last executing test programs: 3m42.629861756s ago: executing program 0 (id=476): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000240)) socket$kcm(0x11, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x110) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r4, r4}, &(0x7f00000000c0)=""/87, 0x57, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x81, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m41.427849959s ago: executing program 0 (id=485): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) r1 = fsopen(&(0x7f00000001c0)='exofs\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="00000000000000d51827fdedcd70d235d56b2189b345489c8c0805591fbb6f47f429c8708c75dd93a3251fda1ab9a5b45a934dda6fc6f44e03fcaf3141d5c40a4c03b6043224fcca00f2728ead762cc3869de73f219022e663a6483b08ec83195a0bfcd25ed52d879b52e3f406604496133066208f3fccbc0d1e015d19a1ccdd4a64e5ce755457bf1082c360e15537c2709f2b0cad10b69475db1b0ce1002e8124ae6a56bc18d702e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r2 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000012c0)={0xa, @win={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000001280)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000f40)={0x1, &(0x7f0000000000)=[{0x6, 0x1}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="380000001800410000000000000087a5580e2c55bb393a00000a00000004c04039dea20a01f02bc28260839dff000000000000000008", @ANYRES32=r6, @ANYBLOB="060354700b73000018259f9d010000007e879da192"], 0x38}}, 0x0) socket$tipc(0x1e, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0x0, 0x0) fanotify_mark(r9, 0x121, 0x40000000, r8, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000280)={0x8, 0x28, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a0012000200270000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a00000000", 0x69, 0x20000000, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x501681, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r11, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x5, 0x2, 0x4, 0x7}]}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) 3m40.521228247s ago: executing program 0 (id=490): syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbcf8acd6134f985bbbbbb5f3766b040030800450000340065000004019078ac1e0101ac1414aa0301907803610000460000000000400000fc0009ac141410ac1414bb9404000044139644b03c4b32cc8a8663a2c57d6ac4e77cfd867b945eae088106f82464c00e1212f630e4dd9936ab3a90c4819b283d0b453fbd6cc5ca78530ec719c1ba1e8a3189645efa5e567a7ee36a8e918f007daa3e9300a08cf190a50ecc9b2e7c5b815d2dce9a0db696dca08608595073f13d3a"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffe, 0x40) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40841}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000200000095000000000000000000000000000000000056e784466031bc42d4586856fea8a5422128758d88b5f43ee3b332a35c3b4f0f8ff47260ea62853d6c32da7ab47bd1882e8a755a611da46443841e0d79fe0330b57fbc5ac7d4ca19fff93c4d5651a0958d43b5782b0bac60"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4004, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) openat$drirender128(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000019100), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs(0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0x6) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x6}]}, 0x38}}, 0xc000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) write$cgroup_int(r5, &(0x7f0000000140)=0xfffffffffffff1a2, 0x12) syz_emit_ethernet(0x46, &(0x7f0000000f00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x15, 0xd}}}}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='personality\x00') lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) 3m37.141342431s ago: executing program 0 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3d0, 0xffffffff, 0x0, 0x0, 0x224, 0xfeffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'veth1\x00', 'vcan0\x00'}, 0x2f2, 0xd0, 0xf4, 0x0, {}, [@common=@srh={{0x2c}}]}, @REJECT={0x24}}, {{@ipv6={@remote, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xd4, 0x130, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x4}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1655e7b191395139620734d46e52f71c1747c6110a6d555946752e989951"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x42c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800082}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) 3m37.140901234s ago: executing program 0 (id=517): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x100, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) statx(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x800, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f00000006c0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="9e31838820c27e820d585e7219f990cc775ebca2df85a8a092a565978cd2229438f1e3397fff2099a982441ce32a1bf3b817a2e2", 0x34}, {&(0x7f0000000300)="a888eb6ba27fe1178bf56037286dd3a03ff4e24882c23c9494caa1a7bf0c076add0901d942c82c7d7123a7a25edf106fe6d19ae4f36d0d7bb483cb217866dbd9e6f41072d01fcaa442e44e70aa3cd9edfd779986e81b8caeecb00ba60f31d76da9b7cbf48de271f8fc57c11c47129d129095448f6926e84ce3d75ff1f6d6058d7cc7109c424fbdb49e9f5a9eb39221a50328e9b9eee45405e13ca9643624641bf72aeaf3dd58507143dd", 0xaa}, {&(0x7f00000000c0)="0133", 0x2}, {&(0x7f0000000700)="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", 0x100}], 0x4, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [r3, r1, r5, r4, r3, r1, r4]}}, @rights={{0x28, 0x1, 0x1, [r1, r4, r3, r1, r1, r1, r1]}}, @cred={{0x18, 0x1, 0x2, {r6, 0xee00, r7}}}], 0x68, 0x40000}}], 0x1, 0x40081) openat$vmci(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, 0x0, 0x0) listen(r8, 0x4) r9 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) open_tree(0xffffffffffffffff, 0x0, 0xc0100) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r9, &(0x7f0000000240)=""/112, 0x349b7f55) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 3m36.95949469s ago: executing program 0 (id=518): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mq_open(&(0x7f0000000280)='rmdF\x17\x16\xbc\xec\xfd\x9f\x7f\x8f\x8bZ\xb0\x99\x1dC\x8b\xc7\xb2\x16A\xcbT\x99\xfbc\xe8\xa9\xa8ot\x174w\xc8\v&\xb9\xb0\xd6\'_4\x83%\xbckS\x15\xa8L\x10\xa5Q+\xa9\x8f5\xa9\x85u\xb7\xce\x91a\xc8O\xe5V9,\xaf\x1b\x11\xd1\x01\x86\xe9\xd9=_\xa6\b\r$\x06\xbe\xd2\xbb\x03\x90IV\xd1\x11\xd3\xa6\xcf\xd5\xd2\xe1O>@6u\x1a\xae\xbd\xad\x9aw\xf9\\\x97\x16-\xbf\xd2Gt\xc4\xd2?\xac\xc7\x15F%x\xb1\a^\xe0\xdc\xd8\x95@6u\x1a\xae\xbd\xad\x9aw\xf9\\\x97\x16-\xbf\xd2Gt\xc4\xd2?\xac\xc7\x15F%x\xb1\a^\xe0\xdc\xd8\x950xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port1\x00', 0x786520dbf34c80fe, 0x20a03, 0x20000003, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x87}) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) dup3(r5, r4, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r3, 0x0, r3) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r7, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$inet6(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5a6871908ddfe3ee43aa1160a73753ce6cab32d184de576a9f314969c1d7546399a47258ea86bbd3febfc84e58f64d32bb361e0af645bad480a103ab7d7fa2404622f26e7f7e668a4d7e5aee1276dc1d52b170003659e627d012cdf5dcb438b8ae0bf19e6c992c68011b7297da8b53655071195f55e0", 0x76}, {&(0x7f0000000700)}], 0x2}, 0x40001880) 1m46.194769031s ago: executing program 2 (id=1134): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x19, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xf, 0x7}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x2, 0x6, 0x8, 0x40, 0x7}, 0x58, &(0x7f0000000280)={0x5, 0xf, 0x58, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5e, 0xc, 0x1, 0xf9}, @generic={0x1c, 0x10, 0x2, "2f67b036186e92e8b8b890ff6b7d092d1d3ea7d4f4ac64b20f"}, @generic={0x1c, 0x10, 0xa, "7934139cb8df96fb05e7051cee583661c8dd20ae0085685910"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x2, 0x4, 0x700}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x10, 0x7, 0xb9c, 0x9, 0x4, 0x8001, 0x2, 0xfffffffffffffffd}, &(0x7f0000000040)={0x8, 0x8000000000000001, 0x4, 0x9, 0x611, 0x3ff, 0x1, 0x3}, &(0x7f0000000080)={0x7fffffffffffffff, 0x56, 0x7, 0x9, 0x3d, 0x5, 0x2, 0x8001}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000180)={[0x80000001, 0x6]}, 0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000140)={0x8, 0x8, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0x1, 0x4, [0x4, 0x7, 0x200000000002]}}, @hao={0xc9, 0x10, @remote}]}, 0x50) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x100}) 1m44.790245328s ago: executing program 2 (id=1141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x36]}}]}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x1) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r7, &(0x7f0000000700)={0x2020}, 0x2020) write$FUSE_INIT(r7, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4c0, 0x140, 0x7, 0x9d, 0x2, 0x6, 0x0, 0x0, 0x4, 0x8}}, 0x50) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 1m43.887513848s ago: executing program 2 (id=1145): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xffffff1f, 0x2) unshare(0x68040200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0), 0x13f}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m43.009901774s ago: executing program 2 (id=1151): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYBLOB="248cb6fd3cae9841342a91020a239b831aa49f3147853de0784db88acdc2bdd662f811bf6239c7cbb1cb5dd5f3f3f5c9f1f8c9ba4412e8c75da6ac7d342dc334c20f180790f910db7f3d381dae5a7d104561a1d80b392eb076165ec447533fcaccd8773160289a07020282d9cdf27d338872f9fb77d8248d882789fc6be4761995e690cd11241031cd29de391b8967d0e6b877aaeb5659d5a29028fa0c9b86a7b69cc723d1c7357cccf9653e13c2fe39f7dd0a9fdbe8118133bf6b9d85a98a5acefd522d9e018668516a3b00", @ANYRESDEC=r0], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000200), 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffff9, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x125) r4 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000075000024899c"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket(0x2, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_LINKAT={0x27, 0x21, 0x0, r4, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) connect$qrtr(r6, &(0x7f0000000340)={0x2a, 0xfffffffd, 0x4000}, 0xffffff0f) write(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000780)='ext4_writepages\x00', r5, 0x0, 0x80}, 0x18) socket$rds(0x15, 0x5, 0x0) 1m41.872644579s ago: executing program 2 (id=1155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYRES8=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x294d40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffe}) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x80010, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x9, 0x5) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102377, 0xffffffffffffffaf) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_usb_connect(0x3, 0x34, &(0x7f0000000040)=ANY=[], 0x0) 1m31.310120333s ago: executing program 4 (id=1193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x36]}}]}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000000c0)=0x1) r7 = fcntl$dupfd(r6, 0x0, r6) read$FUSE(r7, &(0x7f0000000700)={0x2020}, 0x2020) write$FUSE_INIT(r7, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4c0, 0x140, 0x7, 0x9d, 0x2, 0x6, 0x0, 0x0, 0x4, 0x8}}, 0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 1m31.003105937s ago: executing program 3 (id=1195): fsopen(&(0x7f0000000000)='dax\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x66) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_DST={0x8}]}, 0x24}}, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000340)={0x0, 0x3}, 0x2) 1m30.866106152s ago: executing program 4 (id=1196): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0xff, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) sched_setscheduler(0x0, 0x2, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000180)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = dup(r0) sendmmsg$unix(r3, 0x0, 0xfffffffffffffff9, 0x40044) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) execve(0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r2, 0x41f91000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r4, &(0x7f0000000600)=""/4099, 0x1003, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1m30.632388094s ago: executing program 4 (id=1197): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYBLOB="248cb6fd3cae9841342a91020a239b831aa49f3147853de0784db88acdc2bdd662f811bf6239c7cbb1cb5dd5f3f3f5c9f1f8c9ba4412e8c75da6ac7d342dc334c20f180790f910db7f3d381dae5a7d104561a1d80b392eb076165ec447533fcaccd8773160289a07020282d9cdf27d338872f9fb77d8248d882789fc6be4761995e690cd11241031cd29de391b8967d0e6b877aaeb5659d5a29028fa0c9b86a7b69cc723d1c7357cccf9653e13c2fe39f7dd0a9fdbe8118133bf6b9d85a98a5acefd522d9e018668516a3b00", @ANYRESDEC=r0], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000200), 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffff9, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x125) r4 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000075000024899c"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket(0x2, 0x5, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_LINKAT={0x27, 0x21, 0x0, r4, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) connect$qrtr(r6, &(0x7f0000000340)={0x2a, 0xfffffffd, 0x4000}, 0xffffff0f) write(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000780)='ext4_writepages\x00', r5, 0x0, 0x80}, 0x18) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m30.349274921s ago: executing program 3 (id=1198): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newtaction={0x2e68, 0x30, 0x1, 0x0, 0x0, {}, [{0x2e54, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_pedit={0x2e0c, 0x5, 0x0, 0x0, {{0xa}, {0x2d00, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb0, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x5, 0x3, 0x8, 0x80, 0x7}, 0xfe, 0x8, [{0x5, 0x8, 0x5, 0x9, 0x3, 0xd}, {0x0, 0x898, 0x1e0, 0x7, 0x698, 0x2}, {0x6, 0x4, 0x9f6, 0x6, 0x64, 0x61d}, {0x5, 0x8, 0x40, 0x1, 0x6, 0x7f}]}, [{0xd, 0x800, 0x9, 0xd5, 0xd752, 0x8}, {0x27e9, 0x9000, 0xfffffb7c, 0x1000, 0x7, 0xffffffa4}, {0x7ff, 0x8, 0x5, 0x9, 0x75db, 0x7fffffff}, {0x63, 0x7, 0xfec, 0x3, 0xc, 0x4}, {0x6, 0x7, 0x3, 0x700, 0xfffffffd, 0x8}, {0x71d, 0x1000, 0x1, 0x493, 0x5f, 0x1ff}, {0x7, 0x1, 0xe3fe, 0xffff7d7f, 0xfd, 0x7}, {0xa, 0x8, 0x4, 0x7, 0x1, 0x400}, {0xfffeffff, 0x7ff, 0xff, 0x2, 0x681, 0x6}, {0x4, 0xa02c, 0x72a4, 0xffff, 0x2405, 0x4}, {0x69d, 0x10, 0x7fffffff, 0x33a1c4a6, 0x7, 0x40}, {0x6, 0xff, 0x4, 0x3, 0xfffffffe, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x6, 0x5d9}, {0x3, 0x4, 0x2, 0x0, 0xdd, 0x3}, {0x2, 0xfffffff1, 0x8, 0x1ff, 0x80000001, 0xb9b3}, {0x3, 0x1, 0x7, 0x7fffffff, 0x10d0e22e, 0x1ff}, {0x7fff, 0xfe71, 0x4, 0xffffffff, 0x7, 0x6}, {0x6, 0x6, 0x5, 0x2, 0x2, 0x9}, {0xff, 0x3, 0x4, 0x6, 0x9, 0x2}, {0x40, 0x7, 0x4, 0x3, 0x9, 0x6}, {0xc584, 0x0, 0x1, 0x200, 0x2, 0x2}, {0x6, 0x5, 0xf9, 0x6, 0x80000001, 0x3}, {0x7, 0x8, 0x10000, 0x3, 0x9, 0x2}, {0xff, 0x9, 0x7, 0x2d, 0x401, 0xe}, {0x3c8d, 0x82, 0xd5a, 0xfffffe01, 0x400, 0x12}, {0xe63, 0x0, 0x8, 0x7, 0x1, 0x401}, {0xf, 0xa96d, 0x5, 0x10001, 0x4a4, 0x79}, {0x1328, 0x401, 0xd572, 0x3, 0x3, 0x1}, {0xffffffff, 0x7, 0x7fff, 0x6, 0x5365184a, 0x9}, {0x81, 0x7, 0x400, 0x31, 0x400, 0x7}, {0x3, 0xa, 0x1, 0x6, 0x6, 0x1}, {0x400, 0x1, 0x10001, 0x0, 0x2, 0x7}, {0x10000, 0x800, 0x2, 0x9, 0x9, 0x6fd1d2c4}, {0x1, 0x5, 0x9, 0x40, 0x6, 0x2}, {0x7, 0xffffff80, 0x10, 0x0, 0x7fff}, {0xffffffff, 0x4, 0xbddd, 0x0, 0x7, 0x10001}, {0x1, 0x9, 0xffff, 0x5, 0xc3b, 0x2}, {0x1000, 0x1c00000, 0x6, 0xfffffff7, 0xb7, 0xf3da}, {0xfe, 0x3, 0x5, 0x101, 0x3, 0x6}, {0x101, 0xd, 0x2, 0x0, 0x19, 0xfd}, {0x4, 0x0, 0x5, 0x0, 0xd, 0x2}, {0x80, 0x6a5, 0xfffffffe, 0xf, 0xffffffff, 0x1ff}, {0x0, 0x2, 0xf5, 0x1, 0x800, 0x6}, {0x8000, 0x6, 0x4, 0x345, 0x1, 0xc7}, {0xffffffff, 0x6, 0x40, 0x7fffffff, 0x5, 0xfffffe00}, {0x1, 0x63, 0x7, 0x1f8dc13c, 0x7fff, 0x400}, {0x1, 0x1bb, 0x9da, 0x7, 0xe63}, {0xa, 0xb68, 0x8, 0xffff, 0x2b8, 0x600}, {0x6, 0x7fffffff, 0x7, 0x3, 0x61e, 0x3}, {0x9, 0x2abe, 0x7ff, 0x3ff, 0x7, 0x8}, {0x8, 0x0, 0x81, 0x20c, 0x2, 0x7f4c}, {0x6, 0x80000001, 0x10001, 0xfffffffe, 0x1, 0x8}, {0x4, 0x70bc, 0x2, 0x4, 0x9b7f, 0x2}, {0x10, 0xb, 0x2, 0x5, 0x2, 0x2}, {0xf0b, 0x1, 0x2, 0x5, 0x7, 0xff}, {0xd, 0x8, 0x6, 0x9, 0x4, 0x6}, {0x7, 0x3, 0x2, 0xbf7, 0x8, 0x4}, {0x3ff, 0x7f, 0x7, 0xff, 0x7, 0xa81}, {0x3, 0x5, 0x8, 0x6, 0x1, 0x6}, {0x9, 0x73, 0x630000, 0x3, 0x1ff, 0x6}, {0x7, 0x6, 0x9, 0xcf91, 0x9, 0x2}, {0x100, 0x5, 0x1000, 0x9, 0xaa5, 0x6}, {0x5, 0x53e, 0x5, 0x1, 0x52f9d922, 0x5}, {0x2, 0xfffff000, 0x4, 0x0, 0x1000, 0x4}, {0x3, 0x8, 0x2, 0x7, 0x1, 0x3}, {0xfffffff8, 0xfffffe01, 0xffffffff, 0x2, 0x4, 0x6ff}, {0x9, 0x2, 0x5, 0x7, 0x33e, 0x10001}, {0x6, 0x3, 0x401, 0x429, 0x2, 0x8}, {0x7, 0x0, 0x400, 0x9, 0x2, 0x3}, {0xff, 0x3, 0x1000, 0x8000, 0x3ff, 0x4}, {0x8, 0xd33, 0x1, 0x5, 0x38, 0xa}, {0x4, 0x5, 0x7, 0x7, 0x8, 0x7}, {0x4, 0x8, 0x33a, 0x10, 0x4, 0x8}, {0x9, 0x9, 0x9, 0x1, 0x101, 0x7}, {0xbd36, 0x7ff, 0xfffffffd, 0x8, 0x0, 0x4}, {0xe, 0x1000, 0x7, 0x7, 0x3, 0x2}, {0x0, 0x2, 0xffff0000, 0xd, 0xdc, 0x100}, {0x6, 0x7ff, 0x800, 0x5, 0x0, 0x2}, {0x8e0, 0x7, 0x10, 0x1d, 0x4, 0x7}, {0x8, 0x0, 0xd724, 0x200, 0x0, 0x6}, {0x10001, 0x4, 0x0, 0x2, 0x8, 0x1}, {0x0, 0x7, 0x3, 0x7, 0x9}, {0x18000, 0x3, 0x1, 0x2, 0x8, 0x400}, {0x1, 0x8, 0x2, 0x9, 0x6, 0x2}, {0xf, 0x1ed8, 0x9, 0x9, 0x2}, {0xbe84, 0x2, 0x3, 0x8, 0x100, 0x8}, {0x6, 0xfff, 0xfd61, 0x3, 0x80000000, 0xffffffca}, {0x6, 0xc, 0xffffffff, 0xec, 0x1, 0x2}, {0x6, 0x8, 0x3, 0x8d, 0xd, 0x40}, {0x6, 0x7ef6ed79, 0x3, 0x9, 0x9}, {0x6, 0x9, 0x0, 0x9, 0x7, 0xc}, {0x40, 0x81, 0x7, 0x3, 0x9, 0x4}, {0x101, 0x1, 0x1, 0x4, 0xfffffffe, 0x2}, {0x10001, 0xfff, 0x7, 0xfffffffe, 0x80000000, 0x2}, {0x7, 0x5, 0x5, 0xffff18ca, 0x81, 0x3ff}, {0x8, 0xffffffff, 0xd91e, 0x8, 0x724ce243, 0x1}, {0x80000000, 0x4, 0x9, 0x6, 0xfff, 0x8001}, {0x200, 0x0, 0x6, 0x5, 0x1, 0xe9b8}, {0x7, 0x100, 0x6, 0xca9e, 0xfffffff2, 0x38}, {0x9, 0x5, 0x81, 0x4, 0xfffffffc, 0x1}, {0xe5d, 0x4ad3, 0x7ff, 0x4, 0x5, 0x4}, {0x8, 0x7ff, 0xe, 0xf, 0x134, 0x101}, {0x9, 0x200, 0x1, 0x80000001, 0x2d3, 0x8}, {0x0, 0x4, 0xffffffff, 0x3, 0x9, 0x7}, {0xa3, 0x3, 0x10, 0x2, 0x124, 0x7fffffff}, {0x8, 0x4, 0x3, 0xffffffff, 0x2, 0x4}, {0xf1, 0x7a4, 0x9, 0x9, 0x5, 0x526024f9}, {0x9, 0x5, 0x1ff, 0xffffff26, 0xed9}, {0x5, 0x8, 0xffffffcd, 0x6, 0x10000, 0xb}, {0x2, 0xb, 0x2, 0x2d, 0x0, 0x5}, {0x9, 0x6, 0x6, 0x10, 0x10001, 0x1}, {0x1ff, 0xa3e2, 0xfffffbff, 0xdf6, 0x84bc, 0x8000}, {0x2b35eedb, 0x401, 0x0, 0x7e, 0xf5, 0x8}, {0x6, 0x180000, 0x6, 0x5, 0x395c7f0d}, {0x5, 0x80000001, 0x9, 0x10000, 0x80000001, 0x5}, {0x9, 0x4, 0x8, 0x7fff, 0x7, 0xe5f}, {0xffffffff, 0x1d, 0x48f1, 0x8, 0x1, 0x4}, {0x1, 0x7f, 0xfffffe01, 0x3, 0x541b6202, 0x1}, {0x7f, 0x5, 0x180, 0x0, 0xc, 0x5}, {0x0, 0x401, 0x5, 0x3, 0xff, 0x9}, {0x3ff, 0x1, 0x8, 0x5, 0x2, 0x8001}, {0x9, 0x5, 0x0, 0x2, 0x6, 0x100000}, {0x8001, 0x9, 0x40, 0x4, 0x154, 0x3}, {0x101, 0x2, 0x2, 0x4, 0x6, 0xfffffffd}, {0x200, 0x9, 0x502, 0x5, 0x7, 0x100}, {0x200, 0x5, 0x5, 0x8c6, 0x2, 0x3}, {0x1, 0x2, 0x6, 0x7, 0x9, 0x400}, {0x100, 0x800, 0x80, 0x2, 0x10, 0xc0e}], [{0x3}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x4, 0x2}, {0x5}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x241cd1535477c50f}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x2}, {}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x90ee2cedc8d73dd7, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x1}, {}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2, 0xcc08d1bc4a8b7f89}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {}, {}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x4, 0xc, 0x3, 0x4, 0x2}, 0x0, 0x2, [{0x8, 0xffc00, 0x9, 0x6, 0x2, 0x3}, {0x64d5, 0x7, 0x0, 0x7, 0x8001, 0x6}]}, [{0x2, 0x5, 0x9b, 0x2, 0x3, 0x6a0}, {0xb0, 0xfffffff9, 0x7, 0x5f, 0x8, 0xa}, {0x2, 0x5, 0x1, 0x0, 0x8, 0x5}, {0x1, 0x101, 0x2, 0x6, 0xd9c, 0x3}, {0x5, 0x0, 0x3, 0x0, 0x3ff, 0x7d50}, {0x2, 0xffffffff, 0x4, 0x5, 0x774, 0x2}, {0x9, 0x8001, 0x4, 0x7, 0x7, 0x8001}, {0x80000001, 0x4, 0x9, 0x2, 0x3ff, 0x739}, {0x4, 0x3, 0x1, 0x4, 0x0, 0x6}, {0x9, 0x15c0, 0x0, 0x6, 0x5, 0x200}, {0xfffffff3, 0x0, 0x6, 0xff, 0x5, 0x9}, {0x462399aa, 0x80000001, 0x401, 0x7f, 0x293, 0x400}, {0xffffb281, 0x9, 0x7fff, 0xb, 0x3, 0xfff}, {0x0, 0x8, 0x0, 0x800, 0x1, 0x5}, {0x101, 0x5, 0x2, 0xa, 0x80, 0x6}, {0x5, 0x4, 0x9, 0x100, 0x1, 0x263}, {0x6, 0x200, 0xfffff001, 0x8, 0x5, 0xad5}, {0xb, 0x4, 0xac19, 0x8, 0x2, 0x9}, {0x3, 0x2a2e, 0x9, 0x4, 0x1, 0xfffffffb}, {0x1834, 0x3, 0x8, 0xffffe5fa, 0xfffffff8, 0xfffff4ba}, {0x0, 0x1, 0x100, 0x200, 0xfffffff4, 0x7f}, {0x6, 0x1, 0xffff, 0x2, 0x10001, 0x5}, {0x4663, 0x80000001, 0x3, 0xe91, 0x401, 0xfffff4d7}, {0x3, 0x3, 0x3ff, 0x0, 0x1, 0xee03}, {0x7, 0x98, 0x6d7a, 0x98, 0x4, 0x6}, {0x7, 0x100, 0x3ff, 0x8, 0x3ff, 0x8}, {0x7ff, 0x5, 0x5, 0x1ff, 0x7ff, 0x4}, {0x10000, 0x7, 0x6, 0x3b9b, 0x5, 0xf}, {0x7, 0x1, 0x1, 0x8, 0x3, 0x7fffffff}, {0x80000001, 0x2, 0x5, 0x1, 0x4, 0x100}, {0xd2d, 0x6, 0x2, 0x1, 0x3e59, 0x6b}, {0x9, 0x3, 0xfffffff9, 0x2, 0x5}, {0x10001, 0x7ff, 0x4, 0x27, 0x5c, 0x9}, {0x1, 0xa, 0x9, 0x401f, 0x4, 0xff}, {0x1, 0x6, 0x4, 0x6, 0x2, 0x9}, {0x1, 0x0, 0x7, 0x200, 0x5, 0xa}, {0x2, 0x800, 0xe, 0x8000, 0x3e9, 0x7}, {0x80000001, 0xe1f, 0x2, 0x3, 0xf5}, {0x7b8, 0x37369e0d, 0x5, 0x4, 0x1, 0x1}, {0x5, 0xb, 0x6, 0x9, 0x0, 0x2}, {0x8, 0xfffffff8, 0x6, 0x9, 0x80000000, 0x3}, {0x9d1d5cd, 0x4, 0x7, 0x10001, 0x80000000, 0x9}, {0x80000000, 0x686e, 0x101, 0x7, 0x5, 0x2}, {0x0, 0x4, 0x4, 0x0, 0x7fff, 0x9}, {0x4, 0x2, 0x7f, 0x9, 0x9, 0x4}, {0x7, 0x36, 0xfffffff8, 0x4, 0x8000, 0x8}, {0x6, 0x3, 0x9, 0x5, 0x7, 0xb0}, {0x2, 0x8, 0xfffff2ef, 0x6, 0x4}, {0x95, 0x7, 0x952b, 0x326, 0x5, 0x2653}, {0x8, 0x2, 0x1ff, 0x6, 0x10001, 0xb0fb}, {0x3, 0x145a, 0x200, 0x7fff, 0x2, 0xb}, {0x1, 0xffff, 0x7, 0xc, 0x800, 0xfffffffd}, {0x3, 0x10, 0x3, 0x0, 0x7ff}, {0x9, 0x8, 0x100, 0x0, 0x1, 0x3}, {0x2, 0x80, 0x4, 0x1, 0x6, 0x9}, {0x15, 0x7, 0xfff, 0x80, 0x3e5f, 0xffff}, {0x2, 0x4, 0x0, 0x7, 0x2ea35540, 0x3ff}, {0x7f, 0x7f, 0x7, 0x5, 0xd, 0x4}, {0xfff, 0x0, 0x10, 0x7, 0x4, 0x8}, {0xf, 0x2c, 0x400, 0xfffffffb, 0x5, 0x100}, {0x7, 0x6, 0x7f, 0x8, 0xc80, 0x7f}, {0x81, 0x7, 0x6, 0x5, 0x7, 0x1}, {0x1, 0x1, 0x7, 0xb, 0x1, 0x2}, {0x3, 0xde7, 0x5, 0x800, 0xc4, 0x1000000}, {0x45, 0x1, 0x40, 0xe9, 0x4921, 0x8}, {0x401, 0x7, 0x6f6, 0x5, 0x2, 0xf}, {0x8001, 0x200, 0x8, 0x4b9, 0x4, 0x2}, {0x3, 0x0, 0x4, 0x40, 0x1, 0x73}, {0x8, 0x45, 0xfffff807, 0x10001, 0x0, 0x1000}, {0x31, 0xd0ba, 0x442, 0x3, 0x200, 0x4}, {0x4, 0x1, 0xe56, 0x200, 0x10000, 0xffffffff}, {0x7, 0x0, 0x7ff, 0x2, 0xfffeffff}, {0xf13d, 0xeb, 0x100, 0x8, 0x6, 0x5}, {0x7, 0x37, 0x151, 0x2, 0x7ff, 0x5}, {0x6, 0x3, 0x7, 0x9, 0x10000}, {0x9, 0x7, 0xb7, 0xa719, 0x7986, 0x49}, {0x401, 0x9, 0x6, 0x1, 0xb, 0xc4e6}, {0xffffff00, 0xffffffff, 0x9603, 0x0, 0x5, 0x2}, {0xb7, 0x5, 0xac0e, 0x4, 0x4, 0x3}, {0x8, 0x8, 0x5, 0x7, 0xfffffffe, 0x8}, {0x6, 0x9, 0x200000, 0x80000001, 0x7, 0x3ff}, {0x5, 0xf92, 0x1, 0x0, 0x1, 0x2}, {0x7, 0x3, 0x8, 0x80000000, 0x83, 0x8}, {0x5, 0x1, 0x6, 0x0, 0x5, 0x9}, {0x4, 0x3, 0x6ae, 0xfff, 0x6, 0xb}, {0x101, 0x5, 0x80, 0x8, 0x4d0, 0x3d9e}, {0xfffffffc, 0x3ff, 0x6, 0x8, 0x4, 0x9f5fe2f}, {0x7, 0x7, 0x4, 0x8, 0x10, 0x1}, {0x400, 0x6, 0x5, 0x7fff, 0x3, 0x7fffffff}, {0x8fad, 0x1, 0x8000, 0xfffffff2, 0x80, 0x746}, {0xa, 0xffffff00, 0x3, 0x2, 0x6, 0xb}, {0x3, 0x4, 0x5, 0xadf, 0x5, 0x80}, {0x6, 0x4, 0x6, 0x6, 0x200, 0x3}, {0x8, 0x7, 0x0, 0x8, 0x8, 0x4}, {0x9, 0x3, 0x1, 0x6, 0x7, 0x800}, {0x7ff, 0x70fd, 0xe33, 0x7fff, 0x5, 0x9}, {0xd33, 0xc, 0x5, 0x3, 0x10000, 0x100}, {0x1000, 0xfff, 0x401, 0xa5, 0x9, 0x6}, {0x9, 0x0, 0xf, 0x40, 0x6, 0x10000}, {0x6, 0xff, 0x40, 0x6, 0x49ed}, {0xfffffffb, 0x1, 0x8001, 0x3, 0x3c0, 0x8000}, {0xaf8c, 0x3, 0x7, 0x100}, {0x3, 0x8, 0x1, 0x2, 0xfffffffd, 0x4}, {0x1, 0x5, 0x4, 0x4, 0x2, 0x4}, {0x1, 0x8000, 0x10, 0x750, 0x4, 0x9}, {0x4, 0x2, 0x1, 0x10001, 0x5}, {0x1, 0x9, 0x7, 0x6, 0x3, 0x6}, {0x96d, 0x4, 0xe06e, 0xfffffff9, 0x0, 0x6}, {0xffff, 0x0, 0x5, 0x2}, {0x1, 0x7, 0x5, 0x9, 0xee, 0x8}, {0x1, 0x1ff, 0x4cd, 0xff6, 0x3, 0x8}, {0x7, 0x0, 0x5, 0x1, 0x8, 0x10}, {0x4, 0xd, 0x0, 0xf, 0x9, 0x5d84}, {0x5, 0x61, 0x81, 0x80000001, 0x5aec0c51, 0x8b4a}, {0x50, 0x9ba9, 0xa, 0x400, 0x9, 0x4}, {0x5443, 0x5, 0x4, 0x5, 0x0, 0x2}, {0xfffffff9, 0xfffffffd, 0x80000001, 0x1, 0x2, 0x7fff}, {0x8, 0x6, 0x7, 0x9, 0x2, 0x5}, {0x6, 0x6, 0x5, 0x0, 0x1e56, 0x7}, {0x100, 0x7, 0x5, 0x7, 0x20, 0x2}, {0x7, 0x80, 0xfff, 0x2, 0x6, 0x80000000}, {0x2, 0x9, 0x6990, 0x6, 0xfffffffc}, {0x3, 0x8, 0x4, 0x101, 0x0, 0xffffffff}, {0x6, 0x2, 0x2, 0x33, 0x5, 0x8}, {0x0, 0x34df, 0x1, 0xa4f7, 0x2, 0x2}, {0x5, 0x7fff, 0x1066, 0xbc7, 0xe, 0x7fff}, {0x410, 0x9, 0xa, 0x6, 0xc, 0x8}, {0x9, 0x8, 0x4, 0x9, 0x0, 0x6}], [{0x5, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x4}, {0xa94172bf198159ea, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x4}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x3}, {0x2}, {}, {0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x3}, {0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5503e116991473c1, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x4}, {0x1}, {0x2, 0x1}, {0x5fe7f6c0c4532a2f}, {0x6, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x3}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xe4, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x6, 0x8, 0x5, 0xe164, 0xd6}, 0x61, 0x1c, [{0xfffffff3, 0xd4cb, 0x2, 0x8, 0x6, 