last executing test programs: 2m58.460120372s ago: executing program 2 (id=440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000012c0), 0x4002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x56}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x98240, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000400008510000006"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) read$dsp(r4, &(0x7f0000001240)=""/79, 0x4f) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f00000000c0)='team_slave_0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$dupfd(r1, 0x0, r2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b040000000000000000020000000900020073797a3200000000600004805c0001800b00010074617267657400004c000280390003009b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a605a39f030000000000000000000000010000"], 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/4096, 0x1000) 2m57.561485997s ago: executing program 2 (id=443): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_clone(0x1200400, &(0x7f00000002c0)="694d400be2c84104e9bbd4e215805a62c13932f916ea9e8d6c9e7a052ae5281dd4cfcebed0b93494535cf33e4056af3f25096e89b522be3276ac8726c35efe0c6f599f8e2c26a9b0252a551a5004c86ce80255ca215a56def5fa1bf4a16c06cacd64d953797728cd98294c9e6f782945a29e19cf9593c3e1504d36e04868307d0af72c9476d9897d30485852ca6db0dd94327f576a07bb938b3c15e49a374759f7b8290a282159aea0dc98a325bf0543394e54968e3e1a88e1feabebb8bcfb48ad0a3990f9", 0xc5, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000440)="71a12824ac0b59d09894ee17eacb04b2f2d399ccdb8deb7eb32a7bef25e33d1d67e20446ddf91cd7e836105b24425c4689eb04f6038581e3b1539c2bac4765f8ad347158345a66bc0fbd3971b6b0ae35caa635406f9f31354d8c978b28a6edecf8d5e8572c3b6c435f1ff2015b4496c3af12f3c19c6866e146cb2ae5453f66e42831901796be2bf47f038bd8") sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) 2m56.652405526s ago: executing program 2 (id=447): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x80000000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x6a, 0x1, {0xe4b, 0x11e41e76, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000b00000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000005c0)={0x2, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@fallback=r3, 0xffffffffffffffff, 0xd, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=r5}, 0x20) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) 2m55.304756962s ago: executing program 2 (id=456): ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f00000000c0)=[0x9, 0x2, 0x0, 0x4, 0x10, 0x1, 0xfff, 0x828d]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 2m55.242106918s ago: executing program 2 (id=457): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x40000, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x830200) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x301, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 2m54.796599802s ago: executing program 2 (id=460): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setrlimit(0x6, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xffdffffe, @rand_addr=' \x01\x00', 0x5}, 0x1c) r3 = gettid() r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') clock_gettime(0xffffffff, 0x0) write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r7 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)='r', 0x1}], 0x1}, 0x0) chdir(&(0x7f0000000300)='./file0\x00') 2m54.695161591s ago: executing program 32 (id=460): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setrlimit(0x6, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xffdffffe, @rand_addr=' \x01\x00', 0x5}, 0x1c) r3 = gettid() r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') clock_gettime(0xffffffff, 0x0) write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r7 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)='r', 0x1}], 0x1}, 0x0) chdir(&(0x7f0000000300)='./file0\x00') 2m22.880716856s ago: executing program 0 (id=621): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x4008031, r1, 0x209f5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000a00)=""/126, 0x7e, 0x7) bind$netlink(r8, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) r9 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x2, &(0x7f0000000180), 0xfe) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 2m21.81472685s ago: executing program 0 (id=624): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980200000000001800128008000100677265000c00028008000100", @ANYRES32], 0x44}}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x40081, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14000000350001ef00000000e3ffffff03"], 0x14}], 0x1, 0x0, 0x0, 0x4040000}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 2m21.577780264s ago: executing program 0 (id=626): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX=0x0, @ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x20, 0x40000) fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000580)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x8000000000000001}}, {@blksize={'blksize', 0x3d, 0x600}}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x5885, 0x0, 0x1, 0x20a, 0x0, r2}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(0x0, r10, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x40, 0x0, 0x0, 0x0, &(0x7f000048f000/0x1000)=nil, 0x1000, 0x17}) 2m21.365857635s ago: executing program 0 (id=627): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000140), 0x4) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xde, &(0x7f0000000580)={@random="35faf0a2f334", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x5, 0x0, 0x1}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x54, 0x55, '\x00', "c98461", 0x201, "9bf37a51efb1c96c45796552acb75c619706fd7c6dce3121c50261f6c3c28488b1d068f7ee350d000000000000003b8e5f08f050e01440ca289379139f9d6e8af63001c4270f9781ae8e68d29df1004b490410650828176b528a2be82e1aff10c6115c9443ef638b354b7a5847d057adcb823bffe22bf43b4a5898ed35a723b0be39a3d61eae9d5e8268992953542a40df7a493d83945b84faf45a11ca529d75ff1a78b325d5984cac03dcc5c6fbd4df167c876034933aa949459f522bcec084"}}}}}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x4) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 2m20.777409883s ago: executing program 0 (id=634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x144, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x130, 0x1, [@m_ct={0xe4, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x8, 0xa0, 0xf}}]}, {0xa2, 0x6, "f3898644ab923d869ee430d613cbf0d35a832fd06da85f0911306544657fc3197b57ff14fdf3238269d4603b37277d5de89d0f429dfaed562257d77ceacef7fd0895971d54a7353364886e574b4f897eec7b7a07c58960cacf52227b0692fbcfd63a19297210d4d05d0a34d7d6e2504ce5df19e2f4ba9b2f5da54f786b7eb9d7af2ee3d1b18a823bc835a1295dffd021562278f4762ab93b77dcd7000000"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x18, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x0, 0x0, 0x20}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x804}, 0xc1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_setup(0x3c63, &(0x7f0000000240)={0x0, 0x7b46, 0x27}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x100010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000100), 0x0, 0x444) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$vbi(&(0x7f0000000380), 0x1, 0x2) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000003c0)=@overlay={0x1, 0x1, 0x4, 0x1, 0x9, {}, {0x5, 0x1, 0x3, 0x4, 0x4, 0x3, "129f89fd"}, 0x2, 0x3, {}, 0x8001}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x118, 0x50000089) openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x40000, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, r6}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x24044004) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x500000a, 0x10, r1, 0x848b6000) syz_emit_ethernet(0x22, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080602048917060000080180c2000003bbbbbbabbbbbece12338f6d6805f98a2675918e749382e185a"], 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) 2m20.111938554s ago: executing program 0 (id=637): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x68800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="000001000000000094a20400a4"]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x44, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x4, 0x700000000000000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000080)={0xffffff00, 0x4, 0x0, 'queue1\x00', 0x8}) 2m20.058224534s ago: executing program 33 (id=637): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x68800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="000001000000000094a20400a4"]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x44, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x4, 0x700000000000000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000080)={0xffffff00, 0x4, 0x0, 'queue1\x00', 0x8}) 1m54.164073404s ago: executing program 4 (id=775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) 1m54.058511574s ago: executing program 4 (id=776): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x24, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000056080000000000008500000005000000b70000000000000095000000000000733bc1dea61e5b0000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x1}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r7, 0x80fa0000) 1m53.975771495s ago: executing program 4 (id=777): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe88"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x18}) mq_timedreceive(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) 1m53.527586292s ago: executing program 4 (id=779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x7) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r1, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/76, 0x4c) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1e8, 0x1, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFQA_EXP={0x1c8, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x200}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0x148, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x20, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40000c4}, 0x40000) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x9, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 1m52.480783126s ago: executing program 4 (id=788): sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) (async) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa91, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffce5, 0x2) (async, rerun: 64) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2129, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) (rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) (async, rerun: 64) r3 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async) openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) gettid() (async, rerun: 64) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) close(r4) 1m52.257038966s ago: executing program 4 (id=792): r0 = syz_clone(0x1200, &(0x7f0000004300), 0x0, &(0x7f0000004340), 0x0, 0x0) ioprio_set$pid(0x1, r0, 0x4000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000be8000/0x1000)=nil, 0x1000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x200], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_clone(0x1200, &(0x7f0000004300), 0x0, &(0x7f0000004340), 0x0, 0x0) (async) ioprio_set$pid(0x1, r0, 0x4000) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) madvise(&(0x7f0000be8000/0x1000)=nil, 0x1000, 0x4) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x200], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) 1m37.208731318s ago: executing program 34 (id=792): r0 = syz_clone(0x1200, &(0x7f0000004300), 0x0, &(0x7f0000004340), 0x0, 0x0) ioprio_set$pid(0x1, r0, 0x4000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000be8000/0x1000)=nil, 0x1000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x200], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_clone(0x1200, &(0x7f0000004300), 0x0, &(0x7f0000004340), 0x0, 0x0) (async) ioprio_set$pid(0x1, r0, 0x4000) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) madvise(&(0x7f0000be8000/0x1000)=nil, 0x1000, 0x4) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x200], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) 1m36.814568753s ago: executing program 1 (id=885): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x4018480c, &(0x7f0000000080)={0x2, 0x200, 0x10000}) socket$packet(0x11, 0x2, 0x300) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x24000051) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) (async) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r2}, 0x18) 1m36.021177627s ago: executing program 1 (id=889): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000100)="d3969b7e8dc4d676ccfd5a420879dc4b4407000000000000001a1a3f0579750e48ff7b6b948e6d2cb758550fd3945d266f2b6ed1e8e83ec4d80ee49cb226fbd2a49ced0000000000000026ec06aef4484ef5e1626c8cebcda1249695bd0d7b", 0x5f, 0x24008800, 0x0, 0x0) accept4$tipc(r1, 0x0, 0x0, 0x800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="5001000000000000000000000000000002000000000000000200000000000000000000000000000001800000000000000700000009000000030000000000000002000000000000000900000000000000090000000000000000000000001800000010"], 0x0, 0x0, 0x0}) fcntl$setlease(r1, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x3) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) getdents64(r5, &(0x7f0000000000)=""/62, 0x3e) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x5, 0x9}, {0x101, 0x6}, {0x1}, {0x7c4, 0xe88}, {0x9, 0x9}]}) 1m35.918852848s ago: executing program 1 (id=891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RFSYNC(r1, &(0x7f00000001c0)={0x7, 0x33, 0x2}, 0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000001a0725ce9403b6e36cac25586dd60cb800000383aff00000000000000000000ffffac1e0101ff0200000000000000651322022ac332367a212700000000000001040090786000000060fd906300003a00e6010000000000000000000000000001ff0100000000000000000000000000011b8d2069162baf34"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000001a0725ce9403b6e36cac25586dd60cb800000383aff00000000000000000000ffffac1e0101ff0200000000000000651322022ac332367a212700000000000001040090786000000060fd906300003a00e6010000000000000000000000000001ff0100000000000000000000000000011b8d2069162baf34"], 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c00188008000140a000000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_usb_connect$uac1(0x2, 0xa8, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) (async) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x200, 0xf0bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r4) (async) close(r4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x38, 0x1, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x8b}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) 1m35.286371176s ago: executing program 1 (id=896): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000140), 0x4) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xde, &(0x7f0000000580)={@random="35faf0a2f334", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x5, 0x0, 0x1}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x54, 0x55, '\x00', "c98461", 0x201, "9bf37a51efb1c96c45796552acb75c619706fd7c6dce3121c50261f6c3c28488b1d068f7ee350d000000000000003b8e5f08f050e01440ca289379139f9d6e8af63001c4270f9781ae8e68d29df1004b490410650828176b528a2be82e1aff10c6115c9443ef638b354b7a5847d057adcb823bffe22bf43b4a5898ed35a723b0be39a3d61eae9d5e8268992953542a40df7a493d83945b84faf45a11ca529d75ff1a78b325d5984cac03dcc5c6fbd4df167c876034933aa949459f522bcec084"}}}}}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x4) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 1m34.233676367s ago: executing program 1 (id=899): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='kvm_halt_poll_ns\x00'}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xfffffffffdffffff, {0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x5, 0x4, 0x448, 0x0, 0x3, 0x0, 0x11f, 0x6000, 0x7, 0x0, 0x0, 0x902, 0x9b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r7, 0x933, 0x7) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) 1m34.15783563s ago: executing program 5 (id=900): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r0, 0x5412, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x22, 0x2, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000404000500"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m33.261810956s ago: executing program 1 (id=902): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0xd697, 0x2) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 1m33.223038781s ago: executing program 35 (id=902): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0xd697, 0x2) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 1m33.136145015s ago: executing program 5 (id=904): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=ANY=[@ANYBLOB="6c01000017000d090000000000000000ffffffff0000000000000000000000000000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbff02000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044001000e0000002000000000000000000000000000000000000000000000000000800"/192], 0x16c}}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) munmap(&(0x7f0000456000/0x2000)=nil, 0x2000) socket$unix(0x1, 0x2, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r7, &(0x7f0000001740)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/153, 0x99}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x3c}, 0x2000) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000480), 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x64}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m32.247997096s ago: executing program 5 (id=906): bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x101440) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) dup(r3) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002740)={&(0x7f0000000000)=[{0x0, 0x0, 0x300, 0x0}], 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x100) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f00000001c0)) r7 = socket$inet6(0xa, 0x3, 0x1) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f0000003c40)=[{{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/16, 0xffffffffffffff68}], 0x1, &(0x7f0000000440)=""/5, 0x5}, 0x7}, {{&(0x7f0000000480)=@phonet, 0x80, &(0x7f0000003b40)=[{&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/8, 0x8}, {&(0x7f0000002640)=""/76, 0x4c}], 0x5}, 0x1}, {{&(0x7f0000002780)=@can, 0x80, &(0x7f0000002700)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/112, 0x70}, {&(0x7f0000003880)=""/130, 0x82}, {&(0x7f0000003940)=""/187, 0xbb}], 0x4, &(0x7f0000003a00)=""/129, 0x81}, 0x5}, {{&(0x7f0000003ac0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003b40), 0x0, &(0x7f0000003b80)=""/154, 0x9a}, 0x6}], 0x4, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9805, 0x2000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) setrlimit(0x9, &(0x7f0000000180)={0x9, 0x400000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x32}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) getrandom(0x0, 0x0, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 1m31.917564205s ago: executing program 5 (id=908): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000140), 0x4) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)={0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xde, &(0x7f0000000580)={@random="35faf0a2f334", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x5, 0x0, 0x1}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x54, 0x55, '\x00', "c98461", 0x201, "9bf37a51efb1c96c45796552acb75c619706fd7c6dce3121c50261f6c3c28488b1d068f7ee350d000000000000003b8e5f08f050e01440ca289379139f9d6e8af63001c4270f9781ae8e68d29df1004b490410650828176b528a2be82e1aff10c6115c9443ef638b354b7a5847d057adcb823bffe22bf43b4a5898ed35a723b0be39a3d61eae9d5e8268992953542a40df7a493d83945b84faf45a11ca529d75ff1a78b325d5984cac03dcc5c6fbd4df167c876034933aa949459f522bcec084"}}}}}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x4) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 1m31.498563916s ago: executing program 5 (id=912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2tp, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/196, 0xc4}, 0xffffffff}], 0x1, 0x10040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) close(r6) openat(0xffffffffffffffff, &(0x7f0000000480)='./bus\x00', 0x6d8902, 0x0) 1m29.173534538s ago: executing program 5 (id=917): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xfffffd65, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x408) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x437, 0x100000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x40989}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) creat(&(0x7f0000000100)='./bus\x00', 0x0) 1m29.004097854s ago: executing program 36 (id=917): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xfffffd65, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x408) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x437, 0x100000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x40989}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) creat(&(0x7f0000000100)='./bus\x00', 0x0) 4.38938898s ago: executing program 6 (id=1352): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x1000, 0x218000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3e}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x0, 0x7000000000000000, 0xf1, 0x50, 0x12, 0x5, 0x1ff, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0x10000, 0x43100}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x401], 0xeeee8000, 0x202}) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r6, 0x800c6803, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000480)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0xff, 0x0, 0x81, 0x80}, {0x5000, 0xf000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa3, 0x5, 0x5}, {0x1, 0xeeef0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x0, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) 3.230099127s ago: executing program 6 (id=1361): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x3, 0x7ffcfffb}]}) unshare(0x22020600) unshare(0x2a020400) futex_waitv(&(0x7f0000000080)=[{0x0, &(0x7f0000000000)=0x200000000000, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xb, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000000000), 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x13) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf023, 0x31c000}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0xfff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r8, 0x29, 0xd0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r7, &(0x7f0000000800)={'syz1\x00', {0x0, 0xcd, 0x2}, 0x10028, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x296, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x4, 