last executing test programs:

7m26.179591146s ago: executing program 2 (id=1223):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x384861)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x722)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x20880)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000080)=0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
io_setup(0x1, &(0x7f00000016c0)=<r4=>0x0)
io_submit(r4, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}])

7m26.039903584s ago: executing program 2 (id=1224):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000019080)={0x9, <r1=>0xffffffffffffffff, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xc, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @empty, @rand_addr=0x64010102, @private, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
syz_open_procfs(0x0, &(0x7f0000019100)='net/rt_acct\x00')
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x202700, 0x0)

7m22.059526819s ago: executing program 3 (id=1227):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x40)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
io_setup(0x1, &(0x7f00000016c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x700, 0x1, 0x7, r2, &(0x7f0000000580)="1c11b93879", 0x5, 0x2c}])
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141902)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0160000000000000240012800900010069706970000000001400028008000100", @ANYRES32=r4, @ANYBLOB="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"], 0x44}}, 0x40848c0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004)

7m21.639815186s ago: executing program 3 (id=1229):
openat$ppp(0xffffff9c, &(0x7f0000000100), 0xc20401, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f00000000c0)=0x32)
ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000000)=0x31)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000003f0000000000000000001b0300ff"])
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, <r6=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000afa100000000000007010000f8ffffffbffbf7d5c100000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="00020000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b04"])
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000801114010028bd700000ffe8ff087ccffa4800010000ecffff0700010000d7ebb499da137200005902c66ce2f3e713477a7ede19547c2bbd"], 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x0)

7m20.848253415s ago: executing program 2 (id=1230):
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(0x0, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x4, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0xfffffffe, 0x6, 0x101, 0x274f0000, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x9, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff4]})

7m20.803610371s ago: executing program 3 (id=1233):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000b40)={"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"})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x120003, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m19.168508653s ago: executing program 3 (id=1237):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x738, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xf0, 0x114, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1c4, 0x208, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@recent0={{0xf4}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x22, 0x2}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x3], 0x5}}]}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0x110, 0x14c, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @inet=@rpfilter={{0x24}, {0xa}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x794)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000180)={0x0, 0x0, 0xe13, 0x7ffffff7, 0x0, 0x0, 0x0, 0x3e})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8808}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0xba01, 0x0, 0x20004401}, 0x0)