0xa}, {0x0, 0xffff8001, 0x7f, 0x5, 0x8, 0x4a}, {0x5, 0x4, 0xfffffff9, 0x3, 0x3, 0x3c}, {0x200, 0xffff8cac, 0x2, 0x17a0000, 0x9, 0x4}, {0x9, 0x2, 0x8, 0x19e, 0x9, 0x8001}]}, [{0xe6, 0x94, 0x1, 0xffff, 0x344af433, 0xf85}, {0x7, 0xd, 0x0, 0x0, 0x0, 0x2}, {0x8, 0x3ff, 0x852, 0x1, 0x3, 0x7}, {0x3, 0x2, 0x7, 0x7, 0x5, 0x2}, {0xbfd, 0x1, 0x5, 0x2, 0x2, 0x7fffffff}, {0x1, 0x9, 0x2, 0x7, 0x400, 0x56dd}, {0xffffffea, 0x38c, 0x8, 0x42, 0x401, 0x6}, {0x0, 0x1, 0x6, 0x7, 0x1, 0x9}, {0x28b, 0xd, 0x8001, 0x3, 0xffff, 0x8}, {0xfffffff7, 0x6, 0x8, 0xffffffff, 0xd, 0xf}, {0x7, 0x6, 0x2, 0x6, 0x7d}, {0xfffffffe, 0x7fff, 0x3, 0x8, 0x6, 0x2}, {0x94c, 0x15c, 0x1000, 0x99f, 0x7, 0xb}, {0x2, 0xfffffff7, 0x40, 0x2, 0x40, 0x4}, {0x5, 0xc000000, 0x91, 0x8, 0x2, 0x5}, {0x2fd, 0x2, 0x2, 0x80, 0x9, 0x5}, {0x40, 0x3, 0xfffffff5, 0x6, 0x5, 0xb12e}, {0xc3, 0xd, 0x1, 0x2307, 0x101, 0xfffffffb}, {0x80, 0x1, 0x5, 0xd, 0x7fff, 0xfffff6fa}, {0x4, 0x101, 0x7fff, 0x59, 0x40, 0x5}, {0xa9b2, 0x72a8, 0x80000000, 0x27, 0xffffffff, 0x1000}, {0x7e0, 0xf, 0x6, 0x1, 0x8000, 0x5}, {0xf, 0x3, 0xfffffff9, 0x4, 0x6, 0x6}, {0x5, 0xff, 0x6, 0x2, 0x3, 0x7fff}, {0x7, 0xc5ae, 0x4, 0x6, 0xfffffffa, 0x8000}, {0x7, 0x583, 0x19f5, 0x1, 0xfffffffb, 0x5fc}, {0x0, 0x489, 0x5, 0x200, 0x5, 0x1}, {0x7, 0x4, 0x5, 0x8, 0x3, 0x7}, {0x1, 0x8, 0x3, 0x40, 0x3, 0x7}, {0x4e2a11c9, 0x0, 0x5, 0x6, 0x800, 0x7fffffff}, {0xbab2bacd, 0x8, 0x7, 0x7, 0x0, 0x7}, {0x29a, 0x5, 0x7, 0x3545, 0x1, 0xc8}, {0x9, 0x7, 0x5, 0xff, 0xfffffffa, 0xd}, {0x7, 0x1, 0x10, 0xfffffffb, 0x9}, {0x4, 0x9, 0x80, 0xfffffffa, 0x2, 0x6}, {0x12, 0x2e, 0x3ff, 0x4, 0x6, 0x4177414e}, {0x43c9962e, 0x7e19, 0x0, 0x12ca5444, 0x9, 0xded2}, {0x8, 0x7fff, 0xffd5, 0xfffff137, 0x47d, 0x101}, {0x7fff, 0xffff8000, 0xfffffff8, 0x4, 0x5, 0x1000}, {0x42, 0x0, 0x6, 0x3, 0x0, 0x4}, {0x400, 0x17e0, 0x9, 0x5, 0x1}, {0x81, 0x5, 0x6, 0x2, 0x5, 0x7}, {0x1, 0x4, 0x100, 0x40, 0x8, 0xfffffffc}, {0x48f, 0xd, 0x4e, 0xca27, 0x74, 0x4}, {0x1, 0x2, 0x4, 0x8, 0x2, 0x1ff}, {0x7ff, 0xf48, 0xc, 0x7, 0x9, 0x6}, {0x7, 0xd8, 0x2, 0x7fff, 0xfffffffb, 0x2}, {0x2, 0x7, 0x2, 0x5, 0xd0, 0x7}, {0x9, 0x3, 0x1, 0xe, 0x7, 0x8}, {0x7, 0x6, 0x4, 0x4, 0xd, 0x7}, {0x7f, 0x7, 0xe5e6, 0x5, 0x4, 0x3e}, {0xb805, 0x979b, 0xa6d6, 0x9, 0x80000000, 0x1}, {0x9, 0xffffffff, 0x4, 0x7, 0x2, 0x69f3}, {0x3cb, 0x5, 0x3, 0x6, 0x5, 0x2d}, {0x100, 0x1, 0x7, 0x9, 0x3, 0x7}, {0x5, 0x4, 0x7f, 0xda, 0x2, 0x3}, {0x14000000, 0x9, 0xfffffeff, 0x3, 0xffffff36, 0x101}, {0x59031f74, 0xfffffff4, 0x7, 0x5, 0x213, 0x9}, {0x5, 0x4, 0x4, 0x80000000, 0x7, 0x200}, {0x1, 0x10001, 0x5, 0x10, 0x0, 0x1}, {0x5, 0x9, 0x200, 0x560e, 0x6}, {0x1ce0fa4c, 0xc5, 0x0, 0x10001, 0x4, 0x8}, {0x3, 0xfffffffc, 0x1, 0x0, 0x200, 0xfffffc00}, {0x34, 0x1, 0x4, 0x0, 0xbf0, 0xffff}, {0xfffffffd, 0x5, 0x4, 0x3, 0x5, 0x5}, {0x7f, 0xff, 0x0, 0x7, 0x8, 0x474f}, {0x6, 0x5, 0x81, 0x2, 0x2, 0xbc}, {0x7, 0x6, 0x5, 0x200, 0x7fff, 0x70}, {0xe, 0x6, 0x10000, 0x3, 0x8, 0x8}, {0x8, 0x7fff, 0x1, 0x7, 0x0, 0x9}, {0x80, 0xcb48, 0x0, 0x1, 0x0, 0x9c}, {0x4, 0x7, 0x9, 0x2, 0x1000, 0x6}, {0xd, 0x5, 0x5f8a6b16, 0xe0e5, 0x7, 0x6}, {0xf2f, 0x1, 0x8001, 0x81, 0x3c04, 0x34f}, {0xc46, 0x6, 0xdc4, 0x8001, 0x5, 0x3}, {0xd, 0x2, 0x1, 0x1, 0xfffffffd, 0x6}, {0x7, 0x0, 0xd, 0x4, 0x2, 0xd6b}, {0x4, 0x5, 0xb, 0x2, 0x1, 0x3}, {0x56d66e08, 0x9, 0x7, 0x9, 0x0, 0x2}, {0x2, 0x80, 0x7ff, 0x7, 0x1, 0xa}, {0x6, 0x5, 0x9, 0x10001, 0xced, 0x9}, {0x5, 0x8, 0x2, 0xe01, 0x2, 0x9}, {0x3ff, 0x1, 0x200, 0x8, 0x47f, 0x8}, {0x1, 0x9, 0x5, 0x4, 0x9856, 0x8000}, {0x1, 0x7, 0x7, 0x3, 0x7fffffff, 0x55}, {0x8, 0x0, 0x3, 0x81, 0x36f, 0x4c3d}, {0x4ec, 0x6, 0x7, 0x7, 0x4, 0x80}, {0x7, 0x6, 0x8000, 0x1, 0xe79, 0x8}, {0x7, 0x6, 0x3, 0x0, 0x6, 0x5}, {0x4, 0x1, 0xffffffff, 0xfffeffff, 0x2, 0xa}, {0x9, 0x7, 0x10, 0x6, 0x7, 0x1b03b0d5}, {0x7, 0x2, 0x9, 0x3, 0xce, 0x5}, {0xa46, 0xc, 0x8, 0x3, 0x2, 0x8f}, {0x8, 0x3ff, 0xa36, 0x8, 0x9}, {0x4, 0x404, 0x4, 0x1, 0xd85, 0x5}, {0x1000, 0x2, 0x2, 0x9, 0xffff, 0xfffffffa}, {0x5, 0xffff000, 0x8, 0xfffff001, 0x1}, {0x0, 0x2, 0x637, 0xeb93, 0x7453, 0x3ff}, {0x10001, 0xcef1, 0x8, 0xfffffff7, 0x8, 0x5}, {0x7, 0x5, 0x0, 0xf, 0xd, 0x7fffffff}, {0xffffcb84, 0x9, 0x6, 0x1, 0x62f4, 0x7ff}, {0x0, 0x9, 0x8, 0x6, 0x3, 0xe2}, {0x1, 0x88f8, 0xa4f, 0x1, 0x554f0000, 0xb}, {0xcc87, 0x2, 0xe, 0x6, 0x8, 0x2}, {0x9, 0x9, 0x1, 0x0, 0xfffffffe, 0x3}, {0x10, 0x40000000, 0x5, 0xfffffffe, 0x4729, 0xda}, {0x8, 0x4, 0x3, 0x6, 0xc3f4, 0x7}, {0x1ff, 0x100, 0xd976, 0x7, 0x4, 0x3}, {0x4, 0x40, 0x0, 0x80000000, 0x4, 0x1}, {0x3, 0x4f34, 0x10001, 0x5, 0x8, 0x6}, {0xd65, 0x4, 0x100, 0x6, 0x976, 0x8}, {0x6, 0xb4e3, 0xf6, 0x8, 0xee9, 0x1a}, {0x7fff, 0x0, 0x1000, 0x4, 0x80000001, 0x7}, {0x6, 0x6, 0x6, 0x5, 0x6, 0x60}, {0x9435, 0x7, 0x100, 0x400, 0x2, 0x5}, {0xfffffffe, 0x3ff, 0x5, 0x40, 0x1, 0x7}, {0xfd6, 0x6, 0xfffffffe, 0xfa7, 0x5, 0x2}, {0xd, 0x8, 0x7, 0xa8b, 0xb679, 0x2}, {0x4, 0x7, 0xf40, 0x2, 0x0, 0x1}, {0x1, 0x5, 0x0, 0xd, 0x70, 0x14}, {0xc4, 0x47, 0x8, 0x1, 0x5689, 0x2}, {0xffffffff, 0x6, 0x2, 0xfffffe01, 0x9, 0x8}, {0x7, 0x4, 0x0, 0x40, 0x8, 0x7}, {0xffffffff, 0xf9, 0xb4, 0x7, 0x0, 0x3}, {0x6, 0x3, 0x8a, 0x0, 0x4, 0x1}, {0x3, 0x8829, 0xf25b, 0x9, 0x7, 0x9}, {0x5, 0xffffff79, 0xfffffffe, 0x5, 0xa, 0xff}, {0x4, 0x8, 0x0, 0x1, 0x2}], [{0x1, 0x1}, {0x2, 0x1}, {0x3}, {0xd641c232304a9abb, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x2}, {0x2, 0x1}, {0x6}, {0x2, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x2}, {0x5}, {0x2}, {0x3}, {0x5}, {0x0, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0xbe55c4440a56a9e3}, {0x1}, {0x1, 0x1}, {0x1}, {}, {}, {0x5, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x2}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x5}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x5}, {}, {0x4}, {0x4, 0x1}]}}]}, {0xe1, 0x6, "f754129c6df57e6bff3fc561a386b19073ec2b8f43181edda1e808e94d2099fe90bcf4efe453e9f1a7621742ea298fd230994277f3e550b1bfb27046c2c5cb95f42d3909ab47ee47a9b1f5bec4d815925fe62568b6d3580fe7e45f6d2dc106deb597e45a174dc4cb02b70ad1914d96182471f152543cbe3d6d73dab899c160a1cff7780ff40b74de59b75ecd8018adce8112524e4f016c9bc46caf2914e944cca693825e51989de557b7256f17f09770ad4b49b71e970d5ce03de35daba92c10e209e14a7f8d04c3c4f9b454b51ef741eecc6c446facb7c7b3f938f661"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2e68}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000300)=0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000001c00070c040000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040200000000000000000000000000f8"], 0x28}}, 0x20024090) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x6c7f, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2e7}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x40000}) io_uring_enter(r5, 0x7f5f, 0x0, 0x60, 0x0, 0x0) shutdown(r8, 0x1) syz_io_uring_setup(0x117, 0x0, &(0x7f0000000280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, 0x0, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r12 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r12, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) 1m27.697835203s ago: executing program 4 (id=1201): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/19, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008100)=@newtfilter={0x5c1c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r4, {0xa}, {}, {0x1fff2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5bec, 0x2, [@TCA_CGROUP_ACT={0x1474, 0x1, [@m_sample={0x8c, 0x1b, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffffa}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x8, 0x585, 0x40}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x5, 0x7, 0x80000000, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}]}, {0x16, 0x6, "b72a7ae1dfbc340ee1b83bb62d774f47993f"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x178, 0x1f, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x6d, 0x0, 0x5, 0x10000}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x3, 0x400, 0x8, 0x656, 0x2}, 0xf}}]}, {0xdb, 0x6, "6056ac4ac317b87467cf86b022c95f3c08e0f96ac3b8f5cd765e9dd92f0b1d538acf718a4a42bf0e87adfd7c7d7b92b07cd0ae24eabbd5756d8b0048c8029ea5b72d951ca9f09cf7f2273a20fbaae76172dad0629f8dad675bcf4dc65ef6c3785b182ba244d821bbc2e6c6492d73b8c62f0782cfe5ba14b5dd4a5de8d9f189915b09ea09977505ce23b546b099c2701defbbdbccab6237b3acd5264d496b341ea5d27ca0b2e50ece028844fde40e37bda2367a4abe3b34d6a086fc530282055afbedd2401a7512e33f8bc08882e2157090f8e8bd90a1a5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xc0, 0x3, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x89, 0x6, "bf9f01fbfac2bf7dfaf0bd1a79901bf7050c0873216651725c5ca857daecbd827c98c41f54b046c00bc8689ab9bbcbef8be4b26493e44f100fa06a5c4c67062173447de61da19007746aa99440ff5d08ff97400a9b9335f9909a570302b947bcc7e544d47d748e5c7e5ec5246432e31a75e16f9acc55a7d0471fce93e7519f2efd77a5d2af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x70, 0x5, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xe, 0x4, 0x8, 0x1}, 0x25}}]}, {0x28, 0x6, "1325c7347b8511260730ed6db6706241f430da04fde805c22e33abd8bcb8f15c33948533"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x9c, 0x1d, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x281, 0x2, 0x1, 0x9, 0x18c1}, @private=0xa010101, @multicast1, 0xff000000, 0x1}}]}, {0x49, 0x6, "5a96fb3237c68d07056d82669ef0a7455c3814f32885aa7d87ff5465c9ef9370665d2abc5ed733f15ed8dbbdd7f41a1ac2539adbae138f6231cc21095f1fe31b7da120dfb1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x1fc, 0x15, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x4, 0x10, 0x9}, @multicast2, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xe, 0x5, 0x100, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x403a, 0x4, 0x20000003, 0x7ff, 0x4}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x4, 0x2, 0x5, 0x6}, @remote, @private=0xa010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x80000001, 0x20000000, 0x5, 0x4be}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffb, 0x2, 0x5, 0x7f, 0x5}, @empty, @rand_addr=0x64010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x6, 0x2, 0x1}, @private=0xa010102, @broadcast, 0xff, 0x1}}]}, {0xbc, 0x6, "f5f4fd688ac1bb56d54dd796b3da4f361d1827d70d028588fa8467496489d309fe080f8b5c2576b1ba1e4f37daa774b9e3fdbb928db194e9b833cdccc5f1fdd10cc2a9b9c32d2505545bb55586d8b0085b157301ed1096807ef4cc346b834cab55c8923a267b65dbe4d17a8be80ed19d8f21a56a7ce52c8abe4f95246744eb179f5b4720f38c6dd976d3596d69f8da0e203ba43e408173ba3d1952e157b159a76d2d27ed87b736a8c8e9fe1b363aec7e9ec2d6ba86fc832f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0xe38, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf2}]}, {0xe04, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x2c, 0x16, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_skbedit={0x40, 0xc, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xfff6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xfff2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_ACT={0x2794, 0x1, [@m_connmark={0xd8, 0x5, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xe, 0x8, 0x52, 0xfff}, 0x8}}]}, {0x8c, 0x6, "3976fefa15c9a23774dfdeb27f9ed689ad60b51f8a9a8ecaad441ba72d585b793373873fee59c7952c09a2977481b479e4b01b7367cc31eff7d811f452003ef146aaa36da8caeccfb61eb5d983b36958a731067893e59504ac2852d805c6d1d41ff79ddf869cc9aa6c3c210d26992d97da17c99538eef6694ed5d680f57220495f10ecaa6d589f62"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x26b8, 0xb, 0x0, 0x0, {{0xb}, {0x260c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x5b7d, 0x200, 0x75, 0x8b8, 0x6, 0x2, 0x6, 0x1, 0x0, 0xa, 0xd, 0x1000, 0x2997, 0x8, 0xa, 0x8, 0x1, 0x10, 0x80000001, 0xff, 0x9, 0x3, 0xfffff2d4, 0x401, 0x99f5, 0x800, 0x59, 0x6, 0x4, 0x10000, 0x7, 0x1, 0xc1e, 0xff, 0x4, 0x45, 0x2, 0x9, 0x3, 0x4, 0x2, 0x1, 0x8, 0x3, 0x9, 0x7, 0x95, 0x2, 0x0, 0xf4, 0x82a, 0x1, 0x7f, 0x834e, 0x101, 0x5, 0xd5, 0x9, 0x0, 0xfffffffe, 0x4, 0x5, 0x40000000, 0xca6, 0x200, 0x8001, 0x4, 0x2, 0x0, 0x5, 0x0, 0x4, 0x800, 0xb, 0xb, 0x1, 0x6, 0x5, 0x3, 0x3, 0x7, 0x7fffffff, 0x9, 0xe, 0x40, 0x1, 0x4, 0x9d, 0x6, 0x8, 0x6, 0x1, 0xfffffffe, 0xffffffff, 0x28fe6f8c, 0x1, 0x1ff, 0x0, 0x4, 0x8, 0x3ff, 0x7fff, 0x7fca, 0xd046, 0x0, 0xee9a, 0x7, 0x6, 0x342, 0x5, 0x0, 0x7869, 0x0, 0x7, 0x401, 0x80000001, 0x9, 0x4, 0x5, 0x6, 0x845, 0x0, 0x7, 0x10000, 0x3dbfe3d0, 0x2, 0x0, 0x1, 0x91f, 0x10000, 0x1, 0xfffffffc, 0xfff, 0x6, 0x43bd2ec3, 0xfffffffb, 0x8, 0x772, 0x1, 0x2, 0x1, 0x2, 0x27, 0x6, 0x1, 0x4, 0x8, 0x401, 0xc6cc, 0x12, 0xffffffff, 0x1, 0x3, 0x0, 0xf, 0x7, 0x6, 0x9, 0x0, 0x1, 0x2, 0x7, 0x4, 0x8, 0x0, 0xf4c1, 0xfffffffd, 0xfffffffc, 0x8, 0x9, 0x5, 0x3, 0xd57, 0x2, 0x3, 0x101, 0xffffc19c, 0x3, 0x4, 0x9, 0x2, 0x7, 0x5, 0x1, 0x9, 0xe, 0x6, 0x21, 0x7, 0x3, 0x7, 0x1, 0x80000000, 0x1000, 0x9b, 0x0, 0x9, 0x43e3, 0x7, 0x1, 0x9, 0xf, 0x80000001, 0x5, 0x7ff, 0x3, 0x10000, 0x8, 0xfffffffb, 0x5, 0xdf4, 0x32e0, 0x5, 0x6, 0x80, 0x8, 0x5, 0x5, 0x6, 0x0, 0x8001, 0x8, 0x9, 0x8000, 0x7, 0x3, 0x7, 0x521, 0x3ff, 0x6, 0x8, 0x6, 0x80, 0x101, 0x784, 0x454, 0x9, 0x4, 0x5, 0x9, 0x7fff, 0x7, 0x1ee, 0x8069, 0x1, 0x30, 0xfff, 0x5, 0x1, 0x8, 0x4, 0xfff, 0x1, 0x80000000, 0x8, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x8, 0x3, 0x1, 0x4, {0x0, 0x0, 0xff, 0x600, 0x10b3, 0xf}, {0x10, 0x2, 0x5, 0xb780, 0x1167, 0xfffffff9}, 0x3, 0x10000, 0x182f}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x36, 0x1, 0x6, 0xc, 0xfffffffc, 0xfff, 0x80000, 0xc, 0x21a9, 0xa9db, 0x101, 0x80000001, 0x0, 0x7, 0x5, 0x0, 0x5, 0x5, 0x6, 0xcc9, 0x9, 0x6, 0x76, 0x4, 0x1, 0x4, 0x5, 0x8, 0x7ff, 0x3, 0x1, 0x9, 0x80000000, 0x100, 0x8, 0x1, 0x8001, 0x4, 0x67, 0x10000, 0x1, 0x3, 0x2, 0x3, 0x3, 0x6, 0x5, 0x37e, 0x8, 0x2, 0xfffffffe, 0x6, 0x6, 0x6, 0x2, 0x7, 0x3, 0x9, 0x920, 0x4, 0xa, 0x0, 0x1ff, 0x1ff, 0x40, 0x1ff, 0x9e, 0x7, 0x7, 0xab, 0x1, 0x80000001, 0xbdaf, 0x4, 0x9, 0xc27, 0x0, 0xffffff0d, 0x10, 0x401, 0x3, 0xba0c, 0x3ff, 0xffffff78, 0x0, 0x8001, 0x2, 0x3, 0x6, 0x80, 0xf, 0x5, 0x800, 0xdc2, 0x853b0, 0xfffffffa, 0x101, 0x4, 0xde5, 0xa32, 0x3ff, 0x5, 0x7fff, 0xcf7c, 0x9, 0x9, 0x6, 0xb27a, 0x4, 0x703fbd44, 0x80, 0x0, 0x2, 0xd, 0x5, 0xfffffffd, 0x401, 0x252d, 0x7, 0x4, 0x0, 0x6, 0x1, 0x6, 0x8, 0x40, 0xfffffff9, 0x7, 0x10000, 0xfffffff8, 0x1ba4, 0xfae5, 0xfffffffc, 0x2, 0x9, 0x8000, 0x6, 0xb5c7, 0x5, 0x101, 0x1, 0x1, 0xa, 0x1, 0x0, 0x4, 0x100, 0xb, 0xffffffff, 0x3, 0x10000, 0x5, 0x0, 0xfffffae7, 0x9, 0xfffffffb, 0x3, 0x40, 0xf4f, 0x5, 0x5, 0x341562bd, 0x0, 0x4921, 0x7, 0x8, 0xfffffffa, 0x6, 0x1, 0xf1f, 0xffffffff, 0x2, 0x0, 0x7fffffff, 0x7, 0x7, 0x7, 0x9, 0x10, 0x1, 0x9, 0xff, 0x16a5, 0x5, 0x7, 0x2, 0x3, 0x2, 0x8, 0x52bb, 0x2, 0x78ff, 0x8, 0xffffff09, 0x4, 0x4, 0x3674, 0xf, 0x1, 0x1ff, 0xfffffffd, 0x8, 0xb3e5, 0xa45c, 0xffffa9cb, 0x1, 0x6, 0x200, 0x5, 0xfffffffc, 0xeeb, 0x3, 0x8, 0x7, 0xc2, 0xffff894d, 0xffffffff, 0x2, 0x2, 0x1, 0x9d17, 0x3, 0x2, 0x80000000, 0x9, 0xfffffff7, 0x43d, 0x0, 0x1, 0xa4f96cd3, 0x81, 0x1, 0x80000001, 0x1, 0x6, 0xc, 0x9, 0x401, 0xb08f, 0x8, 0x1, 0x2, 0x3, 0x0, 0xffff, 0x4, 0x2, 0x2, 0x3, 0x80, 0x1, 0xe, 0x2, 0x8, 0x0, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xdf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xfffffffc, 0x4, 0x0, 0x2, 0x4, 0x10, 0x8, 0x400, 0x7, 0x3ff, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0xe50, 0x1c00, 0x5bf, 0x7, 0xe88, 0x4, 0x1ff, 0x7, 0x97, 0x2, 0xffffffff, 0x2, 0xc00000, 0x8, 0x346, 0x5, 0x9, 0x1, 0x9, 0x5c, 0x6e75, 0x0, 0x5, 0x9, 0x3, 0x7, 0x200, 0x2, 0x5, 0x0, 0x6, 0x5, 0x9, 0x915, 0x16b, 0x4, 0xc8, 0x3, 0x69f, 0x1000, 0x6, 0x4693, 0x2, 0xf87, 0x0, 0xff, 0x10, 0xfffffffb, 0x4, 0x2, 0x3, 0x5, 0x4, 0x1, 0x8, 0x7, 0x7fffffff, 0x2, 0x830, 0x7fff, 0x2, 0x986, 0x1, 0xffff, 0x7, 0x1, 0x7, 0x400, 0x8, 0xfffffc00, 0x8, 0x1, 0x4, 0x1, 0x3, 0x5, 0x9f, 0x4, 0x5, 0x14e18182, 0x7, 0x4, 0x8, 0x9924, 0x1, 0x5, 0xa266, 0x547, 0x4, 0x9, 0x0, 0x8, 0xffff, 0x2767, 0xa, 0x8, 0x1, 0x5, 0xfffffffb, 0x8, 0x2, 0xfff, 0x1, 0x0, 0x5bad, 0x1, 0x5, 0x10000, 0x81, 0xd359, 0x8, 0x40, 0xd40e, 0x6, 0x7, 0x6, 0x6, 0x7fffffff, 0x2, 0x8, 0x7ff, 0x2, 0x2, 0x6, 0xfffff801, 0x6, 0xffffffff, 0x6, 0x74e6, 0x6, 0x400, 0x4, 0x1ff, 0x2, 0x2, 0x0, 0x7f, 0x80000001, 0x400, 0x5, 0x7, 0x3, 0x0, 0x2, 0x0, 0xffffffff, 0x9, 0x3a15, 0x6, 0x1, 0x0, 0x80000001, 0x1ff, 0x4217, 0xff, 0xaaad, 0xf8d, 0x9, 0x0, 0x4, 0x4, 0x4f7, 0xf9, 0x80, 0x9f000000, 0x2, 0x5, 0x3, 0xfffffc00, 0x3, 0x8, 0x3ff, 0x1, 0x2, 0xffffffff, 0xece, 0x0, 0xbb, 0xe78, 0xa, 0xb00e, 0xc56, 0x5, 0x7, 0x8, 0x9, 0x1, 0x7f, 0xa846, 0xfffffff9, 0x8, 0x5, 0x1, 0x9, 0xfff, 0xfffffffd, 0x7, 0xdf7d, 0xdfe, 0x8, 0x5, 0xd3f, 0x9, 0xe, 0x320900, 0x8, 0x40, 0x8000, 0x0, 0x10001, 0x8, 0x7fffffff, 0xf95, 0x54c196c3, 0xe4e, 0x400, 0x1, 0x6, 0xe5dc, 0x80, 0x5, 0x8001, 0x2, 0x9, 0x6, 0x4, 0x7, 0x5, 0x7ed, 0x8001, 0xc, 0x10001, 0x9, 0x1, 0x9, 0x4d34, 0xe5, 0x6, 0xc, 0xd, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x7, 0x7ff, 0x5, 0xe28, {0x3b, 0x0, 0x4, 0x0, 0x7, 0x9}, {0xdb, 0x0, 0x7f, 0x0, 0x5, 0x8}, 0xb61e, 0xfffffffd, 0x3bc371f4}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x5, 0x0, 0x7, 0x80000000, {0xfb, 0x1, 0x3, 0x5, 0x5, 0x8}, {0x1, 0x0, 0x7, 0x8ed5, 0x9, 0x7ff}, 0x7, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x0, 0x8, 0x6, 0x5, 0x3, 0x3, 0x2, 0x9, 0xb31, 0x200, 0xffffff00, 0x8, 0x100, 0x7, 0x0, 0x4, 0x1000, 0x5, 0x1, 0x10000, 0x2, 0x7f3, 0x800, 0x7, 0x31a, 0x9, 0x7, 0x40, 0x4, 0x6, 0x3, 0x3, 0x2189, 0x5, 0xd, 0x0, 0x4, 0x8b63, 0x7, 0x80000001, 0x401, 0x4, 0x7, 0x7, 0x44, 0x8, 0xffffffff, 0x8, 0xffffff00, 0x14, 0xffffffff, 0x4, 0x401, 0x100, 0x1, 0x0, 0x7, 0x2, 0x2, 0x1b, 0x5, 0x377, 0x0, 0x70000, 0x5, 0xbeb2, 0x8, 0x1, 0x92d, 0x7fffffff, 0x0, 0xfff, 0x6000000, 0xf6e0, 0x24e, 0x492aa5a3, 0xb, 0x9, 0xee7, 0x4, 0x2, 0x9, 0x10001, 0x7, 0x3de, 0x9, 0x0, 0x3, 0xc4e1, 0x8, 0x64, 0x5, 0x7, 0xa, 0x6, 0x9, 0x7ff, 0x10001, 0x4, 0x8, 0xffff0001, 0xff, 0x4, 0x0, 0x7, 0x8, 0x8, 0x5, 0x7ff, 0x9, 0x0, 0x57f7, 0x1ff, 0x8, 0x7fff, 0x1ff, 0xfffffff8, 0x86fe, 0x5eff, 0x7, 0xfffffff9, 0x1, 0x4, 0xfffffc39, 0x1, 0x80000000, 0xe00, 0x4, 0xacd14f2c, 0x5, 0xd8, 0x1, 0x0, 0x7, 0x6, 0x10, 0x8, 0xa, 0x3800, 0x2, 0x8, 0x8, 0x2, 0xfffff10f, 0xfffffffe, 0x39b4, 0x4, 0x9, 0x200, 0x8, 0x1eb0, 0x0, 0x6, 0x8, 0x3, 0x7, 0x39, 0x8000, 0x1, 0x80000000, 0xa567, 0x200, 0x2ee, 0x93a, 0x80, 0xffffffff, 0x0, 0x101, 0x6, 0x6, 0x40, 0x5, 0x4, 0x7, 0x7, 0x0, 0xe, 0x4, 0x4, 0x101, 0x6, 0xc, 0x3, 0xd26, 0x2, 0x200, 0x4, 0xfffffff0, 0xc, 0x0, 0x5, 0x7, 0x4, 0x10001, 0x5, 0x6, 0xabda, 0x8, 0x1, 0x495, 0x3, 0x1, 0x4aa3, 0x7f, 0x1000, 0x1, 0x569ef758, 0x10000, 0xfff, 0x8, 0x4, 0x7, 0x1a9, 0x4, 0x7c, 0x400, 0x6, 0x8, 0x1000, 0xc, 0xcaaf, 0x9, 0x8, 0x67, 0x9, 0xca1c, 0x5, 0x9, 0x180, 0x4, 0x2, 0x9, 0x6, 0x5, 0x2, 0x4, 0x4, 0x6, 0x8, 0xa, 0x9, 0x5, 0x8, 0x6, 0x81b7, 0xfffffff8, 0x3, 0x3, 0x6, 0x6, 0x0, 0xfffffffe, 0xfffff568, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x0, 0xb7c, 0x6, 0xffff, {0xa, 0x1, 0x7, 0x8, 0x4, 0x4}, {0x91, 0x9196c4a283b699c, 0x9, 0x52b, 0x9, 0x9}, 0x80000001, 0x9, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0xf, 0x8, 0xfffffffc, {0xf8, 0x2, 0xa020, 0x7ff, 0x5, 0xb327}, {0x8, 0x1, 0x8, 0x7, 0x5}, 0x5, 0x7, 0x100}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x1, 0x5, 0x1, 0xfffffeff, 0x3, 0x0, 0x3, 0x3, 0x8, 0x152, 0x3, 0x1, 0x1, 0x7fff, 0x200, 0xfffffffa, 0x4, 0x4, 0x0, 0x9, 0x6, 0x58c, 0x8, 0x9, 0xfffffffd, 0x8, 0x7, 0x4, 0x5, 0x6, 0x7, 0x6, 0x2602, 0x3, 0x4, 0xfffffff7, 0x401, 0x8, 0x7f, 0xb, 0x3, 0x8000, 0x2, 0x9, 0x0, 0x101, 0x3, 0x1, 0x1000, 0x8, 0x3, 0x5, 0x6, 0x2, 0x1af3, 0x80000000, 0x9, 0xe, 0x845, 0xb, 0x1, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2, 0x6, 0x6, 0x2, 0x0, 0x8, 0x7ff, 0x94, 0xe4, 0x28, 0x7fff, 0x0, 0x640, 0x80000001, 0x7, 0x8, 0x5, 0x7, 0xb, 0x66, 0x6, 0xfe, 0x400, 0x3, 0x2, 0xffffff82, 0x8, 0x1, 0x100, 0xd2cd, 0x4, 0x40, 0x100, 0x7, 0x1, 0x7f, 0xfffffffa, 0x3, 0x4, 0x4, 0x9, 0x0, 0x9, 0x0, 0x7, 0x2000000, 0x0, 0x1, 0x1, 0x8, 0x3, 0x46, 0x9, 0x2f, 0xa9ec, 0x0, 0x6, 0x7ff, 0x7f, 0xffff, 0x7, 0x8001, 0x5, 0x8, 0x8, 0x10000, 0x7, 0x9, 0x2, 0x1, 0x8b0, 0x401, 0x2, 0x6, 0x0, 0x1, 0x480, 0x7, 0x8, 0x6, 0x52f9, 0x5, 0x3, 0x4, 0xa4c3, 0x1ff, 0x5, 0xfc, 0x9, 0xd64, 0x9, 0x0, 0x8d9, 0xfffffffd, 0x800, 0x7, 0x1, 0x2, 0x8, 0x5443, 0x80000001, 0x1, 0x6, 0x1, 0x1, 0x3ab3, 0x2, 0x6, 0xc, 0x7, 0x4, 0x3, 0x3, 0xfffffffd, 0x0, 0x40, 0x6, 0x200, 0x8, 0x1, 0x3, 0x0, 0x6, 0x1, 0xfffff3cd, 0x5, 0xe, 0x10001, 0x401, 0x9, 0x6, 0x10000, 0x6, 0x1b4, 0x8, 0x6, 0x7, 0x3df2, 0x6, 0x7, 0x3ff, 0x1, 0x6, 0x1, 0x2, 0x3ff, 0x6, 0x8, 0x0, 0x4, 0x7, 0x8, 0xfffff76a, 0x8, 0x0, 0x7, 0x9, 0x15c, 0x9, 0x2, 0x0, 0x8, 0xff, 0xfcf, 0x5, 0xc, 0x2, 0x4, 0x1a0, 0x1f, 0x7, 0x3, 0x7, 0xa6, 0x100, 0x9, 0x1, 0x8, 0x1270, 0x6, 0x2, 0xe4c6, 0xfd0, 0xffffff45, 0x2, 0x4, 0x992, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffc26}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x4, 0x2, 0x0, 0x3, {0xc4, 0x2, 0x3, 0x3, 0x1, 0x6cf7}, {0x3, 0x2, 0x7ff, 0x9, 0x5, 0xfffffffe}, 0x7, 0x55, 0xfffffffd}}], [], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x8, 0x3, 0x8, 0x2, 0xffff, 0x87ff, 0x5, 0xfffffffd, 0xc, 0x7, 0xd, 0x0, 0x3, 0x401, 0x8, 0x3, 0x7, 0x7fffffff, 0x7, 0x2b5a, 0x4, 0x2, 0x80000001, 0x6, 0x4, 0x4, 0x5, 0x1, 0x0, 0x0, 0xfffffffb, 0x21, 0x7, 0xe2, 0x9, 0x4, 0x7f, 0x1, 0xfffffffe, 0x8, 0x0, 0x3, 0x8000, 0x7, 0x8, 0x6, 0x2, 0x9, 0xaa, 0xb740, 0x1, 0x7fff, 0x4, 0x0, 0x8000, 0x0, 0x10, 0xb, 0x2, 0x3, 0x4, 0xe0921d2c, 0x865, 0x5, 0x2, 0x200, 0x662, 0x6, 0x0, 0x0, 0x5, 0xc3ca, 0x9, 0x8, 0x1, 0x1000, 0x7, 0x80000000, 0x1628, 0x0, 0x1, 0xfffffffb, 0xfffffffb, 0x6, 0x0, 0x729, 0x3, 0x9, 0x75, 0x401, 0xffff, 0xd4d, 0x0, 0x4, 0x6, 0x2, 0x3, 0x1, 0x7ff, 0xfffffff8, 0x0, 0x421a, 0x7f, 0x5, 0x2, 0x9, 0xc, 0x7, 0x3, 0xb85, 0x9, 0x1, 0x4, 0x9, 0x9, 0x7, 0xfffffffc, 0x9, 0xfffffffe, 0x4, 0x32, 0xc7c, 0x2eb, 0xfffffff8, 0x10, 0x2, 0x2, 0x5, 0x6, 0x80000000, 0x7f, 0xaa, 0x80000000, 0x6092, 0x97d, 0x81, 0x40, 0xfffffffb, 0x5, 0x3, 0xffff, 0x1ff, 0x25a, 0x9, 0x2, 0x1000, 0x36d, 0x7, 0x8, 0x5, 0x5, 0xb2, 0x4, 0x0, 0xc, 0x2, 0x4, 0x5, 0x1, 0x7, 0x23e, 0x8, 0x1, 0x7, 0xfffff801, 0x82, 0x1ff, 0x6, 0xd, 0x8, 0x5, 0x9, 0x4, 0x1, 0x6, 0x3, 0x9, 0x6, 0x101, 0x401, 0x80000001, 0x0, 0x9, 0x9, 0x7, 0x0, 0x0, 0x8, 0x5de, 0xc933, 0x9, 0x8, 0xa, 0x3, 0x8, 0x0, 0xa, 0x80000001, 0x9, 0x9, 0x500000, 0x2, 0xfffffff7, 0x101, 0x9, 0x200, 0x6, 0x100, 0x2, 0x8, 0x0, 0x6, 0x10000, 0x8, 0x0, 0x10001, 0x8, 0x4, 0x6, 0xff, 0xfffffffe, 0x5, 0x8, 0x2, 0xd7, 0xf, 0x663ffd62, 0x6, 0x4, 0x9, 0x528, 0x59e, 0x8, 0x80000000, 0x5, 0xffffffff, 0x5, 0x6d6, 0xfa9, 0x4, 0x4, 0x2, 0xa12, 0x4, 0x1, 0x101, 0x3ff, 0x0, 0x4, 0x3, 0x9, 0x1ff, 0x4, 0x10, 0x7f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x6, 0x7d38, 0xa00, 0x85, 0xfffffffd, 0x6, 0x2, 0x1b74, 0x60e, 0xffcb, 0x5, 0x3, 0x6, 0xfffffff9, 0x9, 0x0, 0x9, 0x1, 0x7a40, 0x7, 0xfffff689, 0xffff, 0x6, 0x0, 0x3, 0x6, 0x5d4, 0x5, 0xf2, 0x3, 0x1, 0x23b, 0xb932, 0x5, 0x4, 0x8, 0x1, 0x3, 0x0, 0x10000, 0x96, 0x6, 0x8, 0x40, 0x1e9, 0x9, 0xf92, 0x2100787e, 0x3, 0xb, 0x15, 0x7, 0x62, 0x86, 0x4, 0x9, 0x0, 0x4, 0x10001, 0x0, 0xce, 0x7, 0x6, 0x7, 0x695, 0x3, 0x4, 0xc02b, 0x0, 0x2, 0x6, 0xa, 0x0, 0x0, 0xff, 0x5, 0x6, 0x800, 0x15b, 0x9, 0x100, 0x8001, 0x9, 0x7fffffff, 0x2, 0x9, 0xfff, 0x6, 0x3, 0x1, 0x4, 0x94, 0x5, 0x1, 0x100, 0x3, 0x6, 0x1, 0x100, 0xd, 0x3b, 0x5, 0x9, 0x401, 0x3, 0x3, 0x98, 0xff, 0x3513, 0x2, 0x40, 0xca3, 0x9, 0x3, 0x5f, 0x1000, 0x4, 0x0, 0x1f, 0xb9, 0xfffffff7, 0x2, 0x42, 0x80000000, 0x7, 0x6, 0x9, 0x1, 0x3ff, 0x7b9f, 0x850, 0x8, 0x5, 0x200, 0x5, 0x7, 0x6, 0x77b, 0x4, 0x1, 0x3, 0x1ff, 0x9, 0x0, 0x7, 0x10001, 0x4, 0xc4a, 0x18, 0x3, 0x4, 0xfffffffc, 0x4, 0x6, 0x101, 0xc0000, 0x9, 0xb1, 0x6, 0xfffffff9, 0x3, 0x2, 0x3, 0x8001, 0xfffffff9, 0x7, 0xffff, 0xfffffff7, 0xd, 0x42, 0x25c, 0x3ef2, 0x7, 0x2, 0x4, 0x2, 0x1, 0x4000, 0x401, 0x0, 0x3, 0xfffffffa, 0x5, 0xae, 0x3, 0x9, 0x312, 0x7fffffff, 0x2, 0xe, 0x3, 0x9, 0x6, 0xfff, 0x101, 0x2a8, 0x2d, 0x8, 0x200, 0x6, 0xbdd3, 0xb, 0x8, 0x9, 0x83f, 0x0, 0xb, 0x56c6, 0x6, 0x5, 0x182, 0x8, 0x0, 0x1, 0x7, 0x6, 0x10000, 0x5, 0xefec, 0x6, 0x80000001, 0x6, 0x6, 0x8, 0x6, 0x6, 0x8, 0x8, 0xfffffff5, 0xffffffff, 0x0, 0x7, 0x4, 0x5, 0xd, 0x10, 0x7, 0x111f, 0xfffffff7, 0x13e, 0x80000001, 0x7f, 0x1, 0x6cb, 0x3, 0x6, 0x0, 0x8, 0x8, 0x7fffffff, 0x1000, 0x9, 0x2, 0x0, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x7f, 0x6, 0x8f, 0x80000000, 0x4, 0xff, 0x2, 0x2, 0x8, 0x5, 0x3d, 0x3, 0x5, 0x8, 0xffffffff, 0xfffffff7, 0x1000, 0x1, 0x5, 0x7, 0xc63, 0x3, 0x6254, 0x40000000, 0x10001, 0x9, 0x7, 0xfffffffc, 0xffffffff, 0x4a, 0x8000, 0x5508, 0xffffff81, 0xd, 0x5, 0x4, 0x81, 0xb321, 0x4, 0x15, 0x3, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x0, 0x8, 0x3, 0x5, 0x1, 0x72c, 0x81, 0x54, 0x2, 0x1, 0x3, 0x4, 0x7ff, 0x4, 0x365e, 0x2, 0x6, 0x7f, 0x7, 0x4, 0xb, 0x3, 0x1d73, 0x6, 0x0, 0x174000, 0xe0, 0xea672d33, 0x4, 0xc00000, 0x7, 0x10000, 0x6, 0xbe, 0x70000000, 0xd, 0x3, 0x3, 0xa, 0x6, 0x9, 0x9, 0xfff, 0x6, 0x8, 0x0, 0x4, 0x6, 0x147, 0xffffffff, 0x9, 0x2, 0xffffa084, 0x81, 0x1, 0xb3, 0xadf7, 0xffffffc8, 0x3, 0x2, 0x98ef, 0x9, 0x400, 0x6, 0xfffffff2, 0x9, 0x7, 0x10000, 0x6, 0x800, 0x5, 0x5, 0x9b9, 0x9, 0x5, 0xe684, 0x18000000, 0xfff, 0x3, 0x401, 0x0, 0x7, 0x3ff, 0x6, 0x1d, 0x0, 0x5, 0x2, 0xe, 0x0, 0x9, 0x5, 0xe, 0x3, 0x4, 0xffff409d, 0x5, 0x80, 0x489f4c9a, 0x4, 0x3c2e, 0x80000001, 0x0, 0x1, 0x3b, 0xfff, 0x0, 0x4, 0x3, 0xffffff01, 0x2, 0xfffffffc, 0x3ff, 0x6, 0x54, 0x7, 0x2, 0x3, 0x6, 0x400, 0x1, 0x9, 0x3, 0x55, 0xffff8001, 0x44, 0x7, 0x8328, 0x9, 0x7fff, 0x2, 0xa5, 0x5, 0x6, 0xfff, 0x9, 0x1, 0xd, 0x0, 0xecb, 0x7, 0x8, 0x2, 0xe, 0x3, 0x3, 0x9, 0x9, 0x3, 0xaaa, 0x7, 0x10001, 0x9, 0x4, 0x0, 0x1, 0xff, 0x5, 0x4, 0x0, 0x1745, 0x7ff, 0x5, 0x7ff, 0x7, 0x2, 0x5988c8d, 