0x9, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x100, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffed9, 0x0, 0x8005, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40, 0x0, 0x74e2, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x42, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf]}, 0x45c) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) syz_open_dev$ttys(0xc, 0x2, 0x1) 2.307269427s ago: executing program 6 (id=1366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000f33e65ab90e6d788f94219f85e58000000274135dd2f06b91ce91abf23efbecd2ec520173a16bc326b2a387efab136b6307872a40cb7ffc3ccbbd7adfc392f2c577e743dceacba9cd3d1e4c6236123fd3000"], 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x6e8e, &(0x7f0000000a40)={0x0, 0x73f3, 0x8000, 0x1, 0xbfdffffd}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xffff, 0x0, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r11 = openat$rfkill(0xffffff9c, &(0x7f0000000600), 0x20000, 0x0) r12 = gettid() ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000700)=0x0) getgroups(0x4, &(0x7f0000000740)=[0xee01, 0xee00, 0xee00, 0xee00]) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000580)={0x40000000800, r2}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000001c0)="33e8493879b3e65be5df81e7ca2e439208c95cede432de10a0f8b1a462e56fb21b5d3ab07da55c58f373387ffe5db3211e20776fd1ace8618debcf7e62e5", 0x3e}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="200000000100000001000000", @ANYRES32=r10, @ANYRES32=r7, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="140000000100000001000000", @ANYRES32=r10, @ANYRES32=r7, @ANYBLOB="200000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r10, @ANYRES32=r4, @ANYBLOB="2000000001000000011b0000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r11, @ANYBLOB="180000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r15, @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r1], 0xd8, 0x8884}, 0x20040002) r16 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r16, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2.305781197s ago: executing program 8 (id=1374): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d000100000008000600090000000800080009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x4}}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0100626f6e645c20c685aa4dd27b0000f7ff18000280140008100000000000000000009c11ac04ac761918f168547a171212b9e1774919a5d8c6483e28237225f50b4d4a2c22a3318ff8da3634dc01b4bac739b3367c479832ad0c9ff75d0a69b74889161e278b12813daaf25e2ad386555d5e4b58d0cb2ac3713455020b9a276b1c608e0ee403e8357fbd70402d207806f27a821bb74ea3843646c69d545dff22a8b5c452629bbd05bb41fe0f8abc31c553774f900a486092655ea3af4bfce2df7ed5a2f7075023315afcaad19369b61b444a4435b9ce5cf7b0e17daf597f98df74720a74e606cf370e18ed"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.214586755s ago: executing program 8 (id=1368): r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x40000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x5, 0x4, 0xf, 0x8000, "000000ff00070000000900", '\x00', "05030400", "e86eade4", ['\x00', "00000012184eb81f43d83ba1", "0c000004dd372a9000"]}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota') 2.181864017s ago: executing program 8 (id=1369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040010) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = dup3(r2, r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xa) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff362}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040010) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) (async) syz_open_pts(r1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) (async) dup3(r2, r1, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xa) (async) socket$packet(0x11, 0x3, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff362}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) 2.105083981s ago: executing program 7 (id=1371): pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) close(r3) tee(r0, r4, 0x3ff, 0x0) write$binfmt_script(r4, 0x0, 0xd9) write(r1, 0x0, 0x0) 1.95588655s ago: executing program 8 (id=1372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYRES64=r0], 0x9c}}, 0x0) (async) open(&(0x7f0000000280)='./file0\x00', 0x840, 0x26) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb6, &(0x7f0000000140)=""/182, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x7, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f0000000640), 0x6, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="1c005e8008000700d20000000800060001000080080005ac1d000000"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) ptrace$poke(0x4, r5, &(0x7f0000000080), 0x7) (async) setrlimit(0x3, &(0x7f0000000040)={0x2, 0x6}) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b50302000000000085000000b8000000b70000ffff0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) (async) fcntl$setlease(r7, 0x400, 0x0) (async) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 1.816367612s ago: executing program 3 (id=1373): socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40005}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r3 = gettid() (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SET_PTRACER(0x59616d61, r3) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x4}]}, 0x24}], 0x1}, 0x0) (async) writev(r4, &(0x7f0000000e40)=[{&(0x7f0000000bc0)='u', 0x1}], 0x1) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000280000000000059078ac141400e000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="68000000907809f1"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000003000000000000000400008d"], 0x0, 0x6b, 0x0, 0x1}, 0x28) (async) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44084) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0xfc}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) unshare(0x40020000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 1.281563207s ago: executing program 6 (id=1375): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x13, 0xffffffffffffffff, 0x4000) io_uring_enter(0xffffffffffffffff, 0x6916, 0x4a29, 0x3a, &(0x7f0000000280)={[0x100, 0x80000001]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000054c0)=[{{&(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f0000000600)=""/220, 0xdc}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/203, 0xcb}], 0x6, &(0x7f00000042c0)=""/4099, 0x1003}}, {{&(0x7f0000001900)=@tipc=@name, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001980)=""/211, 0xd3}, {&(0x7f0000001a80)=""/165, 0xa5}, {&(0x7f0000001b40)=""/36, 0x24}, {&(0x7f0000001b80)=""/139, 0x8b}, {&(0x7f0000001c40)=""/249, 0xf9}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/66, 0x42}, {&(0x7f0000001dc0)=""/18, 0x12}], 0x8, &(0x7f0000001e40)=""/111, 0x6f}, 0x3acf}, {{&(0x7f0000001ec0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000900)=""/207, 0xcf}, {&(0x7f0000002040)=""/119, 0x77}, {&(0x7f00000020c0)=""/195, 0xc3}, {&(0x7f0000005300)=""/231, 0xe7}, {&(0x7f00000021c0)=""/114, 0x72}], 0x5, &(0x7f0000005400)=""/192, 0xc0}, 0x9}], 0x3, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x90) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x2, 0x5, 0x2}) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}, 0x0, 0x1, {}, 0x8000000}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000005540)="7af904c4d2ad4fba8d28383fc1ccb159ce0b1070d852def5999ee611737361985f41a1044bacd218777e405533e3658d688466138b4f091d06724c6140fecdf370949189799060071299ba74398fab1434078c42dc40319931074fe932e3e2673a1416a04282e32d40cef84363b6288fad194008eb1a61f9b592481e614d", 0x7e}], 0x1}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x1a080, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4804) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.264198232s ago: executing program 8 (id=1376): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x53e7e5a6a3739329}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7ff, 0x80, 0x3, 0xb5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) mkdir(&(0x7f0000000180)='./file0\x00', 0xc4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000004000001444f00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r9 = syz_open_pts(r8, 0x123003) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c000000100001040000000000002100000000006230213234c7a5df3812", @ANYRES32=r12, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES32=r10], 0x7c}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) 1.263088058s ago: executing program 7 (id=1377): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000400)={0x101fd, 0xc0, 0x240, &(0x7f0000000000)=[0x2, 0xe, 0x8, 0x5, 0x2, 0x10000, 0x97, 0x0, 0x6, 0x4, 0x3, 0x9, 0x4, 0x2, 0x8, 0x3, 0x8, 0x6, 0x8, 0x6, 0x6, 0x0, 0x2, 0x7, 0x8000, 0x1000, 0x7, 0x3, 0xa, 0x5, 0xeb, 0x462, 0x4, 0xbc2, 0xff, 0x401, 0x7, 0x7f, 0x7, 0x2, 0x8, 0x1, 0x7fff, 0xb, 0xd996, 0xea, 0x8, 0x7ff, 0x8000000000000001, 0x0, 0x1000, 0xdb8, 0x8, 0x9, 0x6b5, 0xe6b, 0x1, 0x8000000000000001, 0xfffffffffffffff8, 0x10001, 0xcb8c, 0x1, 0x2, 0x100, 0x9, 0x4, 0xe, 0x3, 0x4a43, 0x4e60, 0x7, 0x7fffffffffffffff, 0x7, 0x7fffffff, 0x8a25, 0x3, 0x8000, 0xc, 0x6c8, 0x3ff, 0x9, 0xff, 0x0, 0x2, 0x925, 0x9, 0x92, 0x1b, 0x73, 0x4, 0x10001, 0x7, 0x136f87d7, 0xfc, 0x2, 0x800, 0x5, 0x3, 0xffff, 0xffffffffffffffb6, 0x53, 0x7fffffff, 0x2, 0x1, 0x10, 0x2, 0x7, 0x1000, 0x1, 0x7ff, 0x3b42f27d, 0x5, 0x8001, 0x9, 0x9, 0x4, 0x400, 0x1, 0x8, 0x6, 0x9, 0x5, 0x4881, 0x8, 0x7bd, 0xfffffffffffffffa, 0x6, 0x80]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000440)) (async) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) write$fb(r0, &(0x7f00000004c0)="e11fa9f0f122ccd3520aabeed1166033ad8638bbc39a8e528f3dd47a9406272e12ea53dae0c56d767a3518b6e1463925f916bb69ba0b1b9a87117f5d4af5b26137e765cbfb2cc42ef34f24cfde17a5260fd260adecb85bba7fdc43c55c3508a18a038758872be63ff48c9c3e30be949f88a8cdfd", 0x74) (async, rerun: 64) execveat(r0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000740)={[&(0x7f0000000580)='\x00', &(0x7f00000005c0)=',#&]]\\(-:\x7f%,,/\x00', &(0x7f0000000600)='#]-@)%\xd3-\x00', &(0x7f0000000640)='.\x00', &(0x7f0000000680)='-{+))+\x00', &(0x7f00000006c0)='%#]\x00', &(0x7f0000000700)='\x00']}, &(0x7f0000000940)={[&(0x7f0000000780)=':\'\\`\x00', &(0x7f00000007c0)='$.\x00', &(0x7f0000000800)='),\x00', &(0x7f0000000840)='\'\x00', &(0x7f0000000880)=':)}-[/\x00', &(0x7f00000008c0)='{\x00', &(0x7f0000000900)='\\:\x00']}, 0x1000) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x78e6179abfab6554, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x8080) (async, rerun: 32) r2 = openat$fb1(0xffffff9c, &(0x7f0000000ac0), 0x40281, 0x0) (rerun: 32) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r2, 0xdb000) (async, rerun: 64) write$P9_RREAD(r0, &(0x7f0000000b00)={0x1c, 0x75, 0x1, {0x11, "51937430288627416b5a8da49188ade3ce"}}, 0x1c) (async, rerun: 64) sendmmsg$sock(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000b40)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="1537c0623047686b0b", 0x9}, {&(0x7f0000000c00)="c53fd41949e22b0bef8471ff50da0a190b0ea90e696a61d4816eed286069c57e05ff273ae7cdd12d1ce073c5c1983de4ae9429683e91b21c266a492709b109d6828926f28fc3744884e3d5ce76b1db4ee2ed60f640a24605025e74f65a45bef6e170fedd8670f7b6977f688cec81e009a0ff99ac9a5431cb862be61eaae52c3e6d389762e07d01011eb4d85e4613a5c037b73a7b29dfbb2a60a63d16c3e1104c51ffc905969996670c6e077ee3efcd7aaf4e175eec02e9b9c8a6d23e43f5a90ff1739b241b124abd2e3d75d901597d6fd65c", 0xd2}], 0x2}}, {{&(0x7f0000000d40)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='/', 0x1}], 0x1, &(0x7f0000000e40)=[@txtime={{0x14, 0x1, 0x3d, 0x400000000000}}, @mark={{0x10, 0x1, 0x24, 0x8001}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @timestamping={{0x10, 0x1, 0x25, 0x92c7}}, @mark={{0x10, 0x1, 0x24, 0x2}}], 0x58}}], 0x2, 0x8804) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000f00), 0x3, 0x4040) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000f40)={0x8, 0x0, [{0x40000001, 0x101, 0x4, 0x382d2bcd, 0x62391a97, 0x623ddcea, 0x55afd6e9}, {0x0, 0x1564, 0x2, 0x80000001, 0x3, 0x3269, 0xcf}, {0x1, 0x9, 0x2, 0xffff, 0x4, 0x5, 0xfffffff7}, {0x40000001, 0x0, 0x4, 0x100, 0x0, 0x7, 0x401}, {0x40000001, 0xfffffffb, 0x2, 0x80, 0x10000, 0x2, 0x4}, {0xb, 0x7, 0x1, 0x5, 0x6, 0x3}, {0xa, 0x1ff, 0x2, 0x1, 0x4, 0x80, 0x6}, {0x0, 0x4, 0x5, 0x2, 0x5, 0x6b9, 0x5de}]}) (async) write$P9_RXATTRWALK(r0, &(0x7f00000010c0)={0xf, 0x1f, 0x2, 0x3}, 0xf) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001140)=0x1c) (rerun: 64) io_uring_enter(r0, 0x4ddd, 0xa5a8, 0x4, &(0x7f0000001180)={[0x1, 0x7]}, 0x8) (async) recvmsg$can_raw(r3, &(0x7f0000001340)={&(0x7f00000011c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001240)=""/95, 0x5f}], 0x1, &(0x7f0000001300)=""/27, 0x1b}, 0x0) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001380)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000013c0)=@x86={0x3, 0x7, 0x7, 0x0, 0x7, 0x10, 0x8, 0x2, 0x2, 0x18, 0x7, 0x3, 0x0, 0xd9a, 0x0, 0xff, 0xff, 0x7, 0x0, '\x00', 0x6, 0x700000}) (async) fspick(r3, &(0x7f0000001400)='.\x00', 0x1) (async, rerun: 32) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000001440)) (async, rerun: 32) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000002440)={'veth1_to_team\x00', {0x2, 0x4e24, @broadcast}}) (async) read$FUSE(r0, &(0x7f0000002540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_rdma(&(0x7f0000002480), &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500), 0x800000, &(0x7f0000004580)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0xffffffffffffcf7f}}, {@timeout={'timeout', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0x4}}, {@common=@mmap}, {@rq={'rq', 0x3d, 0x3}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x8}}, {@obj_user={'obj_user', 0x3d, '-#!$,,^&]'}}, {@uid_gt={'uid>', r5}}]}}) (async, rerun: 64) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000004680)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async, rerun: 64) r6 = openat$cdrom(0xffffff9c, &(0x7f0000004840), 0x100, 0x0) ioctl$CDROMSTART(r6, 0x5308) syz_genetlink_get_family_id$l2tp(&(0x7f0000004880), r4) (async, rerun: 64) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f00000048c0)=@physical={0x0, 0x1, [{0x1, 0x2, 0xd, 0x2, 0x3, 0x1, 0x1, 0xe, 0xf, 0x0, 0x1, 0x5, 0x1}, {0x0, 0x0, 0x7, 0x9, 0x4, 0x0, 0x3, 0x7, 0x6, 0x1, 0x8, 0x7, 0xffff8001}, {0x8, 0x9, 0x4, 0x5, 0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x7, 0xfcc, 0x1ff}, {0xf, 0x0, 0x4, 0x7, 0x1, 0x0, 0x1, 0x4, 0x5, 0x0, 0x2, 0x2, 0x7}]}) (rerun: 64) 1.262972074s ago: executing program 3 (id=1378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010003"], 0x264d81) 1.176281188s ago: executing program 7 (id=1379): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x3, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0xb1, 0x9, 0xfe, 0x80000000}, {0x6, 0x3, 0x8}]}, 0x8) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x3, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0xb1, 0x9, 0xfe, 0x80000000}, {0x6, 0x3, 0x8}]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'pimreg1\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x20, 0x29, "de14af7ce724f26c0ada04e817a68a6789742dc2c0070029774fbfa98c18beaff095351532d092fcdb"}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80008, 0xc, 0x414}, 0x50) epoll_create1(0x80000) (async) r5 = epoll_create1(0x80000) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xb89, 0xf2c40) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x0, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x0, 0x2}}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000100)={0xa0028018}) 1.124588132s ago: executing program 3 (id=1380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) setuid(0xee01) (async, rerun: 32) setgid(0xee00) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0xc0011029, 0x0, 0x6}]}) 966.249808ms ago: executing program 3 (id=1381): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x2, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000002c0)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) 906.043846ms ago: executing program 3 (id=1382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc891}, 0x4000) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f00ebbeec, 0x50, r0, 0x170cd000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) (async, rerun: 32) r8 = dup(0xffffffffffffffff) (rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) (async) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r9, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) (async) r10 = openat$zero(0xffffff9c, &(0x7f0000000280), 0x180040, 0x0) sendmsg$inet6(r10, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0xd25cd000) (async) r11 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r11, &(0x7f0000000140)={'full'}, 0xfffffdef) 855.642804ms ago: executing program 3 (id=1383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d00)=@newtaction={0x3afc, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x3ae8, 0x1, [@m_pedit={0x3a9c, 0xf, 0x0, 0x0, {{0xa}, {0x39ec, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xb68, 0x7, 0x4, 0x9, 0x1000}, 0x28, 0x7, [{0x2, 0x2f, 0x9e9, 0x8, 0x9f2a, 0x3}]}, [{0x147, 0x4, 0x34, 0x4, 0x5d, 0x1}, {0x7, 0xf, 0x4, 0x1c8, 0x8, 0x8b9}, {0xa834cf, 0x8, 0x1, 0x3, 0x4, 0x6}, {0x4, 0x7, 0x8, 0xd0e, 0x5, 0x2}, {0x4, 0x200, 0x10000, 0x7, 0xe477, 0x9}, {0x4, 0x3ff, 0x2, 0x7fffffff, 0x2d4c, 0x5}, {0x9, 0x1, 0xcb0, 0x101, 0x100}, {0x3, 0x2, 0x4, 0xffff, 0x5, 0xf20}, {0x5, 0x4, 0x8, 0xf0, 0x6, 0x9}, {0x8e62, 0x7ff, 0x2e, 0x80, 0x7, 0xe136}, {0x5, 0x0, 0xf, 0x2, 0x1000, 0x9}, {0x1, 0x8, 0x4, 0xa325, 0x7ff, 0xf8000000}, {0xb, 0x3ff, 0xe7, 0x3, 0xffff20c9, 0x2}, {0xcccb, 0x9, 0x6, 0x8, 0x5d, 0x4193}, {0x200, 0x0, 0x3, 0x8, 0x10000, 0x8}, {0x1c, 0x8, 0x1, 0xffffff80, 0x0, 0x2}, {0x80000000, 0x3ff, 0x35b, 0x7, 0x2}, {0x8, 0xffffffff, 0x81, 0xfffffff7, 0x7, 0x8}, {0x3, 0x3, 0x800, 0x4, 0x9, 0x5}, {0x67800000, 0x8000000, 0xe5ebfe, 0x100, 0x2016, 0x1}, {0x1, 0x84, 0x7ff, 0x9, 0x3, 0x6}, {0x7, 0x2, 0x8, 0x3, 0xb, 0x2}, {0x463f, 0x9, 0x7, 0x4, 0x5, 0x4}, {0xfffffffa, 0x1, 0xb, 0x0, 0x81, 0x3da5670d}, {0x491, 0x8, 0x80000000, 0x5, 0x2, 0xa0000000}, {0xa88, 0x9, 0xf, 0x3, 0x7ff, 0xe8d5}, {0x0, 0xfffffff9, 0x5, 0x2, 0x7, 0x7}, {0x6, 0x6, 0x5, 0x4, 0x5}, {0x1, 0x7, 0x9f, 0x100000, 0x6}, {0x0, 0x5, 0x8, 0x7f, 0x800, 0x80000000}, {0x0, 0xe, 0x7, 0x5, 0x5, 0x523}, {0x7fffffff, 0x9, 0x8, 0xb, 0x0, 0x1}, {0x2, 0x7, 0xffffffff, 0x9, 0x80000001}, {0x101, 0x7, 0x8, 0x7, 0x5, 0xf994}, {0x3, 0x88a, 0x2, 0x6, 0x4, 0x8}, {0x9, 0x40000, 0x2ccc00, 0xffffff64, 0x1, 0xfaa}, {0x0, 0x0, 0x1, 0xb38, 0x3, 0x60000}, {0x80000000, 0x80000000, 0x0, 0x6, 0x8, 0x99a3}, {0xffffffff, 0x7, 0x5, 0x7, 0x9, 0x8}, {0x3, 0xb, 0x3, 0x4, 0x2cc8, 0x80000000}, {0x4, 0xff, 0x0, 0x8, 0xfffffff7, 0x6}, {0x5, 0x5, 0xffffffff, 0x4, 0x0, 0x1}, {0x37, 0x3000000, 0xffff, 0x8, 0x0, 0x3}, {0x6, 0xffff8001, 0x5, 0x7, 0x40, 0x1}, {0x0, 0x4, 0x40, 0x9, 0xa72587fe, 0xf}, {0x0, 0x6, 0xce60, 0xa, 0x0, 0xe}, {0x200, 0x6, 0x2e64f2c5, 0x1, 0x3, 0x1}, {0x0, 0x7, 0x7f, 0x7, 0x9, 0x5}, {0xd, 0x6d, 0x36c, 0x6, 0xf, 0x4}, {0x8, 0x0, 0xe, 0x0, 0xfffffff6, 0x9}, {0xfffffffa, 0x1, 0x2db7, 0x8000, 0x5, 0x2}, {0x4, 0xffffffff, 0xac1a, 0x7, 0x9, 0x9}, {0x7, 0x100, 0x7296, 0x869, 0x2, 0x9}, {0xe, 0x0, 0x9, 0xb141, 0x8, 0x7}, {0xe4, 0x4b, 0x9, 0x3, 0x11786602, 0x6}, {0xbf, 0x0, 0x9, 0xffffffff, 0x3, 0x5}, {0x1, 0xcd91, 0x8000, 0x880000, 0x0, 0x5e341d90}, {0x4, 0x80, 0xd, 0xffffffff, 0xc, 0x5}, {0x7, 0x8, 0x4b96, 0x5, 0xa603, 0x3}, {0x0, 0x8001, 0xd37, 0x2, 0x4}, {0x8, 0x8, 0xae, 0x4, 0x5, 0x1}, {0xf, 0x8, 0xb105, 0x1, 0x80000001, 0x10001}, {0x3, 0x3, 0xfffffa98, 0x9, 0x7f, 0x97}, {0x7, 0x1, 0x80000001, 0x4, 0x400, 0x4}, {0x2, 0x1, 0x7ff, 0x2, 0x10, 0xa}, {0x6f2c05d4, 0xc6, 0x6, 0x9, 0xffffffff, 0x6}, {0x0, 0xf150, 0x8000, 0x1ff, 0x9, 0x3}, {0x6, 0x9, 0x5, 0x1, 0x9, 0xe}, {0xbf, 0x1, 0xffff, 0x9, 0x6, 0x10001}, {0x5, 0x2, 0xe, 0x80000001, 0x2, 0xf00}, {0x942, 0xb8, 0x6, 0x8, 0x8, 0x3}, {0x3461805a, 0x0, 0xb28c, 0xf1a, 0x2, 0x9}, {0x5, 0x9, 0x7, 0x800, 0x1672, 0x7fff}, {0x4, 0xff, 0x5, 0x1, 0x7, 0x9}, {0x1, 0x200, 0x1, 0xb4ad, 0x6, 0xcdad}, {0x3, 0x8, 0x100, 0x9, 0x5, 0x9}, {0x1, 0x6acc, 0xf05, 0x10000, 0x0, 0x1000}, {0xfffffffd, 0xfc6, 0x4, 0x1000, 0x5a2, 0x1}, {0x1, 0x20, 0x7, 0x7, 0x5, 0x8}, {0x8, 0x7, 0xfffffff7, 0x200, 0x8001, 0x428}, {0x769, 0x7, 0x8, 0x7, 0x0, 0xfc}, {0x8, 0xe, 0x9, 0x7445, 0x9f, 0x3ff}, {0x6, 0x171, 0x2, 0xc3a, 0x2, 0x6}, {0x7ff, 0xfffffffd, 0x95, 0x8, 0x1, 0x3}, {0x4, 0x7, 0x6, 0x2, 0xfffffffc, 0x101}, {0x3, 0x9, 0x1, 0x10, 0x4ef, 0x4}, {0x3, 0x8, 0x0, 0x8, 0x10000, 0x3}, {0x4559f7cc, 0x3, 0x10001, 0x8, 0x7ff, 0x2}, {0x4, 0xb9d, 0x101, 0x7985, 0x1, 0x5}, {0x9, 0xe8, 0x2, 0x0, 0x9, 0x7}, {0x401, 0x3, 0x1, 0x7, 0x547e, 0x1ff}, {0x8000, 0x6ab3, 0xffffff01, 0x1, 0x3, 0x8000}, {0x3, 0x4, 0x7, 0xa, 0x3, 0x5}, {0x5, 0x2, 0x8, 0xff, 0x1, 0x3ff}, {0x9, 0x2, 0x80000000, 0x7ff, 0xffffff64, 0x3}, {0x45, 0x7f, 0x1, 0x7, 0x4, 0x7}, {0x1, 0x9, 0x4, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x6, 0x3b4, 0xb9, 0x1}, {0xfffffffd, 0x7c646f3, 0x7fff, 0x9, 0x9, 0x3}, {0x2, 0x81, 0x7ff, 0x87e7, 0x2, 0x10001}, {0x3, 0x5, 0x7, 0xffff, 0x4d, 0x4}, {0x5, 0x9, 0xfc000000, 0x9, 0x1, 0xb}, {0x3, 0xc, 0x6, 0xc, 0x1, 0xfffeffff}, {0x0, 0xd1, 0x7, 0x8, 0x6, 0x9d7}, {0x5, 0xb9d, 0x8, 0x3, 0x6, 0x2}, {0x8, 0x48, 0x8, 0x7, 0x4, 0x4}, {0x0, 0x10000, 0x1ff, 0x3d8b, 0x4, 0xd}, {0x6, 0x22b4, 0x1, 0x3, 0x5, 0x5}, {0x1, 0x40, 0x0, 0x37ea, 0x10001, 0x7fffffff}, {0x3ff, 0x4, 0x5, 0x1a6, 0x5, 0x8}, {0xfffffffa, 0x2, 0x0, 0x1c5b, 0x4f, 0xff}, {0xfffff000, 0x3, 0x111, 0x7, 0x6, 0xff92}, {0x2, 0xd, 0x86ce, 0x1, 0x100, 0x3}, {0x5, 0x120, 0xff, 0x4, 0x1, 0x8}, {0x3, 0x9, 0xff, 0xe, 0xb, 0x9b2}, {0x9, 0x8001, 0x7, 0x2, 0x229, 0x6fb8ebb2}, {0x2, 0x7eb02e24, 0x1, 0x7, 0xd, 0x7}, {0x9, 0xffff, 0x8, 0x9, 0x6, 0x10}, {0x5, 0xd71, 0x9, 0x7, 0x3ff, 0x4}, {0x1, 0x200, 0x2, 0x5, 0x9, 0x70000000}, {0x83c5, 0x0, 0x4, 0xf6, 0x95, 0xdb}, {0x10001, 0x0, 0x1ff, 0x4, 0x4, 0x4}, {0x76, 0x8, 0x40, 0x400, 0x5, 0x75f}, {0x8, 0x3, 0x805, 0x5, 0x67, 0x3}, {0x4, 0x5, 0x5, 0x5e0e, 0x7fffffff, 0x3}, {0xb, 0x2, 0x3, 0x200, 0xdd3, 0x20000000}, {0x4, 0x5, 0x80, 0x8001, 0x7, 0x100}, {0x2, 0xddee, 0x6, 0xff, 0x10, 0x5}], [{0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x344b6c308a9847aa, 0x1}, {0x5}, {0x4}, {}, {0x2}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x2}, {0x2}, {}, {0x4}, {}, {0x3}, {0x4}, {0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x5}, {}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0xc}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x9a1acdd88497b4c1}, {0x2}, {}, {0x3}, {0x22a095fedf6fd963}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0xc439c7c42022bd5d}, {0x0, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x4, 0x3, 0x5, 0x2, 0x4}, 0xb3, 0xf, [{0xb4, 0x6818, 0x8, 0x7, 0x0, 0x8}, {0x1, 0xc9, 0x80000001, 0xb8b, 0x7fff}]}, [{0x67, 0xfffffff0, 0x6e6, 0x4, 0x8, 0x6}, {0x5b9, 0x6, 0xffffffff, 0x7, 0x2, 0x7f}, {0x3, 0x8d6, 0x10001, 0xb, 0x8, 0x7}, {0xfffffffb, 0x1000, 