random: crng reseeded on system resumption [ 642.809591][T20185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3755'. [ 643.728891][T20198] loop2: detected capacity change from 0 to 7 [ 643.731915][T20198] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 643.736572][T20198] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 643.739377][T20198] Dev loop2: unable to read RDB block 7 [ 643.741693][T20198] loop2: AHDI p2 p3 [ 643.743442][T20198] loop2: partition table partially beyond EOD, truncated [ 643.746593][T20198] loop2: p3 start 335544320 is beyond EOD, truncated [ 643.785430][T20200] netlink: 'syz.2.3763': attribute type 1 has an invalid length. [ 643.788508][T20200] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3763'. [ 643.919793][T20216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3765'. [ 643.923240][T20216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3765'. [ 644.011296][T20219] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3766'. [ 644.873596][T20251] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 644.875689][T20251] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 644.879317][T20251] vhci_hcd vhci_hcd.0: Device attached [ 644.884444][T20252] usbip_core: unknown command [ 644.886173][T20252] vhci_hcd: unknown pdu 0 [ 644.887534][T20252] usbip_core: unknown command [ 644.889274][ T6629] vhci_hcd: stop threads [ 644.890714][ T6629] vhci_hcd: release socket [ 644.892248][ T6629] vhci_hcd: disconnect device [ 645.159580][T20254] team0: Mode changed to "loadbalance" [ 645.168001][T20254] netlink: 'syz.3.3775': attribute type 10 has an invalid length. [ 645.178620][T20254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.186053][T20254] team0: Port device bond0 added [ 645.287716][T20258] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3776'. [ 645.305220][T20258] batadv1: entered allmulticast mode [ 645.392639][T20259] input: syz1 as /devices/virtual/input/input40 [ 645.560964][T20261] batman_adv: batadv0: Adding interface: ipvlan3 [ 645.563255][T20261] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.572042][T20261] batman_adv: batadv0: Interface activated: ipvlan3 [ 646.208897][T20272] tmpfs: Unknown parameter 'mprelative:' [ 646.237624][T20274] netlink: 'syz.2.3781': attribute type 39 has an invalid length. [ 646.247285][T20274] netlink: 'syz.2.3781': attribute type 1 has an invalid length. [ 646.250095][T20274] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3781'. [ 646.487876][T20292] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3783'. [ 646.492319][T20292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3783'. [ 646.787651][T20315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3786'. [ 648.099636][T20388] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3800'. [ 648.185677][T20400] program syz.2.3803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 648.200205][T20402] batadv_slave_0: entered promiscuous mode [ 648.273341][T20405] fuse: blksize only supported for fuseblk [ 648.396696][T20417] netlink: 'syz.0.3809': attribute type 1 has an invalid length. [ 648.411526][T20417] 8021q: adding VLAN 0 to HW filter on device bond5 [ 648.422415][T20417] bond5: (slave gretap1): making interface the new active one [ 648.425792][T20417] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 648.585274][T15248] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 648.663604][T20429] fuse: Bad value for 'group_id' [ 648.665498][T20429] fuse: Bad value for 'group_id' [ 648.746422][T15248] usb 7-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 648.749851][T15248] usb 7-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 648.753942][T15248] usb 7-1: config 1 interface 0 has no altsetting 0 [ 648.757817][T15248] usb 7-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.40 [ 648.760680][T15248] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.763780][T15248] usb 7-1: Manufacturer: à¶µæŒèº´á¼®ê¬ƒã£’åŒã™ªì¸ƒà­µç¥ä¤”⦠ᷬè‰ä‘˜î‰•襼ೖ햰㉮歓潛悼嶘ãíˆä’¡î¤©é»ç…¾â…§æ¿ˆÃ˜í˜±ï•¡í‹æš¥â¿¢Ü¼íƒªë±â€ºÞ›ï¼©á°¨ä¶¦ä¹¶á·µíƒã‹§áŽ‘æ¿†ê‹Ÿî©ºÝ¯â²ƒ [ 648.769855][T15248] usb 7-1: SerialNumber: syz [ 648.773002][T20411] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 648.775591][T20411] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 649.183270][T15248] usbhid 7-1:1.0: can't add hid device: -71 [ 649.185300][T15248] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 649.188681][T15248] usb 7-1: USB disconnect, device number 33 [ 649.779518][T20457] __nla_validate_parse: 3 callbacks suppressed [ 649.779529][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3820'. [ 649.784780][T20458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3820'. [ 649.846612][T20465] tmpfs: Unknown parameter 'grpquota_bit' [ 649.929435][T20470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3823'. [ 649.983963][T20474] sctp: [Deprecated]: syz.0.3825 (pid 20474) Use of int in max_burst socket option deprecated. [ 649.983963][T20474] Use struct sctp_assoc_value instead [ 650.139721][T20476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3826'. [ 650.223188][T20480] bond0: (slave team0): Releasing backup interface [ 650.225538][T20480] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 650.231570][T20480] bond2: (slave dummy0): Releasing active interface [ 650.237330][T20480] bond2: (slave veth3): Releasing active interface [ 650.240823][T20480] batman_adv: batadv0: Interface deactivated: macsec0 [ 650.243040][T20480] batman_adv: batadv0: Removing interface: macsec0 [ 650.247813][T20480] bond0: (slave bond3): Releasing backup interface [ 650.251491][T20480] bond0: (slave bond4): Releasing backup interface [ 650.256997][T20480] bond5: (slave gretap1): Releasing active interface [ 650.371886][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 650.686488][T20507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3837'. [ 651.570830][T20545] bridge0: port 1(syz_tun) entered blocking state [ 651.573436][T20545] bridge0: port 1(syz_tun) entered disabled state [ 651.576674][T20545] syz_tun: entered allmulticast mode [ 651.580644][T20545] syz_tun: entered promiscuous mode [ 651.582800][T20545] bridge0: port 1(syz_tun) entered blocking state [ 651.584910][T20545] bridge0: port 1(syz_tun) entered forwarding state [ 651.588866][T20545] netlink: 'syz.1.3848': attribute type 10 has an invalid length. [ 651.591486][T20545] bridge0: port 1(syz_tun) entered disabled state [ 651.600194][T20545] bridge0: port 1(syz_tun) entered blocking state [ 651.602294][T20545] bridge0: port 1(syz_tun) entered forwarding state [ 651.606939][T20545] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 651.977750][T20552] lo speed is unknown, defaulting to 1000 [ 652.018856][T20554] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3852'. [ 652.047119][T20552] vxcan1 speed is unknown, defaulting to 1000 [ 652.116018][T20552] ip6_vti0 speed is unknown, defaulting to 1000 [ 652.802135][T20573] binder: BINDER_SET_CONTEXT_MGR already set [ 652.804949][T20573] binder: 20570:20573 ioctl 4018620d 800000c0 returned -16 [ 652.984419][T20577] netlink: 680 bytes leftover after parsing attributes in process `syz.2.3857'. [ 653.170070][T20569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3854'. [ 653.198698][ C3] ata1: illegal qc_active transition (00000000->00000040) [ 653.428062][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3860'. [ 653.519959][ T1107] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 653.523623][ T1107] ata1.00: configured for UDMA/100 [ 654.938130][T20638] bond0: entered promiscuous mode [ 655.049339][T20645] netlink: 'syz.0.3878': attribute type 3 has an invalid length. [ 655.050204][T20644] netlink: 'syz.1.3873': attribute type 10 has an invalid length. [ 655.409723][T20649] __nla_validate_parse: 2 callbacks suppressed [ 655.409735][T20649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3874'. [ 655.414503][T20649] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3874'. [ 655.430613][T20649] geneve4: entered promiscuous mode [ 655.432802][T20649] geneve4: entered allmulticast mode [ 656.557295][T20668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3882'. [ 656.643981][T20674] 9pnet: Could not find request transport: vd [ 657.042056][T20688] netlink: 'syz.1.3887': attribute type 5 has an invalid length. [ 657.051956][T20688] netlink: 'syz.1.3887': attribute type 7 has an invalid length. [ 657.068407][T20692] input: syz1 as /devices/virtual/input/input42 [ 657.071860][T20688] : entered promiscuous mode [ 657.120425][ T40] kauditd_printk_skb: 242 callbacks suppressed [ 657.120437][ T40] audit: type=1326 audit(2000000018.089:17714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20695 comm="syz.2.3890" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x0 [ 657.783350][T20704] input: syz1 as /devices/virtual/input/input43 [ 657.791740][T20704] pimreg: entered allmulticast mode [ 657.795698][T20706] input: syz1 as /devices/virtual/input/input44 [ 658.111303][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'. [ 658.379649][T20715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3894'. [ 658.389855][T20715] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.394192][T20715] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.397686][T20715] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.401040][T20715] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.410555][T20715] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.413800][T20715] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.417502][T20715] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.420798][T20715] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.065070][ T10] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 659.119375][T20729] netlink: 'syz.0.3899': attribute type 1 has an invalid length. [ 659.214779][ T10] usb 6-1: device descriptor read/64, error -71 [ 659.464733][ T10] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 659.615161][ T10] usb 6-1: device descriptor read/64, error -71 [ 659.725234][ T10] usb usb6-port1: attempt power cycle [ 659.840690][T20749] random: crng reseeded on system resumption [ 660.064799][ T10] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 660.085400][ T10] usb 6-1: device descriptor read/8, error -71 [ 660.344880][ T10] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 660.365338][ T10] usb 6-1: device descriptor read/8, error -71 [ 660.484967][ T10] usb usb6-port1: unable to enumerate USB device [ 660.840024][ T40] audit: type=1326 audit(2000000021.809:17715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20741 comm="syz.2.3904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7fc00000 [ 661.223083][T20779] xt_hashlimit: Unknown mode mask 368, kernel too old? [ 661.314043][T20793] cgroup: Bad value for 'name' [ 661.374986][T20797] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3921'. [ 661.379232][T20797] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3921'. [ 661.419131][T20802] macsec1: entered allmulticast mode [ 661.607436][T20807] netlink: 'syz.0.3923': attribute type 23 has an invalid length. [ 661.913308][T20812] No control pipe specified [ 661.957648][ T40] audit: type=1326 audit(2000000022.919:17716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.3.3926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 661.968231][ T40] audit: type=1326 audit(2000000022.919:17717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.3.3926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 661.977217][ T40] audit: type=1326 audit(2000000022.939:17718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.3.3926" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 661.987484][ T40] audit: type=1326 audit(2000000022.939:17719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.3.3926" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 661.994347][T20816] loop2: detected capacity change from 0 to 7 [ 661.994568][ T40] audit: type=1326 audit(2000000022.939:17720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.3.3926" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 661.998206][T20816] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 662.004098][ T40] audit: type=1326 audit(2000000022.939:17721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.3.3926" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 662.015842][T20816] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 662.020900][T20816] Dev loop2: unable to read RDB block 7 [ 662.021295][ T40] audit: type=1326 audit(2000000022.939:17722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.3.3926" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 662.023279][T20816] loop2: AHDI p2 p3 [ 662.031375][ T40] audit: type=1326 audit(2000000022.939:17723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.3.3926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 662.061853][T20816] loop2: partition table partially beyond EOD, truncated [ 662.067869][T20816] loop2: p3 start 335544320 is beyond EOD, truncated [ 662.106627][T20820] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 662.114235][T20819] IPVS: stopping backup sync thread 20820 ... [ 662.167753][T20823] team0: Port device bond0 removed [ 662.246942][T20823] team0: Unable to change to the same mode the team is in [ 662.251382][T20823] netlink: 'syz.3.3928': attribute type 10 has an invalid length. [ 662.255408][T20823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.260697][T20823] team0: Port device bond0 added [ 662.270303][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3928'. [ 662.563484][T20823] team0 (unregistering): Port device bond0 removed [ 662.678846][T20838] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.683574][T20838] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 662.740260][T20843] bridge4: entered promiscuous mode [ 662.799474][T20838] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.803675][T20838] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 662.980706][T20838] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.985491][T20838] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 663.297897][T20838] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.301748][T20838] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 663.435111][T20838] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 663.440732][T20838] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 663.468999][T20838] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 663.478572][T20838] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 663.494074][T20838] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 663.498025][T20838] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 663.506982][T20838] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 663.510196][T20838] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 