0xfffffc01, 0x1d19, 0x1000, 0x97f, 0xb8b, 0x800, 0x7fffffff, 0xe, 0x4, 0x6, 0x2fdf, 0x4ef8, 0x8, 0x3, 0x6099, 0x7, 0xe, 0x7, 0x5a0a, 0x5, 0x8000, 0xcd0, 0x6, 0x0, 0x80000001, 0x6, 0x1000, 0xffff, 0x6, 0x9c21d36, 0x80000001, 0x8000, 0x81, 0x8, 0x8, 0x1ff, 0xfffff76e, 0x7, 0x7, 0x5, 0x3, 0x200, 0xfffffffd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0x10001, 0xffffffff, 0x3, 0xe, 0x6, 0x3, 0x0, 0xfffffffe, 0x5, 0x1062, 0x0, 0x685, 0x7, 0x200, 0x10, 0x4, 0x8000000, 0xfffffff1, 0x1, 0x0, 0x80000001, 0x8, 0x3, 0x9, 0x10000, 0x7685, 0x4849, 0xae, 0x3, 0x0, 0x9, 0x10001, 0x50f, 0xfffffff4, 0x6, 0x5, 0x1, 0x3, 0xfe1, 0xfffffffc, 0x6, 0x916a, 0xe16, 0x793e, 0x2, 0x8, 0xc10, 0x8, 0x6, 0x101, 0xd9, 0x6, 0xd, 0xced10, 0xcd06, 0x2, 0x6, 0x9, 0xfffffffd, 0x1, 0x3ff, 0x11b, 0x6, 0x4, 0x800, 0x9, 0x6, 0x69f575b3, 0xffff, 0x2, 0x81, 0x4, 0x9, 0x4, 0xcd6a, 0xfffffffb, 0x96b, 0x9, 0x100, 0x8, 0x3, 0xfffffffe, 0x9, 0xb4, 0x7, 0x2, 0x200, 0x1, 0x1, 0x8, 0x5, 0xb, 0x4, 0x2f, 0x7, 0x1, 0x2, 0x1, 0x7f, 0xabae, 0x2, 0x2, 0x5, 0x80000001, 0x7, 0x9, 0xf, 0x9, 0x0, 0x5, 0x252, 0x7, 0x1, 0x0, 0x3, 0x7f, 0x4f, 0x1ed, 0xc610, 0x6, 0xfff, 0x72, 0xffff0001, 0x1, 0xffff, 0x1, 0xfffffbff, 0x8, 0x1000, 0x5, 0x5a, 0x44adff86, 0x8, 0x400, 0x7, 0x3, 0x401, 0x2, 0x59, 0x1, 0x8, 0x7, 0x5, 0x800000, 0xe73, 0x9, 0x75b5, 0xc, 0x8, 0x9, 0x6, 0x7fff, 0xa620, 0x3, 0x7, 0xff, 0x10, 0x2, 0xe, 0x5, 0x7, 0x8001, 0x80c1, 0x9990, 0x9, 0x0, 0x5, 0x0, 0xffffff36, 0xff, 0x1, 0xffffffff, 0x1, 0x2, 0x7, 0x8, 0x4, 0x7fff, 0xfda, 0x4, 0x8, 0xf, 0x0, 0x10, 0xdea0, 0x1, 0xff, 0xd3a, 0x16b33833, 0xfffffffa, 0xffff, 0x4, 0x80000001, 0x3, 0xff, 0x2, 0x0, 0x1000, 0x9, 0x3, 0xda, 0x6, 0x1ff, 0x48d, 0x7fffffff, 0x570, 0x5, 0x7, 0x8, 0x2, 0x8, 0x7, 0x7fffffff, 0x3, 0x1000, 0x0, 0x17, 0x8, 0x6, 0xe, 0x4, 0x80, 0x1, 0x8000, 0x0, 0xffffffff, 0x0, 0xfff, 0x6, 0x7, 0x9, 0x1, 0x8, 0xfd, 0x5, 0x5a4c, 0x7fffffff, 0x1, 0x3, 0x80000000, 0x2, 0x3, 0x7, 0x2, 0x4, 0xf, 0x1000, 0x2, 0x3, 0x2, 0x80000001, 0xdc, 0x3, 0x7]}]]}, {0x81, 0x6, "5c56c8675ec323defee1d3f2ef1d725975a92459b012afef57fa05dbff5e02b8f5cf89fb547c0c9d49ee99cd6a93bc03095740dae1f4c64492dabcffb651c1e196b40f13b48f306ad1c629e722886f3b48eca7987afb44654c3c972205e7be8dd138cd9c906376c5a2df5aaf20795546c77ffe10e447ce73f8a678dc6a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x13d0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0xf5c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x24, 0x2, 0x0, 0x0, {{0x10, 0x0, 0x400}, "2b3f50fa3bb9357e6d2e83ec581933854aca91241debb336"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xec3, 0x2, 0x4a5}, {0xa1, 0x8, 0x2, "4eff8f873fd3e2c5"}}}, @TCF_EM_CONTAINER={0xf0c, 0x3, 0x0, 0x0, {{0x80, 0x0, 0xc}, "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"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x40, 0x8, 0x8}, {0x1, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x3ac, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xb, 0x3, 0x9}, {0x5, 0x8, 0xa4, 0x4}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x81}, {0x0, 0x1, 0x6}}}, @TCF_EM_IPT={0x2f0, 0x1, 0x0, 0x0, {{0x81, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x3f, 0x5, "53aed4a53730ccea342b613cb52a46919267802bc50e67bf08d202e88d2b3db64b6ce4d6528bc91285de82297ac7446da035bd94ee3a26a97fe774"}, @TCA_EM_IPT_MATCH_DATA={0xe2, 0x5, "3a6e90580bb7ad48fe468b90adb9bd95fe51c19ee449313d4a542501da79481054dd41f24417b40b08573846b64f3c46aee658c60ba2ba8797d01d6252c832e9ec68d3809079ea65284134517c2ea02596f80d24d1e295d3d40f0fcbdeb0e54bcc6a19bfafd5218f838ee7fe3543d07b85e9888482d87b91686bf46062291e40b5bb413da6c91f8b1ab3a28fef9545f091635257e7219d72532088799888d2f49fc883f4b39d719d313eb46015542bbd269319c4ec7d97ee417996a7982a43fbe3ca1b711503f6f561a265a703f1e18e08417c92581e01424fe436238536"}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x91, 0x5, "74dab9e96b7156c712675df93fe3f01fb4debff2374451f0ba5f6509312aa6c4870a89b5729252b62d40f6886ad30ef611b839165f3463892eb40bef20664fc5c2033d0801fbf825d5353adc0f1c1d41cb7344d265bef7509458f89dd136ed0b5b89facb47562eb83dd87fbf7ee456afabd21badb90349184b1efe7108e786748b9542829907e8f3830d12ed8a"}, @TCA_EM_IPT_MATCH_DATA={0xf3, 0x5, "7ec0153e9e5e9cbe67d86a502475ce08e775197d43799caddc0a1cd88829dac33a0152919c058c11c0fa714764d917e50a85ac780b1ea896ef2de303a567606ecc6255bea9a5fb6d0516e2d3f796358ee3fbc6f2b9b3f8e1d3354e78607f13fefd919e1747642aad8988a3fa4f460f7e505d013b450be155f96627d2d12ae62dda72e409de990607267c34978d915110fda7985aa51b7885f922f517245b754b034c1a2b7df92823c1a4dce811ed071adb7b0638546abdbd4c6bb3bf6ec70452223e24812fd50791eb49fe86498a0b74f9a68192d4823488dc5e14c7e2247c61ca50b75e245b176ead96442824b496"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0x8c, 0x3, 0x0, 0x0, {{0x3, 0x0, 0xbde}, "84fb496529f6c5b06065aa9f30a059a0ff10177e1a88d055eddc0479173b28002c73685cd16008049f3bb74f94a815245d44bf72f01ebb705f9115ca694b91fb8330876b4a132e92e51023a396f7267261aaef0249b8a9aa38a01cbdcb8beaf7ee3c6470ba6cbc529e407493ac0c0f61d94c3980be440201142b29f85e6c"}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x7}, {{}, {0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x7}, {0x80000001, 0x9dae, 0x6, 0x5, 0x8, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x1000}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x9}, {0x200, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x10, 0x7, 0x3}, {{0x3, 0x1, 0x1}, {0x3, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x5}, {0x3ff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x7, 0x885, 0x5, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_CGROUP_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4c9c, 0x2, 0xa0, 0x0, 0x6, 0x7fff, 0x0, 0x5, 0x3a8, 0x4, 0x200, 0x4, 0x40, 0x5, 0xffff, 0xfff, 0xffffbb37, 0x4, 0xb2, 0xfffffffc, 0x6, 0x1, 0x5, 0x120, 0x8, 0x3fb, 0xe, 0x1000, 0x9, 0x1, 0x800, 0xf, 0xa44, 0x8, 0xfffffff7, 0x60b, 0xba, 0xa5, 0xfff, 0x7, 0xff, 0x5, 0x9, 0x3ff, 0xffff, 0x2, 0xc3de, 0x4, 0x2, 0x6, 0x400, 0x55, 0x6, 0x1, 0xff, 0xf6e, 0xf4f5, 0x2, 0x9, 0xedf7, 0x6, 0x6, 0x4, 0xffff8001, 0x6, 0x8e, 0x1, 0x5, 0x6, 0x0, 0x8, 0x3, 0x0, 0x9, 0x9, 0x8001, 0xab59, 0x7, 0x0, 0x0, 0x5, 0x401, 0xff, 0x10001, 0x2, 0xfffffff4, 0x0, 0x5, 0x4e, 0x6, 0x10001, 0x8c, 0x3, 0x6, 0x6, 0x7, 0x400, 0x6, 0x0, 0x7, 0x40, 0x3a, 0x472, 0x4, 0x14ec8d47, 0x3, 0x8, 0xfffff95f, 0x5, 0x2, 0x0, 0x8, 0x0, 0x9, 0x8, 0x0, 0xf, 0x401, 0x1200, 0xfffffffe, 0x47, 0x7fff, 0x7, 0x9c80, 0x9, 0x9, 0x2, 0x822, 0x7, 0xc, 0x7, 0xe9, 0x63b9db8f, 0x4, 0x1, 0x6, 0x81, 0x8, 0x6, 0x81, 0x7, 0xb7, 0x10, 0x10, 0x8, 0x7, 0x1, 0x1, 0x0, 0x37, 0x7fff, 0xffffffff, 0x3, 0x80, 0x6, 0xfffffffa, 0x5, 0x4, 0x99, 0x6, 0x7, 0x4dda, 0xffffffff, 0x1, 0x6, 0x2, 0x4, 0xd, 0x10000000, 0x906, 0x6, 0x8000, 0x9, 0x1, 0xfffffffa, 0x10, 0x3, 0x100, 0x5, 0x1, 0x3, 0x3, 0xfffffffc, 0xb3d, 0x7, 0xffffffff, 0x5, 0x1a89, 0x100, 0x200, 0x4, 0xa, 0x9, 0x5, 0x4, 0x1, 0x6, 0x3, 0x0, 0x1, 0x5, 0x129, 0x2, 0x1000, 0x3, 0x3, 0xd, 0x3, 0xa5d, 0xfffffffb, 0x5, 0x7, 0x2, 0x1, 0xd, 0x8, 0x101, 0x7ff, 0x1, 0x4, 0x0, 0x1cb8, 0x6, 0x437, 0x2, 0x2, 0x3, 0xfffffff8, 0x8f2, 0x0, 0x0, 0x4, 0x3ff, 0x2, 0x7, 0x3, 0x9, 0x2, 0x2, 0x9, 0x1, 0x6889, 0x1, 0xccb, 0x8001, 0x1, 0x3, 0x9, 0x7, 0xfffffff7, 0x2, 0x67d4, 0x6100, 0x10, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffb, 0x8, 0x5, 0x2, 0x3, 0xe, 0x7ff, 0x10000, 0x7, 0x6, 0x3, 0x4, 0x7, 0x100, 0x100, 0x4, 0x3, 0x0, 0x7fff, 0x0, 0x4, 0x7f, 0x5, 0x2, 0x1, 0x9, 0x7f, 0x40, 0x7, 0x506, 0x0, 0x9, 0x5f8, 0x7, 0x9, 0x1d2c, 0x2, 0x8, 0x100, 0x6, 0x4, 0x2, 0xfffffff9, 0x7, 0x8000, 0x0, 0x7, 0x800, 0x4, 0x1, 0x8000, 0x0, 0x0, 0x6, 0x2, 0xfffffffc, 0x7, 0x6, 0x65, 0x4, 0x7, 0x5033, 0xba9, 0x0, 0x7, 0x2, 0x633, 0x8, 0x3, 0x140000, 0x6, 0xc, 0x8, 0x3, 0x3, 0x4, 0x9, 0x31, 0x2, 0xe, 0x0, 0xbb, 0x8, 0x1000, 0xfffffff9, 0x7, 0x9, 0x8, 0x2, 0x1000, 0x7, 0x8, 0x4, 0x6, 0xffffffff, 0xe, 0x5, 0x2, 0x8, 0xfffffffa, 0x80000000, 0x41f5, 0x800, 0x2, 0x1, 0x3a, 0x3, 0x1, 0xb012, 0xffffffff, 0xfe000000, 0x8, 0x8ba8, 0x8, 0xe345, 0x667d80dc, 0xffff, 0x3ff, 0x0, 0xb, 0x6, 0x8000, 0x9, 0x2, 0x0, 0x10, 0x6dd, 0xffffffff, 0x9, 0x800, 0xac96, 0x7, 0x69f9de81, 0xf, 0x3, 0x81, 0x2, 0x9, 0x476, 0x6, 0x3, 0x80, 0x1, 0xc, 0x7f, 0xffff0001, 0xfff, 0x0, 0x7, 0x8, 0x1, 0x9, 0x0, 0x8, 0x3, 0xf5, 0xa, 0x2, 0xe, 0xff, 0x2, 0x5, 0x3, 0x6, 0xfffff000, 0x7, 0x80, 0x80000000, 0x8, 0x6, 0x9, 0xfffffffb, 0x5, 0x80000000, 0x900, 0x5, 0x6, 0x9, 0x6, 0x0, 0x6, 0x2, 0x443a, 0x4, 0x10001, 0x2, 0x4796, 0xfffffffe, 0x4, 0x1, 0x1000000, 0xf4d6, 0x1, 0x3, 0x3, 0x8, 0x1ff, 0x6, 0x5, 0xbec3, 0xac, 0x65cb, 0x3bc, 0x2, 0x0, 0xfffffff4, 0x8, 0x6, 0x4, 0x2, 0x6, 0x9, 0x7, 0xfffffffd, 0x1000, 0x9, 0xb, 0x7, 0x5, 0xb6, 0xfffffffc, 0x0, 0x40, 0x1cc6, 0x9154, 0x97b, 0x1, 0x2, 0xff, 0xc000000, 0x2, 0x4, 0x1000, 0x2, 0x3ff, 0x0, 0x100, 0x8, 0x2, 0x1ff, 0x7fff, 0x3, 0x1, 0x9, 0x476, 0x7ff, 0x3, 0x3, 0xe3b3, 0xcd, 0xfffff23e, 0x2, 0xb, 0x0, 0xfffff052, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3, 0x8e, 0x2, 0x1, 0x2, 0x40, 0x7, 0x7, 0x9, 0x6b, 0x9, 0x5, 0x1, 0x40, 0x80, 0x8, 0x85f9, 0x8, 0x4, 0x4, 0x9, 0x2, 0x7, 0x9, 0x3, 0x4, 0xe, 0x8, 0xffff7fff, 0x1ff, 0x7ff, 0x6bb, 0x8c, 0x7fff, 0x0, 0x6, 0x4f3f543, 0x186e, 0x5, 0x5, 0xf7, 0x8, 0x8, 0x8c60, 0x5, 0xac5, 0xd938, 0x2, 0x4, 0xfff, 0xfffffff1, 0x0, 0xf, 0x8, 0x2, 0x6, 0x3, 0x4, 0x76a, 0x3ff, 0x4710, 0x7, 0x7, 0xe00, 0x10, 0x6, 0x200, 0x2, 0x0, 0x3, 0x81, 0xfffffffe, 0x2, 0x5, 0x1e, 0x5, 0x20, 0x8, 0x73, 0x2, 0x80, 0x3, 0xa491, 0x0, 0x7, 0x5, 0x4, 0x1, 0x2, 0x3, 0x5, 0x5, 0x7f, 0x9, 0x1, 0x9, 0x3, 0x7, 0x4, 0x51, 0x7, 0xb5, 0x8, 0xfffff855, 0x1, 0x7, 0x2, 0x0, 0x5, 0x5, 0x7, 0x50000, 0x0, 0x4, 0xffffffab, 0x72, 0x986, 0x4, 0x6, 0x6, 0x8, 0x2, 0xf3, 0x6, 0x1, 0xf7dd, 0x5, 0x0, 0x3, 0x3, 0x1000, 0x6, 0x36c, 0x401, 0x6, 0x89, 0x81, 0x5, 0xfffff801, 0x3, 0x6, 0xfffffffe, 0x0, 0x1ff, 0x800, 0x7, 0x1, 0xfffffffd, 0xb5, 0x6, 0xffff, 0xffff5e70, 0x2, 0xe, 0x5, 0x1, 0x7fffffff, 0x6, 0xff, 0x2, 0xf, 0x7, 0x2, 0xe6, 0x5, 0x8, 0x7, 0xc0000000, 0x5, 0x10001, 0x0, 0xffffffd5, 0x4, 0x1, 0x1, 0x1, 0x400, 0x3, 0x9, 0x6, 0x8, 0x3ff, 0xfffffffa, 0xe, 0x9, 0x8, 0x6, 0x3fa4, 0xf, 0xaa9, 0x6, 0xb, 0x5, 0xffffff22, 0x9, 0xb, 0x80000000, 0x2, 0x7, 0xfffffffa, 0x6, 0x4, 0x3, 0x8, 0xc2, 0x4, 0x10000, 0x6, 0x4, 0x7, 0x8, 0x8, 0x7f, 0x3, 0x0, 0x5, 0x5, 0x7ff, 0x9, 0x10000, 0x1000, 0x80, 0xf, 0x7, 0x3ff, 0x8, 0x6, 0x8, 0x2, 0x4, 0x100, 0xfffffff7, 0x1, 0x2, 0x200, 0x6, 0x3, 0xbb, 0x35ba, 0x4, 0x4, 0x5, 0x9, 0x6, 0xfffffffd, 0x80, 0x3a, 0xfffffffc, 0x40, 0x9, 0x5, 0x383, 0xffffffe5, 0x7ff, 0x80000001]}]}]}}]}, 0x5c1c}, 0x1, 0x0, 0x0, 0x804}, 0x2000c800) 1m27.607839491s ago: executing program 4 (id=1202): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xffffff1f, 0x2) unshare(0x68040200) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m27.528961846s ago: executing program 3 (id=1203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c000500010006000000240007"], 0x6c}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x101080) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)=0x50007) execve(&(0x7f0000000640)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000a40)='lowerdir', &(0x7f0000000a80)='-!@$$-:\x00']}, &(0x7f0000000d00)={[&(0x7f0000000b00)='.&:^\x00', &(0x7f0000000b40)='ethtool\x00', &(0x7f0000000cc0)='%}!{}!-^(\'\'(*-):\x00']}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) r5 = socket(0x2b, 0x80801, 0x1) getpeername$inet(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x301, 0x0, 0x0, {0x24}}, 0x14}}, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000340)=ANY=[@ANYRES16=r2], 0x10) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1, r9}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000bc0)={0x7, 0x0, [{0x1, 0x87, &(0x7f00000006c0)=""/135}, {0x4000, 0xc7, &(0x7f0000000780)=""/199}, {0x8080000, 0x8f, &(0x7f0000000880)=""/143}, {0xf000, 0x7, &(0x7f0000000080)=""/7}, {0x4, 0xb1, &(0x7f0000000500)=""/177}, {0x0, 0xf2, &(0x7f0000000940)=""/242}, {0x10000, 0x33, &(0x7f00000005c0)=""/51}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRESOCT=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC]) mount$overlay(0xc0ed0000, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m27.429382685s ago: executing program 3 (id=1204): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xffffff1f, 0x2) unshare(0x68040200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0), 0x13f}}, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m27.31478935s ago: executing program 3 (id=1205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x36]}}]}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000000c0)=0x1) r7 = fcntl$dupfd(r6, 0x0, r6) read$FUSE(r7, &(0x7f0000000700)={0x2020}, 0x2020) write$FUSE_INIT(r7, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4c0, 0x140, 0x7, 0x9d, 0x2, 0x6, 0x0, 0x0, 0x4, 0x8}}, 0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 1m26.73875183s ago: executing program 4 (id=1206): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r3 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000000009d2de3deea9d00000000000000002300000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r3, 0x47f6, 0x7f000000, 0x0, 0x0, 0x0) 1m26.738288696s ago: executing program 33 (id=1155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYRES8=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x294d40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffe}) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x80010, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x9, 0x5) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102377, 0xffffffffffffffaf) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_usb_connect(0x3, 0x34, &(0x7f0000000040)=ANY=[], 0x0) 1m26.081065467s ago: executing program 3 (id=1208): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000003100)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0xec, 0x30, 0x400, 0x0, 0x0, {}, [{0xd8, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0xa8, 0x7, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x80, 0x8, 0x41c79849, 0x20000000}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x90, 0x20000000, 0x7, 0x7}, 0x6e}}]}, {0x41, 0x6, "ed377c787d98e263b860b6be24f4a7391d5164e798e42777daafd1921c7f2e2ecc7a09da85f1773cc54b66ab3cb1f30f9793f2b1c10b7717c5b14f6b63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x3b4, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'team_slave_0\x00', 'syzkaller0\x00', {}, {}, 0x2f}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x9295, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x31, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfffff7ff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) 1m25.341836382s ago: executing program 5 (id=1207): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=@newtaction={0x298, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x284, 0x1, [@m_ct={0x254, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x214, 0x6, "709f7f25af83501b0d80a22a31c25e555b56285590baafe0e2a2bc998d322de4ccc200f939206d95940f98e8d1621c3bc5518b8eee700deaaae36bd78fb13fa96c6c1bb1e075e0215c36fb169346af6e3cf14266f04d0d151947a766dd6e6492067f321e25fbf874c705800000a4d0f46ca17550f67f2cb859a3e51d4ac4875d432a1c9f1c50295a0ab4bc3496b7b6e8450960c9b48dc05d0641467fa78a894f6936fd65d52bf7c92df076ab6e286053e08158247e81b4e8107f4b778299ef1d805084bc3811ac9ef704cfb68df706f15b7bd5d503882ed8aceb6b4e69368b422081e8670690de66f0c8c3948d704f06868a80cdd968cf3af3a4ab3be6fe70fa39682950ac876a12bb1204725526aae403d439e995ae0d81780727c23559bfa3e6d8b0a839ce478f64903dc4769cdad33e57db4d3b9277893f5c07da8fdb13eb84f243f72bd2f1570b6b49f877619491cb4dffb8d7ae85d689c39b1c8995b69f43a26c0fa4afbb53d5218d2cb67c15fe69d32c7ee0464e4c14be6d9bc9c8c0c310ba0168592850da0c182312d3499bfaf17cef3c8703f1b96607264c255ccbf6db83bb7e058f21abf0985512a70465248c5e2d396fdae94e46642e3c87a50f79cc533ee2f2e4e2d1a9ef7907055ee76ac8c2c4097d43bad75e39225495e3cfcbb4bc1c1902edc9642cb73fb17060419c702afa86b2d9f514b4741d145f1081ceddc78ba43563f45c56afb66a00000000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x9) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f00000005c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) socket$xdp(0x2c, 0x3, 0x0) 1m11.547707749s ago: executing program 34 (id=1206): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r3 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000000009d2de3deea9d00000000000000002300000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r3, 0x47f6, 0x7f000000, 0x0, 0x0, 0x0) 1m10.986568799s ago: executing program 35 (id=1208): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000003100)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0xec, 0x30, 0x400, 0x0, 0x0, {}, [{0xd8, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0xa8, 0x7, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x80, 0x8, 0x41c79849, 0x20000000}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x90, 0x20000000, 0x7, 0x7}, 0x6e}}]}, {0x41, 0x6, "ed377c787d98e263b860b6be24f4a7391d5164e798e42777daafd1921c7f2e2ecc7a09da85f1773cc54b66ab3cb1f30f9793f2b1c10b7717c5b14f6b63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x3b4, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'team_slave_0\x00', 'syzkaller0\x00', {}, {}, 0x2f}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x9295, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x31, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfffff7ff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) 1m9.982612506s ago: executing program 36 (id=1207): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=@newtaction={0x298, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x284, 0x1, [@m_ct={0x254, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x214, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x9) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f00000005c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) socket$xdp(0x2c, 0x3, 0x0) 50.04539404s ago: executing program 7 (id=1221): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{0x4}, {}, {}, {0xfffffffd}, {}, {0x20a, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010101, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0xa, @in=@loopback, 0x0, 0x0, 0x3, 0xb7}}, 0xe4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x7}, 0x4000010) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) clock_settime(0xbcd1940b87aad64b, &(0x7f0000000500)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r6, 0x3314, 0x7) 48.933007231s ago: executing program 7 (id=1223): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x4000}, 0x10) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000240)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000000300)=""/154, 0x9a) 46.906251196s ago: executing program 7 (id=1227): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{0x4}, {}, {}, {0xfffffffd}, {}, {0x20a, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010101, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0xa, @in=@loopback, 0x0, 0x0, 0x3, 0xb7}}, 0xe4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x7}, 0x4000010) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) clock_settime(0xbcd1940b87aad64b, &(0x7f0000000500)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r6, 0x3314, 0x7) 44.582150879s ago: executing program 7 (id=1229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000180)={0x8, {0x0, 0x5, 0x1ee80, 0x1b7f, 0x7, 0x2}}) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b409000000000000611110000000000085100000020000008500000008000000950000002100000095f3ff000000d043c8da82a1cf64ac124d0000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffc1, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x560c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 43.101937241s ago: executing program 7 (id=1231): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYBLOB="248cb6fd3cae9841342a91020a239b831aa49f3147853de0784db88acdc2bdd662f811bf6239c7cbb1cb5dd5f3f3f5c9f1f8c9ba4412e8c75da6ac7d342dc334c20f180790f910db7f3d381dae5a7d104561a1d80b392eb076165ec447533fcaccd8773160289a07020282d9cdf27d338872f9fb77d8248d882789fc6be4761995e690cd11241031cd29de391b8967d0e6b877aaeb5659d5a29028fa0c9b86a7b69cc723d1c7357cccf9653e13c2fe39f7dd0a9fdbe8118133bf6b9d85a98a5acefd522d9e018668516a3b00", @ANYRESDEC=r0], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000200), 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffff9, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x125) socket$inet6(0xa, 0x40000080806, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000075000024899c"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket(0x2, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_LINKAT={0x27, 0x21, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) connect$qrtr(r5, &(0x7f0000000340)={0x2a, 0xfffffffd, 0x4000}, 0xffffff0f) write(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000780)='ext4_writepages\x00', r4, 0x0, 0x80}, 0x18) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) 40.245049514s ago: executing program 7 (id=1238): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{0x4}, {}, {}, {0xfffffffd}, {}, {0x20a, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010101, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0xa, @in=@loopback, 0x0, 0x0, 0x3, 0xb7}}, 0xe4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x7}, 0x4000010) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) clock_settime(0xbcd1940b87aad64b, &(0x7f0000000500)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x3314, 0x7) 25.038005424s ago: executing program 37 (id=1238): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{0x4}, {}, {}, {0xfffffffd}, {}, {0x20a, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010101, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0xa, @in=@loopback, 0x0, 0x0, 0x3, 0xb7}}, 0xe4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x7}, 0x4000010) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) clock_settime(0xbcd1940b87aad64b, &(0x7f0000000500)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x3314, 0x7) 14.863569786s ago: executing program 9 (id=1277): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port1\x00', 0x786520dbf34c80fe, 0x20a03, 0x20000003, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x87}) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r3, 0x0, r3) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r6, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$inet6(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5a6871908ddfe3ee43aa1160a73753ce6cab32d184de576a9f314969c1d7546399a47258ea86bbd3febfc84e58f64d32bb361e0af645bad480a103ab7d7fa2404622f26e7f7e668a4d7e5aee1276dc1d52b170003659e627d012cdf5dcb438b8ae0bf19e6c992c68011b7297da8b53655071195f55e0", 0x76}, {&(0x7f0000000700)}], 0x2}, 0x40001880) 11.767156437s ago: executing program 9 (id=1282): unshare(0x68040200) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0), 0x13f}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9.834620009s ago: executing program 9 (id=1286): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port1\x00', 0x786520dbf34c80fe, 0x20a03, 0x20000003, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x87}) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) dup3(r5, r4, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr, 0x9}, 0x1c) r6 = fcntl$dupfd(r3, 0x0, r3) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r7, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$inet6(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5a6871908ddfe3ee43aa1160a73753ce6cab32d184de576a9f314969c1d7546399a47258ea86bbd3febfc84e58f64d32bb361e0af645bad480a103ab7d7fa2404622f26e7f7e668a4d7e5aee1276dc1d52b170003659e627d012cdf5dcb438b8ae0bf19e6c992c68011b7297da8b53655071195f55e0", 0x76}, {&(0x7f0000000700)}], 0x2}, 0x40001880) 8.953049403s ago: executing program 6 (id=1287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000000c0)=0x1) r7 = fcntl$dupfd(r6, 0x0, r6) read$FUSE(r7, &(0x7f0000000700)={0x2020}, 0x2020) 7.742705692s ago: executing program 6 (id=1289): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x4000}, 0x10) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000240)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000000300)=""/154, 0x9a) 6.589417544s ago: executing program 9 (id=1292): syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbcf8acd6134f985bbbbbb5f3766b040030800450000340065000004019078ac1e0101ac1414aa0301907803610000460000000000400000fc0009ac141410ac1414bb9404000044139644b03c4b32cc8a8663a2c57d6ac4e77cfd867b945eae088106f82464c00e1212f630e4dd9936ab3a90c4819b283d0b453fbd6cc5ca78530ec719c1ba1e8a3189645efa5e567a7ee36a8e918f007daa3e9300a08cf190a50ecc9b2e7c5b815d2dce9a0db696dca08608595073f13d3a"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffe, 0x40) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40841}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000200000095000000000000000000000000000000000056e784466031bc42d4586856fea8a5422128758d88b5f43ee3b332a3"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4004, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) openat$drirender128(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000019100), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs(0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0x6) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x6}]}, 0x38}}, 0xc000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) write$cgroup_int(r5, &(0x7f0000000140)=0xfffffffffffff1a2, 