0xa00, 0x0, 0x1000, 0x2}, {0x0, 0x3, 0x1, 0x80000000, 0x6, 0x5}, {0x1, 0x9, 0x101, 0x1, 0x3, 0x43c}, {0x8, 0x10001, 0x4, 0x1}, {0x1, 0x3, 0x6, 0x0, 0x26370c0a}, {0x7fffffff, 0x0, 0x2, 0x47e, 0x0, 0x7}, {0x1, 0x5, 0xf, 0xe9, 0x80, 0x8001}, {0x8, 0x1, 0x5, 0x9, 0x19, 0x6}, {0x10, 0x10, 0x6, 0x5, 0x2, 0x9}, {0x401, 0x0, 0x1, 0xb763, 0x5, 0x2780}, {0x3ff, 0x5000, 0x3, 0xff, 0x8, 0x18b}, {0xff, 0xa48, 0xffff, 0x6b, 0x0, 0x3}, {0x1, 0x3, 0x0, 0xe, 0x7, 0x7}, {0x0, 0x10000, 0x4, 0x8, 0x96}, {0x5, 0xcb9, 0x8, 0x6769, 0x0, 0x1}, {0xaec, 0x7, 0x5, 0xc, 0xa}, {0x4d530320, 0x7fff, 0xd, 0x3, 0x0, 0x5}, {0x9, 0x8, 0x95, 0x2, 0x6, 0x1}, {0x1, 0x4, 0x0, 0x24e3, 0x19b4, 0x7fff}, {0x2, 0x8, 0xa1eadc7, 0x8, 0xf, 0x1}, {0x0, 0x800, 0x52e, 0x1000, 0xfffffff8, 0x6}, {0x9, 0x6f7, 0x2, 0x91d, 0x8, 0x8}, {0x6, 0x5, 0x9, 0x852, 0xffffff86, 0xb}, {0x0, 0xe000000, 0x9cd, 0x3, 0x7, 0xb4}, {0x7, 0x902, 0xd, 0x5, 0x0, 0xfffffff2}, {0x9, 0x5, 0x1ff, 0x7fffffff, 0x1, 0xfffffffb}, {0x10001, 0x0, 0x3, 0x8, 0x20000000, 0x2}, {0x6, 0x5, 0x2, 0x2, 0x0, 0x3}, {0x5, 0xca435ba, 0x7, 0xffff3ed4, 0x2, 0xffff}, {0x5, 0x40, 0x2, 0x9, 0x7, 0xa}, {0x0, 0x0, 0x80, 0x8, 0x2938, 0x9}, {0x0, 0xfffffffa, 0x74, 0x800, 0x4, 0x50}, {0x2, 0x4, 0x80000000, 0x0, 0x3, 0x7}, {0x8, 0xcd7, 0x6, 0xf3b2, 0x81, 0x1}, {0x8, 0x9, 0x7, 0x7, 0x6, 0x9}, {0x7ff, 0xd6, 0x3, 0x10000, 0x4, 0xd}, {0x343, 0x6, 0x5, 0x4, 0x733facc0, 0xd0}, {0x10, 0x3, 0x2, 0x5, 0x9, 0x7ff}, {0xfffff547, 0xfffffff3, 0xd4, 0xffffe083, 0x5, 0x8}, {0x7, 0x3ff, 0x4, 0x80, 0xf5, 0x10000}, {0x9, 0x3, 0x6, 0x3e, 0x4, 0xd}, {0x0, 0xfffffffa, 0x208, 0x900000, 0xb, 0x1}, {0x673, 0xff, 0x6652, 0x2, 0x8001, 0x4}, {0x8, 0x7, 0x26, 0x4, 0x10, 0x1}, {0xad373581, 0xff, 0xa2, 0x7ff, 0x10000, 0x54b}, {0x1000, 0x4, 0x4a, 0x9, 0x3, 0x29}, {0x4, 0xfffffe00, 0xffffff80, 0x6, 0x6, 0x4}, {0x2c, 0xffff, 0x0, 0x4, 0x6, 0x1}, {0xb, 0x208, 0xfff, 0xfffffff9, 0x81d, 0x5}, {0x2, 0x7, 0x1, 0x0, 0x10001, 0x6}, {0x4, 0xffffffff, 0xfffffff7, 0x3, 0x9, 0x4}, {0xffff, 0x9, 0x3, 0x1, 0x5, 0xffff}, {0x3, 0x9629, 0x5, 0x7, 0x9, 0x8}, {0x3, 0xffffff3e, 0x1b, 0xda, 0x3, 0xee}, {0xfe4, 0x4, 0x2, 0x5, 0x6, 0x6}, {0x5, 0x1, 0x2, 0x5, 0x80000000, 0x46a}, {0x8, 0xc, 0x6, 0x7, 0x6, 0x8}, {0x80000000, 0x9, 0x6, 0x2, 0x6, 0x2}, {0x7, 0x2, 0xf8bf, 0x6, 0x7, 0x5}, {0x7, 0xff, 0x9, 0x130, 0x6, 0x7ff}, {0x7, 0x9676, 0x2, 0x8, 0xb, 0xd95}, {0xfdbd, 0xecc, 0xa55a, 0x1, 0x1, 0x4}, {0x7, 0xe25, 0x7, 0x3, 0x2, 0x5}, {0x6, 0x81, 0xe, 0x8, 0x92}, {0x3, 0x89, 0x7ff, 0xffffbf7c, 0x7, 0xc0000000}, {0x6, 0x80, 0x8, 0x0, 0x4, 0x6c}, {0x4, 0x7, 0x8, 0x8, 0x2, 0x8}, {0xfffffffa, 0x0, 0x2, 0x3, 0x401, 0xc14}, {0x8001, 0x5, 0x7, 0x7ae0, 0x3, 0x3ff}, {0x1, 0x30000, 0xfffffff9, 0x40, 0x2, 0x33c}, {0x7fff, 0x4bc, 0x5, 0x1, 0xa88c, 0x4}, {0x6, 0x4, 0x7fffffff, 0x8, 0x3, 0x4}, {0xd03, 0x7f, 0x5, 0x4, 0x5, 0xd}, {0xc8, 0x0, 0x4, 0x253, 0xa}, {0x0, 0x8a, 0x83a, 0x45eb, 0x0, 0x1}, {0x200, 0x8000, 0x0, 0x9, 0x10000, 0x7}, {0x4, 0x7, 0x8, 0x3, 0xe, 0x3}, {0x2, 0x423, 0x3, 0x3, 0x8, 0x7}, {0x9, 0x5, 0x99, 0x3, 0x3}, {0x1, 0x0, 0x3afe, 0x1, 0x8}, {0x7fffffff, 0x6, 0x9, 0xffffffff, 0xfffff4fc, 0xf}, {0x9, 0x8, 0x8, 0x0, 0x5, 0x8}, {0x400, 0x8, 0x5, 0xb, 0x5, 0x8684}, {0x4, 0x8a0, 0x954, 0xffffffff, 0x3, 0xfffffff7}, {0x4, 0x2, 0xff, 0x4, 0x2, 0x7}, {0xffffcf71, 0x9, 0x0, 0x4, 0x7, 0x2}, {0xffff8001, 0xfffffff8, 0x80, 0x615, 0x68cd0ea3}, {0x6, 0x2, 0x2, 0x7, 0x4835, 0x5}, {0x8, 0x4, 0x1, 0x8, 0xcf, 0x8}, {0xe, 0xfffffffb, 0xfffffffe, 0xe, 0xfffffffb}, {0x4, 0x800, 0x3, 0x600, 0x6, 0x30000}, {0x7, 0x1000, 0x1, 0x9, 0xb1, 0x9}, {0x6, 0x800, 0xa, 0x4, 0x3ff, 0x3}, {0x6, 0xb, 0x4, 0x6791, 0x8001, 0xe1cf}, {0x7, 0xfffffff5, 0x1, 0x8000, 0xf, 0xe5}, {0x9, 0x7, 0x1, 0xfffff000, 0x3, 0x4}, {0x5, 0xfffffffc, 0xffffffff, 0xfff, 0x7000000, 0x1}, {0x8, 0xcb, 0x7, 0x0, 0x0, 0x400}, {0xd, 0x2, 0x4, 0x10001, 0x80000000, 0x40}, {0x0, 0x4, 0x1, 0x1, 0x401, 0x81}, {0xa, 0x2, 0x9, 0x400, 0x2, 0xfffffffb}, {0x7, 0x10001, 0x9, 0x8, 0xdde9, 0xcc27}, {0x80, 0xf, 0x4, 0x2, 0x7, 0xd}, {0x9d, 0x5, 0x78, 0x100, 0x3, 0x8}, {0x2, 0x4, 0x9c, 0x18704678, 0x0, 0x20}, {0xa, 0x9, 0xa, 0x5c, 0x101, 0x4}, {0x9, 0x28ec, 0x3ff, 0x7a, 0x8, 0xfff}, {0xc4, 0x7c43, 0xc, 0x40d, 0x9004, 0x5}, {0x200, 0x10001, 0x80000001, 0x8, 0x80, 0x4}, {0xcc2, 0x1d, 0x5, 0x7, 0x80000001, 0x3}, {0x5, 0x703a, 0xbb6, 0x5, 0x2, 0x7}, {0x6, 0xc, 0xb16, 0x13, 0x6, 0xff}, {0x2, 0xe2, 0x5, 0x0, 0x9, 0x82b}, {0x4, 0x4, 0x3, 0x1, 0x3f60, 0x81}, {0x3, 0x515, 0x5, 0x22, 0x7ff, 0x5}, {0x1, 0x7fff, 0xeea, 0x8, 0x10001, 0x3}, {0xef, 0x5170, 0x4, 0x4, 0x6, 0x9d}, {0x80, 0x1, 0x9, 0x8, 0xeaee, 0x81}, {0x8000, 0x8, 0x1, 0xb, 0x80, 0x3ff}, {0xf, 0x6, 0x7, 0x4800, 0x7, 0x4}, {0x80000000, 0x7fffffff, 0x2, 0x1ff, 0x7, 0x6}, {0x8, 0x9, 0x9, 0x4, 0xff, 0x100}, {0x400000, 0x4, 0x8, 0x1000, 0x7, 0xf}, {0x1be, 0x3, 0x800, 0x400, 0x3, 0x1400}, {0x6, 0x8, 0xadb, 0x0, 0xdecc}], [{0x2}, {0x3, 0x1}, {0x5}, {0x3}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7, 0x1}, {0x3}, {0x4}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {}, {}, {0x6}, {0x0, 0x1}, {0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2, 0x88265c09fb07dc6d}, {0x1, 0x1}, {}, {}, {0x2}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x3f2fee0181e80ea7}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x2}, {0x9}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x39, 0x0, 0x6, 0x4, 0xfffffff8}, 0x0, 0x3, [{0x0, 0x3, 0x0, 0x4, 0x0, 0x7f}, {0x4, 0x2, 0x6, 0x7, 0x3e9, 0x10}, {0x5e8, 0x6, 0xb, 0x2, 0xfffffffe, 0xf}, {0x7fffffff, 0x5, 0x2, 0x200, 0x3, 0x5}, {0x7, 0x10000, 0x8, 0x8, 0x3, 0x80000000}, {0x9, 0x61, 0x203, 0x5, 0x5}]}, [{0x5, 0x3f, 0x200, 0x5, 0x61, 0x5}, {0x8, 0x2, 0xe15, 0x0, 0xa14f, 0x7}, {0x6, 0x229d, 0x3e54, 0x1, 0x10000, 0x3}, {0x80000000, 0xd, 0x0, 0x7fff, 0x9a9, 0x8}, {0x3, 0x4f3, 0x6, 0x6, 0x13, 0x6}, {0x3, 0x2, 0x3, 0xfffffff8, 0x4}, {0x1b, 0x5, 0x401, 0x3, 0x0, 0x3}, {0x4fca, 0x1000, 0x4, 0x3, 0xe69, 0x7}, {0xdc, 0x8001, 0x712e, 0x2, 0x5, 0xfffffff9}, {0xf8000000, 0x0, 0x0, 0xc, 0x1ff, 0x4599}, {0x5, 0x57, 0x0, 0x9, 0xfa, 0x7}, {0x2, 0x319c, 0xe1f, 0x8, 0x6, 0x8}, {0x480c8c8e, 0x0, 0x94b, 0x9, 0x0, 0x49b}, {0x2, 0x1000, 0x3, 0x6, 0x1, 0x8}, {0xce4, 0x4, 0x3, 0x3, 0x3, 0x4}, {0x1, 0x100, 0x9, 0x8, 0x1, 0x6}, {0x5b, 0x1, 0x1, 0x4, 0x101, 0x1}, {0x3, 0x1, 0x7fff, 0x7}, {0xb12, 0x3, 0x2ad, 0x5, 0x3, 0x1}, {0x8, 0x2, 0x100, 0x3, 0x400, 0x2}, {0x2, 0x5, 0x3, 0xb3, 0x8, 0x24}, {0xfffffffb, 0x7c3, 0x0, 0xffffffff, 0x17b22936, 0x4}, {0x6, 0x2, 0x3, 0x5, 0xf8, 0xd}, {0x4, 0x9, 0x5, 0x4, 0x0, 0x8a}, {0x4e, 0x0, 0x6, 0x1, 0x8, 0x3}, {0x6, 0x4, 0x4, 0x3, 0x5, 0x5}, {0xe3ab, 0x800, 0xffff7782, 0x9, 0xf6, 0x526}, {0xd, 0x10001, 0x6, 0x1, 0xa42ff120, 0x3}, {0x6, 0x2, 0x781, 0x80000000, 0x2, 0x80000001}, {0x16, 0x1, 0x100, 0x1, 0x5, 0x81}, {0x3, 0x63, 0x800, 0x5, 0x3, 0x10001}, {0x6, 0x6, 0xb29a, 0x2, 0xffffff9b, 0x100}, {0x3, 0x3ff, 0x5, 0x1, 0x1, 0x3ff}, {0x6, 0x7, 0x38, 0x4, 0xf6, 0x3}, {0x81, 0x9, 0xea7a, 0xf, 0x8, 0x7}, {0x8, 0x10000, 0x252, 0x5, 0x8, 0x6f9}, {0x3, 0x4, 0x2, 0x1, 0xffff, 0x6}, {0x0, 0x200, 0x8000, 0x32e, 0x4, 0x40}, {0xd, 0x6, 0x1ff, 0x5, 0x5, 0x9}, {0x200, 0x5ce4, 0x8, 0x10000, 0xfffffff5, 0x2800000}, {0x36, 0xfff, 0xea, 0xc93a, 0x3, 0x8000}, {0x9, 0x4, 0x7, 0x8, 0x6, 0x3}, {0x1, 0x7f, 0x8, 0x2865, 0x5, 0x7}, {0x7, 0xc1d, 0x6, 0x400, 0x8, 0xf9}, {0x8, 0x7, 0xfffffffd, 0x4, 0x80000000, 0x4}, {0x3, 0x63, 0x2, 0x8001, 0x98, 0xffffff65}, {0x10001, 0x80000000, 0x6b06, 0x72d, 0x8, 0x2}, {0x80, 0xa, 0x5855, 0xef8f, 0x7fffffff, 0x8229}, {0x200, 0x80, 0x7, 0x3939e695, 0x8, 0x80000000}, {0x3c460dd1, 0x8, 0xff, 0x4160, 0x1}, {0x0, 0xf9e, 0x5, 0x3, 0x7fff, 0x7}, {0xae, 0x2, 0x6, 0x8, 0xfff, 0x3}, {0xd, 0x0, 0x73, 0x2, 0x0, 0x4}, {0x80000000, 0x1c, 0x1, 0x2, 0x4, 0x1}, {0x0, 0x1, 0xb08, 0x5, 0x4, 0x9}, {0xe063, 0x9, 0x9, 0x2, 0x4, 0x7f}, {0x8, 0x6, 0xf, 0x6c, 0x400, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x20, 0x7}, {0x9, 0x3, 0x7, 0x6, 0xfff, 0x9}, {0x3, 0x68a, 0x0, 0x5, 0xfffffffa, 0x3}, {0x1, 0x8, 0x7, 0x5ec, 0x0, 0x3}, {0x9, 0x10001, 0x3, 0x4, 0x9, 0x4}, {0x5, 0x5, 0x4, 0x7ff, 0x2, 0x5}, {0xe14b, 0x80000000, 0x2, 0x100, 0x1ff, 0x8001}, {0x1, 0xb0, 0x6b8, 0x623f04e5, 0x2, 0xe}, {0x9, 0x8001, 0x1, 0x10, 0x2, 0x4}, {0x8001, 0xfffffff7, 0x4, 0x1, 0xb, 0x4}, {0x7fff, 0x1, 0x6, 0x5, 0xffff}, {0xc3dd, 0xfffffff9, 0x8, 0x400, 0x4, 0x7fff}, {0xcf, 0x4, 0x3357acf3, 0xc, 0x1000, 0x2}, {0x2, 0x1ff, 0x6, 0x6, 0x0, 0x2}, {0xffff, 0x5, 0xf2c4, 0x1, 0x6, 0x8}, {0x10000, 0xf, 0x1, 0x8, 0x20000, 0x7}, {0x4fe9349f, 0x4, 0x5, 0x81, 0x1ff, 0x9}, {0x7, 0x0, 0x4, 0x81, 0xb1e3, 0x6}, {0x7, 0x1, 0x800, 0x5, 0x9, 0x5}, {0x5, 0x9, 0xd4, 0x3, 0x2, 0x7}, {0x0, 0x3, 0x4, 0x5, 0x5, 0x7}, {0xc7f8, 0xb964, 0xe8, 0x3, 0x73, 0x3}, {0x3, 0x5, 0x1, 0xf7, 0x4, 0x9515}, {0xf3, 0x8, 0xc, 0x7, 0x0, 0xf}, {0xcfcf, 0x4736, 0x7, 0x8d, 0xfffffffd}, {0x15c, 0x8, 0x6, 0x4, 0x7, 0xffff3e3e}, {0x6, 0xd, 0x1ff, 0xdcb, 0x3, 0x1000}, {0x9, 0x8, 0x3, 0x412d, 0x2}, {0x1, 0x0, 0x4, 0x9, 0xd, 0xfffffffa}, {0x8, 0xe412b7df, 0x7fff, 0x8, 0x3, 0x7}, {0x2, 0x9, 0x2, 0xd14, 0xf8, 0x2}, {0x7b04, 0x3, 0x916, 0xf, 0x7, 0x3}, {0x9, 0xeb, 0xfffffffc, 0xd394dff1, 0x0, 0x101}, {0x5, 0x2, 0x4, 0x8, 0x476800, 0x71}, {0xd3, 0x9, 0x7, 0x3, 0x6, 0xffffffff}, {0x10001, 0x0, 0x3, 0xcd85, 0x6, 0x3}, {0xff, 0x100, 0xd, 0x7, 0x2, 0x7ff}, {0xc, 0x1, 0x8, 0x2, 0x5, 0x1d}, {0x1f, 0x7f, 0x5, 0xab91, 0x3, 0x2}, {0xffff0fd1, 0x7, 0x4, 0x6, 0x4, 0x9}, {0x401, 0x2, 0x140, 0xa2, 0x3, 0x1}, {0x7, 0x7, 0x7, 0x7d91c142, 0x10, 0xb}, {0x6, 0x100, 0x5c73, 0x8, 0x0, 0x4bc}, {0xf, 0x10, 0xeb, 0xda, 0x9, 0x400}, {0xe2, 0x3, 0x4966fed6, 0x1000, 0x8, 0xfffffffb}, {0xc, 0x3, 0x3957, 0x4, 0x2, 0xb0}, {0x5, 0xffffffff, 0x7f4, 0x103e, 0xd5, 0xc5}, {0x80000, 0x81, 0x5, 0x623a, 0xff, 0x6}, {0x3, 0xcdd, 0x7, 0x80000000, 0x3, 0x9}, {0x2, 0x2, 0x1, 0x3ff, 0x6, 0x101}, {0x9, 0x8, 0xffffffff, 0x3, 0x4, 0x3}, {0x200, 0x7fff, 0x6, 0x9, 0xdb, 0x80}, {0x6, 0x72f, 0x7, 0x3, 0xa, 0x9}, {0x7fff, 0x5, 0x5, 0x0, 0x400, 0x5}, {0x7, 0xdb, 0x2, 0xfff, 0x800, 0x40000000}, {0x5, 0xa672, 0x800, 0x10001, 0x5, 0x6}, {0x6, 0x4, 0x80000000, 0x200, 0x26, 0xec}, {0x5c4a, 0x80000001, 0xf, 0x6, 0xadb, 0x80000000}, {0x5f79, 0xfffff034, 0xffff, 0x2, 0x401, 0x2}, {0x5, 0x401, 0x723, 0x7, 0xb, 0xfffff71d}, {0xb, 0x8, 0x3, 0x100, 0x100, 0x3}, {0xc, 0x8, 0x7fff, 0x7fff, 0xef, 0xff}, {0x90, 0x1, 0x7ff, 0xfff, 0x3, 0xf7dd}, {0x5, 0x6, 0x10000, 0x4, 0x8001, 0x7fffffff}, {0x9, 0xb4, 0x0, 0x6, 0x9, 0x7}, {0x5, 0x7, 0x3, 0x8, 0x0, 0x151}, {0x2, 0x4, 0x8000, 0x2d49, 0x2, 0x1}, {0x4, 0xc, 0x0, 0x5, 0x0, 0xb23d}, {0xff, 0x8001, 0x7, 0x1, 0x0, 0x2}, {0x7, 0x3ff, 0x5, 0x6, 0x80000000, 0x1000}, {0xe, 0xfffffeff, 0x4, 0x2, 0x4, 0x9}], [{0x3, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x5dbd1433501371be}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x7, 0x1}, {0x4}, {0x3}, {0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {0x0, 0x1}, {0xb4a819b93f66d9a8, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0xc168d4be95060a44, 0x1}, {0x6}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x7, 0x1}, {0x1}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x2}]}}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x2, 0x7, 0x8, 0x1, 0x9c}, 0x5, 0x5, [{0x7, 0x5, 0x200, 0x1, 0x0, 0xcfa}, {0x4, 0x1000, 0x7, 0x9, 0x4, 0xfcd}, {0x5, 0x3, 0x7, 0x9, 0x5, 0x5}, {0x1, 0x1, 0x3, 0x0, 0x8, 0xd}, {0x6, 0xc1ce87c4, 0x1, 0x6, 0x4, 0xfffffffc}, {0x2, 0x9, 0x4, 0x6, 0xfffffffb, 0x447}]}, [{0x6, 0x7f, 0x10001, 0x0, 0x9, 0x9}, {0xffffff71, 0xf0d8, 0x0, 0xf, 0x7, 0xc}, {0x6, 0x4, 0x9, 0x1, 0x8, 0xffff}, {0x401, 0xffffff0e, 0x4c36945f, 0xe, 0xffff, 0x2}, {0x1, 0xabbe, 0x9, 0x8, 0xac2, 0x6}, {0x6639, 0x3, 0xff, 0x7, 0x9, 0xfffffc01}, {0x42e, 0x7, 0x2, 0x4, 0x7fffffff}, {0x8, 0x1, 0x10001, 0x80000000, 0x5, 0x1}, {0x8fb, 0x0, 0x3, 0x9, 0x8, 0x1}, {0x4, 0x8000, 0x663b, 0x713, 0xfffffff9, 0x5}, {0x4, 0x566c, 0xe9d, 0x3, 0xfffffffb, 0x9}, {0x3, 0x49, 0x55a78006, 0x93, 0x6fa, 0x7}, {0x3, 0x1, 0x4, 0xd, 0x9, 0x8000}, {0x0, 0x80, 0x3, 0x3, 0x1, 0x8}, {0x0, 0x80, 0x8, 0x7, 0x3, 0x4}, {0xfffffe01, 0xff, 0xffffffff, 0x8, 0x1, 0x5}, {0x1, 0x45, 0x3, 0x2, 0x8, 0x3}, {0xfffffe01, 0x1, 0x4, 0x400000, 0x7, 0x8}, {0x0, 0x0, 0x9, 0x3, 0x8, 0x6}, {0x4, 0x627, 0x1, 0x5, 0x1, 0x8}, {0xe, 0x4, 0x5, 0x3, 0xffffffff, 0x7}, {0xff, 0x1e0000, 0xd, 0x3, 0xd2, 0x3}, {0x7, 0x6, 0x5, 0x600000, 0xc}, {0x0, 0x5, 0x3ca0, 0x1000, 0x1, 0x8}, {0x2, 0x4, 0x400, 0x80000000, 0x1, 0x3}, {0xa, 0x4, 0x6, 0x9, 0x7f, 0x4}, {0xfffff4da, 0x2, 0x800, 0xfff, 0x97b, 0x8}, {0x2, 0x100, 0x983, 0xaff, 0xb4, 0x1}, {0x7, 0x3, 0x80000000, 0x1, 0x81, 0x4}, {0xffffff5f, 0x2, 0x5, 0x3, 0x2, 0xffffffff}, {0xef, 0x2, 0x66, 0x10, 0xff, 0x3ff}, {0x5, 0x100, 0x9, 0x40, 0x200, 0x2}, {0x5eb3, 0x75, 0xc, 0x3ff, 0x7, 0x311a}, {0x7, 0xc9, 0x2, 0x5, 0x9, 0x8}, {0x2, 0x2, 0x1ff, 0x7, 0x24, 0x80000001}, {0x2, 0xe, 0x40, 0x2, 0x4, 0x6}, {0x0, 0x2, 0x7, 0x9, 0x40, 0x2b18}, {0x80000001, 0x101, 0x6, 0x7, 0xffffffff, 0x7fff}, {0x2, 0x3, 0x60b4, 0x6, 0x5, 0x3}, {0x0, 0x8, 0xff, 0xb72f, 0xa, 0x4}, {0x9, 0xe914, 0x3, 0x7, 0x82, 0x7}, {0x7, 0xe196, 0x5, 0xff, 0x2, 0x800}, {0x8, 0x8, 0x7fff, 0x8, 0x7}, {0x8001, 0xfffffff7, 0x6, 0x5, 0x1, 0x7}, {0x1, 0x2546, 0x8000, 0x591, 0x8, 0x80}, {0xb07, 0x8, 0x101, 0x1cf9, 0x3ff, 0x1}, {0x8001, 0x3, 0xc000000, 0xd, 0x0, 0x4}, {0x9, 0x6, 0x4, 0xab, 0x5, 0x3ff}, {0x1, 0x9, 0xfff, 0x6, 0x3, 0x5ab2}, {0x3ff, 0xfffff21f, 0x2, 0x800, 0x7, 0xd83}, {0x6, 0x6, 0x9, 0x40000000, 0x5, 0x7}, {0x0, 0x34cd7da6, 0x1, 0x10001, 0x1, 0xfffffffc}, {0x2, 0x1, 0x4b, 0x5, 0xb1, 0x7f}, {0x7, 0x7, 0xb, 0x4, 0x4, 0xffff}, {0x2, 0x1, 0x7, 0xd, 0x2d103693, 0xd2de}, {0x6, 0xf, 0x2, 0x1, 0x8, 0xa9a}, {0x3, 0x9, 0x8000, 0x0, 0x7fff, 0xa93}, {0x400, 0xfffffff9, 0x7fff, 0x0, 0x80000000, 0xace}, {0x7, 0x9, 0xfffeffff, 0x8, 0xf, 0x6b8}, {0x4f, 0x401, 0x4, 0x6, 0x8, 0x6}, {0x6, 0x4e1, 0x7, 0x78, 0x506, 0x7}, {0x7, 0x67, 0x7, 0x3, 0x3, 0x1}, {0x2, 0xfffffe01, 0x101, 0x5, 0x3, 0x3}, {0xfffffff8, 0x0, 0xfffffff9, 0x5, 0x4, 0x9}, {0x1, 0x80000001, 0x9, 0x7, 0x8, 0x7f}, {0x4, 0x8a, 0x7, 0x10, 0x8, 0xda}, {0x9, 0x4, 0xfff, 0x8, 0x3}, {0x4, 0x2, 0xd4e, 0x1, 0x8000, 0x95}, {0x7, 0x27c, 0x8, 0xffff31bf, 0x4, 0x7}, {0x7df5, 0x0, 0x40, 0xff, 0x8, 0xffffffff}, {0x0, 0x0, 0x80000000, 0x8000, 0x40, 0x3}, {0x8001, 0x7, 0x486, 0x1, 0x84c, 0xaf1}, {0xfc, 0x7, 0xda, 0xff, 0x9, 0x5}, {0x3, 0xf9, 0x6, 0x9, 0x2, 0x3}, {0x3281, 0x4ceb, 0x4, 0x8, 0x78, 0xd4}, {0xe, 0xfffffbff, 0x1, 0x1, 0xe579, 0x4}, {0x0, 0x5, 0x4, 0x0, 0x0, 0x40}, {0x1, 0x0, 0x5ef9, 0x7, 0x8001, 0x5e5}, {0x5817d1af, 0x1, 0x7, 0x81, 0x84, 0x5}, {0x1, 0x8878, 0xa, 0xfffffffa, 0x6}, {0xee18, 0x8000, 0x1800000, 0x3, 0x5, 0xc}, {0x7ff, 0x8000, 0x83, 0xc, 0x9, 0x3}, {0x8, 0x4a, 0x9, 0x2, 0x5737, 0xe12}, {0x9, 0x7, 0x5, 0x100, 0x13069328}, {0xd, 0x7ff, 0x3, 0xe, 0xfffffffc, 0xfffffff8}, {0x80000001, 0xb, 0x10001, 0x8, 0x400, 0x5725}, {0x742, 0x3, 0x8000, 0x5, 0xff, 0x1}, {0x9, 0x80000001, 0x1ff, 0x3ff, 0x8001}, {0x3, 0xe, 0x5, 0x2, 0xa5eb, 0x5}, {0xf, 0x1, 0x5, 0x10001, 0x800, 0x9c9}, {0xfffffffe, 0x1, 0x3388, 0xffffffff, 0x4}, {0x2d, 0x400, 0x80, 0x2, 0x5, 0x9}, {0x1, 0x3, 0x2, 0x5, 0x1000, 0x2}, {0x9, 0x4, 0x2, 0x101, 0x41, 0x8}, {0x9, 0x6, 0xb4, 0x132230ea, 0x57a9304b, 0x35b}, {0xffffffff, 0x0, 0xfd800, 0x8001, 0x8001, 0xcef6}, {0x5, 0x80, 0x2b, 0x7fff, 0x1, 0x25c3}, {0x0, 0x0, 0x6, 0x2, 0x80000000, 0x8}, {0x2, 0x8, 0x0, 0xfffffff9}, {0x10000, 0x5, 0x8, 0x3, 0x1, 0xd}, {0x8, 0x1, 0x1, 0x7, 0x2, 0x93c}, {0x2, 0x6, 0x53, 0x0, 0x7, 0x7}, {0x8000, 0xfffffffa, 0xb, 0x3, 0x3b, 0x8}, {0xee0, 0x4, 0x1, 0x1, 0x400, 0x2}, {0x80000000, 0x4, 0xc35, 0x6, 0x1, 0x8}, {0x5f4, 0xfaf, 0x100, 0x9, 0xb4a, 0xe}, {0x7, 0x500, 0x7, 0x7, 0x8, 0xde}, {0x4, 0xfffffffa, 0x7ff, 0xeae, 0x0, 0x7ff}, {0x0, 0x0, 0x6, 0x40, 0x6, 0x4000000}, {0xe, 0x40, 0xa, 0x5, 0x7, 0x8}, {0x7, 0xffff, 0x6, 0x3, 0xff37, 0x80000000}, {0x0, 0xf1, 0x101, 0x7, 0x36129073, 0x1}, {0x4, 0x8001, 0x800, 0x2, 0x4cad, 0xe44}, {0x1, 0x7ff, 0x8, 0x1ff, 0xf, 0x1}, {0x0, 0x1d, 0x80000000, 0x28e5, 0x8, 0x2}, {0x2, 0x1, 0xffffffff, 0xb, 0x7, 0x3}, {0x5, 0x9, 0x4, 0x7fffffff, 0x6, 0x80000001}, {0x8, 0xff, 0x80000001, 0x9, 0x0, 0xfffffffb}, {0x3, 0x7b, 0xffff, 0x1000, 0x0, 0xb4f}, {0x3, 0x5, 0xf, 0xec6, 0x2, 0x101}, {0x0, 0xe415, 0x3, 0xd2, 0xa3, 0x2}, {0x1, 0xffff, 0xfffffff8, 0xc, 0x100, 0x4}, {0x9d7, 0x200, 0x1, 0xd9, 0x0, 0x9}, {0x292, 0x436b, 0x3ff, 0x2, 0x101, 0x400}, {0x0, 0x9, 0x8001, 0x8, 0x10000, 0xdf}, {0x3, 0x78d9, 0x5, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x40, 0xe, 0x4, 0x2}, {0xffffff01, 0x1, 0x6, 0x8, 0xffff, 0x8}], [{0x7}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x6}, {0x5}, {0x3}, {0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x3}, {0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x3}], 0x1}}]}, {0x87, 0x6, "f03a7a831e9022c98b8a72e1c2995bb1549b03004495ad1d9736877bf96ab3eef3aa93577f2cef7e583f074928b43946ec1ee7fece0e91b499c1ad919daf4a81499928b955694c96d778981763ecdc1de4d874bf86c2ccbc0d51c73459afadc4366c12190196ddaa51453618ab01794c669304a5d407eb381b4cb55ad72be52f03b8ad"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x3afc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000001c0), 0x0, 0x0, 0x6) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) 408.89124ms ago: executing program 8 (id=1384): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0606120c"], 0x9) mbind(&(0x7f000097d000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x275, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0xc8c80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x3, &(0x7f00000000c0)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 396.376989ms ago: executing program 7 (id=1385): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000300)="c91879", 0x3) close(r3) tee(r0, r4, 0x3ff, 0x0) write$binfmt_script(r4, 0x0, 0xd9) write(r2, 0x0, 0x0) 380.43612ms ago: executing program 6 (id=1386): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x8b) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000020c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) (async) openat$cgroup_freezer_state(r1, &(0x7f0000000040), 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 326.016547ms ago: executing program 7 (id=1387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 325.420539ms ago: executing program 7 (id=1388): io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x1, 0x2, 0x8, 0x1ff, 0x1}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x365001, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x80}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4) 0s ago: executing program 6 (id=1389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010003"], 0x264d81) kernel console output (not intermixed with test programs): es in process `syz.1.538'. [ 136.356249][ T8197] comedi comedi3: Buffer allocation failed [ 136.648887][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 136.852761][ T8305] trusted_key: encrypted_key: key user:syz not found [ 136.984556][ T8302] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 136.989678][ T8302] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 136.992688][ T8302] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 136.995131][ T8302] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 136.997245][ T8302] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 136.999650][ T8302] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 137.001948][ T8302] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 137.004435][ T8302] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 137.006552][ T8302] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 137.008709][ T8302] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 137.011029][ T8302] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 137.017032][ T8302] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 137.019396][ T8302] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 137.021657][ T8302] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 137.024896][ T8302] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 137.563171][ T53] usb 8-1: USB disconnect, device number 4 [ 137.737551][ T8319] netlink: 14 bytes leftover after parsing attributes in process `syz.3.546'. [ 137.742738][ T8319] hsr_slave_0: left promiscuous mode [ 137.745554][ T8319] hsr_slave_1: left promiscuous mode [ 138.671759][ T8331] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 138.675249][ T8331] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 138.794539][ T8335] autofs: Unknown parameter './file0' [ 138.800684][ T53] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 138.982910][ T53] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.986512][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.989871][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.000729][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.004809][ T53] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.007620][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.021473][ T53] usb 8-1: config 0 descriptor?? [ 139.367257][ T8347] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 139.369883][ T8347] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 139.373808][ T8347] vhci_hcd vhci_hcd.0: Device attached [ 139.450085][ T53] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 139.461360][ T53] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 139.640626][ T4413] usb 40-1: SetAddress Request (7) to port 0 [ 139.642831][ T4413] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 139.774144][ T6008] usb 8-1: USB disconnect, device number 5 [ 139.907857][ T8360] vhci_hcd: connection reset by peer [ 139.910428][ T1146] vhci_hcd: stop threads [ 139.914612][ T1146] vhci_hcd: release socket [ 139.920567][ T1146] vhci_hcd: disconnect device [ 141.235412][ T8417] autofs: Unknown parameter './file0' [ 141.540662][ T8421] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 142.189557][ T8436] netlink: 'syz.4.568': attribute type 1 has an invalid length. [ 142.579108][ T8442] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 142.581314][ T8442] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 142.585621][ T8442] vhci_hcd vhci_hcd.0: Device attached [ 142.870900][ T5812] usb 38-1: SetAddress Request (15) to port 0 [ 143.009929][ T5812] usb 38-1: new SuperSpeed USB device number 15 using vhci_hcd [ 143.271559][ T8449] vhci_hcd: connection reset by peer [ 143.273831][ T87] vhci_hcd: stop threads [ 143.275879][ T87] vhci_hcd: release socket [ 143.280757][ T87] vhci_hcd: disconnect device [ 143.390656][ T2292] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 143.564516][ T2292] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.568679][ T2292] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 143.572356][ T2292] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 143.575478][ T2292] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.579683][ T2292] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.691300][ T2292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.696052][ T2292] usb 9-1: config 0 descriptor?? [ 144.132402][ T2292] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 144.150080][ T2292] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 144.363678][ T8488] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 144.480749][ T6027] usb 9-1: USB disconnect, device number 2 [ 144.750628][ T4413] usb 40-1: device descriptor read/8, error -110 [ 144.794845][ T8493] sp0: Synchronizing with TNC [ 144.868900][ T8495] binder: 8492:8495 ioctl 0 80000040 returned -22 [ 145.041878][ T8492] [U] è [ 145.160614][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 145.161651][ T4413] usb usb40-port1: attempt power cycle [ 145.192787][ T8498] /dev/sr0: Can't open blockdev [ 145.321243][ T9] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 145.325085][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.328306][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.340747][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 145.351560][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.354193][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.357317][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 145.360406][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.370701][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.385997][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 145.388925][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.391510][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.394500][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 145.397103][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.399646][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.402727][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 145.405480][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.408022][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.411478][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 145.414134][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.416590][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.419564][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 145.422341][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.424915][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.427887][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 145.431483][ T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 145.434849][ T9] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 145.437221][ T9] usb 8-1: Product: syz [ 145.438482][ T9] usb 8-1: Manufacturer: syz [ 145.439850][ T9] usb 8-1: SerialNumber: syz [ 145.443714][ T9] usb 8-1: config 0 descriptor?? [ 145.450259][ T9] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 145.721961][ T4413] usb usb40-port1: unable to enumerate USB device [ 145.849096][ T73] usb 8-1: USB disconnect, device number 6 [ 145.855226][ T73] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 146.242333][ T8521] Invalid source name [ 146.243744][ T8521] UBIFS error (pid: 8521): cannot open "usrquotaÿ", error -22 [ 146.490891][ T8535] netlink: 'syz.3.594': attribute type 11 has an invalid length. [ 146.765971][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'. [ 146.966022][ T8559] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 146.991545][ T8559] 8021q: adding VLAN 0 to HW filter on device bond6 [ 147.001608][ T8559] bond6: (slave gretap2): making interface the new active one [ 147.005104][ T8559] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 147.619266][ T8565] input: syz1 as /devices/virtual/input/input11 [ 147.662347][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 147.688977][ T8581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.063531][ T8588] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.101651][ T5812] usb 38-1: device descriptor read/8, error -110 [ 148.272208][ T73] hid-generic 0000:0003:0001.0006: unknown main item tag 0x0 [ 148.275062][ T73] hid-generic 0000:0003:0001.0006: unknown main item tag 0x0 [ 148.283260][ T73] hid-generic 0000:0003:0001.0006: hidraw1: HID v0.03 Device [syz0] on syz1 [ 148.417679][ T8609] fido_id[8609]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 148.507634][ T5812] usb usb38-port1: attempt power cycle [ 149.228153][ T5812] usb usb38-port1: unable to enumerate USB device [ 149.610778][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 149.610789][ T40] audit: type=1326 audit(1761816736.998:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.3.619" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd579 code=0x0 [ 149.788519][ T8648] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 149.790643][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 149.804522][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 150.012962][ T8648] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 150.015649][ T8648] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.090704][ T5812] usb 46-1: SetAddress Request (2) to port 0 [ 150.092780][ T5812] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 150.372962][ T8649] vhci_hcd: connection reset by peer [ 150.375124][ T61] vhci_hcd: stop threads [ 150.376763][ T61] vhci_hcd: release socket [ 150.378421][ T61] vhci_hcd: disconnect device [ 150.733627][ T8662] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 150.736423][ T8662] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 150.740074][ T8662] vhci_hcd vhci_hcd.0: Device attached [ 150.780400][ T40] audit: type=1800 audit(1761816738.168:1149): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.631" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 151.010715][ T73] usb 44-1: SetAddress Request (10) to port 0 [ 151.013399][ T73] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 151.336698][ T8663] vhci_hcd: connection reset by peer [ 151.343584][ T61] vhci_hcd: stop threads [ 151.344888][ T61] vhci_hcd: release socket [ 151.356578][ T61] vhci_hcd: disconnect device [ 151.541144][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'. [ 151.793698][ T8678] fuse: Bad value for 'max_read' [ 152.095010][ T8684] macvtap1: entered promiscuous mode [ 152.096725][ T8684] macvtap1: entered allmulticast mode [ 152.100097][ T8684] syz_tun: entered promiscuous mode [ 152.105656][ T8684] syz_tun: entered allmulticast mode [ 152.111105][ T8684] team0: Device macvtap1 failed to register rx_handler [ 152.113597][ T8684] syz_tun: left allmulticast mode [ 152.115546][ T8684] syz_tun: left promiscuous mode [ 152.493951][ T8694] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.718480][ T8704] overlayfs: failed to resolve './bus': -2 [ 153.419024][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.422087][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.425842][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.430133][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.433076][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.707856][ T8717] chnl_net:caif_netlink_parms(): no params data found [ 153.731777][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 153.785065][ T8727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.640'. [ 153.954948][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.959118][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.964171][ T8717] bridge_slave_0: entered allmulticast mode [ 153.968399][ T8717] bridge_slave_0: entered promiscuous mode [ 153.973523][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.976461][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.979435][ T8717] bridge_slave_1: entered allmulticast mode [ 153.983331][ T8717] bridge_slave_1: entered promiscuous mode [ 154.040251][ T8717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.046499][ T8717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.108310][ T8717] team0: Port device team_slave_0 added [ 154.114010][ T8717] team0: Port device team_slave_1 added [ 154.173949][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.176345][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.185433][ T8717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.205273][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.207432][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.216021][ T8717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.267532][ T8717] hsr_slave_0: entered promiscuous mode [ 154.270925][ T8717] hsr_slave_1: entered promiscuous mode [ 154.416393][ T8717] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.446533][ T8717] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.453885][ T8717] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.463204][ T8717] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.548572][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.562560][ T8717] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.567868][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.570177][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.576888][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.579178][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.661036][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.719028][ T8717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.816719][ T8758] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 154.818785][ T8758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 154.841632][ T8758] vhci_hcd vhci_hcd.0: Device attached [ 154.883742][ T8717] veth0_vlan: entered promiscuous mode [ 154.891015][ T8717] veth1_vlan: entered promiscuous mode [ 154.910267][ T8717] veth0_macvtap: entered promiscuous mode [ 154.916096][ T8717] veth1_macvtap: entered promiscuous mode [ 154.925445][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.932963][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.939068][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.947895][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.966202][ T1146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.969823][ T1146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.007877][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.011167][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.040104][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.048496][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.110918][ T29] usb 40-1: SetAddress Request (11) to port 0 [ 155.113581][ T29] usb 40-1: new SuperSpeed USB device number 11 using vhci_hcd [ 155.141027][ T5812] usb 46-1: device descriptor read/8, error -110 [ 155.167675][ T8773] input: syz1 as /devices/virtual/input/input12 [ 155.460665][ T5958] Bluetooth: hci3: command tx timeout [ 155.566627][ T8781] devtmpfs: Cannot disable swap on remount [ 155.631372][ T5812] usb usb46-port1: attempt power cycle [ 155.662584][ T8783] netlink: 'syz.4.651': attribute type 11 has an invalid length. [ 155.665065][ T8783] netlink: 'syz.4.651': attribute type 11 has an invalid length. [ 155.667700][ T8783] netlink: 224 bytes leftover after parsing attributes in process `syz.4.651'. [ 156.100839][ T73] usb 44-1: device descriptor read/8, error -110 [ 156.191530][ T8768] vhci_hcd: connection reset by peer [ 156.194090][ T1143] vhci_hcd: stop threads [ 156.195580][ T1143] vhci_hcd: release socket [ 156.197845][ T1143] vhci_hcd: disconnect device [ 156.202715][ T5812] usb usb46-port1: unable to enumerate USB device [ 156.491416][ T73] usb usb44-port1: attempt power cycle [ 156.530597][ T6008] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 156.701642][ T6008] usb 8-1: config 0 has no interfaces? [ 156.706322][ T6008] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 156.717621][ T6008] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.723331][ T6008] usb 8-1: Product: syz [ 156.725532][ T6008] usb 8-1: Manufacturer: syz [ 156.727323][ T6008] usb 8-1: SerialNumber: syz [ 156.739034][ T6008] usb 8-1: config 0 descriptor?? [ 157.022274][ T6008] usb 8-1: USB disconnect, device number 7 [ 157.032137][ T8808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.656'. [ 157.052237][ T73] usb usb44-port1: unable to enumerate USB device [ 157.540596][ T5958] Bluetooth: hci3: command tx timeout [ 157.616198][ T8820] input: syz1 as /devices/virtual/input/input13 [ 157.700130][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.703240][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.866068][ T8830] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.880380][ T8830] team0: Unable to change to the same mode the team is in [ 158.762929][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 158.773827][ T8839] kvm: kvm [8838]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x80000200 [ 159.011867][ T8844] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 159.014610][ T8844] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 159.018939][ T8844] vhci_hcd vhci_hcd.0: Device attached [ 159.532223][ T8847] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 159.549390][ T8847] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 159.631063][ T5958] Bluetooth: hci3: command tx timeout [ 160.560395][ T29] usb 40-1: device descriptor read/8, error -110 [ 160.590679][ T4413] usb 44-1: SetAddress Request (14) to port 0 [ 160.592708][ T4413] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 160.603045][ T8845] vhci_hcd: connection closed [ 160.603384][ T12] vhci_hcd: stop threads [ 160.607166][ T12] vhci_hcd: release socket [ 160.609181][ T12] vhci_hcd: disconnect device [ 160.637526][ T4413] usb 44-1: enqueue for inactive port 0 [ 160.975083][ T29] usb usb40-port1: attempt power cycle [ 160.998283][ T8854] wireguard0: entered promiscuous mode [ 161.000978][ T8854] wireguard0: entered allmulticast mode [ 161.031066][ T4413] usb usb44-port1: attempt power cycle [ 161.285656][ T8864] hub 8-0:1.0: USB hub found [ 161.288011][ T8864] hub 8-0:1.0: 1 port detected [ 161.497794][ T8870] 9pnet_virtio: no channels available for device syz [ 161.551349][ T29] usb usb40-port1: unable to enumerate USB device [ 161.591260][ T4413] usb usb44-port1: unable to enumerate USB device [ 161.700660][ T5958] Bluetooth: hci3: command tx timeout [ 161.837149][ T8854] Process accounting resumed [ 162.259864][ T8884] program syz.5.674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.636624][ T40] audit: type=1326 audit(1761816750.028:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.1.676" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd579 code=0x0 [ 163.331417][ T8901] geneve2: entered promiscuous mode [ 163.333772][ T8901] geneve2: entered allmulticast mode [ 163.578636][ T8913] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 163.582863][ T8913] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 163.662455][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 163.840631][ T6027] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 164.020942][ T6027] usb 10-1: Using ep0 maxpacket: 8 [ 164.024278][ T6027] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.027366][ T6027] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.030544][ T6027] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.034441][ T6027] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.038732][ T6027] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.042084][ T6027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.326163][ T8924] hub 8-0:1.0: USB hub found [ 164.329035][ T8924] hub 8-0:1.0: 1 port detected [ 164.351833][ T6027] usb 10-1: GET_CAPABILITIES returned 0 [ 164.356484][ T6027] usbtmc 10-1:16.0: can't read capabilities [ 164.554162][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.557865][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.560895][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.563889][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.569080][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.572230][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.575786][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.579661][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.585193][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.589245][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.593296][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.597441][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.601028][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.604444][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.607362][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.610267][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.615160][ T2292] usb 10-1: USB disconnect, device number 2 [ 165.003187][ T8926] program syz.4.687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.708119][ T40] audit: type=1326 audit(1761816753.098:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.5.689" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d579 code=0x0 [ 167.141583][ T8983] ip6gretap0: entered promiscuous mode [ 167.143466][ T8983] ip6gretap0: entered allmulticast mode [ 167.587557][ T8983] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 167.590245][ T8983] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 167.594072][ T8983] vhci_hcd vhci_hcd.0: Device attached [ 167.599733][ T8990] vhci_hcd: connection closed [ 167.599850][ T87] vhci_hcd: stop threads [ 167.603585][ T87] vhci_hcd: release socket [ 167.605053][ T87] vhci_hcd: disconnect device [ 168.466595][ T9000] kAFS: Can only specify source 'none' with -o dyn [ 168.469171][ T9000] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 168.750091][ T9010] syzkaller1: entered promiscuous mode [ 168.752303][ T9010] syzkaller1: entered allmulticast mode [ 169.678370][ T9026] netlink: 260 bytes leftover after parsing attributes in process `syz.3.709'. [ 171.979528][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 172.621194][ T9068] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 172.623288][ T9068] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.625997][ T9068] vhci_hcd vhci_hcd.0: Device attached [ 172.639144][ T9072] vlan3: entered promiscuous mode [ 172.640806][ T9072] macvtap0: entered promiscuous mode [ 172.710927][ T9069] vhci_hcd: connection closed [ 172.712391][ T12] vhci_hcd: stop threads [ 172.715398][ T12] vhci_hcd: release socket [ 172.717868][ T12] vhci_hcd: disconnect device [ 173.482498][ T9086] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 173.505938][ T9086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.530643][ T9086] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 173.609898][ T9088] veth1_macvtap: left promiscuous mode [ 173.612482][ T9088] macsec0: entered promiscuous mode [ 173.614826][ T9088] macsec0: entered allmulticast mode [ 173.626366][ T9088] veth1_macvtap: entered promiscuous mode [ 173.630862][ T9088] veth1_macvtap: entered allmulticast mode [ 173.639255][ T9088] macsec0: left promiscuous mode [ 173.648423][ T9088] macsec0: left allmulticast mode [ 173.650175][ T9088] veth1_macvtap: left allmulticast mode [ 173.658144][ T9090] veth1_macvtap: left promiscuous mode [ 173.661424][ T9090] macsec0: entered promiscuous mode [ 173.663636][ T9090] macsec0: entered allmulticast mode [ 174.740848][ T9133] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 174.742901][ T9133] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 174.745560][ T9133] vhci_hcd vhci_hcd.0: Device attached [ 175.201640][ T9130] ceph: No mds server is up or the cluster is laggy [ 175.347581][ T9142] 9pnet_fd: Insufficient options for proto=fd [ 175.380733][ T29] usb 40-1: SetAddress Request (15) to port 0 [ 175.382893][ T29] usb 40-1: new SuperSpeed USB device number 15 using vhci_hcd [ 175.467896][ T9152] openvswitch: netlink: nsh attr 0 has unexpected len 251 expected 0 [ 175.474663][ T9152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.502894][ T9134] vhci_hcd: connection reset by peer [ 175.509015][ T1146] vhci_hcd: stop threads [ 175.510368][ T1146] vhci_hcd: release socket [ 175.512011][ T1146] vhci_hcd: disconnect device [ 175.527773][ T40] audit: type=1326 audit(1761816762.918:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9153 comm="syz.4.743" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f77579 code=0x0 [ 175.544758][ T9158] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 175.547522][ T9158] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 175.551651][ T9158] vhci_hcd vhci_hcd.0: Device attached [ 175.754825][ T9159] vhci_hcd: connection closed [ 175.755954][ T1146] vhci_hcd: stop threads [ 175.759814][ T1146] vhci_hcd: release socket [ 175.762943][ T1146] vhci_hcd: disconnect device [ 176.143381][ T9181] kAFS: unable to lookup cell '.,' [ 176.244114][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.750'. [ 176.349546][ T9194] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 176.404059][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 176.426092][ T9191] bond9: option packets_per_slave: invalid value (18446744072098939137) [ 176.429120][ T9191] bond9: option packets_per_slave: allowed values 0 - 65535 [ 176.435607][ T9191] bond9 (unregistering): Released all slaves [ 176.603762][ T9199] nvme_fabrics: missing parameter 'transport=%s' [ 176.606241][ T9199] nvme_fabrics: missing parameter 'nqn=%s' [ 177.309469][ T9236] 9pnet_fd: Insufficient options for proto=fd [ 178.277280][ T9248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.278068][ T9249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.387728][ T9254] pvfs2: Unknown parameter '%%${ @@' [ 178.422654][ T5958] Bluetooth: hci0: command tx timeout [ 178.581340][ T9262] netlink: 72 bytes leftover after parsing attributes in process `syz.3.764'. [ 178.897585][ T9278] geneve2: entered promiscuous mode [ 178.899851][ T9278] geneve2: entered allmulticast mode [ 179.380859][ T73] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 179.395987][ T73] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 179.788727][ T9280] ceph: No mds server is up or the cluster is laggy [ 180.438250][ T29] usb 40-1: device descriptor read/8, error -110 [ 180.544501][ T9310] ceph: No mds server is up or the cluster is laggy [ 180.756876][ T9325] vlan4: entered allmulticast mode [ 180.758574][ T9325] veth0_to_bond: entered allmulticast mode [ 180.838066][ T29] usb usb40-port1: attempt power cycle [ 180.921366][ T9334] overlay: Unknown parameter 'subj_role' [ 180.925287][ T40] audit: type=1326 audit(1761817024.318:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9333 comm="syz.5.786" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x0 [ 180.931993][ T40] audit: type=1326 audit(1761817024.318:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9333 comm="syz.5.786" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x0 [ 181.810513][ T29] usb usb40-port1: unable to enumerate USB device [ 181.923912][ T9373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.795'. [ 182.752173][ T9378] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 182.754212][ T9378] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 182.756830][ T9378] vhci_hcd vhci_hcd.0: Device attached [ 182.847809][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.968404][ T9387] vhci_hcd: connection closed [ 182.968587][ T12] vhci_hcd: stop threads [ 182.971681][ T12] vhci_hcd: release socket [ 182.973145][ T12] vhci_hcd: disconnect device [ 183.027410][ T4413] usb 40-1: enqueue for inactive port 0 [ 183.219860][ T9404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.295245][ T9410] pim6reg: entered allmulticast mode [ 183.301118][ T9410] pim6reg: left allmulticast mode [ 183.590029][ T4413] usb usb40-port1: attempt power cycle [ 183.942317][ T40] audit: type=1326 audit(1761817027.325:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 183.954375][ T40] audit: type=1326 audit(1761817027.325:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 183.962713][ T40] audit: type=1326 audit(1761817027.325:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 183.969364][ T40] audit: type=1326 audit(1761817027.325:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.810" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 183.976166][ T40] audit: type=1326 audit(1761817027.325:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 183.983368][ T40] audit: type=1326 audit(1761817027.325:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 183.991230][ T40] audit: type=1326 audit(1761817027.325:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 183.998075][ T40] audit: type=1326 audit(1761817027.325:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.810" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 184.178515][ T4413] usb usb40-port1: unable to enumerate USB device [ 184.184588][ T9436] binder: 9435:9436 ioctl 0 80000040 returned -22 [ 184.462324][ T9445] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 184.465514][ T9445] block device autoloading is deprecated and will be removed. [ 184.479910][ T9447] netlink: 14 bytes leftover after parsing attributes in process `syz.3.814'. [ 184.636587][ T9450] /dev/nullb0: Can't open blockdev [ 184.651944][ T9447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.671822][ T9447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.705976][ T9447] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 184.711832][ T9447] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 184.718719][ T9447] bond0 (unregistering): Released all slaves [ 186.689003][ T9498] input: syz1 as /devices/virtual/input/input16 [ 186.817137][ T40] kauditd_printk_skb: 1508 callbacks suppressed [ 186.817147][ T40] audit: type=1326 audit(1761817030.192:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.1.