663.570519][T20858] syz.2.3936: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 663.575895][T20858] CPU: 1 UID: 0 PID: 20858 Comm: syz.2.3936 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 663.575911][T20858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 663.575917][T20858] Call Trace: [ 663.575921][T20858] [ 663.575926][T20858] dump_stack_lvl+0x16c/0x1f0 [ 663.575945][T20858] warn_alloc+0x248/0x3a0 [ 663.575962][T20858] ? __pfx_warn_alloc+0x10/0x10 [ 663.575977][T20858] ? __pfx_stack_trace_save+0x10/0x10 [ 663.575990][T20858] ? stack_depot_save_flags+0x28/0xa40 [ 663.576010][T20858] ? kasan_save_stack+0x42/0x60 [ 663.576025][T20858] ? kasan_save_stack+0x33/0x60 [ 663.576039][T20858] ? kasan_save_track+0x14/0x30 [ 663.576059][T20858] ? xskq_create+0x52/0x1d0 [ 663.576072][T20858] ? xsk_setsockopt+0x640/0x840 [ 663.576084][T20858] ? do_sock_setsockopt+0x224/0x470 [ 663.576096][T20858] ? xskq_create+0xfb/0x1d0 [ 663.576110][T20858] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 663.576129][T20858] ? xskq_create+0xfb/0x1d0 [ 663.576145][T20858] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 663.576163][T20858] ? xskq_create+0xfb/0x1d0 [ 663.576176][T20858] vmalloc_user_noprof+0x9e/0xe0 [ 663.576189][T20858] ? xskq_create+0xfb/0x1d0 [ 663.576203][T20858] xskq_create+0xfb/0x1d0 [ 663.576217][T20858] xsk_setsockopt+0x640/0x840 [ 663.576230][T20858] ? __pfx_xsk_setsockopt+0x10/0x10 [ 663.576243][T20858] ? __pfx_aa_sk_perm+0x10/0x10 [ 663.576260][T20858] ? __pfx_xsk_setsockopt+0x10/0x10 [ 663.576273][T20858] do_sock_setsockopt+0x224/0x470 [ 663.576283][T20858] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 663.576302][T20858] __sys_setsockopt+0x120/0x1a0 [ 663.576319][T20858] __ia32_sys_setsockopt+0xbc/0x160 [ 663.576334][T20858] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.576348][T20858] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 663.576365][T20858] __do_fast_syscall_32+0x7c/0x3a0 [ 663.576382][T20858] do_fast_syscall_32+0x32/0x80 [ 663.576398][T20858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.576412][T20858] RIP: 0023:0xf7f07579 [ 663.576420][T20858] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 663.576431][T20858] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 663.576441][T20858] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 663.576447][T20858] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 663.576454][T20858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.576460][T20858] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 663.576466][T20858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.576478][T20858] [ 663.576482][T20858] Mem-Info: [ 663.659786][T20858] active_anon:207 inactive_anon:8018 isolated_anon:0 [ 663.659786][T20858] active_file:881 inactive_file:17477 isolated_file:0 [ 663.659786][T20858] unevictable:1768 dirty:540 writeback:0 [ 663.659786][T20858] slab_reclaimable:6256 slab_unreclaimable:68987 [ 663.659786][T20858] mapped:24795 shmem:6424 pagetables:1127 [ 663.659786][T20858] sec_pagetables:325 bounce:0 [ 663.659786][T20858] kernel_misc_reclaimable:0 [ 663.659786][T20858] free:61201 free_pcp:9997 free_cma:0 [ 663.673300][T20858] Node 0 active_anon:472kB inactive_anon:228kB active_file:0kB inactive_file:408kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:328kB dirty:4kB writeback:0kB shmem:4020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8024kB pagetables:2280kB sec_pagetables:1156kB all_unreclaimable? no Balloon:0kB [ 663.683011][T20858] Node 1 active_anon:356kB inactive_anon:31844kB active_file:3524kB inactive_file:69500kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98852kB dirty:2156kB writeback:0kB shmem:21676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5912kB pagetables:2228kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB [ 663.693717][T20858] Node 0 DMA free:2088kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:552kB local_pcp:124kB free_cma:0kB [ 663.702731][T20858] lowmem_reserve[]: 0 288 288 288 288 [ 663.704415][T20858] Node 0 DMA32 free:20188kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:1196KB active_anon:472kB inactive_anon:228kB active_file:0kB inactive_file:408kB unevictable:3536kB writepending:4kB present:1032196kB managed:295892kB mlocked:0kB bounce:0kB free_pcp:5896kB local_pcp:2396kB free_cma:0kB [ 663.713729][T20858] lowmem_reserve[]: 0 0 0 0 0 [ 663.715410][T20858] Node 1 DMA32 free:222528kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:356kB inactive_anon:31844kB active_file:3524kB inactive_file:69500kB unevictable:3536kB writepending:2156kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:33540kB local_pcp:16040kB free_cma:0kB [ 663.724788][T20858] lowmem_reserve[]: 0 0 0 0 0 [ 663.726216][T20858] Node 0 DMA: 2*4kB (UM) 2*8kB (U) 5*16kB (U) 6*32kB (U) 6*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2088kB [ 663.730543][T20858] Node 0 DMA32: 510*4kB (UMEH) 183*8kB (UMEH) 137*16kB (UMEH) 112*32kB (MEH) 59*64kB (UMEH) 29*128kB (UMEH) 13*256kB (UMEH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20096kB [ 663.735849][T20858] Node 1 DMA32: 2530*4kB (UME) 1041*8kB (UME) 699*16kB (UME) 708*32kB (UME) 178*64kB (UME) 79*128kB (UME) 63*256kB (UME) 61*512kB (UME) 45*1024kB (UM) 21*2048kB (UM) 3*4096kB (UM) = 222528kB [ 663.741464][T20858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.744350][T20858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 663.747168][T20858] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.750056][T20858] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 663.752900][T20858] 25079 total pagecache pages [ 663.754384][T20858] 257 pages in swap cache [ 663.755942][T20858] Free swap = 119992kB [ 663.757258][T20858] Total swap = 124996kB [ 663.758573][T20858] 524155 pages RAM [ 663.759763][T20858] 0 pages HighMem/MovableOnly [ 663.763637][T20858] 209271 pages reserved [ 663.765200][T20858] 0 pages cma reserved [ 663.919174][T20866] loop2: detected capacity change from 0 to 7 [ 663.921571][T20866] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 663.924781][T20866] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 663.926893][T20866] Dev loop2: unable to read RDB block 7 [ 663.928703][T20866] loop2: AHDI p2 p3 [ 663.930037][T20866] loop2: partition table partially beyond EOD, truncated [ 663.932248][T20866] loop2: p3 start 335544320 is beyond EOD, truncated [ 664.705142][T20886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 664.759836][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 664.759874][ T40] audit: type=1326 audit(2000000025.729:17740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.3.3943" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 664.802043][ T40] audit: type=1326 audit(2000000025.729:17741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.3.3943" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 664.823449][ T40] audit: type=1326 audit(2000000025.729:17742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.3.3943" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 664.832653][ T40] audit: type=1326 audit(2000000025.729:17743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.3.3943" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 664.859166][T20889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3944'. [ 664.862976][T20889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3944'. [ 664.889241][ T40] audit: type=1326 audit(2000000025.729:17744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.3.3943" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 664.897291][ T40] audit: type=1326 audit(2000000025.729:17745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.3.3943" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 664.903858][ T40] audit: type=1326 audit(2000000025.729:17746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.3.3943" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 664.910675][ T40] audit: type=1326 audit(2000000025.729:17747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.3.3943" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 664.918713][ T40] audit: type=1326 audit(2000000025.729:17748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.3.3943" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 664.926192][ T40] audit: type=1326 audit(2000000025.729:17749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.3.3943" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 665.362740][T20897] nfs: Deprecated parameter 'nointr' [ 666.207274][T20902] loop2: detected capacity change from 0 to 7 [ 666.210213][T20902] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 666.213436][T20902] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 666.215906][T20902] Dev loop2: unable to read RDB block 7 [ 666.217679][T20902] loop2: AHDI p2 p3 [ 666.218976][T20902] loop2: partition table partially beyond EOD, truncated [ 666.221402][T20902] loop2: p3 start 335544320 is beyond EOD, truncated [ 666.390218][T20913] loop2: detected capacity change from 0 to 7 [ 666.392565][T20913] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 666.396336][T20913] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 666.398438][T20913] Dev loop2: unable to read RDB block 7 [ 666.400178][T20913] loop2: AHDI p2 p3 [ 666.401425][T20913] loop2: partition table partially beyond EOD, truncated [ 666.403706][T20913] loop2: p3 start 335544320 is beyond EOD, truncated [ 666.958520][T20917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3951'. [ 666.961274][T20917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3951'. [ 666.967682][T20917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.970403][T20917] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.973067][T20917] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.975970][T20917] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.978695][T20917] geneve2: entered promiscuous mode [ 666.980322][T20917] geneve2: entered allmulticast mode [ 667.468584][T20929] netlink: 'syz.3.3952': attribute type 10 has an invalid length. [ 667.910274][T20935] vcan0: entered allmulticast mode [ 667.912759][T20935] vcan0: left allmulticast mode [ 670.181043][T20968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3965'. [ 670.596295][T20970] 9pnet_fd: Insufficient options for proto=fd [ 671.092068][T21012] input: syz0 as /devices/virtual/input/input45 [ 671.348102][T21022] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.3979'. [ 671.352104][T21022] openvswitch: netlink: Message has 5 unknown bytes. [ 672.253135][T21028] 9pnet_fd: Insufficient options for proto=fd [ 673.251257][T21051] orangefs_mount: mount request failed with -4 [ 673.488442][T21081] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3998'. [ 673.493305][T21081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3998'. [ 673.744269][ T24] libceph: connect (1)[c::]:6789 error -101 [ 673.746237][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 673.898242][T21096] ceph: No mds server is up or the cluster is laggy [ 674.246845][T21109] overlay: Unknown parameter 'fsname' [ 674.249909][T21109] x_tables: duplicate underflow at hook 3 [ 674.432183][T21102] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 674.675920][T21131] ceph: No mds server is up or the cluster is laggy [ 674.678236][ T29] libceph: connect (1)[c::]:6789 error -101 [ 674.680197][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 675.934391][ T10] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 676.085554][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.089429][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 676.092551][ T10] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.096606][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 676.100022][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 676.103344][ T10] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 676.107453][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.115205][T21174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 676.118377][ T10] hub 7-1:1.0: bad descriptor, ignoring hub [ 676.120518][ T10] hub 7-1:1.0: probe with driver hub failed with error -5 [ 676.123010][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 676.126417][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 676.130117][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 676.132288][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 676.288128][T21177] netlink: 'syz.1.4020': attribute type 4 has an invalid length. [ 676.424890][ T10] usb 7-1: USB disconnect, device number 34 [ 676.793870][T21188] 9pnet_fd: Insufficient options for proto=fd [ 676.922680][T21196] lo speed is unknown, defaulting to 1000 [ 677.007624][T21196] vxcan1 speed is unknown, defaulting to 1000 [ 677.083236][T21196] ip6_vti0 speed is unknown, defaulting to 1000 [ 677.272567][T21214] lo speed is unknown, defaulting to 1000 [ 677.402305][T21217] lo speed is unknown, defaulting to 1000 [ 677.545983][T21217] vxcan1 speed is unknown, defaulting to 1000 [ 677.674789][T21217] ip6_vti0 speed is unknown, defaulting to 1000 [ 677.685370][T21214] vxcan1 speed is unknown, defaulting to 1000 [ 677.768573][T21214] ip6_vti0 speed is unknown, defaulting to 1000 [ 678.349859][ T40] kauditd_printk_skb: 1233 callbacks suppressed [ 678.349874][ T40] audit: type=1326 audit(2000000039.320:18983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21230 comm="syz.3.4036" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70fe579 code=0x0 [ 678.785778][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4041'. [ 678.838940][T21253] tipc: Started in network mode [ 678.840839][T21253] tipc: Node identity 080211000001, cluster identity 4711 [ 678.843478][T21253] tipc: Enabled bearer , priority 0 [ 678.852176][T21253] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 678.854740][T21253] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 678.919337][T21252] block nbd1: shutting down sockets [ 679.035787][T21261] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.106519][T21261] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.156669][T21261] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.221663][T21261] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.283101][T21270] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 679.346954][T21261] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.353721][T21261] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.365291][T21261] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.377970][T21261] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.539185][T21277] kernel read not supported for file /,}@!$ (pid: 21277 comm: syz.3.4049) [ 679.544200][ T40] audit: type=1800 audit(2000000040.510:18984): pid=21277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4049" name=",}@!