0x12) syz_emit_ethernet(0x46, &(0x7f0000000f00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x15, 0xd}}}}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='personality\x00') lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) 6.207230507s ago: executing program 8 (id=1294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x36]}}]}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000000c0)=0x1) r6 = fcntl$dupfd(r5, 0x0, r5) read$FUSE(r6, &(0x7f0000000700)={0x2020}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4c0, 0x140, 0x7, 0x9d, 0x2, 0x6, 0x0, 0x0, 0x4, 0x8}}, 0x50) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 6.018180124s ago: executing program 1 (id=1295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x36]}}]}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000000c0)=0x1) r7 = fcntl$dupfd(r6, 0x0, r6) read$FUSE(r7, &(0x7f0000000700)={0x2020}, 0x2020) 5.373424504s ago: executing program 6 (id=1296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000180)={0x8, {0x0, 0x5, 0x1ee80, 0x1b7f, 0x7, 0x2}}) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b409000000000000611110000000000085100000020000008500000008000000950000002100000095f3ff000000d043c8da82a1cf64ac124d0000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffc1, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x560c0, 0x0) socket(0x2a, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.754987463s ago: executing program 1 (id=1297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000180)={0x8, {0x0, 0x5, 0x1ee80, 0x1b7f, 0x7, 0x2}}) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x560c0, 0x0) r6 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 3.998409733s ago: executing program 8 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82441, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000300)={0xf, 0x8, 0xfa00, {r3}}, 0x10) 3.770766157s ago: executing program 8 (id=1299): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x6, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100"], 0x16) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000005000000000000000000000095", @ANYRESHEX=r3, @ANYRESDEC=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x18) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x6000, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) 2.757435105s ago: executing program 8 (id=1300): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c00)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@gettaction={0x188, 0x32, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8d}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5f31}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff5}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf17}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7c4}]}, 0x188}}, 0x20044080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x200000a0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xf, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) chdir(0x0) io_uring_setup(0x6e74, &(0x7f0000000180)={0x0, 0xaebc, 0x20, 0x2, 0x180}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0xf00, 0x0, 0x4}, 0x810) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000003200)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf25080001000000000008004400", @ANYRES32=r6, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 2.565048832s ago: executing program 6 (id=1301): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{0x4}, {}, {}, {0xfffffffd}, {}, {0x20a, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010101, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0xa, @in=@loopback, 0x0, 0x0, 0x3, 0xb7}}, 0xe4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x7}, 0x4000010) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) clock_settime(0xbcd1940b87aad64b, &(0x7f0000000500)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x3314, 0x7) 2.558476069s ago: executing program 1 (id=1302): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010002000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB='\n\x004'], 0x30}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="01000000008d"}) 2.511326319s ago: executing program 1 (id=1303): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{0x4}, {}, {}, {0xfffffffd}, {}, {0x20a, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010101, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0xa, @in=@loopback, 0x0, 0x0, 0x3, 0xb7}}, 0xe4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x7}, 0x4000010) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) clock_settime(0xbcd1940b87aad64b, &(0x7f0000000500)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r6, 0x3314, 0x7) 1.837167811s ago: executing program 8 (id=1304): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0xfffe, @remote}, 0x10, 0x0}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') eventfd2(0x2, 0x80800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000012c0)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r6) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001b80)=ANY=[], 0x624}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x64, 0x6, 0x57c, 0x3ec, 0x3ec, 0x3ec, 0x304, 0x3ec, 0x4b4, 0x4b4, 0x4b4, 0x4b4, 0x4b4, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@dev, @ipv6=@private0, 0x3c, 0x13}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@ipv6={@remote, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5d8) 1.483058028s ago: executing program 9 (id=1305): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c00)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@gettaction={0x188, 0x32, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8d}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5f31}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff5}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf17}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7c4}]}, 0x188}}, 0x20044080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x200000a0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xf, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) chdir(0x0) io_uring_setup(0x6e74, &(0x7f0000000180)={0x0, 0xaebc, 0x20, 0x2, 0x180}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0xf00, 0x0, 0x4}, 0x810) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000003200)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf25080001000000000008004400", @ANYRES32=r6, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 1.373044168s ago: executing program 6 (id=1306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000180)={0x8, {0x0, 0x5, 0x1ee80, 0x1b7f, 0x7, 0x2}}) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b409000000000000611110000000000085100000020000008500000008000000950000002100000095f3ff000000d043c8da82a1cf64ac124d0000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffc1, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x560c0, 0x0) r6 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.109479391s ago: executing program 1 (id=1307): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{0x4}, {}, {}, {0xfffffffd}, {}, {0x20a, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010101, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0xa, @in=@loopback, 0x0, 0x0, 0x3, 0xb7}}, 0xe4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x7}, 0x4000010) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) clock_settime(0xbcd1940b87aad64b, &(0x7f0000000500)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x3314, 0x7) 769.38545ms ago: executing program 8 (id=1308): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000580)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000141401, 0x0) socket(0x5, 0x5, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) socket$inet6_sctp(0xa, 0x801, 0x84) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0xe0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x3}) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x1}) 236.521633ms ago: executing program 6 (id=1309): syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbcf8acd6134f985bbbbbb5f3766b040030800450000340065000004019078ac1e0101ac1414aa0301907803610000460000000000400000fc0009ac141410ac1414bb9404000044139644b03c4b32cc8a8663a2c57d6ac4e77cfd867b945eae088106f82464c00e1212f630e4dd9936ab3a90c4819b283d0b453fbd6cc5ca78530ec719c1ba1e8a3189645efa5e567a7ee36a8e918f007daa3e9300a08cf190a50ecc9b2e7c5b815d2dce9a0db696dca08608595073f13d3a"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffe, 0x40) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40841}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000200000095000000000000000000000000000000000056e784466031bc42d4586856fea8a5422128758d88b5f43ee3b332a35c3b4f0f8ff47260ea62853d6c32da7ab47bd1882e8a755a611da46443841e0d79fe0330b57fbc5ac7d4ca19fff93c4d5651a0958d43b5782b0bac"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4004, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) openat$drirender128(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000019100), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs(0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0x6) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x6}]}, 0x38}}, 0xc000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) write$cgroup_int(r5, &(0x7f0000000140)=0xfffffffffffff1a2, 0x12) syz_emit_ethernet(0x46, &(0x7f0000000f00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x15, 0xd}}}}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='personality\x00') lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) 187.004932ms ago: executing program 1 (id=1310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x36]}}]}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f00000000c0)=0x1) r8 = fcntl$dupfd(r7, 0x0, r7) read$FUSE(r8, &(0x7f0000000700)={0x2020}, 0x2020) write$FUSE_INIT(r8, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4c0, 0x140, 0x7, 0x9d, 0x2, 0x6, 0x0, 0x0, 0x4, 0x8}}, 0x50) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 9 (id=1311): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{0x4}, {}, {}, {0xfffffffd}, {}, {0x20a, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010101, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0xa, @in=@loopback, 0x0, 0x0, 0x3, 0xb7}}, 0xe4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x7}, 0x4000010) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) clock_settime(0xbcd1940b87aad64b, &(0x7f0000000500)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x3314, 0x7) kernel console output (not intermixed with test programs): n invalid length. [ 169.289494][ T9402] netlink: 'syz.2.800': attribute type 9 has an invalid length. [ 169.569160][ T9406] FAULT_INJECTION: forcing a failure. [ 169.569160][ T9406] name failslab, interval 1, probability 0, space 0, times 0 [ 169.572821][ T9406] CPU: 2 UID: 0 PID: 9406 Comm: syz.4.801 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 169.572834][ T9406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.572841][ T9406] Call Trace: [ 169.572845][ T9406] [ 169.572849][ T9406] dump_stack_lvl+0x16c/0x1f0 [ 169.572869][ T9406] should_fail_ex+0x50a/0x650 [ 169.572883][ T9406] ? fs_reclaim_acquire+0xae/0x150 [ 169.572899][ T9406] should_failslab+0xc2/0x120 [ 169.572912][ T9406] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 169.572924][ T9406] ? __alloc_skb+0x2b3/0x380 [ 169.572937][ T9406] __alloc_skb+0x2b3/0x380 [ 169.572946][ T9406] ? __pfx___alloc_skb+0x10/0x10 [ 169.572956][ T9406] ? lock_acquire+0x2f/0xb0 [ 169.572972][ T9406] netlink_alloc_large_skb+0x69/0x130 [ 169.572988][ T9406] netlink_sendmsg+0x689/0xd70 [ 169.573004][ T9406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.573018][ T9406] ? aa_file_perm+0x4c6/0xfe0 [ 169.573031][ T9406] ? trace_lock_acquire+0x14e/0x1f0 [ 169.573042][ T9406] sock_write_iter+0x4fe/0x5b0 [ 169.573057][ T9406] ? __pfx_sock_write_iter+0x10/0x10 [ 169.573077][ T9406] do_iter_readv_writev+0x655/0x950 [ 169.573093][ T9406] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 169.573111][ T9406] ? bpf_lsm_file_permission+0x9/0x10 [ 169.573123][ T9406] ? security_file_permission+0x71/0x210 [ 169.573135][ T9406] ? rw_verify_area+0xcf/0x680 [ 169.573150][ T9406] vfs_writev+0x363/0xdd0 [ 169.573158][ T9406] ? find_held_lock+0x2d/0x110 [ 169.573176][ T9406] ? __pfx_vfs_writev+0x10/0x10 [ 169.573184][ T9406] ? find_held_lock+0x2d/0x110 [ 169.573201][ T9406] ? __pfx_lock_release+0x10/0x10 [ 169.573211][ T9406] ? trace_lock_acquire+0x14e/0x1f0 [ 169.573224][ T9406] ? __fget_files+0x206/0x3a0 [ 169.573237][ T9406] ? do_writev+0x297/0x340 [ 169.573245][ T9406] do_writev+0x297/0x340 [ 169.573253][ T9406] ? __pfx_do_writev+0x10/0x10 [ 169.573265][ T9406] __do_fast_syscall_32+0x73/0x120 [ 169.573276][ T9406] do_fast_syscall_32+0x32/0x80 [ 169.573285][ T9406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.573301][ T9406] RIP: 0023:0xf7f97579 [ 169.573309][ T9406] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 169.573318][ T9406] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 169.573328][ T9406] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 169.573334][ T9406] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.573339][ T9406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.573344][ T9406] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 169.573350][ T9406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.573361][ T9406] [ 169.877436][ T6006] usb 8-1: USB disconnect, device number 9 [ 169.968132][ T9416] random: crng reseeded on system resumption [ 170.368530][ T9434] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 170.371247][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 170.543276][ T9441] tmpfs: Cannot change global quota limit on remount [ 171.390102][ T39] audit: type=1326 audit(1739321661.638:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.3.811" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x0 [ 171.451180][ T9455] netlink: 'syz.3.811': attribute type 5 has an invalid length. [ 171.541662][ T9466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.816'. [ 171.552886][ T9460] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 171.555418][ T9460] netlink: 224 bytes leftover after parsing attributes in process `syz.4.815'. [ 171.584150][ T9468] netlink: 'syz.1.817': attribute type 10 has an invalid length. [ 171.617111][ T9468] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 171.675118][ T39] audit: type=1326 audit(1739321661.928:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.1.819" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 172.206946][ T39] audit: type=1326 audit(1739321662.458:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.2.820" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x0 [ 172.592919][ T9500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.825'. [ 172.620049][ T9502] FAULT_INJECTION: forcing a failure. [ 172.620049][ T9502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.623782][ T9502] CPU: 1 UID: 0 PID: 9502 Comm: syz.1.826 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 172.623797][ T9502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.623804][ T9502] Call Trace: [ 172.623817][ T9502] [ 172.623823][ T9502] dump_stack_lvl+0x16c/0x1f0 [ 172.623845][ T9502] should_fail_ex+0x50a/0x650 [ 172.623859][ T9502] _copy_from_user+0x2e/0xd0 [ 172.623874][ T9502] get_compat_msghdr+0xa8/0x170 [ 172.623889][ T9502] ? __pfx_get_compat_msghdr+0x10/0x10 [ 172.623906][ T9502] ___sys_sendmsg+0x1b0/0x1e0 [ 172.623918][ T9502] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.623933][ T9502] ? __pfx_lock_release+0x10/0x10 [ 172.623946][ T9502] ? trace_lock_acquire+0x14e/0x1f0 [ 172.623959][ T9502] ? __fget_files+0x206/0x3a0 [ 172.623972][ T9502] __sys_sendmsg+0x16e/0x220 [ 172.623983][ T9502] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.624000][ T9502] __do_fast_syscall_32+0x73/0x120 [ 172.624011][ T9502] do_fast_syscall_32+0x32/0x80 [ 172.624020][ T9502] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.624036][ T9502] RIP: 0023:0xf73fe579 [ 172.624044][ T9502] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 172.624054][ T9502] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 172.624064][ T9502] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 172.624070][ T9502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.624075][ T9502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.624081][ T9502] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 172.624086][ T9502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.624098][ T9502] [ 173.066853][ T9517] netlink: 'syz.4.829': attribute type 9 has an invalid length. [ 174.150010][ T9531] random: crng reseeded on system resumption [ 174.150965][ T9542] netlink: 32 bytes leftover after parsing attributes in process `syz.1.836'. [ 174.211397][ T9545] tmpfs: Cannot change global quota limit on remount [ 175.211550][ T9574] tmpfs: Cannot change global quota limit on remount [ 176.163000][ T9600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.845'. [ 176.163279][ T9598] FAULT_INJECTION: forcing a failure. [ 176.163279][ T9598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.169933][ T9598] CPU: 0 UID: 0 PID: 9598 Comm: syz.4.844 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 176.169948][ T9598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.169966][ T9598] Call Trace: [ 176.169978][ T9598] [ 176.169985][ T9598] dump_stack_lvl+0x16c/0x1f0 [ 176.170006][ T9598] should_fail_ex+0x50a/0x650 [ 176.170021][ T9598] _copy_from_user+0x2e/0xd0 [ 176.170036][ T9598] sctp_getsockopt+0x20e7/0x7ae0 [ 176.170052][ T9598] ? hlock_class+0x4e/0x130 [ 176.170067][ T9598] ? mark_lock+0xb5/0xc60 [ 176.170077][ T9598] ? aa_label_sk_perm+0x19d/0x5a0 [ 176.170089][ T9598] ? __pfx_sctp_getsockopt+0x10/0x10 [ 176.170101][ T9598] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 176.170114][ T9598] ? find_held_lock+0x2d/0x110 [ 176.170135][ T9598] ? __pfx___might_resched+0x10/0x10 [ 176.170151][ T9598] ? aa_sk_perm+0x2f5/0xb20 [ 176.170160][ T9598] ? ksys_write+0x191/0x250 [ 176.170170][ T9598] ? __pfx_aa_sk_perm+0x10/0x10 [ 176.170181][ T9598] ? find_held_lock+0x2d/0x110 [ 176.170195][ T9598] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 176.170210][ T9598] ? do_sock_getsockopt+0x3fe/0x870 [ 176.170223][ T9598] do_sock_getsockopt+0x3fe/0x870 [ 176.170237][ T9598] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 176.170249][ T9598] ? lock_acquire+0x2f/0xb0 [ 176.170259][ T9598] ? __fget_files+0x40/0x3a0 [ 176.170271][ T9598] ? __fget_files+0x206/0x3a0 [ 176.170283][ T9598] __sys_getsockopt+0x12f/0x260 [ 176.170296][ T9598] __ia32_sys_getsockopt+0xbc/0x160 [ 176.170305][ T9598] ? lockdep_hardirqs_on+0x7c/0x110 [ 176.170325][ T9598] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 176.170341][ T9598] __do_fast_syscall_32+0x73/0x120 [ 176.170351][ T9598] do_fast_syscall_32+0x32/0x80 [ 176.170360][ T9598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.170377][ T9598] RIP: 0023:0xf7f97579 [ 176.170384][ T9598] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 176.170394][ T9598] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 176.170404][ T9598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 176.170411][ T9598] RDX: 0000000000000014 RSI: 0000000080000000 RDI: 0000000080000440 [ 176.170416][ T9598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.170422][ T9598] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 176.170427][ T9598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.170439][ T9598] [ 176.267929][ T9606] tmpfs: Cannot change global quota limit on remount [ 176.333162][ T9608] FAULT_INJECTION: forcing a failure. [ 176.333162][ T9608] name failslab, interval 1, probability 0, space 0, times 0 [ 176.336870][ T9608] CPU: 1 UID: 0 PID: 9608 Comm: syz.3.848 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 176.336884][ T9608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.336890][ T9608] Call Trace: [ 176.336894][ T9608] [ 176.336898][ T9608] dump_stack_lvl+0x16c/0x1f0 [ 176.336918][ T9608] should_fail_ex+0x50a/0x650 [ 176.336931][ T9608] ? fs_reclaim_acquire+0xae/0x150 [ 176.336947][ T9608] should_failslab+0xc2/0x120 [ 176.336961][ T9608] __kmalloc_noprof+0xce/0x4f0 [ 176.336972][ T9608] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 176.336985][ T9608] ? tomoyo_realpath_from_path+0xbf/0x710 [ 176.337000][ T9608] tomoyo_realpath_from_path+0xbf/0x710 [ 176.337013][ T9608] ? tomoyo_path_number_perm+0x235/0x5b0 [ 176.337025][ T9608] tomoyo_path_number_perm+0x248/0x5b0 [ 176.337034][ T9608] ? tomoyo_path_number_perm+0x235/0x5b0 [ 176.337046][ T9608] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 176.337066][ T9608] ? __pfx_lock_release+0x10/0x10 [ 176.337077][ T9608] ? trace_lock_acquire+0x14e/0x1f0 [ 176.337088][ T9608] ? lock_acquire+0x2f/0xb0 [ 176.337098][ T9608] ? __fget_files+0x40/0x3a0 [ 176.337110][ T9608] ? __fget_files+0x206/0x3a0 [ 176.337122][ T9608] security_file_ioctl_compat+0x9b/0x240 [ 176.337135][ T9608] __do_compat_sys_ioctl+0x4e/0x2c0 [ 176.337151][ T9608] __do_fast_syscall_32+0x73/0x120 [ 176.337162][ T9608] do_fast_syscall_32+0x32/0x80 [ 176.337171][ T9608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.337187][ T9608] RIP: 0023:0xf7f27579 [ 176.337195][ T9608] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 176.337205][ T9608] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 176.337215][ T9608] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b72 [ 176.337221][ T9608] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.337226][ T9608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.337232][ T9608] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 176.337237][ T9608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.337248][ T9608] [ 176.337252][ T9608] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.882943][ T9631] netlink: 'syz.3.851': attribute type 9 has an invalid length. [ 177.176203][ T9651] FAULT_INJECTION: forcing a failure. [ 177.176203][ T9651] name failslab, interval 1, probability 0, space 0, times 0 [ 177.179689][ T9651] CPU: 2 UID: 0 PID: 9651 Comm: syz.1.853 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 177.179703][ T9651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.179709][ T9651] Call Trace: [ 177.179712][ T9651] [ 177.179716][ T9651] dump_stack_lvl+0x16c/0x1f0 [ 177.179736][ T9651] should_fail_ex+0x50a/0x650 [ 177.179749][ T9651] ? fs_reclaim_acquire+0xae/0x150 [ 177.179765][ T9651] should_failslab+0xc2/0x120 [ 177.179778][ T9651] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 177.179790][ T9651] ? getname_flags.part.0+0x4c/0x550 [ 177.179806][ T9651] getname_flags.part.0+0x4c/0x550 [ 177.179820][ T9651] getname_flags+0x93/0xf0 [ 177.179830][ T9651] user_path_at+0x24/0x60 [ 177.179840][ T9651] __ia32_sys_utime32+0x1c7/0x2d0 [ 177.179853][ T9651] ? __pfx___ia32_sys_utime32+0x10/0x10 [ 177.179865][ T9651] ? lock_acquire+0x2f/0xb0 [ 177.179876][ T9651] ? __might_fault+0xe3/0x190 [ 177.179892][ T9651] ? rcu_is_watching+0x12/0xc0 [ 177.179908][ T9651] __do_fast_syscall_32+0x73/0x120 [ 177.179919][ T9651] do_fast_syscall_32+0x32/0x80 [ 177.179928][ T9651] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.179944][ T9651] RIP: 0023:0xf73fe579 [ 177.179952][ T9651] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 177.179962][ T9651] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 000000000000001e [ 177.179972][ T9651] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 177.179977][ T9651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.179983][ T9651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.179988][ T9651] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 177.179993][ T9651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.180005][ T9651] [ 177.276092][ T9660] netlink: 32 bytes leftover after parsing attributes in process `syz.4.856'. [ 177.372081][ T9672] tmpfs: Cannot change global quota limit on remount [ 177.510099][ T9691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.867'. [ 177.557365][ T9681] random: crng reseeded on system resumption [ 177.566575][ T9696] netlink: 328 bytes leftover after parsing attributes in process `syz.2.868'. [ 178.130437][ T9708] SET target dimension over the limit! [ 179.652433][ T9741] random: crng reseeded on system resumption [ 179.902875][ T9751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 179.904746][ T9751] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 179.916013][ T9751] vhci_hcd vhci_hcd.0: Device attached [ 179.990482][ T9751] orangefs_mount: mount request failed with -4 [ 180.082646][ T9753] vhci_hcd: connection closed [ 180.106049][ T1137] vhci_hcd: stop threads [ 180.108753][ T1137] vhci_hcd: release socket [ 180.113735][ T1137] vhci_hcd: disconnect device [ 180.155575][ T1450] vhci_hcd: vhci_device speed not set [ 180.187815][ T39] audit: type=1326 audit(1739321670.432:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.3.882" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x0 [ 180.229115][ T9762] tmpfs: Cannot change global quota limit on remount [ 180.307453][ T9766] netlink: 'syz.3.882': attribute type 5 has an invalid length. [ 180.414424][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 