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 186.826441][ T40] audit: type=1326 audit(1761817030.192:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.1.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 186.833650][ T40] audit: type=1326 audit(1761817030.192:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.1.829" exe="/syz-executor" sig=0 arch=40000003 syscall=184 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 186.840821][ T40] audit: type=1326 audit(1761817030.192:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.1.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 186.847720][ T40] audit: type=1326 audit(1761817030.192:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.1.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 186.857093][ T40] audit: type=1326 audit(1761817030.202:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.1.829" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 186.864013][ T40] audit: type=1326 audit(1761817030.202:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.1.829" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 186.870943][ T40] audit: type=1326 audit(1761817030.202:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.1.829" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 186.877742][ T40] audit: type=1326 audit(1761817030.202:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.1.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 186.885073][ T40] audit: type=1326 audit(1761817030.202:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.1.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 188.055567][ T9547] tipc: Started in network mode [ 188.057686][ T9547] tipc: Node identity ac1414aa, cluster identity 4711 [ 188.060865][ T9547] tipc: Enabled bearer , priority 10 [ 188.511866][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 188.938825][ T9573] fuse: Bad value for 'fd' [ 189.054157][ T4413] tipc: Node number set to 2886997162 [ 189.140292][ T9575] AppArmor: change_hat: Invalid input '0x0000ž£000@$}+,}[#)' [ 189.779921][ T9589] cgroup: fork rejected by pids controller in /syz5 [ 190.039372][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 190.071608][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 190.075891][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 190.079244][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 190.082390][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 190.085952][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 190.089392][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 190.092819][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 190.096051][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 190.099731][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 190.513980][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 190.514181][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 191.660058][ T9674] kvm: Disabled LAPIC found during irq injection [ 192.388772][ T9703] netlink: 'syz.1.865': attribute type 1 has an invalid length. [ 193.573362][ T9724] sp0: Synchronizing with TNC [ 193.732188][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.748379][ T9756] fuse: Unknown parameter 'group‚d' [ 195.427763][ T9761] overlay: ./bus is not a directory [ 196.325248][ T5950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.329770][ T5950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.332990][ T5950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.336546][ T5950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.340801][ T5950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.637559][ T9787] __nla_validate_parse: 25 callbacks suppressed [ 196.637571][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 196.678694][ T9772] chnl_net:caif_netlink_parms(): no params data found [ 196.776621][ T9772] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.779404][ T9772] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.786770][ T9772] bridge_slave_0: entered allmulticast mode [ 196.789942][ T9772] bridge_slave_0: entered promiscuous mode [ 196.795806][ T9772] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.798122][ T9772] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.800931][ T9772] bridge_slave_1: entered allmulticast mode [ 196.810063][ T9772] bridge_slave_1: entered promiscuous mode [ 196.810137][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 196.863469][ T9772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.867917][ T9772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.899267][ T9772] team0: Port device team_slave_0 added [ 196.902683][ T9772] team0: Port device team_slave_1 added [ 196.945314][ T9772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.947783][ T9772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.955857][ T9772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.960990][ T9772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.963592][ T9772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.973220][ T9772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.983882][ T24] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 196.987512][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.993504][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.998515][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.003043][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.008430][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.015071][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.020917][ T24] usb 6-1: config 0 descriptor?? [ 197.031682][ T9781] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.095082][ T9772] hsr_slave_0: entered promiscuous mode [ 197.097333][ T9772] hsr_slave_1: entered promiscuous mode [ 197.101454][ T9772] debugfs: 'hsr0' already exists in 'hsr' [ 197.103413][ T9772] Cannot create hsr debugfs directory [ 197.245375][ T24] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 197.264136][ T24] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 197.275693][ T24] usb 6-1: USB disconnect, device number 4 [ 197.302219][ T9772] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 197.306958][ T9772] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 197.311014][ T9772] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 197.313069][ T9772] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 197.344953][ T9807] fido_id[9807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 197.354631][ T9772] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.354700][ T9772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.354810][ T9772] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.354857][ T9772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.361930][ T9818] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 197.385367][ T9772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.413455][ T9644] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.423226][ T9644] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.436440][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 197.438858][ T9772] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.449491][ T9633] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.451785][ T9633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.458838][ T9643] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.461145][ T9643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.542530][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 197.607423][ T9772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.808093][ T9772] veth0_vlan: entered promiscuous mode [ 197.814631][ T9772] veth1_vlan: entered promiscuous mode [ 197.833903][ T9772] veth0_macvtap: entered promiscuous mode [ 197.839675][ T9772] veth1_macvtap: entered promiscuous mode [ 197.852429][ T9772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.858596][ T9772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.866027][ T9641] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.870470][ T9641] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.879086][ T9641] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.886347][ T9641] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.081346][ T9643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.084334][ T9643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.108529][ T9644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.111338][ T9644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.209454][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.897'. [ 198.216066][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.277608][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 198.371492][ T5958] Bluetooth: hci4: command tx timeout [ 198.473913][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.484391][ T9] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 198.525865][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.557853][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.597085][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.611958][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.630914][ T9] usb 8-1: Product: syz [ 198.637871][ T9] usb 8-1: Manufacturer: syz [ 198.682570][ T9] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 199.026046][ T9853] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.882' sets config #0 [ 199.034705][ T9853] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.882' sets config #1 [ 199.163250][ T9844] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.169616][ T5995] usb 8-1: USB disconnect, device number 8 [ 199.314251][ T9641] smc: removing ib device syz1 [ 199.316986][ T9] syz1: Port: 1 Link DOWN [ 200.003319][ T9863] netlink: 64 bytes leftover after parsing attributes in process `syz.3.901'. [ 200.004075][ T9858] delete_channel: no stack [ 200.145591][ T9643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.208502][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'. [ 200.226255][ T9643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.284182][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.287715][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.292623][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.297060][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.300670][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.330230][ T9643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.443436][ T5950] Bluetooth: hci4: command tx timeout [ 200.499323][ T9643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.122002][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.907'. [ 201.282850][ T9643] bond0 (unregistering): Released all slaves [ 201.289340][ T9643] bond1 (unregistering): Released all slaves [ 201.296529][ T9643] bond2 (unregistering): Released all slaves [ 201.303910][ T9643] bond3 (unregistering): Released all slaves [ 201.312772][ T9643] bond4 (unregistering): Released all slaves [ 201.320539][ T9643] bond5 (unregistering): Released all slaves [ 201.332569][ T9643] bond6 (unregistering): Released all slaves [ 201.344739][ T9643] bond7 (unregistering): Released all slaves [ 201.356557][ T9643] bond8 (unregistering): Released all slaves [ 201.367588][ T9643] bond9 (unregistering): Released all slaves [ 201.423125][ T9869] chnl_net:caif_netlink_parms(): no params data found [ 201.537479][ T9643] tipc: Disabling bearer [ 201.542039][ T9643] tipc: Left network mode [ 201.711247][ T9906] ceph: No mds server is up or the cluster is laggy [ 201.757839][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.760150][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.762566][ T9869] bridge_slave_0: entered allmulticast mode [ 201.773775][ T9869] bridge_slave_0: entered promiscuous mode [ 201.780028][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.782399][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.784803][ T9869] bridge_slave_1: entered allmulticast mode [ 201.787586][ T9869] bridge_slave_1: entered promiscuous mode [ 201.843813][ T9869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.850156][ T9869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.900996][ T9869] team0: Port device team_slave_0 added [ 201.904445][ T9869] team0: Port device team_slave_1 added [ 201.935535][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.937723][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.945249][ T9869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.949529][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.951694][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.959651][ T9869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.014806][ T9869] hsr_slave_0: entered promiscuous mode [ 202.017075][ T9869] hsr_slave_1: entered promiscuous mode [ 202.019170][ T9869] debugfs: 'hsr0' already exists in 'hsr' [ 202.020940][ T9869] Cannot create hsr debugfs directory [ 202.241750][ T9643] hsr_slave_0: left promiscuous mode [ 202.243985][ T9643] hsr_slave_1: left promiscuous mode [ 202.256714][ T9643] veth1_macvtap: left promiscuous mode [ 202.259117][ T9643] veth0_macvtap: left promiscuous mode [ 202.262087][ T9643] veth1_vlan: left promiscuous mode [ 202.264390][ T9643] veth0_vlan: left promiscuous mode [ 202.367549][ T5950] Bluetooth: hci1: command tx timeout [ 202.370396][ T9905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.373124][ T9905] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.401638][ T9905] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.425162][ T9905] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.427149][ T9905] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.441728][ T9905] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.446915][ T9905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.450029][ T9905] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 202.460330][ T9905] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 204.033067][ T9869] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 204.061590][ T9869] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 204.084848][ T9869] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 204.122481][ T9869] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 204.199250][ T9869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.208024][ T9869] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.212783][ T9633] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.214959][ T9633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.237629][ T9633] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.240581][ T9633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.284241][ T9965] fuse: Unknown parameter 'ft' [ 204.412489][ T9643] IPVS: stop unused estimator thread 0... [ 204.416675][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 204.416684][ T40] audit: type=1326 audit(1761817047.776:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.3.920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 204.427303][ T9869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.436979][ T40] audit: type=1326 audit(1761817047.776:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.3.920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 204.454453][ T40] audit: type=1326 audit(1761817047.786:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.3.920" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 204.460220][ T5950] Bluetooth: hci4: command 0x0419 tx timeout [ 204.467912][ T40] audit: type=1326 audit(1761817047.786:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.3.920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 204.482358][ T40] audit: type=1326 audit(1761817047.786:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.3.920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 204.495690][ T40] audit: type=1326 audit(1761817047.786:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.3.920" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 204.507057][ T40] audit: type=1326 audit(1761817047.786:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.3.920" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 204.517075][ T40] audit: type=1326 audit(1761817047.786:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.3.920" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 204.523762][ T40] audit: type=1326 audit(1761817047.786:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.3.920" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 204.524347][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.531506][ T40] audit: type=1326 audit(1761817047.796:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.3.920" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 204.537459][ T5958] Bluetooth: hci1: command 0x040f tx timeout [ 204.541653][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.544584][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.548228][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.550862][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.625593][ T9869] veth0_vlan: entered promiscuous mode [ 204.630574][ T9869] veth1_vlan: entered promiscuous mode [ 204.644768][ T9869] veth0_macvtap: entered promiscuous mode [ 204.652107][ T9869] veth1_macvtap: entered promiscuous mode [ 204.662736][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.667025][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.676971][ T9640] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.688042][ T9640] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.691763][ T9640] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.700347][ T9640] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.791321][ T9633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.794597][ T9633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.809576][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.921'. [ 204.813468][ T9996] openvswitch: netlink: Flow actions attr not present in new flow. [ 204.822784][ T9633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.826158][ T9633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.832642][ T9985] chnl_net:caif_netlink_parms(): no params data found [ 204.906055][T10005] netlink: 36 bytes leftover after parsing attributes in process `syz.7.903'. [ 204.930585][ T9985] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.936539][ T9985] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.939334][ T9985] bridge_slave_0: entered allmulticast mode [ 204.942121][ T9985] bridge_slave_0: entered promiscuous mode [ 204.945254][ T9985] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.947527][ T9985] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.950024][ T9985] bridge_slave_1: entered allmulticast mode [ 204.952780][ T9985] bridge_slave_1: entered promiscuous mode [ 204.968121][T10008] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 204.970801][T10008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.979073][T10008] vhci_hcd vhci_hcd.0: Device attached [ 205.020587][ T9985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.029961][ T9985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.067359][ T9643] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.148637][ T9985] team0: Port device team_slave_0 added [ 205.153943][ T9985] team0: Port device team_slave_1 added [ 205.234185][ T9643] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.239484][T10009] vhci_hcd: connection closed [ 205.239877][ T9645] vhci_hcd: stop threads [ 205.244063][ T9645] vhci_hcd: release socket [ 205.256002][ T9645] vhci_hcd: disconnect device [ 205.262441][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.268568][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.280545][ T9985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.290720][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.293675][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.310309][ T9985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.374420][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.924'. [ 205.391954][ T9643] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.403953][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.924'. [ 205.407480][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.924'. [ 205.415905][ T9985] hsr_slave_0: entered promiscuous mode [ 205.423838][ T9985] hsr_slave_1: entered promiscuous mode [ 205.436024][ T9985] debugfs: 'hsr0' already exists in 'hsr' [ 205.442375][ T9985] Cannot create hsr debugfs directory [ 