7m12.967184504s ago: executing program 2 (id=1239):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r6, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048010}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "1169"}]}, 0x24}}, 0x0)

7m12.957360326s ago: executing program 3 (id=1240):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}]})
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'nicvf0\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x72}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1e3a}]}}}]}]}], {0x14}}, 0x78}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
r7 = socket$unix(0x1, 0x2, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

7m12.953829858s ago: executing program 2 (id=1242):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00')
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtaction={0x5c50, 0x30, 0x2, 0x0, 0x0, {}, [{0x5c3c, 0x1, [@m_ct={0x4c, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6d48, 0xf}}]}, {0xb, 0x6, "053e54b4816d58"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x3, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x40, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x12, 0x6, "e498854a88f4d44123dd8b05ff23"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0x5a60, 0x16, 0x0, 0x0, {{0xa}, {0x595c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x48, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xc, 0xa32, 0x2, 0x2, 0xfffffff9}, 0x0, 0x2a, [{0x2, 0x4, 0xfffffffc, 0x9, 0x7ff, 0x8}]}, [{0x2a2, 0x1, 0x1000000, 0xc, 0x1, 0x2b101982}, {0x8, 0x2, 0x4, 0x6, 0x4, 0xfde}, {0x5, 0x0, 0xffff, 0x7, 0x401, 0x5050fae5}, {0x5, 0x5, 0xfffffff7, 0x1, 0x3}, {0x1, 0x8000, 0x3e, 0x7, 0xfffffffd, 0x140000}, {0x777, 0x3, 0x401, 0x8, 0x7ff, 0x1}, {0xfffffff7, 0x7, 0xb, 0x1, 0x8da3, 0x2}, {0xe, 0x6, 0x5, 0xe, 0xfff, 0x8000}, {0x9, 0xff, 0x8, 0x9, 0x9, 0x7}, {0xfffffffb, 0x73800000, 0x7, 0x737, 0x0, 0xc}, {0x0, 0x998, 0xd269, 0x2, 0xb60, 0x10000}, {0x7, 0x4800000, 0xfffff3a3, 0x99, 0x8, 0x35db6c91}, {0x3cf, 0x3, 0x4, 0x0, 0x6, 0x7}, {0x80000001, 0x0, 0xc, 0x0, 0x5, 0x421}, {0x200, 0x5f000, 0x5, 0xe, 0x400, 0xa}, {0x4, 0x6, 0x3, 0x7, 0x2882, 0x7}, {0x10000, 0x4, 0x6, 0x7, 0x80000000, 0x37}, {0x8, 0x1, 0x2, 0x3, 0x4800}, {0x4, 0x0, 0x2, 0xff, 0xffffffff, 0x1}, {0x6, 0xa, 0x0, 0x7, 0x2, 0x8}, {0x222, 0x4, 0x3, 0x8001, 0x80f, 0x1}, {0x1, 0x0, 0x200, 0x6d0, 0xfee, 0xf8e}, {0x883, 0x2, 0x5, 0xc593, 0xa, 0x6}, {0x4, 0x9, 0x1, 0x9, 0xb, 0xfffffffd}, {0x9, 0xa7f8, 0x3, 0x8000, 0xffffffff, 0xc0000}, {0x0, 0x2, 0xfff00000, 0x2, 0x7, 0x4000}, {0x401, 0x2, 0xb, 0xd, 0x7, 0x3}, {0x7, 0x8, 0x8, 0x0, 0x9, 0x9}, {0x3, 0x10000, 0x80000000, 0x9, 0x9, 0x2}, {0x401, 0x7, 0x5, 0x5, 0x5, 0xfffffc00}, {0x1000, 0x80000000, 0x5, 0x7fffffff, 0xfe4, 0x80}, {0x1, 0x5, 0x3, 0x4, 0x3, 0x4}, {0xfff, 0x5, 0x0, 0xfff, 0x1, 0xb22}, {0x76d, 0xc480, 0x7ff, 0x7, 0x80000001, 0x4}, {0xcda, 0x8, 0x3b44, 0x7, 0x4}, {0x3ff, 0xc9, 0x6, 0xffffffff, 0xfffffffb}, {0x2, 0x9, 0x1, 0xffffd258, 0x1000000, 0x3}, {0x9, 0x2, 0x2, 0xffffffff, 0xfff, 0x7}, {0xd34, 0x401, 0xf3e6, 0x19b6, 0xfffffff9, 0x6}, {0x16c97557, 0xc, 0x3, 0x26f, 0xfe0, 0x3ff}, {0x8001, 0x487, 0x305f, 0x42f5, 0x9, 0x3}, {0x7fff, 0x7ff, 0x7, 0xf5, 0x1, 0x670c}, {0x7ff, 0x3ff, 0x9, 0x8, 0x5, 0x2}, {0x6, 0x4, 0xffff3f45, 0x8001, 0x1ff, 0x400}, {0x0, 0x9, 0xbb1, 0x9, 0x0, 0x1000}, {0x400, 0x6, 0xf, 0x6, 0x91384d5, 0x310fc3e9}, {0x1000, 0x0, 0xfffffff9, 0xfffffff0, 0x101, 0x1}, {0xa, 0x81, 0x5, 0x101, 0x6, 0x5}, {0x2, 0x1ff, 0x9, 0x5, 0x8, 0x7}, {0x2400000, 0x401, 0x9, 0x9, 0xe3f5, 0x800}, {0x1, 0x80000000, 0x4, 0x6, 0x3, 0x9}, {0xff, 0x1, 0x0, 0x2, 0x29, 0xa}, {0x5, 0x0, 0x0, 0x9, 0x8, 0x4}, {0x4, 0x6, 0x1, 0x1, 0xa8d, 0x9}, {0xfffffffd, 0x6fc3, 0xffff, 0x8, 0x7f, 0x4}, {0x5, 0x7fff, 0xd, 0x0, 0x6, 0x5}, {0xe2, 0x0, 0x8, 0x3, 0xf, 0x6}, {0x7, 0x5, 0x8, 0x7, 0x3, 0x43}, {0x5, 0xa000000, 0x5, 0x4, 0xc, 0xa7a0}, {0x8, 0x7, 0x3, 0x1, 0x6, 0x763}, {0x7, 0xc, 0x8, 0x7, 0x8, 0xe}, {0x7, 0x2, 0xfffffff9, 0x57, 0x8, 0x10}, {0x9, 0x3a, 0x3, 0x0, 0xff, 0xc4}, {0x3, 0x1, 0x75, 0x91, 0xa7, 