181.060861][ T9790] random: crng reseeded on system resumption [ 181.882183][ T9819] team_slave_0: entered promiscuous mode [ 181.884329][ T9819] team_slave_1: entered promiscuous mode [ 181.892117][ T9819] macsec1: entered promiscuous mode [ 181.893701][ T9819] team0: entered promiscuous mode [ 181.897557][ T9819] macsec1: entered allmulticast mode [ 181.899147][ T9819] team0: entered allmulticast mode [ 181.945273][ T9819] team_slave_0: entered allmulticast mode [ 181.947684][ T9819] team_slave_1: entered allmulticast mode [ 181.970526][ T9827] random: crng reseeded on system resumption [ 183.561160][ T9865] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 183.566355][ T9865] Error validating options; rc = [-22] [ 184.057239][ T9871] netlink: 72 bytes leftover after parsing attributes in process `syz.4.899'. [ 184.149508][ T9873] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 184.218280][ T9876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.902'. [ 184.257821][ T9878] syz_tun: entered promiscuous mode [ 184.259962][ T9878] batadv_slave_0: entered promiscuous mode [ 184.537621][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.906'. [ 184.680100][ T9886] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.067078][ T9903] netlink: 32 bytes leftover after parsing attributes in process `syz.4.911'. [ 185.134253][ T39] audit: type=1326 audit(1739321675.380:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9904 comm="syz.4.912" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x0 [ 185.240744][ T9914] netlink: 'syz.4.912': attribute type 5 has an invalid length. [ 185.407585][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 185.587093][ T9923] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.917'. [ 185.590510][ T9920] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.917'. [ 185.700809][ T9927] syzkaller1: entered promiscuous mode [ 185.702334][ T9927] syzkaller1: entered allmulticast mode [ 185.705699][ T9927] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 185.840096][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 185.843463][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 185.886118][ T9931] netlink: 32 bytes leftover after parsing attributes in process `syz.3.920'. [ 186.199021][ T9945] random: crng reseeded on system resumption [ 186.855325][ T1450] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 186.870231][ T4272] IPVS: starting estimator thread 0... [ 186.898915][ T9955] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 187.015523][ T1450] usb 6-1: Using ep0 maxpacket: 16 [ 187.023179][ T1450] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 187.027050][ T1450] usb 6-1: config 0 has no interface number 0 [ 187.029478][ T1450] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 187.033741][ T1450] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 187.040307][ T1450] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 187.042883][ T1450] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 187.046919][ T9954] IPVS: using max 39 ests per chain, 93600 per kthread [ 187.051279][ T1450] usb 6-1: Product: syz [ 187.052543][ T1450] usb 6-1: SerialNumber: syz [ 187.055503][ T1450] usb 6-1: config 0 descriptor?? [ 187.059157][ T1450] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 187.062788][ T1450] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input12 [ 187.134274][ T9957] 9pnet: Could not find request transport: rdmaÿÿ [ 187.259617][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 188.591702][ T9992] netlink: 'syz.3.934': attribute type 9 has an invalid length. [ 188.767848][T10006] random: crng reseeded on system resumption [ 189.405061][T10014] FAULT_INJECTION: forcing a failure. [ 189.405061][T10014] name failslab, interval 1, probability 0, space 0, times 0 [ 189.409821][T10014] CPU: 3 UID: 0 PID: 10014 Comm: syz.4.938 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 189.409843][T10014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.409853][T10014] Call Trace: [ 189.409858][T10014] [ 189.409864][T10014] dump_stack_lvl+0x16c/0x1f0 [ 189.409895][T10014] should_fail_ex+0x50a/0x650 [ 189.409914][T10014] ? fs_reclaim_acquire+0xae/0x150 [ 189.409939][T10014] should_failslab+0xc2/0x120 [ 189.409959][T10014] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 189.409976][T10014] ? __pfx_map_id_range_down+0x10/0x10 [ 189.409995][T10014] ? syscall_trace_enter+0x1cd/0x260 [ 189.410015][T10014] ? prepare_creds+0x2e/0x750 [ 189.410034][T10014] prepare_creds+0x2e/0x750 [ 189.410052][T10014] __sys_setreuid+0x101/0xaf0 [ 189.410072][T10014] ? rcu_is_watching+0x12/0xc0 [ 189.410097][T10014] __do_fast_syscall_32+0x73/0x120 [ 189.410114][T10014] do_fast_syscall_32+0x32/0x80 [ 189.410128][T10014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.410154][T10014] RIP: 0023:0xf7f97579 [ 189.410165][T10014] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.410180][T10014] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000046 [ 189.410194][T10014] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 189.410201][T10014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.410207][T10014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.410217][T10014] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 189.410226][T10014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.410245][T10014] [ 189.610838][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 189.616628][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 189.619326][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 189.621393][ T1450] usb 6-1: USB disconnect, device number 11 [ 189.623073][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 189.623083][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 189.639562][ T1450] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 189.800622][T10036] netlink: 'syz.2.941': attribute type 9 has an invalid length. [ 190.138808][T10049] netlink: 'syz.4.947': attribute type 9 has an invalid length. [ 191.164944][ T6667] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 191.305023][ T6667] usb 6-1: device descriptor read/64, error -71 [ 191.554918][ T6667] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 191.684962][ T6667] usb 6-1: device descriptor read/64, error -71 [ 191.806925][ T6667] usb usb6-port1: attempt power cycle [ 192.174909][ T6667] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 192.196664][ T6667] usb 6-1: device descriptor read/8, error -71 [ 192.444970][ T6667] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 192.465704][ T6667] usb 6-1: device descriptor read/8, error -71 [ 192.575878][ T6667] usb usb6-port1: unable to enumerate USB device [ 192.664645][T10076] x_tables: duplicate underflow at hook 3 [ 192.946812][T10082] tmpfs: Cannot change global quota limit on remount [ 193.372716][T10083] __nla_validate_parse: 2 callbacks suppressed [ 193.372735][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 193.380349][T10083] bridge0: port 2(bridge_slave_1) entered learning state [ 193.584256][T10083] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.849574][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.617754][T10129] tmpfs: Cannot change global quota limit on remount [ 195.072785][T10135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.963'. [ 195.157701][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 195.168812][T10130] bridge0: port 2(bridge_slave_1) entered learning state [ 195.179505][T10130] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.673439][ T4272] IPVS: starting estimator thread 0... [ 195.790615][T10154] IPVS: using max 38 ests per chain, 91200 per kthread [ 195.865130][T10157] 9pnet: Could not find request transport: rdmaÿÿ [ 195.959307][T10160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.968'. [ 196.507166][ T39] audit: type=1326 audit(1739321686.759:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10165 comm="syz.3.970" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x0 [ 197.028521][T10179] tmpfs: Cannot change global quota limit on remount [ 197.437115][T10188] input: syz0 as /devices/virtual/input/input13 [ 197.625114][ T6008] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 197.770491][T10197] tmpfs: Cannot change global quota limit on remount [ 197.786903][ T6008] usb 9-1: Using ep0 maxpacket: 32 [ 197.790380][ T6008] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 197.793287][ T6008] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 197.797192][ T6008] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 197.800605][ T6008] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.804168][ T6008] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 197.807838][ T6008] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 197.815649][ T6008] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 197.818782][ T6008] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.823750][ T6008] usb 9-1: config 0 descriptor?? [ 198.064754][ T6008] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 198.192015][T10211] tmpfs: Cannot change global quota limit on remount [ 198.263586][ C1] usblp0: nonzero read bulk status received: -71 [ 198.263911][ T1450] usb 9-1: USB disconnect, device number 5 [ 198.373779][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 198.384708][T10218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.981'. [ 198.643612][T10231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.985'. [ 198.800162][T10245] tmpfs: Cannot change global quota limit on remount [ 198.964440][T10252] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 200.391322][T10186] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.394028][T10186] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.396693][T10186] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.399064][T10186] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.428765][T10186] usblp0: removed [ 200.481303][T10271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.990'. [ 200.555637][T10279] FAULT_INJECTION: forcing a failure. [ 200.555637][T10279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.559307][T10279] CPU: 3 UID: 0 PID: 10279 Comm: syz.1.996 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 200.559322][T10279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.559329][T10279] Call Trace: [ 200.559333][T10279] [ 200.559337][T10279] dump_stack_lvl+0x16c/0x1f0 [ 200.559358][T10279] should_fail_ex+0x50a/0x650 [ 200.559373][T10279] _copy_from_user+0x2e/0xd0 [ 200.559388][T10279] get_compat_msghdr+0xa8/0x170 [ 200.559409][T10279] ? __pfx_get_compat_msghdr+0x10/0x10 [ 200.559427][T10279] ___sys_sendmsg+0x1b0/0x1e0 [ 200.559440][T10279] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.559455][T10279] ? __pfx_lock_release+0x10/0x10 [ 200.559467][T10279] ? trace_lock_acquire+0x14e/0x1f0 [ 200.559480][T10279] ? __fget_files+0x206/0x3a0 [ 200.559494][T10279] __sys_sendmsg+0x16e/0x220 [ 200.559504][T10279] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.559522][T10279] __do_fast_syscall_32+0x73/0x120 [ 200.559533][T10279] do_fast_syscall_32+0x32/0x80 [ 200.559542][T10279] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.559559][T10279] RIP: 0023:0xf73fe579 [ 200.559567][T10279] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 200.559577][T10279] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 200.559586][T10279] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 200.559592][T10279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.559598][T10279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.559603][T10279] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 200.559608][T10279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.559619][T10279] [ 200.654960][ T5955] Bluetooth: hci0: command 0x040f tx timeout [ 200.754886][ T4272] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 200.925076][ T4272] usb 7-1: Using ep0 maxpacket: 8 [ 200.935307][ T4272] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.939398][ T4272] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.947630][ T4272] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.958328][ T4272] usb 7-1: config 0 descriptor?? [ 201.383165][ T4272] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 201.402528][ T4272] usb 7-1: USB disconnect, device number 3 [ 201.620865][T10296] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 201.820970][T10310] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1002'. [ 202.001792][T10325] mkiss: ax0: crc mode is auto. [ 202.490160][ T65] Bluetooth: hci3: command 0x040f tx timeout [ 202.490303][ T5955] Bluetooth: hci4: command 0x0405 tx timeout [ 202.492197][ T65] Bluetooth: hci2: command 0x040f tx timeout [ 202.673124][T10336] tmpfs: Cannot change global quota limit on remount [ 203.581536][T10368] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1011'. [ 203.589279][T10369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.591841][T10369] IPv6: NLM_F_CREATE should be set when creating new route [ 203.594611][T10369] IPv6: NLM_F_CREATE should be set when creating new route [ 203.640006][T10373] tmpfs: Bad value for 'mpol' [ 203.739049][ T39] audit: type=1326 audit(1739321693.987:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.1.1016" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 203.894417][T10380] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 204.596737][T10386] vlan0: entered promiscuous mode [ 204.619919][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 204.665726][T10390] tmpfs: Cannot change global quota limit on remount [ 205.095076][T10408] tmpfs: Cannot change global quota limit on remount [ 205.428832][T10425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1024'. [ 205.433966][T10425] FAULT_INJECTION: forcing a failure. [ 205.433966][T10425] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.439456][T10425] CPU: 1 UID: 0 PID: 10425 Comm: syz.2.1024 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 205.439487][T10425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.439493][T10425] Call Trace: [ 205.439497][T10425] [ 205.439502][T10425] dump_stack_lvl+0x16c/0x1f0 [ 205.439522][T10425] should_fail_ex+0x50a/0x650 [ 205.439535][T10425] ? __pfx___might_resched+0x10/0x10 [ 205.439549][T10425] should_fail_alloc_page+0xe7/0x130 [ 205.439564][T10425] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 205.439583][T10425] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 205.439597][T10425] ? stack_depot_save_flags+0x36d/0x9e0 [ 205.439609][T10425] ? __pfx_lock_release+0x10/0x10 [ 205.439623][T10425] ? hlock_class+0x4e/0x130 [ 205.439637][T10425] ? mark_lock+0xb5/0xc60 [ 205.439647][T10425] ? mark_held_locks+0x9f/0xe0 [ 205.439658][T10425] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 205.439671][T10425] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 205.439687][T10425] ? stack_depot_save_flags+0x36d/0x9e0 [ 205.439701][T10425] ? kasan_save_stack+0x42/0x60 [ 205.439710][T10425] ? kasan_save_stack+0x33/0x60 [ 205.439720][T10425] ? kasan_save_track+0x14/0x30 [ 205.439729][T10425] ? kasan_save_free_info+0x3b/0x60 [ 205.439743][T10425] ? __kasan_slab_free+0x51/0x70 [ 205.439753][T10425] ? kmem_cache_free+0x2e2/0x4d0 [ 205.439763][T10425] ? alloc_vmap_area+0x1f87/0x2a60 [ 205.439777][T10425] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.439791][T10425] ? policy_nodemask+0xea/0x4e0 [ 205.439804][T10425] alloc_pages_mpol+0x1fc/0x540 [ 205.439817][T10425] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 205.439831][T10425] ? __pfx___lock_acquire+0x10/0x10 [ 205.439843][T10425] alloc_pages_noprof+0x131/0x390 [ 205.439855][T10425] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 205.439865][T10425] get_free_pages_noprof+0xc/0x40 [ 205.439879][T10425] kasan_populate_vmalloc_pte+0x2d/0x160 [ 205.439889][T10425] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 205.439899][T10425] __apply_to_page_range+0x5fd/0xd30 [ 205.439911][T10425] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 205.439923][T10425] ? __pfx___apply_to_page_range+0x10/0x10 [ 205.439934][T10425] ? insert_vmap_area+0x2ef/0x4d0 [ 205.439949][T10425] alloc_vmap_area+0x93e/0x2a60 [ 205.439969][T10425] ? __pfx_alloc_vmap_area+0x10/0x10 [ 205.439986][T10425] __get_vm_area_node+0x19e/0x2f0 [ 205.440015][T10425] __vmalloc_node_range_noprof+0x26a/0x1530 [ 205.440047][T10425] ? kernel_read_file+0x682/0x7f0 [ 205.440066][T10425] ? kernel_read_file+0x682/0x7f0 [ 205.440078][T10425] ? __pfx_mark_lock+0x10/0x10 [ 205.440089][T10425] ? register_lock_class+0x37a/0x1240 [ 205.440102][T10425] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.440112][T10425] ? ima_read_file+0x143/0x1a0 [ 205.440124][T10425] ? __pfx_ima_read_file+0x10/0x10 [ 205.440137][T10425] ? __pfx_lockdep_lock+0x10/0x10 [ 205.440152][T10425] ? kernel_read_file+0x682/0x7f0 [ 205.440165][T10425] vmalloc_noprof+0x6b/0x90 [ 205.440174][T10425] ? kernel_read_file+0x682/0x7f0 [ 205.440186][T10425] kernel_read_file+0x682/0x7f0 [ 205.440200][T10425] ? __pfx_kernel_read_file+0x10/0x10 [ 205.440216][T10425] init_module_from_file+0xb8/0x150 [ 205.440229][T10425] ? __pfx_init_module_from_file+0x10/0x10 [ 205.440241][T10425] ? lock_acquire.part.0+0x11b/0x380 [ 205.440258][T10425] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 205.440271][T10425] ? lock_acquire+0x2f/0xb0 [ 205.440282][T10425] ? idempotent_init_module+0x118/0x750 [ 205.440294][T10425] ? do_raw_spin_unlock+0x172/0x230 [ 205.440312][T10425] idempotent_init_module+0x228/0x750 [ 205.440324][T10425] ? __pfx_lock_release+0x10/0x10 [ 205.440335][T10425] ? __pfx_idempotent_init_module+0x10/0x10 [ 205.440351][T10425] ? __fget_files+0x206/0x3a0 [ 205.440364][T10425] __ia32_sys_finit_module+0xbc/0x140 [ 205.440377][T10425] __do_fast_syscall_32+0x73/0x120 [ 205.440387][T10425] do_fast_syscall_32+0x32/0x80 [ 205.440397][T10425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.440421][T10425] RIP: 0023:0xf7ff6579 [ 205.440429][T10425] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 205.440439][T10425] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 000000000000015e [ 205.440448][T10425] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 205.440454][T10425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.440459][T10425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.440464][T10425] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 205.440470][T10425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.440481][T10425] [ 205.440871][T10425] syz.2.1024: vmalloc error: size 4194304, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 205.644726][T10425] CPU: 1 UID: 0 PID: 10425 Comm: syz.2.1024 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 205.644741][T10425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.644758][T10425] Call Trace: [ 205.644762][T10425] [ 205.644767][T10425] dump_stack_lvl+0x16c/0x1f0 [ 205.644797][T10425] warn_alloc+0x24d/0x3a0 [ 205.644810][T10425] ? __pfx_warn_alloc+0x10/0x10 [ 205.644823][T10425] ? kfree+0x2c4/0x4d0 [ 205.644835][T10425] ? __get_vm_area_node+0x1dc/0x2f0 [ 205.644853][T10425] __vmalloc_node_range_noprof+0xd24/0x1530 [ 205.644867][T10425] ? kernel_read_file+0x682/0x7f0 [ 205.644880][T10425] ? __pfx_mark_lock+0x10/0x10 [ 205.644893][T10425] ? register_lock_class+0x37a/0x1240 [ 205.644905][T10425] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.644915][T10425] ? ima_read_file+0x143/0x1a0 [ 205.644928][T10425] ? __pfx_ima_read_file+0x10/0x10 [ 205.644941][T10425] ? __pfx_lockdep_lock+0x10/0x10 [ 205.644956][T10425] ? kernel_read_file+0x682/0x7f0 [ 205.644969][T10425] vmalloc_noprof+0x6b/0x90 [ 205.644978][T10425] ? kernel_read_file+0x682/0x7f0 [ 205.644991][T10425] kernel_read_file+0x682/0x7f0 [ 205.645005][T10425] ? __pfx_kernel_read_file+0x10/0x10 [ 205.645023][T10425] init_module_from_file+0xb8/0x150 [ 205.645036][T10425] ? __pfx_init_module_from_file+0x10/0x10 [ 205.645049][T10425] ? lock_acquire.part.0+0x11b/0x380 [ 205.645066][T10425] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 205.645079][T10425] ? lock_acquire+0x2f/0xb0 [ 205.645089][T10425] ? idempotent_init_module+0x118/0x750 [ 205.645101][T10425] ? do_raw_spin_unlock+0x172/0x230 [ 205.645116][T10425] idempotent_init_module+0x228/0x750 [ 205.645127][T10425] ? __pfx_lock_release+0x10/0x10 [ 205.645139][T10425] ? __pfx_idempotent_init_module+0x10/0x10 [ 205.645154][T10425] ? __fget_files+0x206/0x3a0 [ 205.645168][T10425] __ia32_sys_finit_module+0xbc/0x140 [ 205.645181][T10425] __do_fast_syscall_32+0x73/0x120 [ 205.645192][T10425] do_fast_syscall_32+0x32/0x80 [ 205.645201][T10425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.645218][T10425] RIP: 0023:0xf7ff6579 [ 205.645226][T10425] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 205.645235][T10425] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 000000000000015e [ 205.645245][T10425] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 205.645250][T10425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.645255][T10425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.645261][T10425] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 205.645270][T10425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.645281][T10425] [ 205.739092][T10425] Mem-Info: [ 205.740429][T10425] active_anon:8402 inactive_anon:2944 isolated_anon:0 [ 205.740429][T10425] active_file:6311 inactive_file:31912 isolated_file:0 [ 205.740429][T10425] unevictable:1768 dirty:470 writeback:0 [ 205.740429][T10425] slab_reclaimable:9947 slab_unreclaimable:56565 [ 205.740429][T10425] mapped:24751 shmem:8086 pagetables:947 [ 205.740429][T10425] sec_pagetables:309 bounce:0 [ 205.740429][T10425] kernel_misc_reclaimable:0 [ 205.740429][T10425] free:47884 free_pcp:1787 free_cma:0 [ 205.777755][T10425] Node 0 active_anon:2892kB inactive_anon:0kB active_file:240kB inactive_file:11664kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5556kB dirty:0kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9136kB pagetables:712kB sec_pagetables:1144kB all_unreclaimable? yes [ 205.875670][T10425] Node 1 active_anon:27316kB inactive_anon:11776kB active_file:25004kB inactive_file:115984kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:101048kB dirty:1888kB writeback:0kB shmem:25088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3844kB pagetables:2980kB sec_pagetables:92kB all_unreclaimable? no [ 205.923721][T10425] Node 0 DMA free:2064kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:48kB free_cma:0kB [ 205.932661][T10425] lowmem_reserve[]: 0 297 0 0 0 [ 205.934539][T10425] Node 0 DMA32 free:30936kB boost:12288kB min:25960kB low:29376kB high:32792kB reserved_highatomic:4096KB active_anon:2892kB inactive_anon:0kB active_file:240kB inactive_file:11660kB unevictable:3536kB writepending:0kB present:1032196kB managed:305040kB mlocked:0kB bounce:0kB free_pcp:1636kB local_pcp:324kB free_cma:0kB [ 205.973110][T10425] lowmem_reserve[]: 0 0 0 0 0 [ 205.977465][T10425] Node 1 DMA32 free:153164kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:4096KB active_anon:31400kB inactive_anon:11776kB active_file:25004kB inactive_file:115984kB unevictable:3536kB writepending:1888kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:10980kB local_pcp:1832kB free_cma:0kB [ 205.986594][T10425] lowmem_reserve[]: 0 0 0 0 0 [ 205.988037][T10425] Node 0 DMA: 96*4kB (U) 40*8kB (U) 37*16kB (U) 18*32kB (U) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2064kB [ 205.992006][T10425] Node 0 DMA32: 542*4kB (UMH) 172*8kB (UMEH) 60*16kB (UMEH) 264*32kB (UMEH) 99*64kB (UMEH) 31*128kB (UMEH) 12*256kB (UMEH) 9*512kB (UMEH) 0*1024kB 0*2048kB 0*4096kB = 30936kB [ 205.995977][ T39] audit: type=1326 audit(1739321696.237:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.4.1027" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x0 [ 206.006349][T10425] Node 1 DMA32: 15*4kB (UMEH) 32*8kB (EH) 73*16kB (UEH) 451*32kB (UMEH) 270*64kB (UMEH) 73*128kB (UMEH) 65*256kB (UM) 43*512kB (UM) 40*1024kB (UMH) 11*2048kB (UM) 2*4096kB (UM) = 152876kB [ 206.014871][T10425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.027948][T10425] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.030736][T10425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.034611][T10441] random: crng reseeded on system resumption [ 206.036779][T10425] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.040646][T10425] 46454 total pagecache pages [ 206.042526][T10425] 0 pages in swap cache [ 206.044141][T10425] Free swap = 124624kB [ 206.045811][T10425] Total swap = 124996kB [ 206.045820][T10425] 524155 pages RAM [ 206.045867][T10425] 0 pages HighMem/MovableOnly [ 206.045872][T10425] 206992 pages reserved [ 206.045876][T10425] 0 pages cma reserved [ 207.125745][T10458] netlink: 'syz.3.1029': attribute type 10 has an invalid length. [ 207.140156][T10458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.143634][T10458] batadv0: entered promiscuous mode [ 207.145705][T10458] batadv0: entered allmulticast mode [ 207.148622][T10458] team0: Port device batadv0 added [ 208.592469][T10479] netlink: 'syz.4.1036': attribute type 9 has an invalid length. [ 208.991650][T10489] netlink: 'syz.1.1038': attribute type 9 has an invalid length. [ 210.146000][T10504] random: crng reseeded on system resumption [ 