205.593655][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.924'. [ 205.613231][ T9643] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.742069][ T6437] vhci_hcd: vhci_device speed not set [ 205.911021][ T9643] bridge_slave_1: left allmulticast mode [ 205.913101][ T9643] bridge_slave_1: left promiscuous mode [ 205.915397][ T9643] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.920245][ T9643] bridge_slave_0: left allmulticast mode [ 205.922790][ T9643] bridge_slave_0: left promiscuous mode [ 205.924799][ T9643] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.291260][ T9643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.297437][ T9643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.305983][ T9643] bond0 (unregistering): Released all slaves [ 206.316053][ T9643] bond1 (unregistering): Released all slaves [ 206.323506][ T9643] bond2 (unregistering): Released all slaves [ 206.332638][ T9643] bond3 (unregistering): Released all slaves [ 206.341913][ T9643] bond4 (unregistering): Released all slaves [ 206.432944][ T9985] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 206.462010][ T9985] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 206.476610][ T9985] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 206.493601][ T9985] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 206.529177][ T5950] Bluetooth: hci4: command 0x0419 tx timeout [ 206.609301][ T5950] Bluetooth: hci3: command tx timeout [ 206.612866][ T5958] Bluetooth: hci1: command 0x040f tx timeout [ 206.801277][ T9985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.824230][ T9985] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.830872][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.833041][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.859574][ T9645] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.862616][ T9645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.020738][ T9985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.246721][ T9643] hsr_slave_0: left promiscuous mode [ 207.249178][ T9643] hsr_slave_1: left promiscuous mode [ 207.251949][ T9643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.254442][ T9643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.302885][ T9643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.305315][ T9643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.428518][ T9643] veth0_macvtap: left promiscuous mode [ 207.439922][ T9643] veth1_vlan: left promiscuous mode [ 207.441933][ T9643] veth0_vlan: left promiscuous mode [ 207.947317][T10072] usb 1-1: USB disconnect, device number 2 [ 208.239403][ T9643] team0 (unregistering): Port device team_slave_1 removed [ 208.327373][ T9643] team0 (unregistering): Port device team_slave_0 removed [ 208.612422][ T5950] Bluetooth: hci4: command 0x0419 tx timeout [ 208.691051][ T5950] Bluetooth: hci3: command tx timeout [ 208.691061][ T5958] Bluetooth: hci1: command 0x040f tx timeout [ 208.782446][T10080] binder: 10077:10080 ioctl 0 80000040 returned -22 [ 208.952046][ T9985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.136926][ T9985] veth0_vlan: entered promiscuous mode [ 209.147052][ T9985] veth1_vlan: entered promiscuous mode [ 209.187603][ T9985] veth0_macvtap: entered promiscuous mode [ 209.192829][ T9985] veth1_macvtap: entered promiscuous mode [ 209.202727][ T9985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.208731][ T9985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.218640][ T9629] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.229530][ T9629] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.235289][ T9629] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.238980][ T9629] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.287880][ T9629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.291112][ T9629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.326939][ T9629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.330406][ T9629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.899035][T10124] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 209.901097][T10124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 209.904628][T10124] vhci_hcd vhci_hcd.0: Device attached [ 210.172425][ T29] usb 54-1: SetAddress Request (2) to port 0 [ 210.175063][ T29] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 210.265023][T10125] vhci_hcd: connection reset by peer [ 210.267593][ T9641] vhci_hcd: stop threads [ 210.269400][ T9641] vhci_hcd: release socket [ 210.271519][ T9641] vhci_hcd: disconnect device [ 210.702866][ T5950] Bluetooth: hci4: command 0x0419 tx timeout [ 210.772977][ T5958] Bluetooth: hci1: command 0x040f tx timeout [ 210.775689][ T5950] Bluetooth: hci3: command tx timeout [ 211.026942][T10141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.945'. [ 211.031610][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.034277][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.237056][T10155] infiniband syz1: set active [ 212.239122][T10155] infiniband syz1: added syz_tun [ 212.528096][T10155] RDS/IB: syz1: added [ 212.529733][T10155] smc: adding ib device syz1 with port count 1 [ 212.532154][T10155] smc: ib device syz1 port 1 has no pnetid [ 212.542918][T10023] libceph: connect (1)[c::]:6789 error -101 [ 212.564879][T10023] libceph: mon0 (1)[c::]:6789 connect error [ 212.846423][T10023] libceph: connect (1)[c::]:6789 error -101 [ 212.848965][T10023] libceph: mon0 (1)[c::]:6789 connect error [ 212.855102][ T5950] Bluetooth: hci3: command tx timeout [ 212.857371][ T5950] Bluetooth: hci1: command 0x040f tx timeout [ 213.365613][T10023] libceph: connect (1)[c::]:6789 error -101 [ 213.375364][T10023] libceph: mon0 (1)[c::]:6789 connect error [ 213.389809][T10178] fuse: Unknown parameter 'ft' [ 213.392162][T10166] ceph: No mds server is up or the cluster is laggy [ 214.592382][T10197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.595956][T10197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.601370][T10197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.604596][T10197] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 214.609702][T10197] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 214.903895][T10217] geneve2: entered promiscuous mode [ 214.906084][T10217] geneve2: entered allmulticast mode [ 215.257027][ T29] usb 54-1: device descriptor read/8, error -110 [ 215.264402][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 215.266368][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 215.370414][T10218] ceph: No mds server is up or the cluster is laggy [ 215.648263][ T29] usb usb54-port1: attempt power cycle [ 215.870180][T10242] ceph: No mds server is up or the cluster is laggy [ 215.878583][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.959'. [ 216.133184][ T73] libceph: connect (1)[c::]:6789 error -101 [ 216.135749][ T73] libceph: mon0 (1)[c::]:6789 connect error [ 216.201838][T10259] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 216.203916][T10259] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.206507][T10259] vhci_hcd vhci_hcd.0: Device attached [ 216.260186][ T29] usb usb54-port1: unable to enumerate USB device [ 216.398318][ T73] libceph: connect (1)[c::]:6789 error -101 [ 216.401016][ T73] libceph: mon0 (1)[c::]:6789 connect error [ 216.488047][ T60] usb 50-1: SetAddress Request (2) to port 0 [ 216.490037][ T60] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 216.539464][ T5958] Bluetooth: hci4: command 0x0419 tx timeout [ 216.618219][ T5950] Bluetooth: hci1: command 0x040f tx timeout [ 216.620528][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.789624][T10266] vhci_hcd: connection reset by peer [ 216.792193][ T9645] vhci_hcd: stop threads [ 216.793758][ T9645] vhci_hcd: release socket [ 216.795239][ T9645] vhci_hcd: disconnect device [ 216.804184][T10256] ceph: No mds server is up or the cluster is laggy [ 217.258546][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.967'. [ 217.267481][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.967'. [ 217.271235][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.967'. [ 217.274657][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.967'. [ 217.887306][T10307] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 217.889371][T10307] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 217.899275][T10307] vhci_hcd vhci_hcd.0: Device attached [ 217.938814][T10308] usbip_core: unknown command [ 217.941140][T10308] vhci_hcd: unknown pdu 0 [ 217.942550][T10308] usbip_core: unknown command [ 217.944542][ T9645] vhci_hcd: stop threads [ 217.945910][ T9645] vhci_hcd: release socket [ 217.947357][ T9645] vhci_hcd: disconnect device [ 218.334959][T10312] netlink: 16 bytes leftover after parsing attributes in process `syz.8.971'. [ 218.710253][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 219.696146][T10370] rdma_rxe: rxe_newlink: failed to add syz_tun [ 219.844325][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 219.844355][ T40] audit: type=1400 audit(1761817063.192:2784): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10336 comm="syz.8.978" [ 219.856813][T10342] nbd1: detected capacity change from 0 to 8589934655 [ 219.903762][T10340] ceph: No mds server is up or the cluster is laggy [ 220.141891][T10379] netlink: 'syz.3.986': attribute type 4 has an invalid length. [ 220.210922][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.985'. [ 220.229033][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.985'. [ 220.247950][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.985'. [ 220.251205][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.985'. [ 220.812087][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.875818][ T5958] block nbd1: Receive control failed (result -104) [ 221.390155][T10412] infiniband syz!: set active [ 221.391724][T10412] infiniband syz!: added team_slave_0 [ 221.419008][T10412] RDS/IB: syz!: added [ 221.422819][T10412] smc: adding ib device syz! with port count 1 [ 221.424804][T10412] smc: ib device syz! port 1 has no pnetid [ 221.593211][ T60] usb 50-1: device descriptor read/8, error -110 [ 221.600825][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.992'. [ 221.853899][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.856525][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.922100][T10442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.931044][T10442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.996385][ T60] usb usb50-port1: attempt power cycle [ 221.996994][ T9641] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.001195][ T9641] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.004171][ T9641] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.011799][ T9641] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.366418][T10457] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20018 [ 222.370916][T10457] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 222.372987][T10457] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.377209][T10457] vhci_hcd vhci_hcd.0: Device attached [ 222.623766][T10023] usb 53-1: new low-speed USB device number 2 using vhci_hcd [ 222.814315][ T60] usb usb50-port1: unable to enumerate USB device [ 222.873795][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 223.306632][T10473] netlink: 'syz.7.1003': attribute type 4 has an invalid length. [ 223.347013][T10475] syz.7.1004 (10475): attempted to duplicate a private mapping with mremap. This is not supported. [ 223.652748][T10459] vhci_hcd: connection reset by peer [ 223.655065][ T9633] vhci_hcd: stop threads [ 223.657112][ T9633] vhci_hcd: release socket [ 223.664750][ T9633] vhci_hcd: disconnect device [ 223.814974][T10489] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 223.817377][T10489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.824332][T10489] vhci_hcd vhci_hcd.0: Device attached [ 224.011072][T10501] binder: BINDER_SET_CONTEXT_MGR already set [ 224.014229][T10501] binder: 10500:10501 ioctl 4018620d 800000c0 returned -16 [ 224.015001][T10502] binder: 10500:10502 unknown command 0 [ 224.019207][T10502] binder: 10500:10502 ioctl c0306201 80000080 returned -22 [ 224.023134][T10502] binder_alloc: binder_alloc_mmap_handler: 10500 80ffd000-81000000 already mapped failed -16 [ 224.030911][T10501] binder_alloc: 10500: binder_alloc_buf, no vma [ 224.054840][ T29] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 224.362217][T10515] random: crng reseeded on system resumption [ 224.430237][T10490] vhci_hcd: connection reset by peer [ 224.432836][T10518] 9pnet_fd: Insufficient options for proto=fd [ 224.433064][ T9641] vhci_hcd: stop threads [ 224.437142][ T9641] vhci_hcd: release socket [ 224.439395][ T9641] vhci_hcd: disconnect device [ 224.475386][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.182291][T10555] __nla_validate_parse: 2 callbacks suppressed [ 226.182303][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1022'. [ 226.287385][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1022'. [ 226.559016][ T40] audit: type=1326 audit(1761817069.736:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.8.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 226.574416][ T40] audit: type=1326 audit(1761817069.736:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.8.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 226.582190][ T40] audit: type=1326 audit(1761817069.736:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.8.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 226.590258][ T40] audit: type=1326 audit(1761817069.736:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.8.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 226.596949][ T40] audit: type=1326 audit(1761817069.736:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.8.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 226.603928][ T40] audit: type=1326 audit(1761817069.736:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.8.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 226.611766][ T40] audit: type=1326 audit(1761817069.736:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.8.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 226.621220][ T40] audit: type=1326 audit(1761817069.746:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.8.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 226.629825][ T40] audit: type=1326 audit(1761817069.746:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.8.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 226.636879][ T40] audit: type=1326 audit(1761817069.746:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.8.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 226.909207][T10568] trusted_key: syz.6.1027 sent an empty control message without MSG_MORE. [ 227.885999][T10602] netlink: 'syz.6.1034': attribute type 4 has an invalid length. [ 227.888259][T10023] vhci_hcd: vhci_device speed not set [ 227.897067][T10602] sp0: Synchronizing with TNC [ 227.906386][T10602] geneve2: entered promiscuous mode [ 227.911597][T10602] geneve2: entered allmulticast mode [ 228.301369][T10605] overlayfs: failed lookup in lower (newroot/40, name='bus', err=-40): overlapping layers [ 228.659140][T10623] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1041'. [ 228.969239][ T60] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 229.119312][ T60] usb 8-1: Using ep0 maxpacket: 32 [ 229.124234][ T60] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 229.127756][ T60] usb 8-1: config 0 has no interface number 0 [ 229.137374][ T60] usb 8-1: config 0 interface 12 has no altsetting 0 [ 229.141852][ T60] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 229.145096][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.148450][ T60] usb 8-1: Product: syz [ 229.150460][ T60] usb 8-1: Manufacturer: syz [ 229.153032][ T60] usb 8-1: SerialNumber: syz [ 229.161032][ T60] usb 8-1: config 0 descriptor?? [ 229.179465][ T29] vhci_hcd: vhci_device speed not set [ 229.442949][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1043'. [ 229.709497][T10635] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 229.711846][T10635] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 229.715092][T10635] vhci_hcd vhci_hcd.0: Device attached [ 229.719478][T10636] usbip_core: unknown command [ 229.721387][T10636] vhci_hcd: unknown pdu 0 [ 229.722768][T10636] usbip_core: unknown command [ 229.724397][ T9645] vhci_hcd: stop threads [ 229.725738][ T9645] vhci_hcd: release socket [ 229.727172][ T9645] vhci_hcd: disconnect device [ 229.784509][T10623] netlink: 'syz.3.1041': attribute type 11 has an invalid length. [ 229.799814][ T60] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 229.810351][ T60] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 229.813529][ T60] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 229.816061][ T60] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 229.823475][ T60] usb 8-1: USB disconnect, device number 9 [ 230.577519][T10640] sctp: [Deprecated]: syz.7.1044 (pid 10640) Use of int in max_burst socket option. [ 230.577519][T10640] Use struct sctp_assoc_value instead [ 230.582566][T10640] netlink: 'syz.7.1044': attribute type 13 has an invalid length. [ 230.801916][T10640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.573563][T10664] syzkaller1: entered promiscuous mode [ 231.575456][T10664] syzkaller1: entered allmulticast mode [ 232.214100][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1054'. [ 232.437958][ C2] hpet_rtc_timer_reinit: 22 callbacks suppressed [ 232.437989][ C2] hpet: Lost 2 RTC interrupts [ 232.452970][ T40] audit: type=1804 audit(1761817075.781:2817): pid=10685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1054" name="/newroot/46/file0" dev="tmpfs" ino=273 res=1 errno=0 [ 233.325202][T10695] can0: slcan on ptm0. [ 233.376169][T10694] can0 (unregistered): slcan off ptm0. [ 233.489398][T10700] Set syz0 is full, maxelem 0 reached [ 234.185090][T10717] lo: entered allmulticast mode [ 234.196572][T10717] dvmrp8: entered allmulticast mode [ 235.129931][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1065'. [ 235.145652][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1066'. [ 235.209187][ T40] audit: type=1804 audit(1761817078.548:2818): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1066" name="/newroot/45/file0" dev="tmpfs" ino=257 res=1 errno=0 [ 235.414566][T10734] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1067'. [ 235.900216][T10741] program syz.8.1067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.907405][T10741] nfs: Unknown parameter 'text¶' [ 236.405695][ T40] audit: type=1326 audit(1761817079.737:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 236.412716][ T40] audit: type=1326 audit(1761817079.737:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 236.419955][ T40] audit: type=1326 audit(1761817079.737:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 236.429069][ T40] audit: type=1326 audit(1761817079.737:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 236.439902][ T40] audit: type=1326 audit(1761817079.737:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 236.447561][ T40] audit: type=1326 audit(1761817079.737:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 236.454570][ T40] audit: type=1326 audit(1761817079.737:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 236.884334][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'. [ 237.053041][T10790] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1080'. [ 237.446682][ T40] kauditd_printk_skb: 2635 callbacks suppressed [ 237.446713][ T40] audit: type=1326 audit(1761817080.776:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 237.466492][ T40] audit: type=1326 audit(1761817080.786:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 237.475475][ T40] audit: type=1326 audit(1761817080.796:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 237.490230][ T40] audit: type=1326 audit(1761817080.796:5464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 237.502375][ T40] audit: type=1326 audit(1761817080.796:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 237.511763][ T40] audit: type=1326 audit(1761817080.796:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 237.519468][ T40] audit: type=1326 audit(1761817080.796:5467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 237.528266][ T40] audit: type=1326 audit(1761817080.796:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 237.537163][ T40] audit: type=1326 audit(1761817080.796:5469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 237.544473][ T40] audit: type=1326 audit(1761817080.796:5470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.8.