0xcf02}, {0xb, 0xef, 0x1ff, 0x4, 0x3, 0xb}, {0x8000, 0x3, 0x8, 0x6, 0x8, 0x404}, {0x9, 0x1, 0x401, 0x5, 0xfffffff8, 0xfffffffc}, {0x8, 0x5, 0x2, 0x6, 0x6}, {0x7, 0x5, 0x5, 0x6, 0x9, 0x8000}, {0x2, 0x7fff, 0x6, 0x5, 0x7, 0xfffffffb}, {0x79b, 0x7, 0x558d5081, 0x800, 0x101, 0xbb}, {0x4, 0x7, 0x4, 0x7fff, 0x1ff, 0x5}, {0xc6, 0xd, 0xffffffff, 0x8, 0x1000, 0x3b1}, {0x8, 0x2, 0x270e, 0xfffffffe, 0x1ff, 0x491f}, {0x7, 0x75f48b5e, 0x1, 0x7, 0x87a}, {0x0, 0x4, 0x4, 0x0, 0x100, 0x200}, {0xcd8, 0xc41, 0xb025, 0x0, 0x8, 0x8}, {0x401, 0x8d6, 0x3, 0xfffffffb, 0x1, 0x2}, {0xfffffff9, 0x3, 0x81, 0xfffffffb, 0x4, 0x6}, {0x845, 0x2, 0x570, 0x2, 0x5, 0x558a}, {0xfffffffa, 0x6, 0x101, 0x9, 0x3, 0x2}, {0x1, 0x5cef, 0x4, 0xc9, 0x7, 0x4}, {0x4, 0x8, 0x6, 0xa81d, 0x8, 0xffffffff}, {0x4, 0x400, 0xffffffff, 0x2, 0x6, 0xfffffffe}, {0xc, 0x5, 0x8, 0xb, 0xfffffffe, 0x5}, {0xb, 0x23, 0x100, 0x2, 0x7, 0xd}, {0x77, 0x2, 0x5, 0x0, 0x6, 0x8}, {0x0, 0x6, 0x4e04, 0x8, 0x9}, {0x747df1e2, 0x6, 0x7733, 0xd4, 0x0, 0xfffffff9}, {0x6, 0x2, 0x7, 0x8001, 0x8787, 0xf7e}, {0x499, 0x400, 0x7, 0x0, 0x7fff}, {0x27, 0x3, 0x0, 0x4, 0x7, 0x4}, {0xc, 0x7, 0x9, 0x8, 0x400, 0x7}, {0x5, 0x2, 0x7ff, 0x8, 0x9, 0x9}, {0x1, 0x5, 0x400, 0x3, 0x81, 0x6}, {0x8, 0xff, 0x800, 0xfff, 0x0, 0x4}, {0x8, 0xffff, 0x401, 0x0, 0x9, 0x8000}, {0x4, 0x3, 0x7, 0x1, 0xfffffe01, 0x4}, {0x0, 0x9, 0x8001, 0xc, 0x6, 0x6eb1}, {0x7b84, 0x8, 0x5a2, 0xfffffbff, 0x4, 0x3}, {0x3, 0x4, 0x0, 0x6, 0xff, 0x3}, {0x5, 0xfc9f, 0x101, 0x8, 0x7fffffff, 0x6}, {0x9, 0x7, 0x71d6, 0x8, 0x8, 0x24}, {0x2, 0x2, 0x8000, 0x81, 0x2, 0x9}, {0x9, 0x46bb, 0x2, 0x7, 0x9, 0xb}, {0xa2, 0x7, 0xe2f, 0xc11, 0x3, 0x10001}, {0x4, 0x5, 0x1, 0x5, 0xe82, 0xfffffff2}, {0xffffff12, 0x6, 0x9, 0x3ff, 0x8, 0x7}, {0x2, 0x1761, 0x5cc, 0x8, 0x1, 0x8}, {0x2, 0x7, 0x7f, 0xfffffc23, 0x5, 0xfffffffc}, {0x2, 0x2, 0x6, 0x7}, {0x400, 0x3, 0x8, 0x10001, 0x7, 0x4}, {0x2, 0x1, 0xf, 0x4a, 0x7, 0x59}, {0x9d, 0x1, 0x2, 0x10001, 0x7, 0x5}, {0x7f, 0x10000, 0x1, 0x80000000, 0x10, 0x4}, {0x5, 0x0, 0x8, 0xf1e, 0x0, 0x8}, {0xfffffc00, 0x1, 0x2, 0x6, 0x5, 0xf}, {0x0, 0x3, 0x9, 0x42, 0xfffffffc, 0x5}, {0x243, 0x8bc, 0xfffffffe, 0x6e5c0234, 0xc4da, 0x8000}, {0x5, 0x4, 0x3ff, 0xb75, 0x1ff, 0x28}, {0x3, 0x8, 0x401, 0x7fff, 0x6, 0x5}, {0x56, 0x1, 0x10000, 0x0, 0x9}, {0x779, 0x40, 0x8, 0x2, 0x595a, 0x2}, {0x8, 0x7afd44fb, 0x3, 0x3b, 0x80000001, 0x1}, {0x3, 0x3ffc0, 0x1, 0x9, 0x400, 0x9}, {0x6, 0x2, 0xd, 0x2, 0x9c4, 0x2}, {0x0, 0x6460000, 0x5097, 0x7, 0x1, 0x9}, {0x5, 0x6, 0x44, 0x6, 0x100, 0x8}], [{0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x4}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {}, {0xfa4bbe134011e7ca, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x53c27bd275f988e}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2}, {0x5}, {0x2}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {}, {0x1, 0x1}, {0x5, 0x75b14d20b336fd51}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x3}, {}, {0x0, 0xeddac88005539a1c}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x5}, {0x4}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x87b62c52a8900e7c}, {0x5}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x1}]}}, @TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x2, 0x5, 0x0, 0x6}, 0x30, 0x1, [{0x2, 0x2, 0x5, 0x5, 0x5, 0x81}, {0x6, 0x200, 0x3, 0x1, 0x4, 0xc}, {0x5, 0xffff, 0xfffffffb, 0x8e, 0x7, 0x3}, {0x3ff, 0x80, 0x4, 0x1, 0x9, 0x3}, {0x7, 0x8, 0x7, 0xe, 0x3, 0x1ff}, {0x0, 0x7, 0x8, 0x9, 0x7, 0xfffffff9}, {0x68b7, 0x100, 0x7fff, 0x8a, 0x3}, {0x9, 0xe0, 0xffff, 0x101, 0x5, 0xd2a8}, {0x3ff, 0x8, 0x8, 0x2, 0x9, 0xc144}]}, [{0x3, 0x6, 0x8, 0x6, 0x8, 0x7}, {0x1, 0x6, 0x1, 0x744, 0xfffffffa, 0x6}, {0x2, 0x74f8, 0x200, 0x3d, 0x4, 0x7}, {0x545f1244, 0x0, 0x6, 0x8, 0x0, 0x7ff}, {0x7f, 0x7, 0x5, 0xffff, 0xfd3}, {0x80, 0x6, 0xbe6, 0x100, 0x8, 0x800}, {0x40, 0x3, 0xb, 0x2, 0x3, 0x6}, {0x1, 0x8, 0x4000000, 0x9, 0x4, 0x200}, {0xb0, 0x7, 0x400, 0x7, 0x5, 0x8}, {0x720d31e3, 0x0, 0x3ff, 0xe7ec, 0x3ff, 0x180}, {0x2, 0x3, 0x6, 0x3, 0x8e2, 0x8}, {0x0, 0x0, 0xe, 0x3, 0x0, 0x7}, {0x0, 0x2, 0x8001, 