210.678720][T10512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1043'. [ 211.052770][T10521] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1045'. [ 211.058548][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1045'. [ 211.229370][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'. [ 211.665745][T10530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1049'. [ 211.721538][T10530] Invalid ELF header magic: != ELF [ 211.925168][T10537] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1052'. [ 212.129498][T10543] usb usb1: usbfs: process 10543 (syz.4.1054) did not claim interface 0 before use [ 212.552422][T10548] netlink: 'syz.4.1055': attribute type 9 has an invalid length. [ 212.788932][T10549] __kmem_cache_create_args(9p-fcall-cache-7) failed with error -22 [ 212.792105][T10549] CPU: 1 UID: 0 PID: 10549 Comm: syz.2.1053 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 212.792130][T10549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.792142][T10549] Call Trace: [ 212.792148][T10549] [ 212.792155][T10549] dump_stack_lvl+0x16c/0x1f0 [ 212.792190][T10549] __kmem_cache_create_args+0x130/0x390 [ 212.792215][T10549] p9_client_create+0xe43/0x11a0 [ 212.792247][T10549] ? __pfx_p9_client_create+0x10/0x10 [ 212.792284][T10549] ? rcu_is_watching+0x12/0xc0 [ 212.792315][T10549] ? __raw_spin_lock_init+0x3a/0x110 [ 212.792341][T10549] v9fs_session_init+0x1f8/0x1a80 [ 212.792375][T10549] ? __pfx_v9fs_session_init+0x10/0x10 [ 212.792410][T10549] v9fs_mount+0xc6/0xa30 [ 212.792425][T10549] ? __pfx_v9fs_mount+0x10/0x10 [ 212.792440][T10549] ? apparmor_capable+0x114/0x1d0 [ 212.792462][T10549] ? __pfx_v9fs_mount+0x10/0x10 [ 212.792476][T10549] legacy_get_tree+0x109/0x220 [ 212.792493][T10549] vfs_get_tree+0x8b/0x340 [ 212.792514][T10549] path_mount+0x6e1/0x1f00 [ 212.792532][T10549] ? kmem_cache_free+0x2e2/0x4d0 [ 212.792548][T10549] ? __pfx_path_mount+0x10/0x10 [ 212.792569][T10549] ? putname+0x13c/0x180 [ 212.792593][T10549] __ia32_sys_mount+0x28d/0x310 [ 212.792610][T10549] ? __pfx___ia32_sys_mount+0x10/0x10 [ 212.792634][T10549] __do_fast_syscall_32+0x73/0x120 [ 212.792653][T10549] do_fast_syscall_32+0x32/0x80 [ 212.792669][T10549] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.792697][T10549] RIP: 0023:0xf7ff6579 [ 212.792709][T10549] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 212.792724][T10549] RSP: 002b:00000000f50d455c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 212.792739][T10549] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800002c0 [ 212.792750][T10549] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000400 [ 212.792760][T10549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.792770][T10549] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 212.792778][T10549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.792800][T10549] [ 213.367441][T10573] netlink: 'syz.2.1059': attribute type 9 has an invalid length. [ 214.149215][T10584] FAULT_INJECTION: forcing a failure. [ 214.149215][T10584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.152938][T10584] CPU: 0 UID: 0 PID: 10584 Comm: syz.3.1062 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 214.152953][T10584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.152960][T10584] Call Trace: [ 214.152965][T10584] [ 214.152970][T10584] dump_stack_lvl+0x16c/0x1f0 [ 214.152991][T10584] should_fail_ex+0x50a/0x650 [ 214.153007][T10584] _copy_from_user+0x2e/0xd0 [ 214.153022][T10584] kvm_arch_vcpu_ioctl+0x3cd/0x5050 [ 214.153033][T10584] ? is_bpf_text_address+0x94/0x1a0 [ 214.153045][T10584] ? hlock_class+0x4e/0x130 [ 214.153060][T10584] ? __lock_acquire+0x15a9/0x3c40 [ 214.153072][T10584] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 214.153086][T10584] ? __pfx___lock_acquire+0x10/0x10 [ 214.153096][T10584] ? stack_trace_save+0x95/0xd0 [ 214.153112][T10584] ? __pfx_stack_trace_save+0x10/0x10 [ 214.153127][T10584] ? __pfx_mark_lock+0x10/0x10 [ 214.153138][T10584] ? stack_depot_save_flags+0x28/0x9e0 [ 214.153152][T10584] ? lock_acquire.part.0+0x11b/0x380 [ 214.153166][T10584] ? __mutex_trylock_common+0xea/0x250 [ 214.153185][T10584] ? rcu_is_watching+0x12/0xc0 [ 214.153200][T10584] ? trace_contention_end+0xee/0x140 [ 214.153214][T10584] ? __mutex_lock+0x1cc/0xb10 [ 214.153224][T10584] ? kvm_vcpu_ioctl+0x27f/0x16b0 [ 214.153236][T10584] ? __pfx___mutex_lock+0x10/0x10 [ 214.153247][T10584] ? find_held_lock+0x2d/0x110 [ 214.153265][T10584] ? kvm_vcpu_ioctl+0x1258/0x16b0 [ 214.153276][T10584] kvm_vcpu_ioctl+0x1258/0x16b0 [ 214.153289][T10584] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 214.153300][T10584] ? tomoyo_path_number_perm+0x190/0x5b0 [ 214.153312][T10584] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.153322][T10584] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.153335][T10584] ? do_vfs_ioctl+0x513/0x1950 [ 214.153351][T10584] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 214.153372][T10584] ? __pfx_lock_release+0x10/0x10 [ 214.153383][T10584] ? trace_lock_acquire+0x14e/0x1f0 [ 214.153393][T10584] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 214.153405][T10584] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 214.153417][T10584] ? __fget_files+0x206/0x3a0 [ 214.153430][T10584] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 214.153441][T10584] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 214.153457][T10584] __do_fast_syscall_32+0x73/0x120 [ 214.153468][T10584] do_fast_syscall_32+0x32/0x80 [ 214.153477][T10584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.153494][T10584] RIP: 0023:0xf7f27579 [ 214.153502][T10584] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 214.153511][T10584] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 214.153521][T10584] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000004048aecb [ 214.153527][T10584] RDX: 0000000080000ac0 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.153532][T10584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.153538][T10584] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 214.153543][T10584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.153554][T10584] [ 214.338952][T10588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1063'. [ 214.393720][ T39] audit: type=1326 audit(1739321704.634:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10589 comm="syz.3.1064" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x0 [ 214.499988][T10592] netlink: 'syz.3.1064': attribute type 5 has an invalid length. [ 214.965035][ T5957] Bluetooth: hci1: command 0x1003 tx timeout [ 214.965331][ T65] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 216.134079][T10611] random: crng reseeded on system resumption [ 217.095604][ T6008] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 217.185071][ T1486] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 217.245089][ T6008] usb 6-1: Using ep0 maxpacket: 32 [ 217.251866][ T6008] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 217.255610][ T6008] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 217.258923][ T6008] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 217.262372][ T6008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.266791][ T6008] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 217.270484][ T6008] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 217.274738][ T6008] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 217.277342][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.282482][ T6008] usb 6-1: config 0 descriptor?? [ 217.335113][ T1486] usb 9-1: Using ep0 maxpacket: 8 [ 217.340174][ T1486] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 217.343777][ T1486] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 217.346678][ T1486] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.349523][ T1486] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.353173][ T1486] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.355841][ T1486] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.495823][ T6008] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 217.566750][ T1486] usb 9-1: GET_CAPABILITIES returned 0 [ 217.568397][ T1486] usbtmc 9-1:16.0: can't read capabilities [ 217.696809][ C2] usblp0: nonzero read bulk status received: -71 [ 217.700674][ T1486] usb 6-1: USB disconnect, device number 16 [ 217.781236][ T6008] usb 9-1: USB disconnect, device number 6 [ 217.871869][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1075'. [ 218.324519][T10646] tmpfs: Cannot change global quota limit on remount [ 218.330094][T10648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1076'. [ 219.856755][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 219.858824][T10621] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 219.860706][T10621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 219.862605][T10621] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 219.975646][T10621] usblp0: removed [ 220.007234][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 220.040503][ T39] audit: type=1326 audit(2000000004.449:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10671 comm="syz.4.1082" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x0 [ 220.064850][T10679] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1092'. [ 220.156199][T10686] netlink: 'syz.1.1086': attribute type 4 has an invalid length. [ 220.171034][T10686] netlink: 'syz.1.1086': attribute type 4 has an invalid length. [ 220.284700][ T39] audit: type=1326 audit(2000000004.679:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10687 comm="syz.4.1087" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x0 [ 221.691625][T10713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1094'. [ 221.872478][ T39] audit: type=1326 audit(2000000006.279:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.3.1097" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x0 [ 221.925073][ T65] Bluetooth: hci4: command 0x0405 tx timeout [ 221.925138][ T5957] Bluetooth: hci3: command 0x040f tx timeout [ 221.926838][ T65] Bluetooth: hci2: command 0x040f tx timeout [ 222.006080][T10711] syz.2.1095 (10711) used greatest stack depth: 20384 bytes left [ 222.394430][T10728] random: crng reseeded on system resumption [ 223.028177][T10740] tmpfs: Cannot change global quota limit on remount [ 223.085230][T10743] netlink: 'syz.3.1099': attribute type 9 has an invalid length. [ 223.131325][T10742] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 223.133335][T10742] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 223.135749][T10742] vhci_hcd vhci_hcd.0: Device attached [ 223.374901][ T6006] vhci_hcd: vhci_device speed not set [ 223.445340][ T6006] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 224.328919][T10765] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1104'. [ 224.493300][T10745] vhci_hcd: connection reset by peer [ 224.500256][ T7701] vhci_hcd: stop threads [ 224.503704][ T7701] vhci_hcd: release socket [ 224.506227][ T7701] vhci_hcd: disconnect device [ 224.650080][ T39] audit: type=1326 audit(2000000009.059:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.1.1108" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 224.869780][ T6337] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 225.014909][ T6337] usb 9-1: Using ep0 maxpacket: 16 [ 225.022080][ T6337] usb 9-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 225.027574][ T6337] usb 9-1: config 1 interface 0 has no altsetting 0 [ 225.032516][ T6337] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 225.043261][ T6337] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.045642][ T6337] usb 9-1: Product: syz [ 225.046838][ T6337] usb 9-1: Manufacturer: syz [ 225.048253][ T6337] usb 9-1: SerialNumber: syz [ 225.059890][T10768] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 225.060882][T10777] netlink: 'syz.2.1109': attribute type 9 has an invalid length. [ 225.557685][ T6337] usb 9-1: USB disconnect, device number 7 [ 225.857013][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'. [ 225.864476][T10792] ipvlan2: entered promiscuous mode [ 225.866601][T10786] XFS (nullb0): Invalid superblock magic number [ 225.869082][T10792] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 225.871362][T10792] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 226.037558][T10794] 9p: Unknown access argument : -22 [ 226.165322][T10799] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1114'. [ 226.960536][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'. [ 227.021065][T10811] random: crng reseeded on system resumption [ 227.164964][ T56] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 227.314985][ T56] usb 8-1: Using ep0 maxpacket: 16 [ 227.318493][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.322318][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.326003][ T56] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.330643][ T56] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 227.333929][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.339102][ T56] usb 8-1: config 0 descriptor?? [ 227.668560][ T39] audit: type=1326 audit(2000000012.071:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.1.1119" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 227.745614][ T56] HID 045e:07da: Invalid code 65791 type 1 [ 227.749784][ T56] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:045E:07DA.0006/input/input14 [ 227.760870][ T56] microsoft 0003:045E:07DA.0006: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 227.860147][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'. [ 227.947944][T10806] FAULT_INJECTION: forcing a failure. [ 227.947944][T10806] name failslab, interval 1, probability 0, space 0, times 0 [ 227.952049][T10806] CPU: 0 UID: 0 PID: 10806 Comm: syz.3.1116 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 227.952072][T10806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 227.952083][T10806] Call Trace: [ 227.952089][T10806] [ 227.952097][T10806] dump_stack_lvl+0x16c/0x1f0 [ 227.952129][T10806] should_fail_ex+0x50a/0x650 [ 227.952149][T10806] ? fs_reclaim_acquire+0xae/0x150 [ 227.952172][T10806] should_failslab+0xc2/0x120 [ 227.952191][T10806] __kmalloc_noprof+0xce/0x4f0 [ 227.952208][T10806] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 227.952228][T10806] ? tomoyo_realpath_from_path+0xbf/0x710 [ 227.952252][T10806] tomoyo_realpath_from_path+0xbf/0x710 [ 227.952274][T10806] ? tomoyo_path_number_perm+0x235/0x5b0 [ 227.952294][T10806] tomoyo_path_number_perm+0x248/0x5b0 [ 227.952324][T10806] ? tomoyo_path_number_perm+0x235/0x5b0 [ 227.952344][T10806] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 227.952384][T10806] ? __pfx_lock_release+0x10/0x10 [ 227.952400][T10806] ? trace_lock_acquire+0x14e/0x1f0 [ 227.952416][T10806] ? lock_acquire+0x2f/0xb0 [ 227.952431][T10806] ? __fget_files+0x40/0x3a0 [ 227.952449][T10806] ? __fget_files+0x206/0x3a0 [ 227.952466][T10806] security_file_ioctl_compat+0x9b/0x240 [ 227.952485][T10806] __do_compat_sys_ioctl+0x4e/0x2c0 [ 227.952508][T10806] __do_fast_syscall_32+0x73/0x120 [ 227.952524][T10806] do_fast_syscall_32+0x32/0x80 [ 227.952538][T10806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.952562][T10806] RIP: 0023:0xf7f27579 [ 227.952574][T10806] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 227.952602][T10806] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 227.952618][T10806] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080284504 [ 227.952627][T10806] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.952635][T10806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.952642][T10806] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 227.952651][T10806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.952669][T10806] [ 227.952741][T10806] ERROR: Out of memory at tomoyo_realpath_from_path. [ 228.032919][ T6010] usb 8-1: USB disconnect, device number 10 [ 228.500879][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'. [ 228.554914][ T6006] vhci_hcd: vhci_device speed not set [ 228.682403][T10833] syzkaller0: entered promiscuous mode [ 228.684009][T10833] syzkaller0: entered allmulticast mode [ 229.559063][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 229.938213][ T39] audit: type=1326 audit(2000000014.342:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.4.1129" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x0 [ 230.041557][T10852] netlink: 'syz.4.1129': attribute type 5 has an invalid length. [ 230.490352][T10855] random: crng reseeded on system resumption [ 230.817522][T10857] tmpfs: Cannot change global quota limit on remount [ 231.474588][ T39] audit: type=1326 audit(2000000015.872:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.1.1132" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 231.694049][T10864] tmpfs: Cannot change global quota limit on remount [ 231.915204][T10872] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 231.917322][T10872] overlayfs: failed to set xattr on upper [ 231.920956][T10872] overlayfs: ...falling back to redirect_dir=nofollow. [ 231.922940][T10872] overlayfs: ...falling back to index=off. [ 231.924627][T10872] overlayfs: ...falling back to uuid=null. [ 231.934843][T10872] sg_write: data in/out 1048544/17 bytes for SCSI command 0x0-- guessing data in; [ 231.934843][T10872] program syz.3.1135 not setting count and/or reply_len properly [ 232.055524][ T6010] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 232.210577][ T6010] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 232.217326][ T6010] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.220228][ T6010] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.222602][ T6010] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 232.228970][ T6010] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 232.231338][ T6010] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 232.233615][ T6010] usb 7-1: Manufacturer: syz [ 232.237470][ T6010] usb 7-1: config 0 descriptor?? [ 232.595326][ T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 232.650340][ T6010] usbhid 7-1:0.0: can't add hid device: -71 [ 232.657065][ T6010] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 232.665918][ T6010] usb 7-1: USB disconnect, device number 4 [ 232.765576][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 232.768652][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 232.771947][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 232.777903][ T8] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 232.780942][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.783339][ T8] usb 6-1: Product: syz [ 232.784719][ T8] usb 6-1: Manufacturer: syz [ 232.786545][ T8] usb 6-1: SerialNumber: syz [ 232.797231][ T8] usb 6-1: config 0 descriptor?? [ 233.015694][ T8] appledisplay 6-1:0.0: Error while getting initial brightness: -71 [ 233.026126][ T8] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -71 [ 233.035720][ T8] usb 6-1: USB disconnect, device number 17 [ 233.136733][ T39] audit: type=1326 audit(2000000017.542:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.3.1140" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x0 [ 233.194135][T10896] tmpfs: Cannot change global quota limit on remount [ 233.604126][T10910] tmpfs: Cannot change global quota limit on remount [ 233.671150][T10904] random: crng reseeded on system resumption [ 234.192116][ T39] audit: type=1326 audit(2000000018.592:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.2.1145" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x0 [ 234.203304][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'. [ 234.651311][T10943] netlink: 'syz.4.1149': attribute type 9 has an invalid length. [ 235.281238][T10964] random: crng reseeded on system resumption [ 235.961893][T10969] tmpfs: Cannot change global quota limit on remount [ 236.317067][T10987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1157'. [ 236.442165][ T39] audit: type=1326 audit(2000000020.842:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10988 comm="syz.3.1158" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x0 [ 236.485020][ T6337] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 236.615075][ T6337] usb 7-1: device descriptor read/64, error -71 [ 236.884939][ T6337] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 237.024894][ T6337] usb 7-1: device descriptor read/64, error -71 [ 237.124677][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1160'. [ 237.135806][ T6337] usb usb7-port1: attempt power cycle [ 237.245849][T11000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1161'. [ 237.550247][T11011] random: crng reseeded on system resumption [ 238.985717][T11020] random: crng reseeded on system resumption [ 239.006682][ T6337] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 240.449232][T11052] FAULT_INJECTION: forcing a failure. [ 240.449232][T11052] name failslab, interval 1, probability 0, space 0, times 0 [ 240.454035][T11052] CPU: 3 UID: 0 PID: 11052 Comm: syz.1.1173 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 240.454056][T11052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.454078][T11052] Call Trace: [ 240.454084][T11052] [ 240.454091][T11052] dump_stack_lvl+0x16c/0x1f0 [ 240.454121][T11052] should_fail_ex+0x50a/0x650 [ 240.454140][T11052] ? fs_reclaim_acquire+0xae/0x150 [ 240.454164][T11052] should_failslab+0xc2/0x120 [ 240.454183][T11052] __kmalloc_noprof+0xce/0x4f0 [ 240.454196][T11052] ? __pfx_d_absolute_path+0x10/0x10 [ 240.454208][T11052] ? tomoyo_encode2+0x100/0x3e0 [ 240.454222][T11052] tomoyo_encode2+0x100/0x3e0 [ 240.454233][T11052] ? rcu_is_watching+0x12/0xc0 [ 240.454250][T11052] tomoyo_realpath_from_path+0x1a7/0x710 [ 240.454266][T11052] tomoyo_check_open_permission+0x2ad/0x3c0 [ 240.454277][T11052] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 240.454301][T11052] ? __pfx_hook_file_open+0x10/0x10 [ 240.454311][T11052] ? lock_acquire+0x2f/0xb0 [ 240.454322][T11052] ? mnt_get_write_access+0x6a/0x300 [ 240.454337][T11052] tomoyo_file_open+0x6b/0x90 [ 240.454351][T11052] security_file_open+0x84/0x1e0 [ 240.454363][T11052] do_dentry_open+0x57c/0x1c40 [ 240.454375][T11052] ? inode_permission+0xdd/0x5f0 [ 240.454390][T11052] vfs_open+0x82/0x3f0 [ 240.454402][T11052] ? may_open+0x1f2/0x400 [ 240.454416][T11052] path_openat+0x1e88/0x2d80 [ 240.454431][T11052] ? __pfx_path_openat+0x10/0x10 [ 240.454442][T11052] ? __pfx___lock_acquire+0x10/0x10 [ 240.454452][T11052] ? lock_acquire.part.0+0x11b/0x380 [ 240.454464][T11052] ? find_held_lock+0x2d/0x110 [ 240.454480][T11052] do_filp_open+0x20c/0x470 [ 240.454490][T11052] ? __pfx_do_filp_open+0x10/0x10 [ 240.454500][T11052] ? find_held_lock+0x2d/0x110 [ 240.454522][T11052] ? _raw_spin_unlock+0x28/0x50 [ 240.454536][T11052] ? alloc_fd+0x41f/0x760 [ 240.454550][T11052] do_sys_openat2+0x17a/0x1e0 [ 240.454562][T11052] ? __pfx_do_sys_openat2+0x10/0x10 [ 240.454576][T11052] ? __fget_files+0x206/0x3a0 [ 240.454589][T11052] __ia32_sys_creat+0xcc/0x120 [ 240.454603][T11052] ? __pfx___ia32_sys_creat+0x10/0x10 [ 240.454616][T11052] ? __pfx_ksys_write+0x10/0x10 [ 240.454627][T11052] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 240.454644][T11052] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.454659][T11052] __do_fast_syscall_32+0x73/0x120 [ 240.454669][T11052] do_fast_syscall_32+0x32/0x80 [ 240.454679][T11052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.454695][T11052] RIP: 0023:0xf73fe579 [ 240.454703][T11052] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 240.454712][T11052] RSP: 002b:00000000f506555c EFLAGS: 00000296 ORIG_RAX: 0000000000000008 [ 240.454723][T11052] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 000000000000012e [ 240.454729][T11052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.454734][T11052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.454739][T11052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 240.454745][T11052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.454756][T11052] [ 240.565262][T11052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 240.846121][T11055] random: crng reseeded on system resumption [ 241.186333][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 241.606728][ T65] Bluetooth: hci3: command 0x040f tx timeout [ 242.250955][T11086] random: crng reseeded on system resumption [ 244.009417][ T39] audit: type=1326 audit(2000000028.410:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.1.1190" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 244.338171][ T39] audit: type=1804 audit(2000000028.740:238): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1184" name="/newroot/306/file0/file0" dev="9p" ino=36185820 res=1 errno=0 [ 244.398008][T11109] netfs: Couldn't get user pages (rc=-14) [ 244.465240][T11119] random: crng reseeded on system resumption [ 244.664767][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1186'. [ 244.681097][ T6337] usb 7-1: device descriptor read/8, error -110 [ 244.979744][ T6337] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 245.148899][ T6337] usb 7-1: device descriptor read/8, error -32 [ 245.325304][ T6337] usb usb7-port1: unable to enumerate USB device [ 245.745714][T11133] tmpfs: Cannot change global quota limit on remount [ 246.680379][T11143] tmpfs: Cannot change global quota limit on remount [ 247.323446][T11149] random: crng reseeded