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 237.926672][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1080'. [ 238.149430][T10808] netlink: 134788 bytes leftover after parsing attributes in process `syz.7.1085'. [ 238.244167][T10810] netlink: 'syz.7.1086': attribute type 4 has an invalid length. [ 238.510547][T10816] tmpfs: User quota inode hardlimit too large. [ 240.172767][T10864] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1099'. [ 240.528954][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1099'. [ 240.528971][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1099'. [ 240.546176][T10864] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 240.549631][T10864] bond1 (unregistering): Released all slaves [ 240.710120][T10879] rdma_rxe: rxe_newlink: failed to add bond0 [ 240.815333][T10884] syz_tun: entered allmulticast mode [ 240.836759][T10883] syz_tun: left allmulticast mode [ 240.950154][ T10] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 241.137790][ T10] usb 12-1: config 4 has an invalid interface number: 28 but max is 0 [ 241.140970][ T10] usb 12-1: config 4 has no interface number 0 [ 241.169256][ T10] usb 12-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 241.176580][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.276521][ T10] usb 12-1: Product: syz [ 241.294182][ T10] usb 12-1: Manufacturer: syz [ 241.344022][ T10] usb 12-1: SerialNumber: syz [ 241.671583][ T10] input: bcm5974 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:4.28/input/input22 [ 241.891464][ T5333] bcm5974 12-1:4.28: could not read from device [ 241.931981][ T5333] bcm5974 12-1:4.28: could not read from device [ 241.943285][ T10] bcm5974 12-1:4.28: could not read from device [ 241.956387][ T10] input: failed to attach handler mousedev to device input22, error: -5 [ 241.963902][ T5333] bcm5974 12-1:4.28: could not read from device [ 241.974133][ T10] usb 12-1: USB disconnect, device number 2 [ 241.984954][ T5333] bcm5974 12-1:4.28: could not read from device [ 242.334002][T10888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.711462][T10917] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 242.713520][T10917] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 242.716094][T10917] vhci_hcd vhci_hcd.0: Device attached [ 242.720951][T10921] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(10) [ 242.723074][T10921] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 242.821326][T10921] vhci_hcd vhci_hcd.0: Device attached [ 243.013013][ T40] kauditd_printk_skb: 6330 callbacks suppressed [ 243.013029][ T40] audit: type=1326 audit(1761817086.331:11801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10916 comm="syz.7.1112" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x0 [ 243.052290][T10927] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 243.057644][T10927] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 243.257177][ T5995] usb 52-1: SetAddress Request (2) to port 0 [ 243.259278][ T5995] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 243.439972][T10938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1117'. [ 243.503471][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1117'. [ 243.836932][T10924] vhci_hcd: connection closed [ 243.837036][T10922] vhci_hcd: connection reset by peer [ 243.841116][ T9633] vhci_hcd: stop threads [ 243.842727][ T9633] vhci_hcd: release socket [ 243.844618][ T9633] vhci_hcd: disconnect device [ 243.846749][ T9633] vhci_hcd: stop threads [ 243.848391][ T9633] vhci_hcd: release socket [ 243.850343][ T9633] vhci_hcd: disconnect device [ 244.483575][T10945] block device autoloading is deprecated and will be removed. [ 245.943488][T10998] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 245.945734][T10998] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 245.957872][T10998] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 247.282831][T11026] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 247.285633][T11026] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 247.288702][T11026] vhci_hcd vhci_hcd.0: Device attached [ 247.294883][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1133'. [ 247.345793][T11026] fuse: Bad value for 'user_id' [ 247.347811][T11026] fuse: Bad value for 'user_id' [ 247.351442][T11041] vhci_hcd: connection closed [ 247.353879][T10993] vhci_hcd: stop threads [ 247.375242][T10993] vhci_hcd: release socket [ 247.377187][T10993] vhci_hcd: disconnect device [ 247.515813][ T6008] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 247.836831][ T6008] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 247.839559][ T6008] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 247.843007][ T6008] usb 11-1: config 0 interface 0 has no altsetting 0 [ 247.847552][ T6008] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 247.850533][ T6008] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 247.853157][ T6008] usb 11-1: Product: syz [ 247.854545][ T6008] usb 11-1: Manufacturer: syz [ 247.856466][ T6008] usb 11-1: SerialNumber: syz [ 247.891658][ T6008] usb 11-1: config 0 descriptor?? [ 247.916463][ T6008] hub 11-1:0.0: bad descriptor, ignoring hub [ 247.918419][ T6008] hub 11-1:0.0: probe with driver hub failed with error -5 [ 247.925589][ T5958] Bluetooth: hci4: command 0x0419 tx timeout [ 247.942606][ T6008] usb 11-1: selecting invalid altsetting 0 [ 248.015909][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 248.015929][ T5950] Bluetooth: hci1: command 0x040f tx timeout [ 248.397455][ T5995] usb 52-1: device descriptor read/8, error -110 [ 248.487973][T11058] sp0: Synchronizing with TNC [ 248.538377][T11039] usb 11-1: reset high-speed USB device number 2 using dummy_hcd [ 248.544706][T11039] usb 11-1: device reset changed ep0 maxpacket size! [ 248.550833][T10023] usb 11-1: USB disconnect, device number 2 [ 248.716305][T10023] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 248.838808][ T5995] usb usb52-port1: attempt power cycle [ 248.876558][T10023] usb 11-1: Using ep0 maxpacket: 8 [ 248.957044][T10023] usb 11-1: unable to get BOS descriptor or descriptor too short [ 248.980699][T10023] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 248.983657][T10023] usb 11-1: can't read configurations, error -71 [ 249.409520][ T5995] usb usb52-port1: unable to enumerate USB device [ 250.094474][ T119] block nbd1: Possible stuck request ffff888025b30000: control (read@0,1024B). Runtime 30 seconds [ 250.099002][ T119] block nbd1: Possible stuck request ffff888025b301c0: control (read@1024,1024B). Runtime 30 seconds [ 250.102748][ T119] block nbd1: Possible stuck request ffff888025b30380: control (read@2048,1024B). Runtime 30 seconds [ 250.107732][ T119] block nbd1: Possible stuck request ffff888025b30540: control (read@3072,1024B). Runtime 30 seconds [ 250.712158][T11098] binder: 11096:11098 ioctl 0 0 returned -22 [ 250.893545][T11101] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 250.895613][T11101] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 250.905069][T11101] vhci_hcd vhci_hcd.0: Device attached [ 251.019458][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1150'. [ 251.074359][T11110] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1151'. [ 251.081466][T11107] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1150'. [ 251.093916][ T6008] IPVS: starting estimator thread 0... [ 251.097131][T11106] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 251.110575][T11106] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1150'. [ 251.196395][ T5995] usb 44-1: SetAddress Request (18) to port 0 [ 251.199236][ T5995] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 251.208491][T11102] vhci_hcd: connection closed [ 251.208944][T10970] vhci_hcd: stop threads [ 251.217167][T11111] IPVS: using max 44 ests per chain, 105600 per kthread [ 251.219543][T10970] vhci_hcd: release socket [ 251.232295][T10970] vhci_hcd: disconnect device [ 251.236166][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1151'. [ 252.144100][T11128] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 252.146919][T11128] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 252.151679][T11128] vhci_hcd vhci_hcd.0: Device attached [ 252.749736][T11131] vhci_hcd: connection reset by peer [ 252.754403][T10972] vhci_hcd: stop threads [ 252.755999][T10972] vhci_hcd: release socket [ 252.758311][T10972] vhci_hcd: disconnect device [ 253.331393][T11145] ntfs3(sr0): Primary boot signature is not NTFS. [ 253.334035][T11145] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 253.783441][T11160] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 253.786085][T11160] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 253.789649][T11160] vhci_hcd vhci_hcd.0: Device attached [ 254.060933][T10023] usb 52-1: SetAddress Request (6) to port 0 [ 254.063526][T10023] usb 52-1: new SuperSpeed USB device number 6 using vhci_hcd [ 254.382582][T11161] vhci_hcd: connection reset by peer [ 254.384386][T10970] vhci_hcd: stop threads [ 254.385785][T10970] vhci_hcd: release socket [ 254.387339][T10970] vhci_hcd: disconnect device [ 254.795699][T11177] veth0_macvtap: left promiscuous mode [ 254.798112][T11177] veth0_macvtap: entered promiscuous mode [ 254.800477][T11177] veth0_macvtap: entered allmulticast mode [ 255.215838][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.243092][T11187] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 255.245625][T11187] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 255.248782][T11187] vhci_hcd vhci_hcd.0: Device attached [ 255.466885][T11195] netlink: 'syz.3.1165': attribute type 21 has an invalid length. [ 255.469619][T11195] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1165'. [ 255.542060][ T29] usb 54-1: SetAddress Request (6) to port 0 [ 255.544173][ T29] usb 54-1: new SuperSpeed USB device number 6 using vhci_hcd [ 255.798306][T11188] vhci_hcd: connection reset by peer [ 255.800523][T11064] vhci_hcd: stop threads [ 255.802271][T11064] vhci_hcd: release socket [ 255.803948][T11064] vhci_hcd: disconnect device [ 255.865886][T11194] policy can only be matched on NF_INET_PRE_ROUTING [ 255.865902][T11194] unable to load match [ 256.276233][ T5995] usb 44-1: device descriptor read/8, error -110 [ 256.477373][T11204] ceph: No mds server is up or the cluster is laggy [ 256.501984][T11207] vxfs: WRONG superblock magic 00000000 at 1 [ 256.504718][T11207] vxfs: WRONG superblock magic 00000000 at 8 [ 256.506651][T11207] vxfs: can't find superblock. [ 256.664340][ T5995] usb usb44-port1: attempt power cycle [ 257.206823][T11227] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1176'. [ 257.288078][ T5995] usb usb44-port1: unable to enumerate USB device [ 257.908885][T11247] netlink: 'syz.8.1181': attribute type 1 has an invalid length. [ 257.924699][T11247] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.939798][T11248] bond3: (slave gretap1): making interface the new active one [ 257.943290][T11248] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 259.134845][T10023] usb 52-1: device descriptor read/8, error -110 [ 259.555501][T10023] usb usb52-port1: attempt power cycle [ 260.141369][T10023] usb usb52-port1: unable to enumerate USB device [ 260.191297][T11282] vxfs: unable to read disk superblock at 1 [ 260.199327][T11282] vxfs: unable to read disk superblock at 8 [ 260.201389][T11282] vxfs: can't find superblock. [ 260.574830][ T29] usb 54-1: device descriptor read/8, error -110 [ 260.851807][T11298] gfs2: path_lookup on € returned error -2 [ 260.908860][T11298] netlink: 'syz.8.1192': attribute type 39 has an invalid length. [ 260.979077][ T29] usb usb54-port1: attempt power cycle [ 261.560708][ T29] usb usb54-port1: unable to enumerate USB device [ 262.219546][T11330] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 262.222800][T11331] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1201'. [ 262.439455][T11338] sp0: Synchronizing with TNC [ 262.934732][ T5950] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 263.495115][T11362] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 263.554378][ T4413] libceph: connect (1)[c::]:6789 error -101 [ 263.558665][ T4413] libceph: mon0 (1)[c::]:6789 connect error [ 263.589656][T11363] ceph: No mds server is up or the cluster is laggy [ 263.604552][T11366] vxfs: WRONG superblock magic 00000000 at 1 [ 263.607052][T11366] vxfs: WRONG superblock magic 00000000 at 8 [ 263.608978][T11366] vxfs: can't find superblock. [ 264.012540][T11370] vivid-003: ================= START STATUS ================= [ 264.015281][T11370] vivid-003: FM Deviation: 75000 [ 264.016924][T11370] vivid-003: ================== END STATUS ================== [ 264.139244][T11373] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 264.151314][T11373] CIFS mount error: No usable UNC path provided in device string! [ 264.151314][T11373] [ 264.156284][T11373] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 264.798301][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'. [ 264.991760][T11399] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1218'. [ 265.300200][ T40] audit: type=1800 audit(1761817108.618:11802): pid=11410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1221" name="SYSV798dd82c" dev="tmpfs" ino=0 res=0 errno=0 [ 266.312945][T11418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.036432][ T5950] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 267.169078][T11437] serio: Serial port ptm0 [ 267.224837][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1227'. [ 268.193354][T11435] team0 (unregistering): Port device team_slave_0 removed [ 268.196034][T11448] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 268.216996][T11435] team0 (unregistering): Port device team_slave_1 removed [ 268.339514][T11448] siw: device registration error -23 [ 269.045828][T11469] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.069557][T11465] 9pnet: Could not find request transport: fd¾fdno=0x0000000000000003 [ 269.367468][T11469] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.476887][T11469] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.566575][T11469] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.749571][T11064] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.786502][ T9639] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.812900][ T9639] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.829539][ T9639] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.051898][T11482] vxfs: unable to read disk superblock at 1 [ 271.056066][T11482] vxfs: unable to read disk superblock at 8 [ 271.059124][T11482] vxfs: can't find superblock. [ 271.170801][ T5950] Bluetooth: hci4: command 0x0419 tx timeout [ 271.744450][T11492] hpfs: Bad magic ... probably not HPFS [ 272.001840][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 272.256234][T11492] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 272.260789][T11520] netlink: 'syz.3.1246': attribute type 1 has an invalid length. [ 272.405035][T11518] nbd2: detected capacity change from 0 to 8589934655 [ 272.423313][ T5950] block nbd2: Receive control failed (result -104) [ 273.275657][T11538] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 273.278948][T10023] kernel write not supported for file /audio (pid: 10023 comm: kworker/0:5) [ 273.283311][T11539] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 273.287264][T10023] kernel write not supported for file /audio (pid: 10023 comm: kworker/0:5) [ 273.470838][T11548] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 273.479900][T11548] bridge0: entered promiscuous mode [ 273.487554][T11548] macvlan2: entered promiscuous mode [ 273.495596][T11548] bridge0: port 3(macvlan2) entered blocking state [ 273.497770][T11548] bridge0: port 3(macvlan2) entered disabled state [ 273.499700][T11548] macvlan2: entered allmulticast mode [ 273.501419][T11548] bridge0: entered allmulticast mode [ 273.514913][T11548] macvlan2: left allmulticast mode [ 273.516565][T11548] bridge0: left allmulticast mode [ 273.518885][T11548] bridge0: left promiscuous mode [ 273.773888][T11554] CIFS mount error: No usable UNC path provided in device string! [ 273.773888][T11554] [ 273.786470][T11554] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 274.034128][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 274.037329][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 274.126613][T11558] ceph: No mds server is up or the cluster is laggy [ 274.677767][T11576] tmpfs: Bad value for 'uid' [ 274.679617][T11576] tmpfs: Bad value for 'uid' [ 275.004867][T11577] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 275.007004][T11577] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 275.013233][T11577] vhci_hcd vhci_hcd.0: Device attached [ 275.126654][T11585] netlink: 'syz.6.1263': attribute type 1 has an invalid length. [ 275.156216][T11583] nbd3: detected capacity change from 0 to 8589934655 [ 275.166041][ T5950] block nbd3: Receive control failed (result -104) [ 275.232078][T11594] input: syz1 as /devices/virtual/input/input27 [ 275.284668][ T29] usb 52-1: SetAddress Request (10) to port 0 [ 275.287405][ T29] usb 52-1: new SuperSpeed USB device number 10 using vhci_hcd [ 275.496174][T11578] vhci_hcd: connection reset by peer [ 275.499090][ T9639] vhci_hcd: stop threads [ 275.500819][ T9639] vhci_hcd: release socket [ 275.503769][ T9639] vhci_hcd: disconnect device [ 275.507374][T11604] syz1: rxe_newlink: already configured on syz_tun [ 275.523734][T11605] binder: 11593:11605 ioctl 50009401 80000700 returned -22 [ 275.732389][T11604] netlink: 'syz.3.1268': attribute type 1 has an invalid length. [ 276.186890][ T40] audit: type=1326 audit(1761817119.508:11803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.6.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 276.204459][ T40] audit: type=1326 audit(1761817119.508:11804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.6.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 276.215370][ T40] audit: type=1326 audit(1761817119.518:11805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.6.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 276.224361][ T40] audit: type=1326 audit(1761817119.518:11806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.6.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 276.231738][ T40] audit: type=1326 audit(1761817119.518:11807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.6.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 276.239049][ T40] audit: type=1326 audit(1761817119.518:11808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.6.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 276.242572][ T5950] Bluetooth: hci4: unexpected event for opcode 0x0410 [ 276.245967][ T40] audit: type=1326 audit(1761817119.518:11809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.6.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 276.245992][ T40] audit: type=1326 audit(1761817119.518:11810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.6.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 276.246014][ T40] audit: type=1326 audit(1761817119.518:11811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.6.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=7 compat=1 ip=0x80000006 code=0x7ffc0000 [ 276.272558][ T40] audit: type=1326 audit(1761817119.518:11812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.6.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 276.652517][T11632] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 276.654686][T11632] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 276.673881][T11632] vhci_hcd vhci_hcd.0: Device attached [ 276.886407][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1273'. [ 276.965265][ T5995] usb 50-1: SetAddress Request (6) to port 0 [ 276.974815][ T5995] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 277.237431][T11643] netlink: 'syz.7.1275': attribute type 1 has an invalid length. [ 277.247957][T11633] vhci_hcd: connection reset by peer [ 277.250272][ T12] vhci_hcd: stop threads [ 277.251687][ T12] vhci_hcd: release socket [ 277.253237][ T12] vhci_hcd: disconnect device [ 277.274671][T11642] nbd4: detected capacity change from 0 to 8589934655 [ 277.280151][ T5950] block nbd4: Receive control failed (result -104) [ 277.421989][T11649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.480850][T11649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.892304][T11653] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 277.895108][T11653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 277.898631][T11653] vhci_hcd vhci_hcd.0: Device attached [ 277.975133][T11653] 9pnet_fd: Insufficient options for proto=fd [ 278.288089][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1279'. [ 278.738897][T11666] netlink: 'syz.3.1281': attribute type 13 has an invalid length. [ 279.152090][T11672] syzkaller0: entered promiscuous mode [ 279.154460][T11672] syzkaller0: entered allmulticast mode [ 279.160006][T11672] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1283'. [ 279.229201][T11654] vhci_hcd: connection closed [ 279.234701][T10977] vhci_hcd: stop threads [ 279.238357][T10977] vhci_hcd: release socket [ 279.251601][T10977] vhci_hcd: disconnect device [ 279.599960][T11681] blktrace: Concurrent blktraces are not allowed on nullb0 [ 279.605257][T11681] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 279.607427][T11681] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 279.609863][T11681] vhci_hcd vhci_hcd.0: Device attached [ 279.617674][T11681] batman_adv: batadv0: Adding interface: gretap1 [ 279.620868][T11681] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.630496][T11681] batman_adv: batadv0: Interface activated: gretap1 [ 279.637748][T11689] vhci_hcd: connection closed [ 279.637922][T10972] vhci_hcd: stop threads [ 279.641770][T10972] vhci_hcd: release socket [ 279.643725][T10972] vhci_hcd: disconnect device [ 280.175858][ T6039] block nbd1: Possible stuck request ffff888025b30000: control (read@0,1024B). Runtime 60 seconds [ 280.180307][ T6039] block nbd1: Possible stuck request ffff888025b301c0: control (read@1024,1024B). Runtime 60 seconds [ 280.185413][ T6039] block nbd1: Possible stuck request ffff888025b30380: control (read@2048,1024B). Runtime 60 seconds [ 280.189952][ T6039] block nbd1: Possible stuck request ffff888025b30540: control (read@3072,1024B). Runtime 60 seconds [ 280.215826][ T9640] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.218496][ T9640] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.230313][ T9640] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.233049][ T9640] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.335461][ T29] usb 52-1: device descriptor read/8, error -110 [ 280.720460][T11737] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 280.772607][ T6039] block nbd2: Connection timed out, retrying (0/1 alive) [ 280.776896][ T6039] block nbd2: Connection timed out, retrying (0/1 alive) [ 280.784956][ T6039] block nbd2: Connection timed out, retrying (0/1 alive) [ 280.793844][ T6039] block nbd2: Connection timed out, retrying (0/1 alive) [ 280.803257][ T25] block nbd2: Dead connection, failed to find a fallback [ 280.812678][ T25] block nbd2: shutting down sockets [ 280.821406][ T25] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.844093][ T25] buffer_io_error: 39 callbacks suppressed [ 280.844110][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 280.866513][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.876209][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 280.891737][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.901818][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 280.910926][ T25] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.955874][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 280.960431][ T6223] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.964753][ T6223] Buffer I/O error on dev nbd2, logical block 0, async page read [ 280.971686][ T6223] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.987729][ T6223] Buffer I/O error on dev nbd2, logical block 1, async page read [ 280.990722][ T6223] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.993932][ T6223] Buffer I/O error on dev nbd2, logical block 2, async page read [ 280.999788][ T6223] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.003218][ T6223] Buffer I/O error on dev nbd2, logical block 3, async page read [ 281.006519][ T6223] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.013214][ T6223] Buffer I/O error on dev nbd2, logical block 0, async page read [ 281.024905][ T6223] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.029257][ T6223] Buffer I/O error on dev nbd2, logical block 1, async page read [ 281.042310][T11741] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 281.044481][ T6223] ldm_validate_partition_table(): Disk read failed. [ 281.053248][ T6223] Dev nbd2: unable to read RDB block 0 [ 281.062360][ T6223] nbd2: unable to read partition table [ 281.228077][ T6223] ldm_validate_partition_table(): Disk read failed. [ 281.231229][ T6223] Dev nbd2: unable to read RDB block 0 [ 281.234364][ T6223] nbd2: unable to read partition