0x943, 0x0, 0x1}, {0xa3df, 0x2d90149c, 0x8001, 0x0, 0x6, 0xefc}, {0x9, 0x0, 0x8, 0x10000, 0x8, 0xd0}, {0x7, 0x9, 0x7, 0x0, 0x5, 0x3}, {0x2, 0xfffffffe, 0x95e8, 0x800, 0x0, 0x6}, {0x200, 0xa, 0xffffff64, 0x6, 0x0, 0x5}, {0x35, 0x0, 0x5, 0x8, 0x9, 0x3}, {0x6, 0xe8, 0x6, 0x4, 0x3, 0x2}, {0x893e, 0x6, 0x80000001, 0xb, 0x80000000, 0x7}, {0x7, 0x8c, 0xffff, 0x1e, 0x2c, 0x6}, {0x84, 0x20a84ef2, 0x6, 0x6dec2ffb, 0x3, 0x1}, {0x4, 0x2, 0x5, 0x9, 0x3, 0xfffffff9}, {0xe, 0x6616, 0xd, 0x9, 0x3ff, 0x300000}, {0x4, 0x0, 0x9, 0xbc4, 0x9, 0x3}, {0x8, 0x5, 0x3ff, 0x3, 0x5, 0x4}, {0xffff, 0x5, 0x2, 0x2, 0xfffffffc, 0x8}, {0x3, 0x7ff, 0x9, 0x8, 0x4, 0x1ff}, {0x6, 0x0, 0x3, 0x5, 0x7, 0x4}, {0x7, 0x1, 0x2, 0x101, 0x0, 0x10001}, {0x0, 0x8, 0x4, 0x9, 0x2, 0x200}, {0x0, 0x8000000, 0xffffffff, 0xff80, 0x5, 0x5}, {0x4, 0x9, 0x0, 0x80000001, 0x7, 0x7}, {0x7, 0x8000, 0x6, 0xff, 0x4, 0x7}, {0x1, 0x915, 0x10000, 0x200, 0x7, 0x6}, {0xfffffff9, 0x8, 0x8, 0x0, 0x6, 0x4}, {0x2, 0x5, 0x1, 0x9, 0x9, 0x5}, {0x0, 0x8, 0xbcf, 0x2e3b, 0xa, 0x40}, {0xa, 0x5, 0xa7, 0x800, 0x7, 0x6}, {0x10000, 0x102, 0x8, 0x80000001, 0x5, 0x2}, {0x80000000, 0x4, 0x3, 0xfd, 0x1, 0x67d}, {0x3, 0x5, 0x9, 0x7f, 0x80000000, 0x200}, {0x0, 0x5, 0x3, 0x1, 0x4, 0x6fa}, {0x0, 0x9, 0x1ff, 0xfffffffd, 0x81, 0xff}, {0x4, 0xbdb4, 0x4, 0x3, 0x40, 0x2}, {0x2, 0x81, 0x3, 0x100, 0x64, 0xac}, {0x8, 0x2, 0x2, 0xffffffff, 0x4, 0x3ff}, {0xd9, 0xa, 0xf, 0x10, 0x4, 0x3}, {0xe, 0x75, 0x4, 0x3, 0x7, 0x4}, {0x2, 0xa244, 0x3, 0x10000, 0x40000, 0x9}, {0x10000, 0x3ff, 0x1, 0x101, 0x4da1aad6, 0x7}, {0x6, 0x0, 0x4, 0x77ec3b28, 0x7, 0x100}, {0x53, 0xf, 0x9, 0xc, 0x10, 0x4}, {0x8, 0x3, 0x80000001, 0x1b7}, {0x8000, 0xe18f, 0x5, 0xccd0, 0xbc79, 0x64}, {0x6, 0xffffffff, 0x5, 0x401, 0xff, 0x80000000}, {0x8, 0x75f8, 0x97, 0x1, 0xd, 0x80}, {0xe, 0x4, 0xc28, 0x850f, 0x0, 0x4}, {0x4, 0x1, 0x1c40e729, 0x1a154851, 0x3, 0x2beb}, {0x3, 0xe, 0x1a6, 0x5, 0x6, 0x6}, {0x3238, 0x401, 0x2, 0x6, 0x0, 0x10000}, {0x200, 0x5, 0x8, 0x1, 0xffffffc0, 0x5}, {0x5, 0x9, 0x9, 0x8bb, 0x101, 0xfff}, {0x7, 0x7, 0xffff, 0x7, 0xffff, 0x10}, {0xb88, 0x0, 0x1, 0x2, 0x2, 0x4}, {0x4, 0x3, 0x8, 0x3, 0xffff, 0x8}, {0x1, 0x40, 0x1, 0xa, 0x3, 0x8}, {0x6, 0x1000, 0xffffffff, 0xe0, 0x3, 0x5}, {0x8, 0xfffffffc, 0xddb1, 0x6, 0x400, 0x4}, {0x7, 0x7fff, 0x5, 0x6, 0xfd7, 0x7}, {0xfffffffa, 0x4, 0x80000000, 0x10001, 0x8, 0x9}, {0x101, 0x2, 0xe, 0x9, 0x2e54dace, 0x800}, {0x200, 0x100, 0x7fffffff, 0x80000000, 0x10, 0x5}, {0x10000, 0x7, 0x6, 0x4118, 0x7, 0xd56}, {0x4, 0x3, 0x8, 0x7, 0x5, 0x1}, {0xb6, 0x2, 0x5, 0x3, 0x7fff}, {0x2d4, 0x2, 0x80000000, 0x400, 0xb, 0x5}, {0x53, 0x401, 0x40, 0x5, 0x5779a645, 0x4}, {0x6, 0x5, 0x1, 0x3823, 0x7}, {0x2, 0x800, 0x6, 0xeaf1, 0x9, 0x8}, {0xa, 0x7fffffff, 0xffffffe7, 0x9, 0xffffff7f, 0xb0f}, {0x5, 0x40, 0x1, 0x5, 0x3, 0x800}, {0x64dc, 0x8, 0xa8, 0x7, 0x3, 0x3}, {0x6, 0x3ff, 0x8d9, 0x2b, 0x3, 0x4}, {0x1, 0x4, 0x19e, 0xfc, 0xd379}, {0x1000, 0x1, 0x6eb065c2, 0x3, 0x4}, {0xfffffffd, 0x7, 0x1, 0x5, 0x7fffffff, 0x6}, {0xc000000, 0xa2ea, 0x8, 0x8, 0x6, 0x2}, {0x7, 0x6, 0x7, 0x9, 0xfffffffe, 0x7}, {0x70, 0x81, 0x1, 0x1000, 0x100, 0x40}, {0x4, 0x7, 0x6, 0x8001, 0x5, 0x6}, {0x5, 0xffffff7f, 0x7, 0x3fa3, 0x7fff}, {0x1, 0x4, 0x6, 0x5, 0x0, 0x8}, {0x7, 0x5, 0x4, 0x2, 0x6, 0xfffffc01}, {0x10000, 0xffffff01, 0xfa8e, 0x1, 0x7, 0x10}, {0x9, 0x1, 0x0, 0x8001, 0xfffffffe, 0x7}, {0xfffffffe, 0x358301fb, 0x531, 0x3, 0x99, 0x1}, {0x81, 0x0, 0x81, 0x4, 0x5, 0x9}, {0x9, 0x8001, 0x1, 0x2c66, 0x800, 0x2}, {0xaf8, 0x3a7, 0x8, 0x0, 0x7, 0xed1}, {0x5, 0x7, 0xa2e, 0x1, 0x4, 0x1}, {0xc, 0x5, 0x7fffffff, 0x4, 0x7c5, 0x3}, {0x91ad, 0x1ff, 0x6, 0x4, 0x401, 0x6}, {0x3, 0x10, 0x529589de, 0x3, 0x7, 0x1c}, {0xf00, 0x9, 0x0, 0x7fffffff, 0xfffffff8, 0x7ff}, {0x0, 0x7, 0x6, 0x30, 0x0, 0x8}, {0xfffffffc, 0x7fffffff, 0x1, 0x5, 0xffffea68, 0xde}, {0x1, 0x0, 0xffffffff, 0x9, 0x4, 0x38000000}, {0x5, 0x0, 0x0, 0x2b4, 0xe0000000, 0x4}, {0x81, 0x5c9a1a40, 0xf6ff, 0x3, 0x9, 0x2}, {0x80, 0x0, 0x2, 0x7, 0x1, 0x1ff}, {0x7, 0xf123, 0x80000000, 0x0, 0x40, 0x81}, {0x6, 0x9, 0x5, 0x3, 0x7fffffff, 0x2}, {0x0, 0x4, 