$" dev="mqueue" ino=89516 res=0 errno=0 [ 679.835792][ T6023] tipc: Node number set to 134418688 [ 680.421156][T21304] netlink: 'syz.3.4057': attribute type 11 has an invalid length. [ 680.425373][T21304] syz_tun: entered allmulticast mode [ 680.428356][T21303] syz_tun: left allmulticast mode [ 680.566093][ T40] audit: type=1326 audit(2000000041.540:18985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21309 comm="syz.3.4060" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 680.638940][T21317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4062'. [ 680.843263][T21326] netlink: 'syz.1.4064': attribute type 1 has an invalid length. [ 680.910295][T21329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4065'. [ 680.914781][T21329] netlink: 'syz.2.4065': attribute type 12 has an invalid length. [ 681.833896][T21342] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 683.401480][T21377] loop2: detected capacity change from 0 to 7 [ 683.405251][T21377] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 683.408881][T21377] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 683.410978][T21377] Dev loop2: unable to read RDB block 7 [ 683.413113][T21377] loop2: AHDI p2 p3 [ 683.415449][T21377] loop2: partition table partially beyond EOD, truncated [ 683.418295][T21377] loop2: p3 start 335544320 is beyond EOD, truncated [ 683.978510][ T6023] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 684.133901][ T6023] usb 6-1: Using ep0 maxpacket: 32 [ 684.137442][ T6023] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 684.142396][ T6023] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 684.150325][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.153690][ T6023] usb 6-1: Product: syz [ 684.155973][ T6023] usb 6-1: Manufacturer: syz [ 684.157700][ T6023] usb 6-1: SerialNumber: syz [ 684.160462][ T6023] usb 6-1: config 0 descriptor?? [ 684.163575][T21374] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 684.167836][ T6023] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input46 [ 684.445277][ T29] usb 6-1: USB disconnect, device number 27 [ 684.445344][ C3] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 684.658965][T21392] 9pnet_fd: Insufficient options for proto=fd [ 684.782918][T21411] 9p: Unknown uid 00000000004294967295 [ 684.834419][T21418] loop2: detected capacity change from 0 to 7 [ 684.837293][T21418] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 684.840471][T21418] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 684.842594][T21418] Dev loop2: unable to read RDB block 7 [ 684.844913][T21418] loop2: AHDI p2 p3 [ 684.846593][T21418] loop2: partition table partially beyond EOD, truncated [ 684.849031][T21418] loop2: p3 start 335544320 is beyond EOD, truncated [ 685.481943][T21456] loop2: detected capacity change from 0 to 7 [ 685.486127][T21456] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 685.489419][T21456] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 685.491659][T21456] Dev loop2: unable to read RDB block 7 [ 685.493506][T21456] loop2: AHDI p2 p3 [ 685.494939][T21456] loop2: partition table partially beyond EOD, truncated [ 685.497280][T21456] loop2: p3 start 335544320 is beyond EOD, truncated [ 685.672096][T21468] netlink: 'syz.0.4103': attribute type 10 has an invalid length. [ 685.675886][T21468] syz_tun: entered promiscuous mode [ 685.681088][T21468] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 685.965437][T21488] loop2: detected capacity change from 0 to 7 [ 685.970842][T21488] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 685.974525][T21488] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 685.976695][T21488] Dev loop2: unable to read RDB block 7 [ 685.978518][T21488] loop2: AHDI p2 p3 [ 685.979766][T21488] loop2: partition table partially beyond EOD, truncated [ 685.981933][T21488] loop2: p3 start 335544320 is beyond EOD, truncated [ 686.030285][T21498] 9pnet_fd: Insufficient options for proto=fd [ 686.627087][T21522] sp0: Synchronizing with TNC [ 686.750208][T21529] tipc: Enabling of bearer rejected, failed to enable media [ 686.750376][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4118'. [ 686.806735][T21538] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 686.808751][T21538] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 686.812144][T21538] vhci_hcd vhci_hcd.0: Device attached [ 686.826033][T21541] vhci_hcd: connection closed [ 686.826200][ T6621] vhci_hcd: stop threads [ 686.829180][ T6621] vhci_hcd: release socket [ 686.830612][ T6621] vhci_hcd: disconnect device [ 686.852422][T21546] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 686.858816][T21546] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 687.125272][T21554] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4123'. [ 688.120031][T21564] 9pnet_fd: Insufficient options for proto=fd [ 688.185279][T21568] netlink: 'syz.0.4127': attribute type 9 has an invalid length. [ 688.236760][T21570] netlink: 'syz.0.4127': attribute type 9 has an invalid length. [ 688.638137][T21581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4131'. [ 688.641117][T21585] loop2: detected capacity change from 0 to 7 [ 688.643449][T21585] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 688.647911][T21585] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 688.649947][T21585] Dev loop2: unable to read RDB block 7 [ 688.651603][T21585] loop2: AHDI p2 p3 [ 688.652859][T21585] loop2: partition table partially beyond EOD, truncated [ 688.655719][T21585] loop2: p3 start 335544320 is beyond EOD, truncated [ 689.762649][T21617] loop2: detected capacity change from 0 to 7 [ 689.765120][T21617] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 689.768165][T21617] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 689.770274][T21617] Dev loop2: unable to read RDB block 7 [ 689.771977][T21617] loop2: AHDI p2 p3 [ 689.773169][T21617] loop2: partition table partially beyond EOD, truncated [ 689.777088][T21617] loop2: p3 start 335544320 is beyond EOD, truncated [ 689.898771][T21629] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 690.895469][T21649] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 690.897614][T21649] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 690.900573][T21649] vhci_hcd vhci_hcd.0: Device attached [ 691.738114][T21644] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4147'. [ 691.749368][T21656] 9pnet_fd: Insufficient options for proto=fd [ 691.863900][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 691.866463][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 691.885735][T21646] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4149'. [ 691.899845][ T40] audit: type=1326 audit(2000262452.862:18986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.1.4151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 691.912250][T21650] vhci_hcd: connection reset by peer [ 691.912821][ T40] audit: type=1326 audit(2000262452.862:18987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.1.4151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 691.921509][ T76] vhci_hcd: stop threads [ 691.923385][ T76] vhci_hcd: release socket [ 691.924488][ T40] audit: type=1326 audit(2000262452.862:18988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.1.4151" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 691.925749][ T76] vhci_hcd: disconnect device [ 691.932198][ T40] audit: type=1326 audit(2000262452.862:18989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.1.4151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 691.940712][ T40] audit: type=1326 audit(2000262452.862:18990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.1.4151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 691.947297][ T40] audit: type=1326 audit(2000262452.872:18991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.1.4151" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 691.953745][ T40] audit: type=1326 audit(2000262452.872:18992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.1.4151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 691.960474][ T40] audit: type=1326 audit(2000262452.872:18993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.1.4151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 691.967182][ T40] audit: type=1326 audit(2000262452.882:18994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.1.4151" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 691.975229][ T40] audit: type=1326 audit(2000262452.882:18995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.1.4151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 692.715102][T21682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4157'. [ 692.864708][T21683] block nbd1: shutting down sockets [ 693.383933][T21695] netlink: 'syz.2.4158': attribute type 9 has an invalid length. [ 693.389110][T21695] netlink: 'syz.2.4158': attribute type 9 has an invalid length. [ 693.490842][T21688] 9pnet_fd: Insufficient options for proto=fd [ 693.521648][T21702] lo speed is unknown, defaulting to 1000 [ 693.611761][T21702] vxcan1 speed is unknown, defaulting to 1000 [ 693.683137][T21702] ip6_vti0 speed is unknown, defaulting to 1000 [ 694.054179][T21704] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4162'. [ 694.594953][T21766] netlink: 4712 bytes leftover after parsing attributes in process `syz.1.4177'. [ 694.933752][T21777] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4180'. [ 695.019655][T21783] xt_hashlimit: max too large, truncated to 1048576 [ 695.021935][T21783] Cannot find add_set index 0 as target [ 695.058430][T21786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4183'. [ 695.172013][T21788] loop2: detected capacity change from 0 to 7 [ 695.176177][T21788] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 695.179377][T21788] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 695.181479][T21788] Dev loop2: unable to read RDB block 7 [ 695.184904][T21788] loop2: AHDI p2 p3 [ 695.186221][T21788] loop2: partition table partially beyond EOD, truncated [ 695.188469][T21788] loop2: p3 start 335544320 is beyond EOD, truncated [ 695.244061][ T61] libceph: connect (1)[c::]:6789 error -101 [ 695.246464][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 695.281447][T21793] ceph: No mds server is up or the cluster is laggy [ 695.343083][T21799] netlink: set zone limit has 8 unknown bytes [ 695.440926][T21810] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 695.594307][T21819] netlink: 'syz.2.4190': attribute type 12 has an invalid length. [ 695.814704][T21825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4193'. [ 695.856641][T21830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4194'. [ 695.859614][T21830] netlink: 'syz.3.4194': attribute type 12 has an invalid length. [ 695.894229][T21832] loop2: detected capacity change from 0 to 7 [ 695.897588][T21832] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 695.901779][T21832] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 695.905097][T21832] Dev loop2: unable to read RDB block 7 [ 695.907053][T21832] loop2: AHDI p2 p3 [ 695.908304][T21832] loop2: partition table partially beyond EOD, truncated [ 695.910548][T21832] loop2: p3 start 335544320 is beyond EOD, truncated [ 696.161199][T21848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4200'. [ 696.395646][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 696.701825][T21872] 9pnet_fd: Insufficient options for proto=fd [ 696.893962][ T29] usb 44-1: device descriptor read/8, error -110 [ 697.136757][T21884] 9pnet_fd: Insufficient options for proto=fd [ 697.174739][T21900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4212'. [ 697.287464][ T29] usb usb44-port1: attempt power cycle [ 697.321827][T21877] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 697.557054][T21914] 9pnet_fd: Insufficient options for proto=fd [ 698.038060][ T29] usb usb44-port1: unable to enumerate USB device [ 698.425727][T21935] lo speed is unknown, defaulting to 1000 [ 698.612375][T21935] vxcan1 speed is unknown, defaulting to 1000 [ 698.689484][T21935] ip6_vti0 speed is unknown, defaulting to 1000 [ 699.166797][T21954] 9pnet_fd: Insufficient options for proto=fd [ 699.284661][T21969] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 699.669646][T21977] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 699.915480][T21989] loop2: detected capacity change from 0 to 7 [ 699.918613][T21989] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 699.922519][T21989] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 699.925478][T21989] Dev loop2: unable to read RDB block 7 [ 699.927703][T21989] loop2: AHDI p2 p3 [ 699.929341][T21989] loop2: partition table partially beyond EOD, truncated [ 699.932168][T21989] loop2: p3 start 335544320 is beyond EOD, truncated [ 700.274585][T22007] 9pnet_fd: Insufficient options for proto=fd [ 700.567980][T22016] bridge2: entered promiscuous mode [ 700.569665][T22016] bridge2: entered allmulticast mode [ 700.574057][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 700.610624][T22030] bond0: entered promiscuous mode [ 700.612523][T22030] bridge0: entered promiscuous mode [ 700.857814][T22040] 9pnet_fd: Insufficient options for proto=fd [ 700.970477][T22045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4255'. [ 701.037361][T22052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4258'. [ 701.380529][T22068] netlink: 'syz.2.4262': attribute type 1 has an invalid length. [ 701.383048][T22068] netlink: 'syz.2.4262': attribute type 2 has an invalid length. [ 701.387832][T22068] tmpfs: Unknown parameter 'grpquota' [ 701.396014][T22022] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 701.646257][T22067] 9pnet_fd: Insufficient options for proto=fd [ 701.971904][T22080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4267'. [ 702.069418][T22080] bridge0: entered promiscuous mode [ 702.076533][T22080] bond0: left promiscuous mode [ 702.078239][T22080] syz_tun: left promiscuous mode [ 702.100141][T22080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.106642][T22080] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.123398][T22080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 702.129168][ T29] ip6_vti0 speed is unknown, defaulting to 1000 [ 702.131313][ T29] syz2: Port: 1 Link ACTIVE [ 702.133708][ T29] ip6_vti0 speed is unknown, defaulting to 1000 [ 702.828936][T22118] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4278'. [ 702.832558][T22118] netlink: 'syz.2.4278': attribute type 10 has an invalid length. [ 702.837438][T22118] : (slave bridge0): Enslaving as an active interface with an up link [ 702.841236][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4278'. [ 702.865199][T22121] loop2: detected capacity change from 0 to 7 [ 702.865251][T22118] : (slave bridge0): Releasing backup interface [ 702.869363][T22121] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 702.872579][T22121] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 