table [ 281.288670][ T29] usb usb52-port1: attempt power cycle [ 281.616614][ T6008] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 281.776577][ T6008] usb 11-1: unable to get BOS descriptor or descriptor too short [ 281.780661][ T6008] usb 11-1: config 12 has an invalid interface number: 40 but max is 0 [ 281.783895][ T6008] usb 11-1: config 12 has no interface number 0 [ 281.786559][ T6008] usb 11-1: config 12 interface 40 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 281.790850][ T6008] usb 11-1: config 12 interface 40 has no altsetting 0 [ 281.795536][ T6008] usb 11-1: New USB device found, idVendor=0bb4, idProduct=0a9b, bcdDevice=bd.2b [ 281.799175][ T6008] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.802313][ T6008] usb 11-1: Product: syz [ 281.804024][ T6008] usb 11-1: Manufacturer: syz [ 281.806011][ T6008] usb 11-1: SerialNumber: syz [ 281.857806][ T29] usb usb52-port1: unable to enumerate USB device [ 282.014872][ T5995] usb 50-1: device descriptor read/8, error -110 [ 282.051173][ T6008] usb 11-1: USB disconnect, device number 5 [ 282.414785][T11763] comedi comedi0: reset error (fatal) [ 282.512633][T11771] input: syz1 as /devices/virtual/input/input28 [ 282.515049][T11771] input: failed to attach handler leds to device input28, error: -6 [ 282.598295][ T5995] usb usb50-port1: attempt power cycle [ 282.609280][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1313'. [ 282.674679][ T6437] vhci_hcd: vhci_device speed not set [ 282.720902][T11780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.723231][T11780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.726952][T11780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.729271][T11780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.106843][T11787] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 283.768334][ T25] block nbd3: Connection timed out, retrying (0/1 alive) [ 283.770628][ T25] block nbd3: Connection timed out, retrying (0/1 alive) [ 283.772842][ T25] block nbd3: Connection timed out, retrying (0/1 alive) [ 283.775570][ T25] block nbd3: Connection timed out, retrying (0/1 alive) [ 283.778716][ T25] block nbd3: Dead connection, failed to find a fallback [ 283.780911][ T25] block nbd3: shutting down sockets [ 283.786519][ T6224] ldm_validate_partition_table(): Disk read failed. [ 283.789958][ T6224] Dev nbd3: unable to read RDB block 0 [ 283.793087][ T6224] nbd3: unable to read partition table [ 283.827750][ T6224] ldm_validate_partition_table(): Disk read failed. [ 283.834974][ T6224] Dev nbd3: unable to read RDB block 0 [ 283.845095][ T6224] nbd3: unable to read partition table [ 284.566832][T11814] wireguard0: entered promiscuous mode [ 284.568683][T11814] wireguard0: entered allmulticast mode [ 284.929314][ T5995] usb usb50-port1: unable to enumerate USB device [ 285.178537][T11827] gretap2: entered allmulticast mode [ 285.328724][T11813] Process accounting resumed [ 285.366002][ T25] block nbd4: Connection timed out, retrying (0/1 alive) [ 285.368501][ T25] block nbd4: Connection timed out, retrying (0/1 alive) [ 285.371267][ T25] block nbd4: Dead connection, failed to find a fallback [ 285.373851][ T25] block nbd4: shutting down sockets [ 285.378958][ T7272] ldm_validate_partition_table(): Disk read failed. [ 285.383713][ T7272] Dev nbd4: unable to read RDB block 0 [ 285.406524][ T7272] nbd4: unable to read partition table [ 285.435723][ T7272] ldm_validate_partition_table(): Disk read failed. [ 285.438671][ T7272] Dev nbd4: unable to read RDB block 0 [ 285.441184][ T7272] nbd4: unable to read partition table [ 285.640774][T11852] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 285.732477][T11849] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.736345][T11849] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 285.739848][T11849] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.742591][T11849] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 285.747716][T11849] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 285.750341][T11849] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 285.752934][T11849] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 285.756329][T11849] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 285.759888][T11849] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 287.328565][T11881] input: syz0 as /devices/virtual/input/input29 [ 287.358175][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1341'. [ 287.467759][ T5950] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 287.471007][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203e [ 287.747772][ T5950] Bluetooth: hci4: unexpected event for opcode 0x0c12 [ 287.934821][T10023] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 287.953819][T11893] serio: Serial port ptm0 [ 288.095497][T10023] usb 13-1: Using ep0 maxpacket: 8 [ 288.099760][T10023] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 288.104161][T10023] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 288.114708][T10023] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 288.118406][T10023] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 288.122334][T10023] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.129142][T10023] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.132996][T10023] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.140307][T10023] usbtmc 13-1:16.0: probe with driver usbtmc failed with error -22 [ 288.426218][ T4413] usb 13-1: USB disconnect, device number 2 [ 288.480994][T11922] serio: Serial port ptm1 [ 288.815700][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1350'. [ 289.024323][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 289.024339][ T40] audit: type=1326 audit(1761817132.338:11814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11926 comm="syz.8.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 289.037945][ T40] audit: type=1326 audit(1761817132.338:11815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11926 comm="syz.8.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 289.046292][ T40] audit: type=1326 audit(1761817132.338:11816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11926 comm="syz.8.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 289.055245][ T40] audit: type=1326 audit(1761817132.338:11817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11926 comm="syz.8.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 289.063293][ T40] audit: type=1326 audit(1761817132.338:11818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11926 comm="syz.8.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 289.072065][ T40] audit: type=1326 audit(1761817132.338:11819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11926 comm="syz.8.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 289.080674][ T40] audit: type=1326 audit(1761817132.338:11820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11926 comm="syz.8.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 289.089860][ T40] audit: type=1326 audit(1761817132.338:11821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11926 comm="syz.8.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 289.107245][ T40] audit: type=1326 audit(1761817132.338:11822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11926 comm="syz.8.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 289.119248][ T40] audit: type=1326 audit(1761817132.338:11823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11926 comm="syz.8.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 289.898818][T11954] 9pnet_virtio: no channels available for device syz [ 290.226697][T11968] tipc: Started in network mode [ 290.228814][T11968] tipc: Node identity daae6f6e26d9, cluster identity 4711 [ 290.231308][T11968] tipc: Enabled bearer , priority 0 [ 290.235083][T11968] syzkaller0: entered promiscuous mode [ 290.237277][T11968] syzkaller0: entered allmulticast mode [ 290.261489][T11968] tipc: Resetting bearer [ 290.274406][T11968] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 290.277154][T11968] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.277504][T11969] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1361'. [ 290.281796][T11968] vhci_hcd vhci_hcd.0: Device attached [ 290.283599][T11969] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1361'. [ 290.534779][ T978] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 290.537273][T10131] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 290.684886][ T978] usb 8-1: Using ep0 maxpacket: 16 [ 290.689987][ T978] usb 8-1: config 0 has no interfaces? [ 290.692353][ T978] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 290.696296][ T978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.703113][ T978] usb 8-1: config 0 descriptor?? [ 290.907950][T11974] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 290.910937][T10990] vhci_hcd: stop threads [ 290.911459][ T978] usb 8-1: USB disconnect, device number 10 [ 290.912684][T10990] vhci_hcd: release socket [ 290.916123][T11967] tipc: Resetting bearer [ 290.917013][T10990] vhci_hcd: disconnect device [ 290.927878][T11967] tipc: Disabling bearer [ 291.048513][T11983] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1374'. [ 291.137587][T11986] Mount JFS Failure: -22 [ 291.138958][T11986] jfs_mount failed w/return code = -22 [ 291.181138][T10970] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.186955][T10972] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.190187][T10972] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.193715][T10972] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.409927][T12002] vxfs: unable to read disk superblock at 1 [ 291.411915][T12002] vxfs: unable to read disk superblock at 8 [ 291.413803][T12002] vxfs: can't find superblock. [ 291.537105][ T5950] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 291.540434][ T5950] Bluetooth: hci3: Injecting HCI hardware error event [ 291.547325][ T5958] Bluetooth: hci3: hardware error 0x00 [ 292.201928][T12030] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1376'. [ 293.102582][ T5950] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 293.178646][T12057] serio: Serial port ptm0 [ 293.415535][T11064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.418656][T11064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.445283][ T978] ------------[ cut here ]------------ [ 293.447460][ T978] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 293.451295][ T978] WARNING: CPU: 2 PID: 978 at net/mac80211/rate.c:401 __rate_control_send_low+0x667/0x780 [ 293.454492][ T978] Modules linked in: [ 293.456236][ T978] CPU: 2 UID: 0 PID: 978 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 293.460645][ T978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.464367][ T978] Workqueue: mld mld_ifc_work [ 293.465920][ T978] RIP: 0010:__rate_control_send_low+0x667/0x780 [ 293.467939][ T978] Code: a4 a0 d4 00 00 00 e8 e8 86 e9 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 00 03 e3 8c e8 4a 08 a8 f6 90 <0f> 0b 90 90 e9 20 fd ff ff 48 8b 3c 24 e8 b7 1d 51 f7 e9 f5 fc ff [ 293.474113][ T978] RSP: 0018:ffffc90006566a50 EFLAGS: 00010286 [ 293.476080][ T978] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817aee58 [ 293.478546][ T978] RDX: ffff888025a84900 RSI: ffffffff817aee65 RDI: 0000000000000001 [ 293.481409][ T978] RBP: ffff88801304d068 R08: 0000000000000001 R09: 0000000000000000 [ 293.483939][ T978] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000ffffffff [ 293.486537][ T978] R13: 0000000000000000 R14: 000000000000000c R15: ffff88801304d070 [ 293.489006][ T978] FS: 0000000000000000(0000) GS:ffff888097a10000(0000) knlGS:0000000000000000 [ 293.491785][ T978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.493926][ T978] CR2: 00000000f7427b84 CR3: 000000006bfa2000 CR4: 0000000000352ef0 [ 293.496869][ T978] Call Trace: [ 293.497935][ T978] [ 293.498887][ T978] rate_control_send_low+0x52a/0x810 [ 293.500527][ T978] rate_control_get_rate+0x1be/0x5e0 [ 293.502131][ T978] ieee80211_tx_h_rate_ctrl+0xa35/0x1ae0 [ 293.503884][ T978] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 293.505882][ T978] invoke_tx_handlers_late+0x1172/0x27d0 [ 293.507690][ T978] ? find_held_lock+0x2b/0x80 [ 293.509175][ T978] ? ieee80211_tx_h_select_key+0x2c9/0x1bc0 [ 293.511440][ T978] ieee80211_tx_dequeue+0x3086/0x43f0 [ 293.513387][ T978] ? __lock_acquire+0xb8a/0x1c90 [ 293.515273][ T978] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 293.517132][ T978] ? do_raw_spin_lock+0x12c/0x2b0 [ 293.518945][ T978] ? ieee80211_next_txq+0xda/0xa50 [ 293.520771][ T978] ieee80211_handle_wake_tx_queue+0x19c/0x260 [ 293.522937][ T978] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 293.525262][ T978] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 293.527948][ T978] ? mark_held_locks+0x49/0x80 [ 293.529689][ T978] ? __local_bh_enable_ip+0xa4/0x120 [ 293.531578][ T978] ieee80211_queue_skb+0x12b2/0x1fe0 [ 293.533584][ T978] ieee80211_tx+0x2e4/0x460 [ 293.535356][ T978] ? __pfx_ieee80211_tx+0x10/0x10 [ 293.537094][ T978] ? ieee80211_skb_resize+0x22a/0x630 [ 293.539054][ T978] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 293.541071][ T978] ieee80211_xmit+0x30f/0x3e0 [ 293.543278][ T978] __ieee80211_subif_start_xmit+0x880/0x1390 [ 293.545433][ T978] ? neigh_resolve_output+0x53a/0x940 [ 293.547436][ T978] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 293.549613][ T978] ? mld_sendpack+0xac1/0x1350 [ 293.551330][ T978] ? skb_network_protocol+0x126/0x6d0 [ 293.553101][ T978] ieee80211_subif_start_xmit+0x11b/0x1970 [ 293.555147][ T978] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 293.557966][ T978] ? dev_hard_start_xmit+0x97/0x740 [ 293.559855][ T978] dev_hard_start_xmit+0x97/0x740 [ 293.561604][ T978] __dev_queue_xmit+0xa46/0x4490 [ 293.563168][ T978] ? __pfx___schedule+0x10/0x10 [ 293.564797][ T978] ? __pfx___dev_queue_xmit+0x10/0x10 [ 293.566716][ T978] ? look_up_lock_class+0x6b/0x150 [ 293.568522][ T978] ? irqentry_exit+0x3b/0x90 [ 293.570235][ T978] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.572008][ T978] ? skb_push+0x13/0xf0 [ 293.573909][ T978] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 293.576191][ T978] ? __asan_memcpy+0x3c/0x60 [ 293.577842][ T978] ? eth_header+0x11c/0x1f0 [ 293.579426][ T978] neigh_resolve_output+0x53a/0x940 [ 293.581310][ T978] ip6_finish_output2+0xad1/0x1cf0 [ 293.582990][ T978] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 293.585386][ T978] __ip6_finish_output+0x3cd/0x1010 [ 293.587280][ T978] ip6_output+0x253/0x710 [ 293.589232][ T978] mld_sendpack+0xac1/0x1350 [ 293.590799][ T978] ? __pfx_mld_sendpack+0x10/0x10 [ 293.592338][ T978] mld_ifc_work+0x740/0xbf0 [ 293.593891][ T978] process_one_work+0x9cf/0x1b70 [ 293.595697][ T978] ? __pfx_process_one_work+0x10/0x10 [ 293.597638][ T978] ? assign_work+0x1a0/0x250 [ 293.599164][ T978] worker_thread+0x6c8/0xf10 [ 293.600625][ T978] ? __pfx_worker_thread+0x10/0x10 [ 293.602243][ T978] kthread+0x3c5/0x780 [ 293.603516][ T978] ? __pfx_kthread+0x10/0x10 [ 293.605463][ T978] ? rcu_is_watching+0x12/0xc0 [ 293.606994][ T978] ? __pfx_kthread+0x10/0x10 [ 293.608434][ T978] ret_from_fork+0x675/0x7d0 [ 293.609889][ T978] ? __pfx_kthread+0x10/0x10 [ 293.611338][ T978] ret_from_fork_asm+0x1a/0x30 [ 293.612834][ T978] [ 293.613827][ T978] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 293.616076][ T978] CPU: 2 UID: 0 PID: 978 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 293.618945][ T978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.622228][ T978] Workqueue: mld mld_ifc_work [ 293.623784][ T978] Call Trace: [ 293.624962][ T978] [ 293.626035][ T978] dump_stack_lvl+0x3d/0x1f0 [ 293.627730][ T978] vpanic+0x640/0x6f0 [ 293.629198][ T978] ? __rate_control_send_low+0x667/0x780 [ 293.631019][ T978] panic+0xca/0xd0 [ 293.632286][ T978] ? __pfx_panic+0x10/0x10 [ 293.633965][ T978] ? check_panic_on_warn+0x1f/0xb0 [ 293.635970][ T978] check_panic_on_warn+0xab/0xb0 [ 293.637917][ T978] __warn+0xf6/0x3c0 [ 293.639465][ T978] ? __pfx_vprintk_emit+0x10/0x10 [ 293.641440][ T978] ? __rate_control_send_low+0x667/0x780 [ 293.643582][ T978] report_bug+0x3c3/0x580 [ 293.645279][ T978] ? __rate_control_send_low+0x667/0x780 [ 293.647478][ T978] handle_bug+0x184/0x210 [ 293.649185][ T978] exc_invalid_op+0x17/0x50 [ 293.650988][ T978] asm_exc_invalid_op+0x1a/0x20 [ 293.652926][ T978] RIP: 0010:__rate_control_send_low+0x667/0x780 [ 293.655369][ T978] Code: a4 a0 d4 00 00 00 e8 e8 86 e9 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 00 03 e3 8c e8 4a 08 a8 f6 90 <0f> 0b 90 90 e9 20 fd ff ff 48 8b 3c 24 e8 b7 1d 51 f7 e9 f5 fc ff [ 293.663183][ T978] RSP: 0018:ffffc90006566a50 EFLAGS: 00010286 [ 293.665550][ T978] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817aee58 [ 293.668617][ T978] RDX: ffff888025a84900 RSI: ffffffff817aee65 RDI: 0000000000000001 [ 293.671604][ T978] RBP: ffff88801304d068 R08: 0000000000000001 R09: 0000000000000000 [ 293.674648][ T978] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000ffffffff [ 293.677685][ T978] R13: 0000000000000000 R14: 000000000000000c R15: ffff88801304d070 [ 293.680722][ T978] ? __warn_printk+0x198/0x350 [ 293.682613][ T978] ? __warn_printk+0x1a5/0x350 [ 293.684483][ T978] rate_control_send_low+0x52a/0x810 [ 293.686580][ T978] rate_control_get_rate+0x1be/0x5e0 [ 293.688664][ T978] ieee80211_tx_h_rate_ctrl+0xa35/0x1ae0 [ 293.690874][ T978] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 293.693327][ T978] invoke_tx_handlers_late+0x1172/0x27d0 [ 293.695465][ T978] ? find_held_lock+0x2b/0x80 [ 293.697254][ T978] ? ieee80211_tx_h_select_key+0x2c9/0x1bc0 [ 293.699144][ T978] ieee80211_tx_dequeue+0x3086/0x43f0 [ 293.700843][ T978] ? __lock_acquire+0xb8a/0x1c90 [ 293.702435][ T978] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 293.704419][ T978] ? do_raw_spin_lock+0x12c/0x2b0 [ 293.706450][ T978] ? ieee80211_next_txq+0xda/0xa50 [ 293.708482][ T978] ieee80211_handle_wake_tx_queue+0x19c/0x260 [ 293.710870][ T978] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 293.713484][ T978] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 293.715850][ T978] ? mark_held_locks+0x49/0x80 [ 293.717575][ T978] ? __local_bh_enable_ip+0xa4/0x120 [ 293.719611][ T978] ieee80211_queue_skb+0x12b2/0x1fe0 [ 293.721807][ T978] ieee80211_tx+0x2e4/0x460 [ 293.723606][ T978] ? __pfx_ieee80211_tx+0x10/0x10 [ 293.725210][ T978] ? ieee80211_skb_resize+0x22a/0x630 [ 293.726944][ T978] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 293.728629][ T978] ieee80211_xmit+0x30f/0x3e0 [ 293.730132][ T978] __ieee80211_subif_start_xmit+0x880/0x1390 [ 293.732021][ T978] ? neigh_resolve_output+0x53a/0x940 [ 293.733754][ T978] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 293.735764][ T978] ? mld_sendpack+0xac1/0x1350 [ 293.737273][ T978] ? skb_network_protocol+0x126/0x6d0 [ 293.738984][ T978] ieee80211_subif_start_xmit+0x11b/0x1970 [ 293.740824][ T978] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 293.742794][ T978] ? dev_hard_start_xmit+0x97/0x740 [ 293.744433][ T978] dev_hard_start_xmit+0x97/0x740 [ 293.746031][ T978] __dev_queue_xmit+0xa46/0x4490 [ 293.747626][ T978] ? __pfx___schedule+0x10/0x10 [ 293.749163][ T978] ? __pfx___dev_queue_xmit+0x10/0x10 [ 293.750856][ T978] ? look_up_lock_class+0x6b/0x150 [ 293.752472][ T978] ? irqentry_exit+0x3b/0x90 [ 293.753939][ T978] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.755581][ T978] ? skb_push+0x13/0xf0 [ 293.756901][ T978] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 293.758766][ T978] ? __asan_memcpy+0x3c/0x60 [ 293.760178][ T978] ? eth_header+0x11c/0x1f0 [ 293.761604][ T978] neigh_resolve_output+0x53a/0x940 [ 293.763234][ T978] ip6_finish_output2+0xad1/0x1cf0 [ 293.764851][ T978] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 293.767000][ T978] __ip6_finish_output+0x3cd/0x1010 [ 293.768637][ T978] ip6_output+0x253/0x710 [ 293.770016][ T978] mld_sendpack+0xac1/0x1350 [ 293.771466][ T978] ? __pfx_mld_sendpack+0x10/0x10 [ 293.773056][ T978] mld_ifc_work+0x740/0xbf0 [ 293.774493][ T978] process_one_work+0x9cf/0x1b70 [ 293.776041][ T978] ? __pfx_process_one_work+0x10/0x10 [ 293.777740][ T978] ? assign_work+0x1a0/0x250 [ 293.779177][ T978] worker_thread+0x6c8/0xf10 [ 293.780655][ T978] ? __pfx_worker_thread+0x10/0x10 [ 293.782280][ T978] kthread+0x3c5/0x780 [ 293.783582][ T978] ? __pfx_kthread+0x10/0x10 [ 293.785061][ T978] ? rcu_is_watching+0x12/0xc0 [ 293.786579][ T978] ? __pfx_kthread+0x10/0x10 [ 293.788026][ T978] ret_from_fork+0x675/0x7d0 [ 293.789488][ T978] ? __pfx_kthread+0x10/0x10 [ 293.790958][ T978] ret_from_fork_asm+0x1a/0x30 [ 293.792491][ T978] [ 293.794130][ T978] Kernel Offset: disabled [ 293.795471][ T978] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:34:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000006 RBX=ffff88802b227c80 RCX=ffffffff81c46acf RDX=0000000000000000 RSI=ffffffff8da2729e RDI=ffffffff8bf073c0 RBP=0000000000000246 RSP=ffffc90023167c38 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90822cd7 R11=0000000000000001 R12=dffffc0000000000 R13=ffffc90023167d90 R14=0000000000000001 R15=ffff88802735c918 RIP=ffffffff8b5fcaa1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097810000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c6acb6b CR3=00000000689c3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e3c42e0 RCX=ffffc90003200001 RDX=0000000000000000 RSI=ffffffff8db16a3a RDI=ffffffff8bf073c0 RBP=0000000000000001 RSP=ffffc90000590b10 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=000000000007f4c8 R12=ffffffff816bc914 R13=0000000000000002 R14=ffff888022caa480 R15=ffffc90000590bfc RIP=ffffffff81985edc RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097910000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080003000 CR3=00000000689c3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000004e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85266f55 RDI=ffffffff9adc2da0 RBP=ffffffff9adc2d60 RSP=ffffc900065663c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000004e R14=ffffffff9adc2d60 R15=ffffffff85266ef0 RIP=ffffffff85266f7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a10000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7427b84 CR3=000000006bfa2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000dc00000000 0000000300000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000dc00000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000003 RCX=ffffffff81c4690f RDX=fffffbfff210459b RSI=0000000000000008 RDI=ffffffff90822cd0 RBP=0000000000000202 RSP=ffffc90021adf7d0 R8 =0000000000000000 R9 =fffffbfff210459a R10=ffffffff90822cd7 R11=0000000000000001 R12=dffffc0000000000 R13=ffffc90021adfa48 R14=ffffffff8b901fe0 R15=1ffff9200435bf04 RIP=ffffffff81c46917 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097b10000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001765 CR3=000000006bfa2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000