0x40, 0x5, 0x6, 0x3}, {0x2, 0x3, 0xd, 0x93, 0xb, 0x10}, {0x0, 0x10, 0x7, 0x2, 0x1, 0x4}, {0x0, 0x401, 0x7, 0x5, 0x742}, {0x7, 0xe, 0xdd, 0x9, 0x8, 0x40}, {0x8, 0x8b60, 0x8, 0x2, 0x2637ac6e, 0x8000}, {0xc, 0x8, 0x5, 0x2, 0x6, 0x1}, {0x4, 0x8, 0x7ff, 0xfffffffc, 0xf, 0x1e4f00}, {0x979, 0x10, 0x2, 0xe, 0x2, 0x6528}, {0x1000, 0xbb49, 0x6, 0xf, 0xcb, 0xfffffffd}, {0xdbaa, 0x5, 0x9, 0x2, 0x2, 0xffffff6c}, {0x10000, 0x8, 0x8, 0x9, 0x7, 0x7}, {0x7fffffff, 0x0, 0x1, 0x6, 0x9, 0x1}, {0x8, 0x48ff, 0x1, 0x6f, 0x4, 0x1}], [{0x4}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4}, {0x2}, {0x4}, {0xd2fd6fabbb2c4cb8, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x7, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x7}, {0x5, 0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x9, 0x400000, 0x1, 0xe, 0x400}, 0x9, 0x7f, [{0x7, 0x9, 0xb28, 0x5, 0x2, 0x6}, {0x0, 0xff, 0x4, 0x1, 0x3ff, 0x2}, {0x1, 0x8, 0x0, 0x9, 0xfe2, 0x8}, {0x2, 0x2, 0x5, 0x5, 0x10000}, {0x2a, 0xa26f, 0x800, 0xfbfe3a1, 0x8cf, 0x5}, {0x80000000, 0xffff, 0x10001, 0x80000000, 0x0, 0x1}]}, [{0x2, 0x5, 0x40, 0x4, 0x1ff, 0x1}, {0xffffff01, 0x1, 0x9, 0x7, 0x100, 0x7}, {0x6, 0x4, 0x8, 0x3, 0xffffffde, 0x1}, {0x8, 0x5, 0x6, 0x8, 0x8, 0x3}, {0x1, 0x2, 0xffffff49, 0x2, 0x40, 0x8}, {0x89, 0x9, 0xe, 0xffff, 0x10, 0x700}, {0xfffffffd, 0x10000, 0x81, 0x10001, 0x3, 0x7fffffff}, {0x7, 0x1, 0x253, 0x3, 0x3738b0b9, 0x9}, {0xb139, 0x5, 0x10, 0x4, 0x3, 0x3}, {0x3, 0x80000001, 0xffffffd2, 0x7, 0x6, 0x157}, {0x0, 0x5, 0x8, 0x5, 0xa1d9, 0x6}, {0x3, 0x6, 0x3, 0x7, 0x3ff, 0x5}, {0x2, 0x4, 0x6, 0x9, 0x3, 0x6}, {0x9, 0x5, 0x5ea, 0x3}, {0x197ea0, 0x7fffffff, 0x490, 0xd2, 0x1, 0x3}, {0x400, 0x0, 0x3, 0x5, 0x59cb}, {0x0, 0x2, 0x1b9fc929, 0xffff, 0x6, 0x4}, {0x8, 0x7, 0x2, 0x80000001, 0x2, 0x70}, {0x7, 0x4, 0x8000, 0xfffffffd, 0x34d, 0x5}, {0x5, 0x0, 0x0, 0xfcc2c133, 0xfffffffa, 0x7}, {0x7f, 0xe0c9, 0x3, 0x1799, 0x3, 0x4}, {0x9, 0x9, 0xbe, 0x9, 0x7}, {0xe, 0x4, 0x2c, 0x6, 0xfffff2b9, 0x7}, {0x8, 0x9, 0x1, 0x7ff, 0x51, 0x9}, {0x28, 0x1, 0x1, 0x3, 0x11b5810b}, {0x2, 0x71, 0xa3, 0x7, 0x3, 0xcc}, {0x5, 0xc, 0x5, 0xfffffc00, 0x5, 0x4875f231}, {0x6, 0xc, 0x3, 0x7fffffff, 0x7f, 0xffff}, {0xfa1, 0x1, 0x7, 0x53, 0x9688, 0x4}, {0x5, 0x0, 0x7, 0x5, 0xf, 0x9c27}, {0x5, 0x5, 0xfffff08f, 0x77d829d9, 0x6, 0xfffffff8}, {0x2, 0x7, 0xf9f, 0x9, 0xe, 0xe}, {0x6, 0x1713, 0x2, 0x1, 0x2, 0x4106}, {0x7ff, 0x2, 0x5, 0x100, 0x4d, 0x6}, {0x7fffffff, 0x80000001, 0xcf, 0x5c, 0x0, 0x3}, {0x1, 0x7ae, 0x2, 0x200, 0x8001, 0x200}, {0x1, 0x8, 0x8, 0x1, 0x10000, 0x7}, {0x7, 0xd3b7, 0x6, 0x0, 0x800, 0x6}, {0x6, 0x7ff, 0x85, 0x7, 0xfffff267, 0x47b8}, {0x8, 0x5, 0x3, 0x7, 0x6, 0x2}, {0x50, 0x101, 0x3, 0x8, 0x6, 0xff}, {0x40, 0x73be, 0x7f, 0x7, 0x2, 0x6}, {0x3, 0x4, 0x1, 0x6, 0x3, 0xd6c6}, {0x1, 0x4, 0xfffffff7, 0x8000, 0x7, 0x8}, {0x7fff, 0x400, 0x0, 0x0, 0x1}, {0x2, 0x3, 0x9, 0x0, 0x6, 0x4e}, {0x9, 0x1, 0x10001, 0x4, 0xfff, 0x5}, {0x8, 0x6, 0xcf, 0xd, 0x80, 0x2}, {0xd, 0x9, 0x5, 0x2, 0x9bb7, 0x1000}, {0x5, 0xfffff7f4, 0x5, 0x0, 0xfff, 0x9}, {0x9, 0x1, 0x7, 0x4, 0x6, 0x668}, {0x0, 0x0, 0x8, 0x7, 0x7f, 0x7}, {0xa, 0x4, 0x5, 0xdc6, 0xf, 0x9}, {0xb, 0x0, 0x7, 0x2, 0xcfd, 0xf}, {0x101, 0x4, 0x465, 0x7fffffff, 0xdd82, 0x8}, {0x0, 0x9, 0xffffffff, 0x2, 0x6, 0xfffffffb}, {0x8, 0x2, 0x0, 0x5, 0x5}, {0xd, 0x3a, 0x4, 0x7, 0x8, 0x9}, {0x8, 0xe5a, 0x80000000, 0x8085, 0x101, 0x9}, {0xb, 0x5, 0x401, 0x1, 0x6, 0x18}, {0xb854, 0x8, 0x1000, 0x9, 0x180000, 0x8}, {0x8, 0x3, 0x8000000, 0x100, 0xa, 0xc5}, {0x8000, 0x3, 0x8, 0xa, 0x7, 0xb07b}, {0x2, 0x2, 0x5, 0x400, 0x7, 0x1}, {0x78be, 0x9, 0x6, 0x7, 0x7, 0x4}, {0x7f, 0x8, 0x3ff, 0xf0f, 0x7fffffff, 0x5}, {0x1, 0x8, 0x40, 0x2, 0xfffffffc}, {0x9, 0x8, 0x2, 0x200, 0xffff, 0x26}, {0x4, 0x20, 0x0, 0x9, 0x200, 0x4}, {0x2, 0x3, 0xffff7fff, 0x6c7, 0x5, 0x2949}, {0x200, 0x8, 0xffffffff, 0x6, 0x3, 0x2}, {0x0, 0xcd8e, 0x6, 0x7, 0x4, 0x5}, {0x4, 0x5, 0xb, 0x5, 0x2, 0x7}, {0xffff8001, 0xfffffff9, 0x0, 0x7, 0x7, 0x80}, {0x10, 0x3, 0xfffeffff, 0x4, 0x4, 0x3}, {0x1, 0x53f3, 0x1, 0x8001, 0x9, 0xff}, {0x2, 0xffffffff, 0x62, 0x5, 0x3}, {0x2563ef25, 