702.875171][T22121] Dev loop2: unable to read RDB block 7 [ 702.877310][T22121] loop2: AHDI p2 p3 [ 702.878677][T22121] loop2: partition table partially beyond EOD, truncated [ 702.880930][T22121] loop2: p3 start 335544320 is beyond EOD, truncated [ 702.981857][T22126] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 703.097320][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4285'. [ 703.356448][T22136] 9pnet_fd: Insufficient options for proto=fd [ 703.532766][T22161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4293'. [ 703.648616][T22164] overlayfs: failed to clone upperpath [ 703.695931][T22171] batadv_slave_0: left promiscuous mode [ 703.704357][T22171] bridge2: left promiscuous mode [ 703.707156][ T6023] ip6_vti0 speed is unknown, defaulting to 1000 [ 703.710127][ T6023] syz2: Port: 1 Link DOWN [ 703.711535][ T6023] ip6_vti0 speed is unknown, defaulting to 1000 [ 704.078401][T22187] loop2: detected capacity change from 0 to 7 [ 704.080946][T22187] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 704.084122][T22187] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 704.086270][T22187] Dev loop2: unable to read RDB block 7 [ 704.088018][T22187] loop2: AHDI p2 p3 [ 704.089714][T22187] loop2: partition table partially beyond EOD, truncated [ 704.091979][T22187] loop2: p3 start 335544320 is beyond EOD, truncated [ 704.121256][T22190] input: syz0 as /devices/virtual/input/input47 [ 704.431032][T22206] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 704.434152][T22207] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 704.467566][T22209] overlayfs: failed to clone upperpath [ 704.470583][T22209] overlay: Unknown parameter 'rootcontext' [ 704.606567][T22211] 9pnet_fd: Insufficient options for proto=fd [ 704.698404][T22217] netlink: 'syz.1.4309': attribute type 10 has an invalid length. [ 704.705325][T22217] bridge_slave_1: entered promiscuous mode [ 704.707441][T22217] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 704.719703][T22219] loop2: detected capacity change from 0 to 7 [ 704.722053][T22219] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 704.725760][T22219] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 704.729140][T22219] Dev loop2: unable to read RDB block 7 [ 704.730917][T22219] loop2: AHDI p2 p3 [ 704.732166][T22219] loop2: partition table partially beyond EOD, truncated [ 704.734411][T22219] loop2: p3 start 335544320 is beyond EOD, truncated [ 704.738850][T22222] 9pnet_virtio: no channels available for device syz [ 704.765561][T22228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.805313][T22228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4312'. [ 705.042903][T22257] loop2: detected capacity change from 0 to 7 [ 705.045237][T22257] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 705.048358][T22257] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 705.051654][T22257] Dev loop2: unable to read RDB block 7 [ 705.053495][T22257] loop2: AHDI p2 p3 [ 705.054766][T22257] loop2: partition table partially beyond EOD, truncated [ 705.057113][T22257] loop2: p3 start 335544320 is beyond EOD, truncated [ 705.110872][T22260] syz.2.4321: attempt to access beyond end of device [ 705.110872][T22260] sr0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 705.165722][T22254] 9pnet_fd: Insufficient options for proto=fd [ 705.402103][T22288] loop2: detected capacity change from 0 to 7 [ 705.405741][T22288] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 705.409054][T22288] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 705.411322][T22288] Dev loop2: unable to read RDB block 7 [ 705.413613][T22288] loop2: AHDI p2 p3 [ 705.414965][T22288] loop2: partition table partially beyond EOD, truncated [ 705.417577][T22288] loop2: p3 start 335544320 is beyond EOD, truncated [ 705.671057][T22305] 9pnet_fd: Insufficient options for proto=fd [ 705.790557][T22314] loop2: detected capacity change from 0 to 7 [ 705.792937][T22314] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 705.797507][T22314] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 705.799705][T22314] Dev loop2: unable to read RDB block 7 [ 705.801455][T22314] loop2: AHDI p2 p3 [ 705.802731][T22314] loop2: partition table partially beyond EOD, truncated [ 705.805160][T22314] loop2: p3 start 335544320 is beyond EOD, truncated [ 705.840368][T22318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4339'. [ 705.862485][T22318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4339'. [ 706.017941][T22289] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 706.164530][T22334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4344'. [ 706.187452][T22334] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 706.189852][T22334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 706.192353][T22334] vhci_hcd vhci_hcd.0: Device attached [ 706.196506][T22335] vhci_hcd: unknown pdu 2 [ 706.200041][T10879] vhci_hcd: stop threads [ 706.201577][T10879] vhci_hcd: release socket [ 706.203102][T10879] vhci_hcd: disconnect device [ 706.387181][T22338] 9pnet_fd: Insufficient options for proto=fd [ 706.478816][T22340] 9pnet_fd: Insufficient options for proto=fd [ 707.591829][T22381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4359'. [ 707.750085][T22379] 9pnet_fd: Insufficient options for proto=fd [ 707.844451][T22389] netlink: 'syz.1.4361': attribute type 3 has an invalid length. [ 707.846850][T22389] netlink: 'syz.1.4361': attribute type 3 has an invalid length. [ 707.849398][T22389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4361'. [ 707.856165][T22389] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4361'. [ 707.860002][T22391] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4361'. [ 707.917239][T22399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4363'. [ 708.120091][T22416] veth1_to_hsr: entered promiscuous mode [ 708.121846][T22416] veth1_to_hsr: entered allmulticast mode [ 708.193668][T22414] 9pnet_fd: Insufficient options for proto=fd [ 708.501039][T22438] 9pnet_fd: Insufficient options for proto=fd [ 709.365150][T22448] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4378'. [ 709.373567][T22445] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 709.747356][T22460] loop2: detected capacity change from 0 to 7 [ 709.749925][T22460] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 709.753367][T22460] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 709.755743][T22460] Dev loop2: unable to read RDB block 7 [ 709.757756][T22460] loop2: AHDI p2 p3 [ 709.759078][T22460] loop2: partition table partially beyond EOD, truncated [ 709.761374][T22460] loop2: p3 start 335544320 is beyond EOD, truncated [ 709.970860][T22474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4386'. [ 710.356507][T22483] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 710.455865][T22493] batadv0: entered promiscuous mode [ 710.895788][T22485] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 710.961625][T22517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4398'. [ 711.140105][T22532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4401'. [ 711.174570][T22534] loop2: detected capacity change from 0 to 7 [ 711.177188][T22534] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 711.180385][T22534] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 711.182659][T22534] Dev loop2: unable to read RDB block 7 [ 711.184485][T22534] loop2: AHDI p2 p3 [ 711.185879][T22534] loop2: partition table partially beyond EOD, truncated [ 711.188076][T22534] loop2: p3 start 335544320 is beyond EOD, truncated [ 711.225505][T22528] 9pnet_fd: Insufficient options for proto=fd [ 711.529237][T22548] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 711.531307][T22548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 711.534231][T22548] vhci_hcd vhci_hcd.0: Device attached [ 711.726435][T22559] trusted_key: encrypted_key: insufficient parameters specified [ 711.775837][ T34] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 712.044743][T22562] ufs: failed to set blocksize [ 712.419475][T22568] overlayfs: failed to resolve './file1': -2 [ 714.560077][T22574] loop2: detected capacity change from 0 to 7 [ 714.564719][T22574] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 714.567855][T22574] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 714.569899][T22574] Dev loop2: unable to read RDB block 7 [ 714.571552][T22574] loop2: AHDI p2 p3 [ 714.572834][T22574] loop2: partition table partially beyond EOD, truncated [ 714.575667][T22574] loop2: p3 start 335544320 is beyond EOD, truncated [ 714.593975][T22578] vlan0: entered allmulticast mode [ 714.596379][T22578] macsec0: entered allmulticast mode [ 714.916818][T22579] 9pnet_fd: Insufficient options for proto=fd [ 715.034272][ T40] kauditd_printk_skb: 186 callbacks suppressed [ 715.034283][ T40] audit: type=1326 audit(2000263244.730:19182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.0.4422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 715.045415][ T40] audit: type=1326 audit(2000263244.730:19183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.0.4422" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 715.057214][ T40] audit: type=1326 audit(2000263244.730:19184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.0.4422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 715.065934][ T40] audit: type=1326 audit(2000263244.730:19185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.0.4422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 715.075858][ T40] audit: type=1326 audit(2000263244.741:19186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.0.4422" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 715.083013][ T40] audit: type=1326 audit(2000263244.741:19187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.0.4422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 715.089566][ T40] audit: type=1326 audit(2000263244.741:19188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.0.4422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 715.096243][ T40] audit: type=1326 audit(2000263244.741:19189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.0.4422" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 715.102893][ T40] audit: type=1326 audit(2000263244.741:19190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.0.4422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 715.109556][ T40] audit: type=1326 audit(2000263244.741:19191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.0.4422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 715.149608][T22618] loop2: detected capacity change from 0 to 7 [ 715.152895][T22618] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 715.156060][T22618] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 715.159667][T22618] Dev loop2: unable to read RDB block 7 [ 715.161431][T22618] loop2: AHDI p2 p3 [ 715.162818][T22618] loop2: partition table partially beyond EOD, truncated [ 715.165107][T22618] loop2: p3 start 335544320 is beyond EOD, truncated [ 715.295895][T22627] tc_dump_action: action bad kind [ 715.416430][T22637] lo: MTU too low for tipc bearer [ 715.418089][T22637] tipc: Enabling of bearer rejected, failed to enable media [ 715.490538][T22629] 9pnet_fd: Insufficient options for proto=fd [ 715.684564][T22643] 9pnet_fd: Insufficient options for proto=fd [ 715.867095][T22631] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 716.260472][T22666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4439'. [ 716.456385][T22672] 9pnet_fd: Insufficient options for proto=fd [ 717.371612][T22693] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 717.903791][T22711] 9pnet_fd: Insufficient options for proto=fd [ 718.006547][T22714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4455'. [ 718.019110][T22714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4455'. [ 718.825854][T22741] 9pnet_fd: Insufficient options for proto=fd [ 718.992158][T22747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4464'. [ 719.004332][T22747] bond2 (unregistering): Released all slaves [ 719.231123][T22754] 9pnet_fd: Insufficient options for proto=fd [ 719.468208][T22744] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 719.712795][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4471'. [ 719.716316][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4471'. [ 720.001989][T22776] 9pnet_fd: Insufficient options for proto=fd [ 720.265881][T22788] overlayfs: failed to clone upperpath [ 720.269278][T22786] 9pnet_fd: Insufficient options for proto=fd [ 720.492459][T22796] CIFS mount error: No usable UNC path provided in device string! [ 720.492459][T22796] [ 720.495575][T22796] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 721.160345][T22809] 9pnet_fd: Insufficient options for proto=fd [ 721.512280][T22820] 9pnet_fd: Insufficient options for proto=fd [ 721.589256][T22823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.641782][T22823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.211965][T22832] C: renamed from team_slave_0 [ 722.214753][T22832] netlink: 'syz.1.4490': attribute type 1 has an invalid length. [ 722.217393][T22832] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4490'. [ 722.220086][T22832] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 722.493423][T22845] loop2: detected capacity change from 0 to 7 [ 722.495940][T22845] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 722.498971][T22845] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 722.501432][T22845] Dev loop2: unable to read RDB block 7 [ 722.504626][T22845] loop2: AHDI p2 p3 [ 722.505925][T22845] loop2: partition table partially beyond EOD, truncated [ 722.508025][T22845] loop2: p3 start 335544320 is beyond EOD, truncated [ 722.515668][T22843] 9pnet_fd: Insufficient options for proto=fd [ 723.276090][T22866] overlayfs: failed to clone upperpath [ 723.611669][T22855] kexec: Could not allocate control_code_buffer [ 723.748630][T22885] loop2: detected capacity change from 0 to 7 [ 723.751381][T22885] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 723.754519][T22885] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 723.756661][T22885] Dev loop2: unable to read RDB block 7 [ 723.758499][T22885] loop2: AHDI p2 p3 [ 723.759999][T22885] loop2: partition table partially beyond EOD, truncated [ 723.762139][T22885] loop2: p3 start 335544320 is beyond EOD, truncated [ 723.776422][T22882] 9pnet_fd: Insufficient options for proto=fd [ 724.152421][T22903] 9pnet_fd: Insufficient options for proto=fd [ 725.410158][T22925] loop2: detected capacity change from 0 to 7 [ 725.412816][T22925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 725.415874][T22925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 725.418019][T22925] Dev loop2: unable to read RDB block 7 [ 725.419847][T22925] loop2: AHDI p2 p3 [ 