on system resumption [ 247.628636][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1198'. [ 249.625040][ T6008] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 249.774925][ T6008] usb 6-1: Using ep0 maxpacket: 8 [ 249.778890][ T6008] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 249.781193][ T6008] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.783847][ T6008] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.786941][ T6008] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.789690][ T6008] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.793278][ T6008] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.796265][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.003778][ T6008] usb 6-1: usb_control_msg returned -32 [ 250.006333][ T6008] usbtmc 6-1:16.0: can't read capabilities [ 250.331577][T11178] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1201'. [ 250.389449][T11179] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 250.440107][ T39] audit: type=1326 audit(2000000034.846:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.4.1202" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x0 [ 250.795673][T11192] tmpfs: Cannot change global quota limit on remount [ 251.415791][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.422768][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.427290][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.432606][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.437297][ T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 251.440570][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.572944][T11203] chnl_net:caif_netlink_parms(): no params data found [ 251.721758][T11203] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.723746][T11203] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.725711][T11203] bridge_slave_0: entered allmulticast mode [ 251.727670][T11203] bridge_slave_0: entered promiscuous mode [ 251.730161][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.732103][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.734021][T11203] bridge_slave_1: entered allmulticast mode [ 251.736096][T11203] bridge_slave_1: entered promiscuous mode [ 251.756067][T11203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.759583][T11203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.831158][T11203] team0: Port device team_slave_0 added [ 251.838151][T11203] team0: Port device team_slave_1 added [ 251.874436][T11203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.877117][T11203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.884292][T11203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.904997][T11203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.907296][T11203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.914236][T11203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.949720][T11203] hsr_slave_0: entered promiscuous mode [ 251.952181][T11203] hsr_slave_1: entered promiscuous mode [ 251.954842][T11203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.958653][T11203] Cannot create hsr debugfs directory [ 251.970436][T11213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.973475][T11213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.976710][T11213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.979826][T11213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.992847][T11213] batadv0 (unregistering): left allmulticast mode [ 251.998882][T11213] team0: Port device batadv0 removed [ 252.075235][T11203] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.078802][T11203] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.082810][T11203] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.090052][T11203] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.107614][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.109679][T11203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.111794][T11203] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.114052][T11203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.150585][T11203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.159874][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.166461][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.187286][T11203] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.195380][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.197825][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.203994][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.206485][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.300399][T11203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.355695][ T6667] usb 6-1: USB disconnect, device number 18 [ 252.428302][T11203] veth0_vlan: entered promiscuous mode [ 252.433566][T11203] veth1_vlan: entered promiscuous mode [ 252.448905][T11203] veth0_macvtap: entered promiscuous mode [ 252.453698][T11203] veth1_macvtap: entered promiscuous mode [ 252.470925][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.474313][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.477239][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.484406][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.495622][T11203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.508555][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.513410][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.516496][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.519486][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.527784][T11203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.534397][T11203] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.537462][T11203] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.540008][T11203] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.542476][T11203] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.577653][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.579890][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.602632][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.605429][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.526715][ T65] Bluetooth: hci1: command tx timeout [ 254.321958][T11234] netlink: 'syz.5.1207': attribute type 1 has an invalid length. [ 254.324260][T11234] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1207'. [ 254.767941][T11237] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1210'. [ 255.604968][ T65] Bluetooth: hci1: command tx timeout [ 257.685365][ T65] Bluetooth: hci1: command tx timeout [ 259.764955][ T65] Bluetooth: hci1: command tx timeout [ 261.846057][ T65] Bluetooth: hci1: command tx timeout [ 266.500858][T11243] tmpfs: Cannot change global quota limit on remount [ 267.069508][ T5955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.073101][ T5955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.078014][ T5955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.080580][ T5955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.084236][ T5955] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 267.086429][ T5955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.167639][ T65] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.172946][ T65] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.177594][ T65] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.180688][ T65] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.184142][ T65] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 267.186443][ T65] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.145474][ T9071] batadv_slave_1: left promiscuous mode [ 268.351792][ T5955] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 268.357908][ T5955] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 268.361020][ T5955] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 268.365090][ T5955] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 268.368024][ T5955] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 268.370171][ T5955] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 268.461909][T11259] chnl_net:caif_netlink_parms(): no params data found [ 269.125023][ T65] Bluetooth: hci4: command tx timeout [ 269.225076][ T65] Bluetooth: hci5: command tx timeout [ 270.405107][ T65] Bluetooth: hci6: command tx timeout [ 271.214952][ T65] Bluetooth: hci4: command tx timeout [ 271.305148][ T65] Bluetooth: hci5: command tx timeout [ 272.485023][ T65] Bluetooth: hci6: command tx timeout [ 273.305104][ T65] Bluetooth: hci4: command tx timeout [ 273.375170][ T65] Bluetooth: hci5: command tx timeout [ 274.565156][ T65] Bluetooth: hci6: command tx timeout [ 275.365015][ T65] Bluetooth: hci4: command tx timeout [ 275.445102][ T65] Bluetooth: hci5: command tx timeout [ 276.655023][ T65] Bluetooth: hci6: command tx timeout [ 280.185143][T11251] chnl_net:caif_netlink_parms(): no params data found [ 280.490255][T11276] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 280.494341][T11276] Error validating options; rc = [-22] [ 280.498701][T11276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1216'. [ 280.527657][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.812356][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.888538][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.891909][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.896035][T11259] bridge_slave_0: entered allmulticast mode [ 280.900022][T11259] bridge_slave_0: entered promiscuous mode [ 281.091767][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.112105][T11251] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.116942][T11251] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.120396][T11251] bridge_slave_0: entered allmulticast mode [ 281.134606][T11251] bridge_slave_0: entered promiscuous mode [ 281.177919][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.181013][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.184248][T11259] bridge_slave_1: entered allmulticast mode [ 281.193999][T11259] bridge_slave_1: entered promiscuous mode [ 281.303235][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.320194][T11251] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.323591][T11251] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.329568][T11251] bridge_slave_1: entered allmulticast mode [ 281.341277][T11251] bridge_slave_1: entered promiscuous mode [ 281.544127][T11259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.584567][T11251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.589046][T11259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.592694][T11247] chnl_net:caif_netlink_parms(): no params data found [ 281.600905][T11251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.693368][T11259] team0: Port device team_slave_0 added [ 281.698825][T11251] team0: Port device team_slave_0 added [ 281.722357][T11259] team0: Port device team_slave_1 added [ 281.725459][T11251] team0: Port device team_slave_1 added [ 281.931715][T11259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.934601][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.945942][T11259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.950903][T11251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.953568][T11251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.964003][T11251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.968412][ T64] bridge_slave_1: left promiscuous mode [ 281.970620][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.977886][ T64] bridge_slave_0: left allmulticast mode [ 281.980170][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.352760][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.358574][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.362532][ T64] bond0 (unregistering): Released all slaves [ 282.370773][T11247] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.373584][T11247] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.376664][T11247] bridge_slave_0: entered allmulticast mode [ 282.379960][T11247] bridge_slave_0: entered promiscuous mode [ 282.383697][T11259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.385710][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.393783][T11259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.397822][T11251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.400562][T11251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.409656][T11251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.487367][T11247] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.489450][T11247] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.491563][T11247] bridge_slave_1: entered allmulticast mode [ 282.494276][T11247] bridge_slave_1: entered promiscuous mode [ 282.547862][T11247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.553502][T11247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.871953][T11251] hsr_slave_0: entered promiscuous mode [ 282.875237][T11251] hsr_slave_1: entered promiscuous mode [ 282.877235][T11251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.879428][T11251] Cannot create hsr debugfs directory [ 282.916353][T11259] hsr_slave_0: entered promiscuous mode [ 282.919886][T11259] hsr_slave_1: entered promiscuous mode [ 282.923782][T11259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.927333][T11259] Cannot create hsr debugfs directory [ 282.936469][T11247] team0: Port device team_slave_0 added [ 283.083561][T11247] team0: Port device team_slave_1 added [ 283.248664][T11291] netlink: 'syz.1.1218': attribute type 9 has an invalid length. [ 283.279492][ T64] hsr_slave_0: left promiscuous mode [ 283.281605][ T64] hsr_slave_1: left promiscuous mode [ 283.283584][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.286159][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.289079][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.291206][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.312796][ T64] veth1_macvtap: left promiscuous mode [ 283.315280][ T64] veth0_macvtap: left promiscuous mode [ 283.318109][ T64] veth1_vlan: left promiscuous mode [ 283.319836][ T64] veth0_vlan: left promiscuous mode [ 284.261382][ T64] team0 (unregistering): Port device team_slave_1 removed [ 284.385424][ T64] team0 (unregistering): Port device team_slave_0 removed [ 285.357648][T11247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.361002][T11247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.372505][T11247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.398475][T11247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.404002][T11247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.414042][T11247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.634678][T11247] hsr_slave_0: entered promiscuous mode [ 285.637577][T11247] hsr_slave_1: entered promiscuous mode [ 285.640227][T11247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.642738][T11247] Cannot create hsr debugfs directory [ 285.799238][T11251] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 285.817509][T11251] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 285.854207][T11251] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 285.863931][T11251] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 285.919410][T11259] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 285.925909][T11259] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 285.931493][T11259] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 285.940127][T11259] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 286.002543][T11247] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 286.010532][T11247] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 286.021938][T11247] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 286.048185][T11247] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 286.103011][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.166801][T11251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.224451][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.245924][T11251] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.326207][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.329124][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.333369][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.336376][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.353290][T11259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.381570][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.410037][T11247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.442913][T11247] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.479935][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.490509][T11259] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.498154][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.500884][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.511509][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.514213][ T7701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.530830][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.533564][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.574249][T11247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.577877][T11247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.583505][T11259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.587747][T11259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.631239][T11251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.741463][ T64] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.763083][T11247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.791102][T11259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.849593][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.851672][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.890350][T11251] veth0_vlan: entered promiscuous mode [ 286.910573][T11251] veth1_vlan: entered promiscuous mode [ 286.958780][T11251] veth0_macvtap: entered promiscuous mode [ 286.967292][T11251] veth1_macvtap: entered promiscuous mode [ 286.984482][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.987709][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.990453][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.993540][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.998051][T11251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.001935][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.004991][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.007812][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.010680][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.014197][T11251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.039924][T11251] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.043066][T11251] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.053882][T11251] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.056580][T11251] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.100868][ T64] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.143728][T11247] veth0_vlan: entered promiscuous mode [ 287.149649][T11259] veth0_vlan: entered promiscuous mode [ 287.162848][T11259] veth1_vlan: entered promiscuous mode [ 287.171172][T11247] veth1_vlan: entered promiscuous mode [ 287.174624][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.180950][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.194595][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.198333][T11259] veth0_macvtap: entered promiscuous mode [ 287.200732][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.209439][T11259] veth1_macvtap: entered promiscuous mode [ 287.212795][T11247] veth0_macvtap: entered promiscuous mode [ 287.239497][ T64] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.251378][T11247] veth1_macvtap: entered promiscuous mode [ 287.272700][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.276089][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.279649][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.282692][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.286791][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.294910][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.299654][T11259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.326079][ T64] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.336546][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.340412][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.343995][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.347540][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.350219][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.353161][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.363727][T11259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.397721][T11259] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.400239][T11259] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.402749][T11259] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.407206][T11259] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.413200][T11247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.416762][T11247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.420035][T11247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.423083][T11247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.426174][T11247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.429157][T11247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.432022][T11247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.435670][T11247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.445571][T11247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.467360][T11247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.471577][T11247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.474559][T11247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.482073][T11247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.485585][T11247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.489556][T11247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.494447][T11247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.499404][T11247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.505833][T11247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.509831][T11247] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.512797][T11247] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.515720][T11247] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.518145][T11247] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.557725][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.560030][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.613862][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.627604][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.639852][ T64] bridge_slave_1: left promiscuous mode [ 287.642359][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.651198][ T64] bridge_slave_0: left allmulticast mode [ 287.652888][ T64] bridge_slave_0: left promiscuous mode [ 287.654707][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.664360][ T64] bridge_slave_1: left allmulticast mode [ 287.668621][ T64] bridge_slave_1: left promiscuous mode [ 287.670475][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.675179][ T64] bridge_slave_0: left allmulticast mode [ 287.676826][ T64] bridge_slave_0: left promiscuous mode [ 287.678429][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.860442][ T64] bond1 (unregistering): (slave ip6gre2): Releasing backup interface [ 288.143079][T11352] random: crng reseeded on system resumption [ 288.523960][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.529935][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.552148][ T64] bond0 (unregistering): Released all slaves [ 288.557978][ T64] bond1 (unregistering): Released all slaves [ 288.564002][ T64] bond2 (unregistering): Released all slaves [ 288.735026][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.743976][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.748949][ T64] bond0 (unregistering): Released all slaves [ 288.781508][T11337] lo speed is unknown, defaulting to 1000 [ 289.000382][T11357] tmpfs: Cannot change global quota limit on remount [ 289.047045][ T7701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.049322][ T7701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.248712][T11337] lo speed is unknown, defaulting to 1000 [ 289.254129][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.261390][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.299483][T11337] lo speed is unknown, defaulting to 1000 [ 289.325675][T11337] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 289.345240][T11337] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 289.605556][T11337] lo speed is unknown, defaulting to 1000 [ 289.707049][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1211'. [ 289.710826][T11337] lo speed is unknown, defaulting to 1000 [ 289.714384][T11337] lo speed is unknown, defaulting to 1000 [ 289.753786][T11337] lo speed is unknown, defaulting to 1000 [ 289.762670][T11337] lo speed is unknown, defaulting to 1000 [ 289.776724][T11337] lo speed is unknown, defaulting to 1000 [ 289.781855][T11337] lo speed is unknown, defaulting to 1000 [ 289.784011][T11337] lo speed is unknown, defaulting to 1000 [ 290.001215][ T64] hsr_slave_0: left promiscuous mode [ 290.003370][ T64] hsr_slave_1: left promiscuous mode [ 290.008139][ T64] hsr_slave_0: left promiscuous mode [ 290.010120][ T64] hsr_slave_1: left promiscuous mode [ 290.011934][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.014091][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.016769][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.019086][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.062863][ T64] team0: left allmulticast mode [ 290.064368][ T64] team_slave_0: left allmulticast mode [ 290.072861][ T64] team_slave_1: left allmulticast mode [ 290.075082][ T64] team0: left promiscuous mode [ 290.078006][ T64] team_slave_0: left promiscuous mode [ 290.079898][ T64] team_slave_1: left promiscuous mode [ 290.081444][ T64] veth1_macvtap: left promiscuous mode [ 290.082991][ T64] veth0_macvtap: left promiscuous mode [ 290.084643][ T64] veth1_vlan: left promiscuous mode [ 290.087467][ T64] veth0_vlan: left promiscuous mode [ 290.098672][ T64] veth1_macvtap: left promiscuous mode [ 290.100278][ T64] veth0_macvtap: left promiscuous mode [ 290.101840][ T64] veth1_vlan: left promiscuous mode [ 290.103340][ T64] veth0_vlan: left promiscuous mode [ 290.643393][ T39] audit: type=1326 audit(2000000075.046:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11374 comm="syz.1.1225" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fe579 code=0x0 [ 290.709051][T11382] serio: Serial port ptm1 [ 291.517552][ T64] team0 (unregistering): Port device team_slave_1 removed [ 291.709630][ T64] team0 (unregistering): Port device team_slave_0 removed [ 292.448403][T11388] random: crng reseeded on system resumption [ 293.801404][ T64] team0 (unregistering): Port device team_slave_1 removed [ 293.900351][ T64] team0 (unregistering): Port device team_slave_0 removed [ 294.837381][T11375] lo speed is unknown, defaulting to 1000 [ 295.519309][T11407] trusted_key: encrypted_key: master key parameter 'de' is invalid [ 295.940194][ T64] IPVS: stop unused estimator thread 0... [ 296.296122][T11426] lo speed is unknown, defaulting to 1000 [ 296.374331][ T39] audit: type=1326 audit(2000000080.778:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.1.1234" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 297.302789][T11435] random: crng reseeded on system resumption [ 297.692760][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1237'. [ 303.728606][T11514] random: crng reseeded on system resumption [ 310.552400][T11538] bridge0: port 3(ipvlan2) entered blocking state [ 310.554488][T11538] bridge0: port 3(ipvlan2) entered disabled state [ 310.557163][T11538] ipvlan2: entered allmulticast mode [ 310.559180][T11538] bridge0: entered allmulticast mode [ 310.562381][T11538] ipvlan2: left allmulticast mode [ 310.563875][T11538] bridge0: left allmulticast mode [ 313.124348][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.129758][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.134389][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.140160][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.144753][ T5955] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 313.147776][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.195593][T11555] lo speed is unknown, defaulting to 1000 [ 313.257487][T11555] chnl_net:caif_netlink_parms(): no params data found [ 313.315233][T11555] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.317735][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.319837][T11555] bridge_slave_0: entered allmulticast mode [ 313.322037][T11555] bridge_slave_0: entered promiscuous mode [ 313.325140][T11555] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.327256][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.329734][T11555] bridge_slave_1: entered allmulticast mode [ 313.332110][T11555] bridge_slave_1: entered promiscuous mode [ 313.355751][T11555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.359581][T11555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.420488][T11555] team0: Port device team_slave_0 added [ 313.424528][T11555] team0: Port device team_slave_1 added [ 313.450497][T11555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.453268][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.464231][T11555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.470668][T11555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.475131][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.485781][T11555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.542228][T11555] hsr_slave_0: entered promiscuous mode [ 313.545255][T11555] hsr_slave_1: entered promiscuous mode [ 313.547610][T11555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.549804][T11555] Cannot create hsr debugfs directory [ 313.768992][ T39] audit: type=1326 audit(2000000098.170:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.6.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 313.776142][ T39] audit: type=1326 audit(2000000098.170:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.6.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 313.782278][ T39] audit: type=1326 audit(2000000098.170:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.6.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 313.789560][ T39] audit: type=1326 audit(2000000098.170:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.6.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 313.795758][ T39] audit: type=1326 audit(2000000098.170:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.6.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 313.801858][ T39] audit: type=1326 audit(2000000098.170:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.6.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 313.808883][ T39] audit: type=1326 audit(2000000098.170:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.6.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 313.816262][ T39] audit: type=1326 audit(2000000098.170:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.6.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 313.822537][ T39] audit: type=1326 audit(2000000098.180:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.6.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 313.829607][ T39] audit: type=1326 audit(2000000098.180:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.6.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 313.915331][T11555] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 313.918848][T11555] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 313.922543][T11555] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 313.930836][T11555] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 313.947785][T11555] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.950592][T11555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.953497][T11555] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.956233][T11555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.995804][T11555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.008571][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.013278][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.042526][T11555] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.053447][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.055564][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.063760][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.066396][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.261107][T11555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.570118][T11555] veth0_vlan: entered promiscuous mode [ 314.573951][T11555] veth1_vlan: entered promiscuous mode [ 314.586127][T11555] veth0_macvtap: entered promiscuous mode [ 314.589484][T11555] veth1_macvtap: entered promiscuous mode [ 314.603463][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.606909][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.609706][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.612481][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.615335][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.618062][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.620702][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.623481][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.627873][T11555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.632528][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.635557][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.638800][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.641855][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.646247][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.650420][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.653973][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.657870][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.662382][T11555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.670301][T11555] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.673679][T11555] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.684925][T11555] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.688251][T11555] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.776749][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.779705][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.795686][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.798280][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.031014][T11598] netlink: 'syz.6.1264': attribute type 1 has an invalid length. [ 315.033364][T11598] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1264'. [ 315.207302][ T5955] Bluetooth: hci1: command tx timeout [ 315.969327][T11614] overlayfs: overlapping lowerdir path [ 316.202875][T11621] random: crng reseeded on system resumption [ 317.065192][ T5955] Bluetooth: hci4: command tx timeout [ 317.173505][T11638] overlayfs: overlapping lowerdir path [ 317.285065][ T5955] Bluetooth: hci1: command tx timeout [ 317.964511][T11649] loop4: detected capacity change from 0 to 7 [ 317.970671][T11649] Dev loop4: unable to read RDB block 7 [ 317.972569][T11649] loop4: unable to read partition table [ 317.978893][T11649] loop4: partition table beyond EOD, truncated [ 317.980789][T11649] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 319.375639][ T5955] Bluetooth: hci1: command tx timeout [ 320.160415][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1276'. [ 321.444930][ T5955] Bluetooth: hci1: command tx timeout [ 324.446213][T11671] Cannot find add_set index 3 as target [ 324.462216][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1278'. [ 324.466816][T11671] netlink: 177 bytes leftover after parsing attributes in process `syz.8.1278'. [ 325.179033][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1279'. [ 326.477447][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 326.477459][ T39] audit: type=1326 audit(2000000110.888:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11689 comm="syz.9.1282" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x0 [ 327.264568][T11690] lo speed is unknown, defaulting to 1000 [ 327.316331][T11674] Set syz1 is full, maxelem 65536 reached [ 327.890824][ T1137] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.998342][ T1137] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.061642][ T1137] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.162011][T11705] bridge0: port 3(netdevsim0) entered blocking state [ 328.165437][T11705] bridge0: port 3(netdevsim0) entered disabled state [ 328.168801][T11705] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 328.183391][T11705] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 328.187236][T11705] bridge0: port 3(netdevsim0) entered blocking state [ 328.190604][T11705] bridge0: port 3(netdevsim0) entered forwarding state [ 328.267458][ T1137] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.379664][ T1137] bridge_slave_1: left allmulticast mode [ 328.381289][ T1137] bridge_slave_1: left promiscuous mode [ 328.385958][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.397261][ T1137] bridge_slave_0: left allmulticast mode [ 328.399614][ T1137] bridge_slave_0: left promiscuous mode [ 328.401313][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.465041][T11704] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 328.923171][T11699] random: crng reseeded on system resumption [ 328.951661][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.956975][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.961898][ T1137] bond0 (unregistering): Released all slaves [ 329.320577][ T1137] hsr_slave_0: left promiscuous mode [ 329.327890][ T1137] hsr_slave_1: left promiscuous mode [ 329.331119][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.333633][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.340836][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.343036][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.387848][ T1137] veth1_macvtap: left promiscuous mode [ 329.389748][ T1137] veth0_macvtap: left promiscuous mode [ 329.391538][ T1137] veth1_vlan: left promiscuous mode [ 329.393526][ T1137] veth0_vlan: left promiscuous mode [ 330.674194][T11737] random: crng reseeded on system resumption [ 330.946956][T11742] tmpfs: Cannot change global quota limit on remount [ 331.729259][ T39] audit: type=1400 audit(2000000116.130:265): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11749 comm="syz.8.1293" [ 331.840662][T11762] tmpfs: Cannot change global quota limit on remount [ 332.355612][T11763] netlink: 'syz.9.1292': attribute type 9 has an invalid length. [ 332.370767][T11770] tmpfs: Cannot change global quota limit on remount [ 333.418845][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 333.538219][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 334.595705][T11794] netlink: 'syz.8.1299': attribute type 1 has an invalid length. [ 334.597992][T11794] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1299'. [ 335.470872][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 335.603735][T11810] random: crng reseeded on system resumption [ 336.060860][T11797] siw: device registration error -23 [ 336.280896][T11826] xt_TPROXY: Can be used only with -p tcp or -p udp [ 336.564986][ T65] Bluetooth: hci6: command tx timeout [ 336.602518][T11829] siw: device registration error -23 [ 337.698035][T11843] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1308' sets config #1 [ 338.131798][T11848] page: refcount:3 mapcount:1 mapping:ffff888069d25f10 index:0x200 pfn:0x72e53 [ 338.135385][T11848] memcg:ffff888069de8000 [ 338.136655][T11848] aops:shmem_aops ino:449 [ 338.137896][T11848] flags: 0x4fff6800002002d(locked|referenced|uptodate|lru|swapbacked|node=1|zone=1|lastcpupid=0x7ff) [ 338.140900][T11848] raw: 04fff6800002002d ffffea0001cb9488 ffffea0001c61a08 ffff888069d25f10 [ 338.143314][T11848] raw: 0000000000000200 0000000000000000 0000000300000000 ffff888069de8000 [ 338.145667][T11848] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 338.147755][T11848] page_owner tracks the page as allocated [ 338.150172][T11848] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 11840, tgid 11839 (syz.8.1308), ts 337286360426, free_ts 335304215234 [ 338.155086][T11848] post_alloc_hook+0x181/0x1b0 [ 338.156441][T11848] get_page_from_freelist+0xfce/0x2f80 [ 338.157968][T11848] __alloc_frozen_pages_noprof+0x221/0x2470 [ 338.159622][T11848] alloc_pages_mpol+0x1fc/0x540 [ 338.160992][T11848] folio_alloc_mpol_noprof+0x36/0x2f0 [ 338.162494][T11848] shmem_alloc_folio+0x135/0x160 [ 338.163937][T11848] shmem_alloc_and_add_folio+0x48e/0xc10 [ 338.165517][T11848] shmem_get_folio_gfp+0x689/0x1530 [ 338.166976][T11848] shmem_fault+0x200/0xae0 [ 338.168206][T11848] __do_fault+0x10a/0x490 [ 338.169432][T11848] do_pte_missing+0xecf/0x3e10 [ 338.170797][T11848] __handle_mm_fault+0x1166/0x2c60 [ 338.172255][T11848] handle_mm_fault+0x3fa/0xaa0 [ 338.173669][T11848] __get_user_pages+0x773/0x36f0 [ 338.175065][T11848] populate_vma_page_range+0x27f/0x3a0 [ 338.176600][T11848] __mm_populate+0x1d6/0x380 [ 338.177962][T11848] page last free pid 11785 tgid 11777 stack trace: [ 338.179770][T11848] free_unref_folios+0xa7b/0x1500 [ 338.181123][T11848] folios_put_refs+0x587/0x7b0 [ 338.182479][T11848] shmem_undo_range+0x586/0x1170 [ 338.183924][T11848] shmem_evict_inode+0x3a3/0xba0 [ 338.185354][T11848] evict+0x409/0x960 [ 338.186465][T11848] iput+0x52a/0x890 [ 338.187626][T11848] dentry_unlink_inode+0x29c/0x480 [ 338.189056][T11848] __dentry_kill+0x1d0/0x600 [ 338.190367][T11848] dput.part.0+0x4b1/0x9b0 [ 338.191638][T11848] dput+0x1f/0x30 [ 338.192676][T11848] __fput+0x51c/0xb70 [ 338.193822][T11848] task_work_run+0x14e/0x250 [ 338.195131][T11848] do_exit+0xad8/0x2d70 [ 338.196311][T11848] do_group_exit+0xd3/0x2a0 [ 338.197588][T11848] get_signal+0x2576/0x2610 [ 338.198873][T11848] arch_do_signal_or_restart+0x90/0x7e0 [ 338.200494][T11848] ------------[ cut here ]------------ [ 338.202044][T11848] kernel BUG at mm/filemap.c:154! [ 338.203522][T11848] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 338.205675][T11848] CPU: 2 UID: 0 PID: 11848 Comm: syz.8.1308 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 338.209930][T11848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 338.212924][T11848] RIP: 0010:filemap_unaccount_folio+0xef/0x860 [ 338.214695][T11848] Code: b7 2b ca ff 4c 8d 6b 30 31 ff 89 ee e8 aa 26 ca ff 85 ed 7e 17 e8 a1 2b ca ff 48 c7 c6 a0 79 78 8b 48 89 df e8 d2 71 11 00 90 <0f> 0b e8 8a 2b ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 338.220054][T11848] RSP: 0000:ffffc900032873a0 EFLAGS: 00010093 [ 338.221756][T11848] RAX: 0000000000000000 RBX: ffffea0001cb94c0 RCX: ffffc90003287248 [ 338.224021][T11848] RDX: ffff888025d18000 RSI: ffffffff81eec2fe RDI: ffff888025d18444 [ 338.226225][T11848] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20bfd42 [ 338.228456][T11848] R10: ffffffff905fea17 R11: 0000000000000003 R12: ffff888069d25f10 [ 338.230718][T11848] R13: ffffea0001cb94f0 R14: 0000000000000000 R15: ffffc90003287688 [ 338.232950][T11848] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 338.235488][T11848] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 338.237338][T11848] CR2: 00000000336e8ffc CR3: 000000000df80000 CR4: 0000000000352ef0 [ 338.239575][T11848] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 338.241828][T11848] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 338.244091][T11848] Call Trace: [ 338.245049][T11848] [ 338.245893][T11848] ? die+0x31/0x80 [ 338.246993][T11848] ? do_trap+0x232/0x430 [ 338.248198][T11848] ? filemap_unaccount_folio+0xef/0x860 [ 338.249754][T11848] ? filemap_unaccount_folio+0xef/0x860 [ 338.251341][T11848] ? do_error_trap+0xf4/0x230 [ 338.252670][T11848] ? filemap_unaccount_folio+0xef/0x860 [ 338.254248][T11848] ? handle_invalid_op+0x34/0x40 [ 338.255660][T11848] ? filemap_unaccount_folio+0xef/0x860 [ 338.257217][T11848] ? exc_invalid_op+0x2e/0x50 [ 338.258549][T11848] ? asm_exc_invalid_op+0x1a/0x20 [ 338.259990][T11848] ? filemap_unaccount_folio+0xee/0x860 [ 338.261551][T11848] ? filemap_unaccount_folio+0xef/0x860 [ 338.263133][T11848] filemap_remove_folio+0xf1/0x250 [ 338.264594][T11848] truncate_inode_folio+0x49/0x70 [ 338.266012][T11848] shmem_undo_range+0x36e/0x1170 [ 338.267482][T11848] ? __pfx_shmem_undo_range+0x10/0x10 [ 338.269008][T11848] ? __lock_acquire+0xcc5/0x3c40 [ 338.270411][T11848] ? mark_lock+0xb5/0xc60 [ 338.271673][T11848] ? __pfx___lock_acquire+0x10/0x10 [ 338.273139][T11848] ? hlock_class+0x4e/0x130 [ 338.274449][T11848] ? mark_lock+0xb5/0xc60 [ 338.275705][T11848] ? __pfx___lock_acquire+0x10/0x10 [ 338.277172][T11848] ? hlock_class+0x4e/0x130 [ 338.278467][T11848] ? percpu_counter_add_batch+0xb5/0x1e0 [ 338.280073][T11848] shmem_evict_inode+0x3a3/0xba0 [ 338.281477][T11848] ? find_held_lock+0x2d/0x110 [ 338.282851][T11848] ? __pfx_shmem_evict_inode+0x10/0x10 [ 338.284404][T11848] ? evict+0x3c8/0x960 [ 338.285561][T11848] ? __pfx_lock_release+0x10/0x10 [ 338.286984][T11848] ? lock_acquire+0x2f/0xb0 [ 338.288274][T11848] ? __pfx_shmem_evict_inode+0x10/0x10 [ 338.289951][T11848] evict+0x409/0x960 [ 338.291091][T11848] ? __pfx_evict+0x10/0x10 [ 338.292354][T11848] iput+0x52a/0x890 [ 338.293442][T11848] ? __pfx_generic_delete_inode+0x10/0x10 [ 338.295041][T11848] dentry_unlink_inode+0x29c/0x480 [ 338.296478][T11848] __dentry_kill+0x1d0/0x600 [ 338.297790][T11848] dput.part.0+0x4b1/0x9b0 [ 338.299065][T11848] dput+0x1f/0x30 [ 338.300117][T11848] __fput+0x51c/0xb70 [ 338.301247][T11848] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.302711][T11848] task_work_run+0x14e/0x250 [ 338.304065][T11848] ? __pfx_task_work_run+0x10/0x10 [ 338.305504][T11848] ? do_raw_spin_unlock+0x172/0x230 [ 338.306948][T11848] do_exit+0xad8/0x2d70 [ 338.308125][T11848] ? get_signal+0x8f7/0x2610 [ 338.309440][T11848] ? __pfx_do_exit+0x10/0x10 [ 338.310759][T11848] ? do_raw_spin_lock+0x12d/0x2c0 [ 338.312188][T11848] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.313734][T11848] do_group_exit+0xd3/0x2a0 [ 338.315044][T11848] get_signal+0x2576/0x2610 [ 338.316333][T11848] ? __pfx___blk_flush_plug+0x10/0x10 [ 338.317843][T11848] ? __pfx___up_read+0x10/0x10 [ 338.319219][T11848] ? __pfx_get_signal+0x10/0x10 [ 338.320604][T11848] ? __pfx_do_futex+0x10/0x10 [ 338.321938][T11848] arch_do_signal_or_restart+0x90/0x7e0 [ 338.323562][T11848] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 338.325339][T11848] ? kcov_ioctl+0x265/0x730 [ 338.326634][T11848] syscall_exit_to_user_mode+0x150/0x2a0 [ 338.328236][T11848] __do_fast_syscall_32+0x80/0x120 [ 338.329678][T11848] do_fast_syscall_32+0x32/0x80 [ 338.331074][T11848] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.332850][T11848] RIP: 0023:0xf743e579 [ 338.334047][T11848] Code: Unable to access opcode bytes at 0xf743e54f. [ 338.335934][T11848] RSP: 002b:00000000f4c6160c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 338.338250][T11848] RAX: fffffffffffffe00 RBX: 00000000f7465138 RCX: 0000000000000080 [ 338.340454][T11848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f746513c [ 338.342649][T11848] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 338.344875][T11848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.347078][T11848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.349280][T11848] [ 338.350158][T11848] Modules linked in: [ 338.351292][T11848] ---[ end trace 0000000000000000 ]--- [ 338.352805][T11848] RIP: 0010:filemap_unaccount_folio+0xef/0x860 [ 338.354568][T11848] Code: b7 2b ca ff 4c 8d 6b 30 31 ff 89 ee e8 aa 26 ca ff 85 ed 7e 17 e8 a1 2b ca ff 48 c7 c6 a0 79 78 8b 48 89 df e8 d2 71 11 00 90 <0f> 0b e8 8a 2b ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 338.359875][T11848] RSP: 0000:ffffc900032873a0 EFLAGS: 00010093 [ 338.361573][T11848] RAX: 0000000000000000 RBX: ffffea0001cb94c0 RCX: ffffc90003287248 [ 338.363679][T11848] RDX: ffff888025d18000 RSI: ffffffff81eec2fe RDI: ffff888025d18444 [ 338.365874][T11848] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20bfd42 [ 338.368095][T11848] R10: ffffffff905fea17 R11: 0000000000000003 R12: ffff888069d25f10 [ 338.370298][T11848] R13: ffffea0001cb94f0 R14: 0000000000000000 R15: ffffc90003287688 [ 338.372518][T11848] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 338.375020][T11848] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 338.376866][T11848] CR2: 00000000336e8ffc CR3: 000000000df80000 CR4: 0000000000352ef0 [ 338.379092][T11848] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 338.381275][T11848] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 338.383516][T11848] Kernel panic - not syncing: Fatal exception [ 338.385769][T11848] Kernel Offset: disabled [ 338.387013][T11848] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:57:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000001a4cc9c RBX=0000000000000000 RCX=ffffffff8b46be39 RDX=ffffed1005686f86 RSI=ffffffff8bd2d660 RDI=ffffffff818ffe49 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff905fea10 R15=0000000000000000 RIP=ffffffff8b46d21f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5025da4 CR3=000000006e9ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b646760 RCX=ffffffff81acfc1a RDX=ffff88801fc68000 RSI=ffffffff81acfbf4 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000100f930 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed10056c8ced R13=0000000000000001 R14=ffff88802b53ffc0 R15=ffff88802b646768 RIP=ffffffff81acfbf6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080da7000 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85388475 RDI=ffffffff9aad4e20 RBP=ffffffff9aad4de0 RSP=ffffc90003286ce0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7973203a6d6d6f43 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9aad4de0 R15=0000000000000000 RIP=ffffffff8538849f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000336e8ffc CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000037fc34 RBX=0000000000000003 RCX=ffffffff8b46be39 RDX=ffffed10056e6f86 RSI=ffffffff8bd2d660 RDI=ffffffff818ffe49 RBP=ffffed1003ad1488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6f85 R10=ffff88802b737c2b R11=0000000000000001 R12=0000000000000003 R13=ffff88801d68a440 R14=ffffffff905fea10 R15=0000000000000000 RIP=ffffffff8b46d21f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008068b000 CR3=000000005d0a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000