0x5, 0x9, 0x80000000, 0x9, 0x80}, {0x5, 0x99, 0x7, 0x7fff, 0x1, 0xffffffff}, {0x9, 0x9, 0xd, 0x9, 0x4e7, 0x8}, {0x4, 0x4, 0x10000, 0x5, 0x8, 0x1}, {0x5, 0x3, 0x2, 0xe, 0x99, 0x1}, {0x8, 0x3, 0x864, 0x33f3, 0x8001}, {0x4, 0x0, 0x8, 0x0, 0x8, 0x4}, {0x5, 0x78ce, 0x3ff, 0x8, 0x0, 0xfffffffe}, {0x9, 0xa2e, 0x7a8, 0x6, 0xfffffff7, 0x8e}, {0x10000, 0x9, 0x2, 0x10, 0x3}, {0x9, 0x8000, 0x7, 0x74, 0xfe0, 0x9}, {0x3b, 0x1, 0x5, 0x80000001, 0x7, 0x7ff}, {0x14, 0xfffeffff, 0x1, 0x7, 0x1000, 0x6}, {0x6, 0x80000001, 0x8, 0x3, 0x3, 0x7aa}, {0x3, 0x6, 0x8, 0x5, 0x8, 0x10001}, {0x5, 0x8000, 0xffff, 0x3, 0x1, 0x9}, {0x6, 0x2, 0x9, 0x9, 0x9, 0x7}, {0x3, 0x5, 0xe, 0x81, 0x10000}, {0x0, 0x80000001, 0x2, 0x80000000, 0xe, 0x155c}, {0x6, 0xfffffffa, 0x101, 0x80000001, 0xa, 0x80000000}, {0x8, 0x10001, 0x8, 0x7fffffff, 0x4, 0x2}, {0x80000001, 0x6, 0x7fff, 0x9, 0xa9, 0xab4}, {0xd1a, 0x0, 0xfffff801, 0xf5a, 0x9, 0x9}, {0xc0000000, 0x4af79f2a, 0xc, 0x62, 0x2, 0x4}, {0x5, 0x1, 0x2, 0x7, 0x5, 0x9}, {0x800, 0x8000, 0x3, 0x8, 0x0, 0x4}, {0x625, 0x400, 0x9, 0x80000001, 0x6, 0x3}, {0x0, 0xc82, 0x6, 0x1b4e, 0xfc9, 0x7}, {0x0, 0x8, 0x80, 0x2, 0x4000000, 0x98f5}, {0x2, 0x3, 0x2, 0xfffffffc, 0x8, 0x7}, {0x6, 0xd6cf, 0x7, 0x7fff, 0x1, 0x8}, {0x8, 0x0, 0x7f, 0x9, 0x5, 0x8}, {0x5, 0x5, 0xffffff86, 0x9, 0x97e5, 0x7}, {0x7, 0x244, 0xfffffffb, 0x9, 0x9}, {0x1, 0x499, 0xc6, 0x4, 0x9, 0x8001}, {0xfffffff7, 0x2, 0x6, 0x7, 0x0, 0x1}, {0x52, 0xfff, 0x74, 0x8, 0xc1, 0x5}, {0xf91, 0xcc21, 0x7, 0x100, 0x27c, 0x5}, {0x5, 0x7, 0x10001, 0x0, 0x7, 0x2}, {0x4, 0xfff, 0x10001, 0x1, 0x3}, {0x91, 0x8, 0x6964, 0x5, 0xfffffff8, 0x7}, {0xcae, 0x2, 0xfffffe83, 0x81, 0x3c5, 0x3}, {0x9, 0xfffffb12, 0x601a, 0x200, 0x3, 0x5}, {0x6, 0x2, 0x101, 0x9, 0x740, 0xd}, {0x1000, 0x2, 0x1, 0x1, 0x4, 0x3}, {0x22a5, 0x9, 0x1, 0xb, 0xf0, 0x9}, {0x5, 0x6, 0xff, 0x7, 0x9, 0x8000}, {0x8b, 0x8000, 0x3, 0x3a13, 0x6, 0x6}, {0x0, 0x7, 0x101, 0x5, 0x1, 0x3}, {0x80000000, 0x8, 0x1, 0x1ff, 0x35, 0x72aff59e}, {0x32, 0x3, 0x10001, 0xfe000000, 0x0, 0x9}], [{0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x2}, {0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0xfeef5e503b7dfde}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x7, 0x1}, {0x5}, {0x6a12df92e93c3c04, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x3}, {0x4}, {}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0xb7025e314cb73d5a}, {0x0, 0x5af0470c0c5ae82}, {0x3}, {0x1}, {0x1, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x180, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x8, 0x8, 0x7, 0x200, 0x2}, 0x5, 0x6, [{0x776, 0x2, 0x1, 0x3, 0x576ccc8b, 0x2}, {0x4, 0x26, 0x58, 0xc69, 0x8}, {0x4, 0x247, 0x0, 0x1, 0x7, 0xffda}, {0x7, 0x6, 0x3, 0x8, 0x8d4, 0x9}, {0x3, 0x9, 0x5, 0xa, 0x4, 0x7}]}, [{0xf2e2, 0xc7b, 0xca5d, 0x2, 0x8, 0xe}, {0x5, 0x200, 0x400, 0x4, 0x5, 0x5}, {0x7, 0x9, 0x80, 0x2, 0x0, 0x3}, {0x6, 0xb, 0x10001, 0x4, 0xfffffffc, 0x1}, {0x5, 0x7, 0x4, 0x3, 0x0, 0x4}, {0x4, 0xe3, 0x80, 0x400, 0x4}, {0x8, 0x2, 0x7, 0x0, 0x7, 0x8}, {0x4, 0x0, 0x9, 0xffff, 0x5, 0x3ff}, {0x6, 0x6500, 0x2, 0x8b, 0x18000000, 0x4}, {0x2, 0x87, 0x8, 0x8001, 0x0, 0x9}, {0x1, 0x8, 0x100, 0x6, 0x6, 0x80000000}, {0x3, 0x3, 0x0, 0x1, 0xcbe, 0x3}, {0x75, 0x5, 0x6, 0x0, 0xe57, 0x8}, {0x5, 0x2, 0x4, 0x4, 0x0, 0x3}, {0x4, 0x6, 0x5, 0x4, 0x5, 0x8}, {0x4, 0x7, 0x80000000, 0x8, 0x2, 0x1}, {0x9, 0x0, 0x7, 0x5, 0x100, 0x5}, {0x2, 0xffff4940, 0x4, 0x4, 0x9, 0x2}, {0xffffffff, 0x0, 0x6, 0xa63, 0xe49, 0x9}, {0x4, 0xffff8001, 0x1, 0x3, 0xa, 0x4}, {0x3, 0x12b, 0x7, 0xa1, 0xfffffff9, 0x4}, {0x3, 0x5, 0x1, 0x8000, 0xfffffff4}, {0x6, 0x5, 0x200, 0xe0, 0x800, 0xba8}, {0xffffffd0, 0xea5e, 0xd, 0x9, 0x7fffffff}, {0xfffffffc, 0x0, 0x2, 0x4, 0x0, 0x1}, {0x9, 0x4, 0xf8c5, 0x795, 0x3, 0x3}, {0x8, 0x0, 0xc1, 0x9, 0x9}, {0x6000, 0xa35, 0x1, 0x0, 0x800, 0x1}, {0x6, 0x2, 0xfffffffb, 0xb, 0x7, 0x8}, {0x9, 0x2, 0x7f, 0x1, 0xa851, 0x7}, {0xb, 0x9, 0x400, 0x0, 0x3, 0xfffffffd}, {0x7, 0x81, 0x99, 0x9, 0x1, 0x8}, {0x200, 0x9, 0x5, 0x3, 0x9, 0x2bde}, {0x6, 0x1, 0x7, 0x200, 0x9, 0x7}, {0x5, 0x0, 0x1000, 0xd49c, 0x3, 