725.421041][T22925] loop2: partition table partially beyond EOD, truncated [ 725.423501][T22925] loop2: p3 start 335544320 is beyond EOD, truncated [ 725.426534][T22928] 9pnet_fd: Insufficient options for proto=fd [ 725.429417][T22928] 9pnet_fd: Insufficient options for proto=fd [ 725.432204][T22928] 9pnet_fd: Insufficient options for proto=fd [ 725.479244][T22934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4521'. [ 725.500499][T22934] 9pnet_fd: Insufficient options for proto=fd [ 725.530948][T22934] vhci_hcd vhci_hcd.0: port 0 already used [ 725.613957][T22933] 9pnet_fd: Insufficient options for proto=fd [ 725.746714][T22942] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20002 [ 726.001790][T22946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 726.172299][T22948] netlink: 680 bytes leftover after parsing attributes in process `syz.0.4526'. [ 726.348547][T22960] 9pnet_fd: Insufficient options for proto=fd [ 726.484345][T22963] wireguard0: entered promiscuous mode [ 726.486129][T22963] wireguard0: entered allmulticast mode [ 726.589827][T22967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 726.596265][T22967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 726.602826][T22967] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 726.607585][T22967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 726.610205][T22967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 726.641770][T22966] lo speed is unknown, defaulting to 1000 [ 726.723359][T22966] vxcan1 speed is unknown, defaulting to 1000 [ 726.739463][T22974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4533'. [ 726.830911][T21804] bond0: (slave syz_tun): Releasing backup interface [ 726.838555][T22966] ip6_vti0 speed is unknown, defaulting to 1000 [ 726.863886][T22972] 9pnet_fd: Insufficient options for proto=fd [ 726.938736][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4534'. [ 727.022532][T22986] lo speed is unknown, defaulting to 1000 [ 727.034133][T22989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4536'. [ 727.052066][T22966] chnl_net:caif_netlink_parms(): no params data found [ 727.087757][T22992] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4537'. [ 727.146579][T22986] vxcan1 speed is unknown, defaulting to 1000 [ 727.255378][T22966] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.257690][T22966] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.260016][T22966] bridge_slave_0: entered allmulticast mode [ 727.262691][T22966] bridge_slave_0: entered promiscuous mode [ 727.267803][T22966] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.270040][T22966] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.272318][T22966] bridge_slave_1: entered allmulticast mode [ 727.276045][T22966] bridge_slave_1: entered promiscuous mode [ 727.278391][T22986] ip6_vti0 speed is unknown, defaulting to 1000 [ 727.337549][T22966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.343827][T22966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.345501][T23003] nfs: Deprecated parameter 'nointr' [ 727.421708][T22966] team0: Port device team_slave_0 added [ 727.434943][T22966] team0: Port device team_slave_1 added [ 727.491445][T22966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.493787][T22966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.501722][T22966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.506119][T22966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.508299][T22966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.516443][T22966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.594452][T22966] hsr_slave_0: entered promiscuous mode [ 727.596823][T22966] hsr_slave_1: entered promiscuous mode [ 727.601327][T22966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 727.603755][T22966] Cannot create hsr debugfs directory [ 727.698557][T23008] loop2: detected capacity change from 0 to 7 [ 727.698867][ T13] smc: removing ib device syz2 [ 727.710196][T23008] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 727.713683][T23008] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 727.715774][T23008] Dev loop2: unable to read RDB block 7 [ 727.717531][T23008] loop2: AHDI p2 p3 [ 727.719253][T23008] loop2: partition table partially beyond EOD, truncated [ 727.726709][T23008] loop2: p3 start 335544320 is beyond EOD, truncated [ 728.339586][T23020] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4545'. [ 728.342521][T23020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4545'. [ 728.542289][ T5966] Bluetooth: hci1: command tx timeout [ 728.789536][T10879] bond0 (unregistering): Released all slaves [ 729.210045][T10879] bond1 (unregistering): Released all slaves [ 729.377013][T10879] bond2 (unregistering): Released all slaves [ 729.378704][T23033] 9pnet_fd: Insufficient options for proto=fd [ 729.575983][T10879] bond3 (unregistering): Released all slaves [ 729.711383][T10879] bond4 (unregistering): Released all slaves [ 729.813823][T10879] bond5 (unregistering): Released all slaves [ 730.034850][T23040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4550'. [ 730.097172][T23035] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 730.100577][T23035] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 730.104178][T23035] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 730.107495][T23035] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 730.121166][T23035] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 730.124763][T23035] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 730.127684][T23035] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 730.130695][T23035] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 730.146599][T10879] þ: left promiscuous mode [ 730.229136][T10879] : left promiscuous mode [ 730.522361][ T5966] Bluetooth: hci1: command tx timeout [ 730.650128][T10879] hsr_slave_0: left promiscuous mode [ 730.653783][T10879] hsr_slave_1: left promiscuous mode [ 730.662188][T10879] pim6reg (unregistering): left allmulticast mode [ 731.089637][T23057] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 731.091765][T23057] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 731.092252][T23055] 9pnet_fd: Insufficient options for proto=fd [ 731.096992][T23057] vhci_hcd vhci_hcd.0: Device attached [ 731.102666][T23058] usbip_core: unknown command [ 731.104938][T23058] vhci_hcd: unknown pdu 0 [ 731.111138][T23058] usbip_core: unknown command [ 731.116567][ T6612] vhci_hcd: stop threads [ 731.118504][ T6612] vhci_hcd: release socket [ 731.120373][ T6612] vhci_hcd: disconnect device [ 731.266384][T23067] netlink: 'syz.2.4558': attribute type 1 has an invalid length. [ 731.273871][T23067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4558'. [ 731.890362][T23061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 731.893411][T23061] bond2: entered promiscuous mode [ 731.896109][T23061] bond0: (slave bond2): Enslaving as an active interface with an up link [ 731.967198][T23073] loop2: detected capacity change from 0 to 7 [ 731.969594][T23073] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 731.975623][T23073] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 731.977758][T23073] Dev loop2: unable to read RDB block 7 [ 731.979524][T23073] loop2: AHDI p2 p3 [ 731.982411][T23073] loop2: partition table partially beyond EOD, truncated [ 731.984648][T23073] loop2: p3 start 335544320 is beyond EOD, truncated [ 732.292284][T23078] bridge7: entered promiscuous mode [ 732.294042][T23078] bridge7: entered allmulticast mode [ 732.475179][T23079] overlayfs: failed to clone lowerpath [ 732.513309][ T5966] Bluetooth: hci1: command tx timeout [ 732.787371][T22966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 732.797706][T22966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 732.820523][T23081] lo speed is unknown, defaulting to 1000 [ 732.827657][T23082] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4562'. [ 732.831652][T23082] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4562'. [ 732.835656][T22966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 732.852731][T22966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 732.870917][T10879] IPVS: stop unused estimator thread 0... [ 733.011789][T23081] vxcan1 speed is unknown, defaulting to 1000 [ 733.038544][T22966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.084026][T22966] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.094999][T23098] 9pnet_fd: Insufficient options for proto=fd [ 733.100420][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.102718][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.128798][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.131076][ T6612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.299127][T22966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.321043][T22966] veth0_vlan: entered promiscuous mode [ 733.328047][T22966] veth1_vlan: entered promiscuous mode [ 733.342994][T22966] veth0_macvtap: entered promiscuous mode [ 733.348109][T22966] veth1_macvtap: entered promiscuous mode [ 733.359505][T22966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.363944][T22966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.373723][T22966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.376457][T22966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.379148][T22966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.398553][T22966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.806630][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.811095][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.829209][ T6608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.831668][ T6608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.222097][T23101] Set syz1 is full, maxelem 65536 reached [ 734.485113][ T5966] Bluetooth: hci1: command tx timeout [ 734.739539][T23130] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 734.907138][T23139] loop2: detected capacity change from 0 to 7 [ 734.909754][T23139] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 734.912912][T23139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 734.915145][T23139] Dev loop2: unable to read RDB block 7 [ 734.917005][T23139] loop2: AHDI p2 p3 [ 734.918330][T23139] loop2: partition table partially beyond EOD, truncated [ 734.921093][T23139] loop2: p3 start 335544320 is beyond EOD, truncated [ 735.183789][T23143] netlink: 'syz.3.4575': attribute type 1 has an invalid length. [ 735.456771][T23151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4579'. [ 735.909702][T23156] netlink: 'syz.3.4581': attribute type 3 has an invalid length. [ 735.912439][T23156] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4581'. [ 735.916459][T23157] netlink: 'syz.3.4581': attribute type 3 has an invalid length. [ 735.919184][T23157] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4581'. [ 736.377982][T23167] loop2: detected capacity change from 0 to 7 [ 736.384174][T23167] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 736.387272][T23167] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 736.389548][T23167] Dev loop2: unable to read RDB block 7 [ 736.392004][T23167] loop2: AHDI p2 p3 [ 736.393259][T23167] loop2: partition table partially beyond EOD, truncated [ 736.395450][T23167] loop2: p3 start 335544320 is beyond EOD, truncated [ 736.506761][T23178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4589'. [ 736.811416][T23161] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 737.086710][T23187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.139837][T23188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.187670][T23190] 9pnet_fd: Insufficient options for proto=fd [ 737.744912][T23207] loop2: detected capacity change from 0 to 7 [ 737.747251][T23207] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 737.750408][T23207] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 737.754388][T23207] Dev loop2: unable to read RDB block 7 [ 737.756120][T23207] loop2: AHDI p2 p3 [ 737.757378][T23207] loop2: partition table partially beyond EOD, truncated [ 737.759579][T23207] loop2: p3 start 335544320 is beyond EOD, truncated [ 737.824503][T23211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4599'. [ 737.827364][T23212] tipc: Started in network mode [ 737.830319][T23212] tipc: Node identity ac14140f, cluster identity 4711 [ 737.833737][T23212] tipc: New replicast peer: 255.255.255.255 [ 737.837040][T23212] tipc: Enabled bearer , priority 10 [ 738.690606][T23220] wireguard0: entered promiscuous mode [ 738.692996][T23220] wireguard0: entered allmulticast mode [ 738.817636][T23228] 9pnet_fd: Insufficient options for proto=fd [ 738.895269][ T10] tipc: Node number set to 2886997007 [ 739.249043][T23243] 9pnet_fd: Insufficient options for proto=fd [ 740.579981][T23245] syz.2.4608 (23245) used greatest stack depth: 18184 bytes left [ 740.646032][T23265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4613'. [ 740.800102][T23269] nfs: Deprecated parameter 'nointr' [ 740.921186][T23278] overlayfs: failed to clone upperpath [ 740.992844][T23282] 9pnet_fd: Insufficient options for proto=fd [ 741.230292][T23296] nfs: Deprecated parameter 'nointr' [ 741.365037][T23304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4626'. [ 741.367841][T23304] tc_dump_action: action bad kind [ 741.826588][T23305] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 741.938511][T23309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4627'. [ 741.941326][T23309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4627'. [ 742.249884][T23321] loop2: detected capacity change from 0 to 7 [ 742.252630][T23321] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 742.255741][T23321] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 742.271255][T23321] Dev loop2: unable to read RDB block 7 [ 742.273075][T23321] loop2: AHDI p2 p3 [ 742.273871][T23322] 9pnet_fd: Insufficient options for proto=fd [ 742.274342][T23321] loop2: partition table partially beyond EOD, truncated [ 742.278718][T23321] loop2: p3 start 335544320 is beyond EOD, truncated [ 742.311716][T23324] netlink: 'syz.3.4632': attribute type 21 has an invalid length. [ 742.359777][T23326] sctp: [Deprecated]: syz.1.4633 (pid 23326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.359777][T23326] Use struct sctp_sack_info instead [ 742.476809][T23331] nfs: Deprecated parameter 'nointr' [ 742.563875][T23334] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 742.566619][T23334] overlayfs: failed to set xattr on upper [ 742.568464][T23334] overlayfs: ...falling back to redirect_dir=nofollow. [ 742.570587][T23334] overlayfs: ...falling back to index=off. [ 742.573734][T23334] overlayfs: ...falling back to uuid=null. [ 742.575649][T23334] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 742.608834][T23319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4628'. [ 742.900057][T23348] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4640'. [ 743.151446][T23368] nfs: Deprecated parameter 'nointr' [ 744.176491][T22549] vhci_hcd: connection reset by peer [ 744.182452][ T6604] vhci_hcd: stop threads [ 744.183874][ T6604] vhci_hcd: release socket [ 744.188200][ T6604] vhci_hcd: disconnect device [ 744.247822][ T34] vhci_hcd: vhci_device speed not set [ 744.303408][T22967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 744.308351][T22967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 744.311192][T22967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 744.313980][T22967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 744.316657][T22967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 744.369572][T23405] lo speed is unknown, defaulting to 1000 [ 744.451852][T23405] vxcan1 speed is unknown, defaulting to 1000 [ 744.626903][T23405] chnl_net:caif_netlink_parms(): no params data found [ 744.637066][T23411] netlink: 'syz.3.4651': attribute type 10 has an invalid length. [ 744.637069][T23412] netlink: 'syz.3.4651': attribute type 10 has an invalid length. [ 744.701204][T23417] 9pnet_fd: Insufficient options for proto=fd [ 744.720329][T23405] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.723158][T23405] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.726207][T23405] bridge_slave_0: entered allmulticast mode [ 744.729998][T23405] bridge_slave_0: entered promiscuous mode [ 744.735895][T23405] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.738753][T23405] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.741874][T23405] bridge_slave_1: entered allmulticast mode [ 744.745691][T23405] bridge_slave_1: entered promiscuous mode [ 744.787514][T23405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.793219][T23405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.830927][T23405] team0: Port device team_slave_0 added [ 744.835183][T23405] team0: Port device team_slave_1 added [ 744.869701][T23405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.871994][T23405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.882519][T23405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.886771][T23405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.889344][T23405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.899622][T23405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.917327][T23421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4654'. [ 744.955070][T23405] hsr_slave_0: entered promiscuous mode [ 744.957404][T23405] hsr_slave_1: entered promiscuous mode [ 744.959367][T23405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 744.961860][T23405] Cannot create hsr debugfs directory [ 745.107713][T23405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.121509][T23425] nfs: Deprecated parameter 'nointr' [ 745.188837][T23405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.229465][T23405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.267115][T23405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.371012][T23405] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 745.375609][T23405] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 745.379574][T23405] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 745.383515][T23405] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 745.407598][T23405] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.410628][T23405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.413697][T23405] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.416613][T23405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.480663][T23433] veth1_virt_wifi: mtu less than device minimum [ 745.506056][T23405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.517141][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.522390][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.558539][T23405] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.563497][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.565754][ T6602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.572451][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.574621][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.676070][T23405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.697343][T23405] veth0_vlan: entered promiscuous mode [ 745.703968][T23405] veth1_vlan: entered promiscuous mode [ 745.719190][T23405] veth0_macvtap: entered promiscuous mode [ 745.722896][T23405] veth1_macvtap: entered promiscuous mode [ 745.737535][T23405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.745267][T23405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.749572][T23405] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.752472][T23405] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.756189][T23405] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.758869][T23405] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.809834][ T6602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.816697][ T6602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.831018][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.836459][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.888479][T23443] binder: 23442:23443 ioctl c0306201 80000280 returned -14 [ 745.908386][T23443] sp0: Synchronizing with TNC [ 746.288168][T23465] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 746.294980][T23465] overlayfs: overlapping lowerdir path [ 746.297105][T22967] Bluetooth: hci2: command tx timeout [ 746.942793][T23474] sctp: [Deprecated]: syz.2.4666 (pid 23474) Use of int in max_burst socket option deprecated. [ 746.942793][T23474] Use struct sctp_assoc_value instead [ 747.050277][T23479] nfs: Deprecated parameter 'nointr' [ 747.092192][T23481] pim6reg: entered allmulticast mode [ 747.094737][T23481] pim6reg: left allmulticast mode [ 747.435013][T23488] lo speed is unknown, defaulting to 1000 [ 747.436947][T23488] lo speed is unknown, defaulting to 1000 [ 747.440312][T23488] lo speed is unknown, defaulting to 1000 [ 747.464629][T23488] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 747.511541][T23488] lo speed is unknown, defaulting to 1000 [ 747.517324][T23488] lo speed is unknown, defaulting to 1000 [ 747.522638][T23488] lo speed is unknown, defaulting to 1000 [ 747.527215][T23488] lo speed is unknown, defaulting to 1000 [ 747.534202][T23488] lo speed is unknown, defaulting to 1000 [ 747.539847][T23488] lo speed is unknown, defaulting to 1000 [ 747.901291][T23508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4676'. [ 748.020113][T23512] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4679'. [ 748.137817][T23517] nfs: Deprecated parameter 'nointr' [ 748.255749][T23533] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 748.286853][T22967] Bluetooth: hci2: command tx timeout [ 748.323089][ T40] kauditd_printk_skb: 751 callbacks suppressed [ 748.323100][ T40] audit: type=1326 audit(2000263279.669:19943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.1.4686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 748.336021][ T40] audit: type=1326 audit(2000263279.669:19944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.1.4686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 748.342843][ T40] audit: type=1326 audit(2000263279.669:19945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.1.4686" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 748.349611][ T40] audit: type=1326 audit(2000263279.669:19946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.1.4686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 748.356505][ T40] audit: type=1326 audit(2000263279.669:19947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.1.4686" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 748.363408][ T40] audit: type=1326 audit(2000263279.679:19948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.1.4686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 748.370057][ T40] audit: type=1326 audit(2000263279.679:19949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.1.4686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 748.377013][ T40] audit: type=1326 audit(2000263279.679:19950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.1.4686" exe="/syz-executor" sig=0 arch=40000003 syscall=294 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 748.383734][ T40] audit: type=1326 audit(2000263279.690:19951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.1.4686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 748.390405][ T40] audit: type=1326 audit(2000263279.690:19952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.1.4686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 748.458874][T23543] 9p: Unknown uid 00000000004294967295 [ 748.641153][T23550] program syz.2.4690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 748.782970][T23524] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 748.857732][T23555] nfs: Deprecated parameter 'nointr' [ 749.171340][T23574] ip6tnl1: entered promiscuous mode [ 749.179215][T23575] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 749.756267][T23586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4698'. [ 749.786180][T23587] lo speed is unknown, defaulting to 1000 [ 749.867686][T23587] vxcan1 speed is unknown, defaulting to 1000 [ 749.944809][T23587] lo speed is unknown, defaulting to 1000 [ 749.971253][T23595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4700'. [ 750.096234][T23577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4696'. [ 750.099401][T23577] netlink: 'syz.1.4696': attribute type 5 has an invalid length. [ 750.101899][T23577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4696'. [ 750.107509][T23577] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 750.110039][T23577] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 750.112519][T23577] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 750.115002][T23577] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 750.117635][T23577] geneve2: entered promiscuous mode [ 750.119262][T23577] geneve2: entered allmulticast mode [ 750.258667][T22967] Bluetooth: hci2: command tx timeout [ 750.489325][T23604] nfs: Deprecated parameter 'nointr' [ 751.058330][T23623] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 751.251156][ T9] IPVS: starting estimator thread 0... [ 751.335261][T23631] IPVS: using max 41 ests per chain, 98400 per kthread [ 751.402463][T23638] bond0: entered allmulticast mode [ 751.404067][T23638] bridge0: entered allmulticast mode [ 751.405769][T23638] bridge_slave_1: entered allmulticast mode [ 751.408049][T23638] bond2: entered allmulticast mode [ 751.410972][T23638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.415306][T23638] netlink: 'syz.1.4712': attribute type 10 has an invalid length. [ 751.487903][T23642] nfs: Deprecated parameter 'nointr' [ 751.521603][T23647] 9pnet_fd: Insufficient options for proto=fd [ 751.648076][T22967] Bluetooth: hci1: Malformed LE Event: 0x0d [ 751.697302][T23667] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 752.171236][ T9] kernel write not supported for file /snd/midiC2D0 (pid: 9 comm: kworker/0:0) [ 752.239925][T22967] Bluetooth: hci2: command tx timeout [ 752.255638][T23683] nfs: Deprecated parameter 'nointr' [ 752.675494][T23688] overlayfs: failed to clone upperpath [ 752.702326][T23677] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 752.953839][ T34] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 753.076209][T23708] netlink: 'syz.0.4733': attribute type 1 has an invalid length. [ 753.098516][T23708] bond1: (slave gretap1): making interface the new active one [ 753.101331][T23708] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 753.145079][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 753.152391][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 753.158459][ T34] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 753.161037][ T34] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 753.164600][ T34] usb 7-1: Product: syz [ 753.165858][ T34] usb 7-1: Manufacturer: syz [ 753.167334][ T34] usb 7-1: SerialNumber: syz [ 753.169907][ T34] usb 7-1: config 0 descriptor?? [ 753.171923][T23695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 753.174611][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 753.176256][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 753.178092][T23718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4736'. [ 753.276308][T23716] lo speed is unknown, defaulting to 1000 [ 753.340521][T23275] bridge0: port 1(syz_tun) entered disabled state [ 753.377730][T23275] syz_tun (unregistering): left allmulticast mode [ 753.379861][T23275] syz_tun (unregistering): left promiscuous mode [ 753.381984][T23275] bridge0: port 1(syz_tun) entered disabled state [ 753.387976][ T5966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 753.394290][ T5966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 753.397120][ T5966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 753.403262][ T5966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 753.406305][ T5966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 753.457756][T23725] lo speed is unknown, defaulting to 1000 [ 753.457784][T23716] vxcan1 speed is unknown, defaulting to 1000 [ 753.477969][ T6023] usb 7-1: USB disconnect, device number 35 [ 753.577082][T23716] lo speed is unknown, defaulting to 1000 [ 753.597482][T23725] vxcan1 speed is unknown, defaulting to 1000 [ 753.614889][ T76] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.618992][ T76] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 753.673973][T23725] lo speed is unknown, defaulting to 1000 [ 753.705912][ T76] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.709449][ T76] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 753.758352][ T76] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.761595][ T76] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 753.776251][T23725] chnl_net:caif_netlink_parms(): no params data found [ 753.801464][ T6023] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 753.850940][ T76] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.854043][ T76] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 753.860824][T23725] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.863117][T23725] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.865571][T23725] bridge_slave_0: entered allmulticast mode [ 753.870650][T23725] bridge_slave_0: entered promiscuous mode [ 753.875824][T23725] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.880236][T23725] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.883035][T23725] bridge_slave_1: entered allmulticast mode [ 753.885672][T23725] bridge_slave_1: entered promiscuous mode [ 753.928368][T23725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.933550][T23725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.963861][ T6023] usb 7-1: Using ep0 maxpacket: 32 [ 753.973228][ T6023] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 753.979870][ T6023] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 753.983936][ T6023] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 753.987507][ T6023] usb 7-1: Product: syz [ 753.987760][T23725] team0: Port device team_slave_0 added [ 753.989301][ T6023] usb 7-1: Manufacturer: syz [ 753.989320][ T6023] usb 7-1: SerialNumber: syz [ 753.993114][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4738'. [ 753.993719][ T6023] usb 7-1: config 0 descriptor?? [ 754.002028][T23695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 754.004384][T23725] team0: Port device team_slave_1 added [ 754.005960][ T6023] hub 7-1:0.0: bad descriptor, ignoring hub [ 754.009364][ T6023] hub 7-1:0.0: probe with driver hub failed with error -5 [ 754.046827][T23725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.049078][T23725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.057351][T23725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.085641][T23725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.088399][T23725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.096311][T23725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.139232][T23740] netlink: 'syz.3.4738': attribute type 21 has an invalid length. [ 754.384780][ T76] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 754.388307][ T76] bridge0 (unregistering): left promiscuous mode [ 754.390882][ T76] bridge0 (unregistering): left allmulticast mode [ 754.846961][ T76] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 754.850631][ T76] bridge_slave_1: left promiscuous mode [ 754.852485][ T76] bridge_slave_1: left allmulticast mode [ 754.857459][ T76] bond0 (unregistering): (slave bond2): Releasing backup interface [ 754.863127][ T76] bond2 (unregistering): left promiscuous mode [ 754.865507][ T76] bond2 (unregistering): left allmulticast mode [ 754.869052][ T76] bond0 (unregistering): Released all slaves [ 754.935643][T23749] nfs: Deprecated parameter 'nointr' [ 754.977729][ T76] bond1 (unregistering): Released all slaves [ 755.064742][ T76] bond2 (unregistering): Released all slaves [ 755.071765][ T76] bond3 (unregistering): Released all slaves [ 755.192631][ T6023] usb 7-1: USB disconnect, device number 36 [ 755.301863][ T76] : left promiscuous mode [ 755.364458][T22967] Bluetooth: hci0: command tx timeout [ 755.606539][T23725] hsr_slave_0: entered promiscuous mode [ 755.641183][T23725] hsr_slave_1: entered promiscuous mode [ 755.660962][T23725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 755.663447][T23725] Cannot create hsr debugfs directory [ 755.665254][ T76] : left promiscuous mode [ 755.842942][T23754] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4742'. [ 755.859231][T23754] batadv1: entered allmulticast mode [ 755.897040][T23755] input: syz1 as /devices/virtual/input/input48 [ 755.937296][ T76] tipc: Disabling bearer [ 755.939813][ T76] tipc: Left network mode [ 756.543896][T23725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 756.548350][T23725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 756.553912][T23725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 756.560852][T23725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 756.617530][T23725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.627759][T23725] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.639436][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.642297][ T6604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.647683][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.650577][ T6604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.680435][ T76] hsr_slave_0: left promiscuous mode [ 756.682693][ T76] hsr_slave_1: left promiscuous mode [ 756.684801][ T76] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 756.687093][ T76] batman_adv: batadv0: Removing interface: ipvlan3 [ 756.718323][ T76] veth1_macvtap: left promiscuous mode [ 756.720090][ T76] veth0_macvtap: left promiscuous mode [ 756.721869][ T76] veth1_vlan: left promiscuous mode [ 756.725490][ T76] veth0_vlan: left promiscuous mode [ 756.822620][ T76] pimreg (unregistering): left allmulticast mode [ 756.928298][ T6023] kernel write not supported for file /snd/midiC2D0 (pid: 6023 comm: kworker/3:4) [ 757.236045][T23787] netlink: 'syz.0.4747': attribute type 9 has an invalid length. [ 757.290036][T23790] nfs: Deprecated parameter 'nointr' [ 757.300232][T23791] netlink: 'syz.0.4747': attribute type 9 has an invalid length. [ 757.356571][T22967] Bluetooth: hci0: command tx timeout [ 758.473675][ T6606] smc: removing ib device syz1 [ 758.551132][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 758.553044][ T9] syz1: Port: 1 Link DOWN [ 758.566468][T23782] macsec0: entered promiscuous mode [ 758.568602][T23782] macsec0: entered allmulticast mode [ 758.701578][T23795] netlink: 'syz.2.4751': attribute type 4 has an invalid length. [ 758.704243][T23795] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4751'. [ 758.711171][T23795] : renamed from bond0 (while UP) [ 758.778539][T23806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4754'. [ 758.781359][T23806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4754'. [ 758.832718][T23725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.876872][T23725] veth0_vlan: entered promiscuous mode [ 758.889151][T23725] veth1_vlan: entered promiscuous mode [ 758.902294][T23725] veth0_macvtap: entered promiscuous mode [ 758.906138][T23725] veth1_macvtap: entered promiscuous mode [ 758.915483][T23725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.919674][T23725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.923427][T23725] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.926216][T23725] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.928900][T23725] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.931609][T23725] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.051711][ T6619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.054169][ T6619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.056843][T10879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.059256][T10879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.209084][T23821] syzkaller0: entered promiscuous mode [ 759.210906][T23821] syzkaller0: entered allmulticast mode [ 759.229246][ T76] IPVS: stop unused estimator thread 0... [ 759.326164][T22967] Bluetooth: hci0: command tx timeout [ 759.342038][T23827] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 759.454852][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 759.454863][ T40] audit: type=1326 audit(2000263291.354:20068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.0.4760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 759.489826][ T40] audit: type=1326 audit(2000263291.364:20069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.0.4760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 759.514963][ T40] audit: type=1326 audit(2000263291.364:20070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.0.4760" exe="/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 759.539141][ T40] audit: type=1326 audit(2000263291.364:20071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.0.4760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 759.552332][ T40] audit: type=1326 audit(2000263291.364:20072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.0.4760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 759.560923][ T40] audit: type=1326 audit(2000263291.375:20073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.0.4760" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 759.567735][ T40] audit: type=1326 audit(2000263291.375:20074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.0.4760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 759.574427][ T40] audit: type=1326 audit(2000263291.375:20075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.0.4760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 759.581324][ T40] audit: type=1326 audit(2000263291.375:20076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.0.4760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 759.587981][ T40] audit: type=1326 audit(2000263291.375:20077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.0.4760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 760.802083][T23855] autofs: Unknown parameter 'comm' [ 761.307926][ T5966] Bluetooth: hci0: command tx timeout [ 762.743906][T23892] 9pnet_fd: Insufficient options for proto=fd [ 763.151778][T23912] random: crng reseeded on system resumption [ 763.298039][ T5966] Bluetooth: hci0: command 0x0405 tx timeout [ 763.469593][ T6023] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 763.607750][T23914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.615461][T23914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.682648][T23925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4785'. [ 763.742985][T23912] Process accounting resumed [ 763.932702][T23919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.935544][T23919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.331732][T23938] lo speed is unknown, defaulting to 1000 [ 764.721009][T23958] 9pnet_fd: Insufficient options for proto=fd [ 765.953937][T23986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4801'. [ 766.230290][T24004] "syz.1.4807" (24004) uses obsolete ecb(arc4) skcipher [ 766.236807][T24007] PKCS8: Unsupported PKCS#8 version [ 766.324837][T24016] random: crng reseeded on system resumption [ 766.345896][T24018] netlink: 'syz.1.4809': attribute type 1 has an invalid length. [ 766.349050][T24018] netlink: 'syz.1.4809': attribute type 4 has an invalid length. [ 766.351493][T24018] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4809'. [ 767.169366][T24022] random: crng reseeded on system resumption [ 767.244826][T24023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.248253][T24023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.262951][T24023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.265825][T24023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.350629][T24026] bridge0: entered promiscuous mode [ 767.352969][T24026] macvtap1: entered allmulticast mode [ 767.354730][T24026] bridge0: entered allmulticast mode [ 767.447144][T24038] trusted_key: encrypted_key: master key parameter '' is invalid [ 767.733748][T24041] vlan1: entered promiscuous mode [ 767.735811][T24041] vlan1: entered allmulticast mode [ 767.737568][T24041] veth0_vlan: entered allmulticast mode [ 768.493771][T24052] input: syz0 as /devices/virtual/input/input50 [ 768.608678][T24056] nfs: Deprecated parameter 'nointr' [ 769.549887][ T9] IPVS: starting estimator thread 0... [ 769.641772][T24069] IPVS: using max 40 ests per chain, 96000 per kthread [ 769.958299][T24082] 9pnet_fd: Insufficient options for proto=fd [ 770.107588][T24092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4829'. [ 770.262618][ T40] kauditd_printk_skb: 396 callbacks suppressed [ 770.262630][ T40] audit: type=1800 audit(2000263302.682:20474): pid=24098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4827" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 770.451834][T22967] Bluetooth: hci1: command 0x0c1a tx timeout [ 770.452317][ T6023] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 770.456557][ T6023] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 771.176119][T24112] netlink: 'syz.1.4830': attribute type 1 has an invalid length. [ 771.179511][T24112] netlink: 16130 bytes leftover after parsing attributes in process `syz.1.4830'. [ 771.280826][T24128] 9pnet_fd: Insufficient options for proto=fd [ 771.306021][T24131] geneve3: entered promiscuous mode [ 771.949530][T24168] netlink: 'syz.0.4845': attribute type 1 has an invalid length. [ 771.951962][T24168] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4845'. [ 772.146860][T24182] netlink: 'syz.1.4850': attribute type 2 has an invalid length. [ 772.191673][T24186] IPVS: length: 143 != 24 [ 772.211341][T24190] efs: device does not support 512 byte blocks [ 772.213689][T24190] device does not support 512 byte blocks [ 772.213689][T24190] [ 772.447290][T24201] bond1: entered promiscuous mode [ 772.493629][T24204] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.565571][T24204] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.758494][T24204] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.816059][ T6023] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 772.817953][ T6023] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 772.823162][ C1] ------------[ cut here ]------------ [ 772.825249][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 772.827758][ C1] WARNING: CPU: 1 PID: 22966 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 772.830809][ C1] Modules linked in: [ 772.832654][ C1] CPU: 1 UID: 0 PID: 22966 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 772.838424][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 772.842393][ C1] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 772.844064][ C1] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 05 ac 8b e8 45 44 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 a6 f3 37 00 90 0f 0b 90 e9 1b f6 ff [ 772.853161][ C1] RSP: 0018:ffffc90000590be8 EFLAGS: 00010082 [ 772.853195][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ab108 [ 772.853203][ C1] RDX: ffff88801390c880 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 772.853210][ C1] RBP: ffff888013918970 R08: 0000000000000001 R09: 0000000000000000 [ 772.853218][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000b218f [ 772.853225][ C1] R13: 0000000000000100 R14: ffff88806bc92978 R15: 0000000000000001 [ 772.853232][ C1] FS: 0000000000000000(0000) GS:ffff888097620000(0063) knlGS:00000000572f5440 [ 772.853256][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 772.853265][ C1] CR2: 00000000f7fd55c0 CR3: 0000000052bf0000 CR4: 0000000000352ef0 [ 772.853272][ C1] Call Trace: [ 772.853277][ C1] [ 772.853286][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 772.853301][ C1] call_timer_fn+0x197/0x620 [ 772.853317][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 772.853337][ C1] ? __run_timers+0x559/0x960 [ 772.853351][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 772.853363][ C1] __run_timers+0x569/0x960 [ 772.853380][ C1] ? __pfx___run_timers+0x10/0x10 [ 772.853402][ C1] run_timer_base+0x114/0x190 [ 772.853415][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 772.853431][ C1] run_timer_softirq+0x1a/0x40 [ 772.853444][ C1] handle_softirqs+0x219/0x8e0 [ 772.853459][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 772.853474][ C1] __irq_exit_rcu+0x109/0x170 [ 772.853486][ C1] irq_exit_rcu+0x9/0x30 [ 772.853497][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 