0x7}, {0xfffffff7, 0x7, 0x900000, 0x1c72, 0x1, 0x2}, {0x3, 0x200, 0x2, 0x80000001, 0xe51, 0x9}, {0x2, 0x7, 0x0, 0xc, 0x3, 0x3}, {0x0, 0x3, 0x363e, 0x2aa63d6e, 0x9, 0x2}, {0x0, 0x5, 0x3, 0x6, 0x6, 0x100}, {0x4, 0x2, 0x7f, 0x1, 0xb, 0x1}, {0x2, 0x5568, 0x6, 0x57, 0x7, 0x2}, {0x5894, 0x7fff, 0xd, 0xbb, 0x8, 0x3}, {0x6, 0x85, 0x6, 0x5, 0x100, 0xfffffffe}, {0x10001, 0x6, 0x100, 0x9, 0x2421, 0xfffffff9}, {0x5, 0x101, 0x3b, 0x5, 0x7fff}, {0x0, 0xb09, 0x4, 0x6, 0xfb0, 0x6}, {0x9, 0x7, 0x6, 0x2, 0xf5, 0x1ff}, {0x7, 0x6, 0x6, 0x7, 0x7, 0x4}, {0x80000000, 0x5, 0x4, 0x0, 0xc000000, 0x7}, {0x73, 0x401, 0xffffffff, 0xf, 0x3, 0x1}, {0x10000, 0x8, 0x6, 0x80, 0x8, 0x88a4}, {0xd2a000, 0x7, 0xfffff000, 0x0, 0x6cc2603a, 0x8}, {0x2, 0x6, 0x0, 0x7fab, 0x10, 0x5}, {0x3ff, 0x0, 0x7fffffff, 0x0, 0x4, 0xffffffff}, {0x5, 0x1, 0x2, 0xd99, 0x6, 0xc2b8}, {0x53c, 0x1, 0x1, 0xf0f, 0x80000000}, {0x9, 0x10001, 0x8, 0xf, 0x3, 0xa}, {0x3, 0x1, 0x6, 0x69, 0x6, 0x3}, {0x400, 0x5b4, 0x6, 0x14, 0x1000}, {0x0, 0x2, 0xe, 0xdbd, 0x1292, 0x7}, {0x7, 0x2, 0x6, 0x1, 0x3, 0x1}, {0x7, 0x198, 0xa3cb, 0x2, 0x3ff, 0x9}, {0xfffffff7, 0x5, 0x200, 0x80000000, 0x3, 0x800}, {0x6, 0x6, 0x4, 0x5, 0x0, 0x8bf6}, {0x400, 0x8, 0x1, 0x2, 0x83, 0xd}, {0x3, 0x6, 0xe, 0x2, 0x3ff, 0x7}, {0x6, 0x5, 0xf3df, 0x400, 0x50807a74, 0x3}, {0x835, 0xfff, 0xa, 0x7, 0x5, 0x715}, {0x8, 0xe, 0x7, 0x6, 0xa6, 0x7}, {0x0, 0x400, 0x401, 0xfffffbff, 0x1, 0xff}, {0x0, 0xf2e4, 0x80000000, 0x91, 0x8, 0xfffffffa}, {0x2, 0x2, 0x3, 0x5, 0x1c, 0x3}, {0x79d, 0x8, 0x115, 0x4, 0x8, 0xffffffff}, {0x401, 0xc5, 0xf, 0xff, 0x4, 0x4ce}, {0xa, 0x7, 0xffff, 0xff, 0x0, 0x3ff}, {0xfffffffb, 0x1, 0x6, 0x9, 0x2, 0x1}, {0x4, 0x7, 0x1, 0x4, 0x4, 0x4}, {0x9, 0x180, 0x1ff, 0x5, 0xc1, 0xfffffffd}, {0x36, 0xf6, 0xe, 0x10, 0x2, 0x8000}, {0xffff, 0x10, 0x7, 0x0, 0xc4e, 0x5}, {0x5, 0x6, 0x4, 0x58e835c5, 0x7, 0x80000000}, {0x8, 0x10, 0x8, 0x4, 0xc9, 0xc5ea}, {0x80000001, 0x8, 0x3ff, 0x10001, 0x4949, 0x7}, {0x80000001, 0x4, 0x3, 0x6, 0x3, 0x7b}, {0x6, 0xd404, 0x5, 0x7f, 0x4, 0x7060}, {0x9, 0x1, 0xa, 0xd6cb, 0x8, 0x2}, {0x9, 0x9, 0x3, 0x2, 0x6, 0x1}, {0x6, 0x3, 0x10, 0x10000, 0x1, 0x14}, {0x80000001, 0x1, 0x5, 0xce66, 0x4, 0xa}, {0x10, 0xfa87, 0xfffffffa, 0xaf, 0xd0d7, 0x2}, {0x2b, 0x1, 0x0, 0x413, 0x7f, 0x10001}, {0xc1, 0x9, 0x3, 0xfffff448, 0x1800000, 0xffff}, {0x5, 0x9, 0xf, 0xfffffff8, 0x7, 0xffff8001}, {0x80000001, 0x3, 0x5, 0x9, 0x2, 0x41}, {0x7ff, 0xf4e, 0xe66e, 0x81, 0x10001, 0x3}, {0x3, 0x1, 0x8000, 0x7, 0x80, 0xff}, {0x0, 0xe5, 0x0, 0x2, 0xe}, {0x2, 0x6, 0x4, 0x0, 0x9, 0x9}, {0x4, 0x1, 0x7, 0xd, 0x10, 0xff}, {0x8, 0x8001, 0x7ff, 0xe, 0x1, 0x2d80000}, {0xffffffff, 0x8, 0x194, 0x2, 0xfffffffa, 0x4}, {0x6, 0x1, 0x6, 0x1ac60, 0x8001, 0x2}, {0x0, 0xff, 0x3, 0x5, 0xb43, 0xf}, {0x9, 0x8001, 0x2, 0x5, 0x5, 0x8}, {0x3, 0xffffffff, 0xca22, 0x7, 0x9, 0x4}, {0x5, 0x6, 0xfffffffc, 0x200, 0x6}, {0xd5ba, 0x4, 0xfffffff9, 0x8, 0x5, 0x9}, {0x7, 0x3, 0x7, 0x6, 0x0, 0x1000}, {0x4, 0x7a01, 0x2, 0xd44d, 0x7, 0x3}, {0xa, 0x8, 0xa1, 0x3, 0x100, 0x6}, {0x400, 0x6, 0x7, 0x5, 0x7fffffff, 0x6}, {0x81, 0xfffffffb, 0x4, 0x6, 0x5, 0x1000}, {0x0, 0x8, 0x3, 0x4, 0x2, 0x9}, {0xe, 0xfffffffd, 0x6, 0xff, 0x2, 0x4}, {0x70, 0x4, 0x9, 0xa, 0x6, 0x9}, {0x200, 0x9, 0x8, 0x8000, 0xfffffffb, 0x8}, {0x4, 0xfed8, 0x409, 0x2b26, 0x5, 0xf1ca}, {0x2, 0x34f, 0x4f, 0x3, 0x3, 0x8}, {0x9, 0xb2, 0x8, 0x6, 0x5, 0x9}, {0x7, 0x6015b7d4, 0x8, 0x23206dc1, 0xf, 0x6}, {0x6, 0xb, 0x80000001, 0x48e6, 0x5, 0x200}, {0x10, 0x1, 0x3, 0x9, 0xc, 0x2}, {0xe039, 0x5, 0xfffffffa, 0x8, 0x3, 0xf4dc}, {0x5, 0x1000, 0xe, 0x2, 0x7, 0x7a33}, {0x5, 0x0, 0x2, 0x7, 0x9, 0x4}, {0x1325, 0x1, 0xfffffffe, 0x34ef, 0x6, 0x4}, {0x0, 0x7fffffff, 0x2a4, 0x81, 0x80000000, 0x2}], [{0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x4}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x5, 0x1}, {0x2}, {0x7}, {0x7, 0x1}, {0x4}, {0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x4}, {0x2}, {0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x2}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x93d, 0x21, 0x2, 0xc, 0x8}, 0x4, 0x1, [{0x995, 