772.853513][ C1] [ 772.853516][ C1] [ 772.853521][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 772.853534][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 772.853549][ C1] Code: ec 37 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 b2 8d 11 0f 0f 82 74 02 00 00 8b 35 7a bf 11 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 49 ec 37 12 0f 85 c7 02 00 00 48 83 c4 [ 772.853560][ C1] RSP: 0018:ffffc900036ef0e0 EFLAGS: 00000206 [ 772.853569][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c4c40 RCX: 000000002f17d697 [ 772.853576][ C1] RDX: 0000000000000000 RSI: ffffffff8de07322 RDI: ffffffff8c1578e0 [ 772.853583][ C1] RBP: 0000000000000002 R08: b6d9cbdbc142d105 R09: 0000000000000000 [ 772.853589][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 772.853595][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 772.853610][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 772.853627][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 772.853641][ C1] unwind_next_frame+0xd1/0x20a0 [ 772.853656][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 772.853671][ C1] ? dup_mmap+0xe88/0x21d0 [ 772.853687][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 772.853699][ C1] arch_stack_walk+0x94/0x100 [ 772.853713][ C1] ? dup_mmap+0xe88/0x21d0 [ 772.853727][ C1] stack_trace_save+0x8e/0xc0 [ 772.853740][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 772.853754][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 772.853768][ C1] kasan_save_stack+0x33/0x60 [ 772.853783][ C1] ? kasan_save_stack+0x33/0x60 [ 772.853797][ C1] ? kasan_save_track+0x14/0x30 [ 772.853811][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 772.853826][ C1] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 772.853840][ C1] ? ptlock_alloc+0x1f/0x70 [ 772.853853][ C1] ? pte_alloc_one+0x82/0x3a0 [ 772.853862][ C1] ? __pte_alloc+0x6d/0x3c0 [ 772.853871][ C1] ? copy_page_range+0x1aed/0x5740 [ 772.853884][ C1] ? dup_mmap+0xe88/0x21d0 [ 772.853912][ C1] kasan_save_track+0x14/0x30 [ 772.853927][ C1] __kasan_slab_alloc+0x89/0x90 [ 772.853944][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 772.853959][ C1] ? ptlock_alloc+0x1f/0x70 [ 772.853974][ C1] ptlock_alloc+0x1f/0x70 [ 772.853987][ C1] pte_alloc_one+0x82/0x3a0 [ 772.853997][ C1] __pte_alloc+0x6d/0x3c0 [ 772.854008][ C1] ? __pfx___pte_alloc+0x10/0x10 [ 772.854018][ C1] ? __pfx___might_resched+0x10/0x10 [ 772.854030][ C1] ? copy_page_range+0x13f0/0x5740 [ 772.854045][ C1] copy_page_range+0x1aed/0x5740 [ 772.854074][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 772.854091][ C1] ? __pfx___might_resched+0x10/0x10 [ 772.854102][ C1] ? __vma_enter_locked+0x163/0x3f0 [ 772.854117][ C1] ? dup_mmap+0xe38/0x21d0 [ 772.854129][ C1] ? down_write+0x14d/0x200 [ 772.854141][ C1] ? up_write+0x1b2/0x520 [ 772.854158][ C1] dup_mmap+0xe88/0x21d0 [ 772.854175][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 772.854196][ C1] copy_process+0x4081/0x7650 [ 772.854228][ C1] ? __pfx_copy_process+0x10/0x10 [ 772.854244][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 772.854260][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 772.854280][ C1] kernel_clone+0xfc/0x960 [ 772.854298][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 772.854337][ C1] __do_compat_sys_ia32_clone+0xcb/0x110 [ 772.854352][ C1] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 772.854365][ C1] ? find_held_lock+0x2b/0x80 [ 772.854384][ C1] ? rcu_is_watching+0x12/0xc0 [ 772.854406][ C1] __do_fast_syscall_32+0x7c/0x3a0 [ 772.854435][ C1] do_fast_syscall_32+0x32/0x80 [ 772.854454][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 772.854467][ C1] RIP: 0023:0xf7fe5579 [ 772.854477][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 772.854489][ C1] RSP: 002b:00000000fffd3cdc EFLAGS: 00000292 ORIG_RAX: 0000000000000078 [ 772.854507][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 772.854520][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000572f54a8 [ 772.854531][ C1] RBP: 00000000f7473ff4 R08: 0000000000000000 R09: 0000000000000000 [ 772.854543][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 772.854552][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 772.854565][ C1] [ 772.854572][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 772.854586][ C1] CPU: 1 UID: 0 PID: 22966 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 772.854609][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 772.854620][ C1] Call Trace: [ 772.854627][ C1] [ 772.854634][ C1] dump_stack_lvl+0x3d/0x1f0 [ 772.854660][ C1] panic+0x71c/0x800 [ 772.854681][ C1] ? __pfx_panic+0x10/0x10 [ 772.854702][ C1] ? show_trace_log_lvl+0x29b/0x3e0 [ 772.854734][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 772.854760][ C1] ? __queue_work+0xc9c/0x10f0 [ 772.854775][ C1] check_panic_on_warn+0xab/0xb0 [ 772.854796][ C1] __warn+0xf6/0x3c0 [ 772.854819][ C1] ? __queue_work+0xc9c/0x10f0 [ 772.854836][ C1] report_bug+0x3c3/0x580 [ 772.854859][ C1] ? __queue_work+0xc9c/0x10f0 [ 772.854875][ C1] handle_bug+0x184/0x210 [ 772.854887][ C1] exc_invalid_op+0x17/0x50 [ 772.854905][ C1] asm_exc_invalid_op+0x1a/0x20 [ 772.854922][ C1] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 772.854939][ C1] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 05 ac 8b e8 45 44 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 a6 f3 37 00 90 0f 0b 90 e9 1b f6 ff [ 772.854956][ C1] RSP: 0018:ffffc90000590be8 EFLAGS: 00010082 [ 772.854970][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ab108 [ 772.854977][ C1] RDX: ffff88801390c880 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 772.854987][ C1] RBP: ffff888013918970 R08: 0000000000000001 R09: 0000000000000000 [ 772.854998][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000b218f [ 772.855009][ C1] R13: 0000000000000100 R14: ffff88806bc92978 R15: 0000000000000001 [ 772.855027][ C1] ? __warn_printk+0x198/0x350 [ 772.855050][ C1] ? __warn_printk+0x1a5/0x350 [ 772.855076][ C1] ? __queue_work+0xc9b/0x10f0 [ 772.855094][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 772.855108][ C1] call_timer_fn+0x197/0x620 [ 772.855130][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 772.855157][ C1] ? __run_timers+0x559/0x960 [ 772.855180][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 772.855194][ C1] __run_timers+0x569/0x960 [ 772.855221][ C1] ? __pfx___run_timers+0x10/0x10 [ 772.855260][ C1] run_timer_base+0x114/0x190 [ 772.855282][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 772.855300][ C1] run_timer_softirq+0x1a/0x40 [ 772.855321][ C1] handle_softirqs+0x219/0x8e0 [ 772.855349][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 772.855374][ C1] __irq_exit_rcu+0x109/0x170 [ 772.855391][ C1] irq_exit_rcu+0x9/0x30 [ 772.855405][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 772.855427][ C1] [ 772.855434][ C1] [ 772.855441][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 772.855459][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 772.855483][ C1] Code: ec 37 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 b2 8d 11 0f 0f 82 74 02 00 00 8b 35 7a bf 11 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 49 ec 37 12 0f 85 c7 02 00 00 48 83 c4 [ 772.855498][ C1] RSP: 0018:ffffc900036ef0e0 EFLAGS: 00000206 [ 772.855509][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c4c40 RCX: 000000002f17d697 [ 772.855516][ C1] RDX: 0000000000000000 RSI: ffffffff8de07322 RDI: ffffffff8c1578e0 [ 772.855528][ C1] RBP: 0000000000000002 R08: b6d9cbdbc142d105 R09: 0000000000000000 [ 772.855539][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 772.855550][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 772.855575][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 772.855602][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 772.855618][ C1] unwind_next_frame+0xd1/0x20a0 [ 772.855642][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 772.855667][ C1] ? dup_mmap+0xe88/0x21d0 [ 772.855689][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 772.855707][ C1] arch_stack_walk+0x94/0x100 [ 772.855725][ C1] ? dup_mmap+0xe88/0x21d0 [ 772.855750][ C1] stack_trace_save+0x8e/0xc0 [ 772.855770][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 772.855794][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 772.855811][ C1] kasan_save_stack+0x33/0x60 [ 772.855834][ C1] ? kasan_save_stack+0x33/0x60 [ 772.855857][ C1] ? kasan_save_track+0x14/0x30 [ 772.855880][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 772.855897][ C1] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 772.855921][ C1] ? ptlock_alloc+0x1f/0x70 [ 772.855941][ C1] ? pte_alloc_one+0x82/0x3a0 [ 772.855954][ C1] ? __pte_alloc+0x6d/0x3c0 [ 772.855970][ C1] ? copy_page_range+0x1aed/0x5740 [ 772.855985][ C1] ? dup_mmap+0xe88/0x21d0 [ 772.856036][ C1] kasan_save_track+0x14/0x30 [ 772.856060][ C1] __kasan_slab_alloc+0x89/0x90 [ 772.856081][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 772.856106][ C1] ? ptlock_alloc+0x1f/0x70 [ 772.856132][ C1] ptlock_alloc+0x1f/0x70 [ 772.856154][ C1] pte_alloc_one+0x82/0x3a0 [ 772.856167][ C1] __pte_alloc+0x6d/0x3c0 [ 772.856181][ C1] ? __pfx___pte_alloc+0x10/0x10 [ 772.856199][ C1] ? __pfx___might_resched+0x10/0x10 [ 772.856217][ C1] ? copy_page_range+0x13f0/0x5740 [ 772.856243][ C1] copy_page_range+0x1aed/0x5740 [ 772.856284][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 772.856312][ C1] ? __pfx___might_resched+0x10/0x10 [ 772.856335][ C1] ? __vma_enter_locked+0x163/0x3f0 [ 772.856360][ C1] ? dup_mmap+0xe38/0x21d0 [ 772.856373][ C1] ? down_write+0x14d/0x200 [ 772.856391][ C1] ? up_write+0x1b2/0x520 [ 772.856419][ C1] dup_mmap+0xe88/0x21d0 [ 772.856449][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 772.856480][ C1] copy_process+0x4081/0x7650 [ 772.856514][ C1] ? __pfx_copy_process+0x10/0x10 [ 772.856537][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 772.856560][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 772.856591][ C1] kernel_clone+0xfc/0x960 [ 772.856614][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 772.856650][ C1] __do_compat_sys_ia32_clone+0xcb/0x110 [ 772.856666][ C1] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 772.856687][ C1] ? find_held_lock+0x2b/0x80 [ 772.856721][ C1] ? rcu_is_watching+0x12/0xc0 [ 772.856740][ C1] __do_fast_syscall_32+0x7c/0x3a0 [ 772.856763][ C1] do_fast_syscall_32+0x32/0x80 [ 772.856789][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 772.856810][ C1] RIP: 0023:0xf7fe5579 [ 772.856851][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 772.856868][ C1] RSP: 002b:00000000fffd3cdc EFLAGS: 00000292 ORIG_RAX: 0000000000000078 [ 772.856884][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 772.856893][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000572f54a8 [ 772.856899][ C1] RBP: 00000000f7473ff4 R08: 0000000000000000 R09: 0000000000000000 [ 772.856906][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 772.856912][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 772.856925][ C1] [ 772.857641][ C1] Kernel Offset: disabled VM DIAGNOSIS: 18:06:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b23b640 RCX=ffffffff81af60b3 RDX=ffff88801de9c880 RSI=ffffffff81af608d RDI=0000000000000005 RBP=ffffc9000044fd08 RSP=ffffc9000044fbc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9f66 R12=1ffff92000089f80 R13=0000000000000002 R14=0000000000000001 R15=ffffed10056476c9 RIP=ffffffff81af6099 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097520000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080007000 CR3=00000000402a4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85584895 RDI=ffffffff9b0ac980 RBP=ffffffff9b0ac940 RSP=ffffc90000590550 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0ac940 R15=ffffffff85584830 RIP=ffffffff855848bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097620000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fd55c0 CR3=0000000052bf0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffffc90002c2f218 RCX=ffffc90002c2f16c RDX=1ffff92000585e6a RSI=ffffffff82210a64 RDI=ffffc90002c2f218 RBP=ffffc90002c2f2a8 RSP=ffffc90002c2f210 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000012109 R12=ffffffff81a71670 R13=ffffc90002c2f2d8 R14=0000000000000000 R15=ffff888025408000 RIP=ffffffff816a96d0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f29795eb300 ffffffff 00c00000 GS =0000 ffff888097720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f503e99ec8 CR3=000000002a401000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=8d800bccb184488c 328d31688c21f754 8d800bccb184488c 328d31688c21f754 8d800bccb184488c 328d31688c21f754 8d800bccb184488c 328d31688c21f754 ZMM18=c9743ed1e6f3bd43 744a88284233c66a c9743ed1e6f3bd43 744a88284233c66a c9743ed1e6f3bd43 744a88284233c66a c9743ed1e6f3bd43 744a88284233c66a ZMM19=b423000000000000 0000000000000004 b423000000000000 0000000000000003 b423000000000000 0000000000000002 b423000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 93dc107563898dac 2c8615aa0bb6c4b3 e47c7c2a0eec39c9 8cd6dada815bb1c2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8dfd905ebaaa4457 9532fc134301ffff fffffffffff4fd08 068003158e860800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02bef20800058002 060074d80023706f 6f6c2f7665642f01 ffffffffffffffff ZMM24=62f69e4d62f69e4d 62f69e4d62f69e4d 62f69e4d62f69e4d 62f69e4d62f69e4d 62f69e4d62f69e4d 62f69e4d62f69e4d 62f69e4d62f69e4d 62f69e4d62f69e4d ZMM25=fc32c560fc32c560 fc32c560fc32c560 fc32c560fc32c560 fc32c560fc32c560 fc32c560fc32c560 fc32c560fc32c560 fc32c560fc32c560 fc32c560fc32c560 ZMM26=c2efa0eec2efa0ee c2efa0eec2efa0ee c2efa0eec2efa0ee c2efa0eec2efa0ee c2efa0eec2efa0ee c2efa0eec2efa0ee c2efa0eec2efa0ee c2efa0eec2efa0ee ZMM27=1a88086f1a88086f 1a88086f1a88086f 1a88086f1a88086f 1a88086f1a88086f 1a88086f1a88086f 1a88086f1a88086f 1a88086f1a88086f 1a88086f1a88086f ZMM28=000001700000016f 0000016e0000016d 0000016c0000016b 0000016a00000169 0000016800000167 0000016600000165 0000016400000163 0000016200000161 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=f9420000f9420000 f9420000f9420000 f9420000f9420000 f9420000f9420000 f9420000f9420000 f9420000f9420000 f9420000f9420000 f9420000f9420000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff8880135f7040 RCX=ffffffff82115931 RDX=fffffbfff3655a00 RSI=0000000000000004 RDI=ffffffff9b2ad000 RBP=ffffc900066d7890 RSP=ffffc900066d75c8 R8 =0000000000000001 R9 =fffffbfff3655a00 R10=0000000000000003 R11=0000000000000001 R12=ffff888028f75400 R13=00007f8906150000 R14=00007f8906150000 R15=ffffc900066d78c8 RIP=ffffffff82115938 RFL=00000207 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f890615eeb8 CR3=0000000065e99000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 00000000000000e8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000b68 000000000002c498 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000