0xb, 0x140000, 0x2, 0x9aa9, 0xfffffff7}, {0x8, 0x2, 0x1, 0x6, 0x7}]}, [{0x0, 0x80000001, 0xbe, 0x9, 0x2b, 0x33}, {0x4, 0x7, 0x200, 0xc38, 0x5, 0xa0b}, {0xffffffff, 0x7807, 0x10000, 0x101, 0x9, 0x442d578d}, {0xff, 0x7fffffff, 0x80, 0x53626a2e, 0x7fff, 0x2}, {0x6a0, 0x3, 0x27, 0x6, 0x7, 0xa7b0}, {0xfffffff8, 0x10, 0x1, 0x7ff, 0x7fff, 0xffff}, {0x7c755370, 0x6, 0x9, 0x4, 0x3, 0x1}, {0xfffffab5, 0x68fa15cf, 0x7ff, 0x8, 0xa349, 0x6}, {0x3, 0x7d, 0x7, 0x9, 0x40, 0x9f4}, {0x9, 0x2, 0x0, 0x8, 0x124, 0xca}, {0x9, 0xd5, 0x8, 0x7fffffff, 0x8, 0x6}, {0x2, 0x6, 0xfffffff8, 0x2, 0x0, 0x8001}, {0x101, 0x1, 0xfffffffa, 0x3, 0xf, 0x7f}, {0x1ff, 0x5, 0x5, 0x2, 0x486, 0x7}, {0x5, 0x9, 0x80, 0x6, 0x10, 0x7}, {0x0, 0x1, 0xf537, 0x700, 0xfffffe01, 0x7}, {0x8001, 0xfffffff9, 0x1, 0x7, 0x2, 0x6}, {0x3, 0x7ff, 0x3, 0x158, 0x2, 0xb37}, {0x8fbd, 0x10040000, 0x2, 0x9, 0x9, 0x9}, {0x5, 0x9, 0x3, 0x20000000, 0x0, 0x7}, {0x3, 0x4, 0x81, 0x1, 0x5, 0x6fe0}, {0x5b, 0x1, 0xf, 0x7, 0x9, 0x1}, {0x3af7, 0xfffffffa, 0x8000, 0x8, 0x5, 0x6}, {0x7, 0x1, 0xfae, 0x0, 0x4, 0xfffffff9}, {0x1, 0x10, 0x101, 0x2, 0xccc, 0x6}, {0x8, 0xdd77, 0x2, 0x7fff, 0xb, 0x10000}, {0x9, 0x6ce6, 0x6, 0x2505, 0x9}, {0x9b, 0x7, 0x9, 0x5, 0xc, 0xde0e}, {0x40, 0x9, 0x7f, 0x0, 0x400, 0x7581}, {0x2, 0x0, 0x0, 0x1ff, 0x3, 0x9a}, {0xd, 0xe, 0x3, 0x1, 0x7d, 0xf38c}, {0xe9bd, 0x4, 0x200, 0x9, 0x50000, 0x8}, {0x9, 0x2, 0xfffffffc, 0x4, 0x7, 0xa52}, {0x6, 0x6b1, 0x0, 0xb, 0xd940, 0x6f4}, {0xfe2, 0x2, 0x6d31, 0x3, 0x5, 0x5}, {0x9, 0x3658, 0x8, 0xffffffff, 0x3, 0xe45b}, {0x5, 0x6, 0x1000, 0x8, 0xf, 0x6}, {0x23, 0x401, 0x2, 0x0, 0x5, 0x7ff}, {0x7, 0x8, 0x81, 0x3, 0x3, 0x1ff}, {0x3, 0x81, 0x1, 0x8f6, 0x7c95, 0xe}, {0x5, 0x1, 0xfc, 0x285, 0xfffffff9, 0x200}, {0x7, 0xb01d, 0x8, 0x7, 0x2, 0x200}, {0x8000, 0x0, 0xffff7d19, 0x80000001, 0x8, 0x80000000}, {0x400, 0x8, 0x3, 0xc06, 0xa, 0x4}, {0x3, 0x8001, 0x7, 0x800000, 0x2, 0x4}, {0x9, 0x7, 0x4, 0x4, 0x5, 0x3}, {0x3, 0x7e15, 0x5, 0x280000, 0x2, 0xc}, {0x40, 0x4, 0xc, 0x10000, 0xffff0001, 0x2be}, {0x1, 0x9, 0x2, 0x7, 0xb842, 0x7}, {0xfffffffa, 0x9, 0x0, 0x5, 0xfffff000, 0x7fff}, {0x1ff, 0x101, 0x0, 0xffffffff, 0x5, 0x5e1a}, {0xc, 0x4, 0x1, 0xe, 0xffff, 0x6}, {0x67c, 0x7, 0xfbb9, 0x10001, 0x1, 0x89}, {0x3, 0x3, 0xc0000000, 0x1000, 0x6, 0x490d}, {0x4b, 0x8, 0xffff8001, 0xfffffe97, 0x8, 0x4}, {0x9, 0xcf, 0x0, 0x227d, 0x9, 0xfffffff8}, {0x4d, 0xff, 0x2, 0xc, 0x1, 0x2}, {0xffff8001, 0x9, 0x9, 0x7, 0x6, 0x6}, {0x8, 0x0, 0x94a, 0x400, 0x6, 0x4}, {0x1, 0x1000, 0x5, 0x7cda, 0x4, 0x7}, {0x1, 0x5, 0x1, 0x3, 0x1f27, 0x8}, {0x401, 0x7, 0x7fffffff, 0x9, 0x7, 0x8}, {0xffff, 0x7, 0x9, 0xb, 0x5, 0xfffffffc}, {0x46e2, 0xc, 0xc00, 0x9, 0x0, 0x5}, {0x8, 0x0, 0xa, 0x3, 0x30e5, 0x51a}, {0x71d, 0x8000, 0xe0, 0x10000, 0x4, 0x6}, {0x6, 0x4, 0xd, 0x7f, 0x10001, 0x1}, {0x0, 0x5, 0xa, 0x6, 0x28, 0x456}, {0x1000, 0x657, 0x40, 0x8, 0x0, 0xc}, {0x4, 0x4, 0x23ef9dda, 0x0, 0x7fffffff, 0xab1}, {0x8, 0x8001, 0x10, 0x4, 0x5, 0xfffffff0}, {0x5d, 0x10, 0xfff, 0x1ff, 0x1, 0x58b0}, {0x800, 0x4, 0x40, 0x4, 0x0, 0xffff}, {0x7, 0x2, 0x1, 0x3, 0x1dc9, 0x814}, {0x8, 0x7, 0x0, 0x80000000, 0x7, 0x1}, {0x6, 0x5, 0x8, 0x4, 0x7, 0x3}, {0x9, 0x0, 0x3ff, 0x7f, 0x0, 0x8d5}, {0x2, 0x6375d7df, 0xb1, 0x2, 0x100, 0xffffffff}, {0x6, 0x1, 0x0, 0xfff, 0x9, 0x7}, {0x9, 0x2, 0x230, 0x1, 0x7, 0x7}, {0x7, 0x800, 0x40, 0x0, 0x4, 0x3}, {0x9, 0xd4, 0xfffffffb, 0xfffffff3, 0x9}, {0xce, 0x3, 0x30, 0xcb72, 0xf, 0x3}, {0x0, 0x7, 0x40, 0x10, 0x6, 0x2}, {0x2, 0x5, 0x400, 0x7fffffff, 0x7, 0x76}, {0xffff, 0x2, 0x4, 0x6, 0x101, 0xc}, {0x1, 0x1, 0x8, 0x200, 0xe6c, 0xfffffff7}, {0x4, 0x7, 0x4, 0x9, 0xda, 0x10001}, {0x9, 0x4, 0xa, 0x2346, 0x9, 0x53}, {0x2, 0x6d6c, 0x4, 0x6, 0x4, 0xbf}, {0x8001, 0x66a, 0xd6d2, 0x0, 0x9, 0x101}, {0x8, 0x4, 0x2, 0x4, 0x6, 0xa}, {0x7, 0x3, 0x1, 0x8, 0xa, 0x9}, {0x4, 0xd, 0x1, 0x7d6, 0x8, 0x3}, {0x10, 0x8000, 0x4, 0x8, 0x3, 0x1}, {0x8, 0x8, 0x2, 0x9, 0x4, 0x7ff}, {0x1, 0x81, 0x1, 0x1, 0x5, 0x6}, {0x1, 0x1, 0x8, 0x6, 0x8, 0x7}, {0x80000000, 0x5, 0x2, 0x5, 0x7, 0x4}, {0x2, 0x6, 0x7f, 0x7, 0x2, 0x3ff}, {0x7, 0x8, 0x7, 0x6, 0x8000, 0xaf3}, {0x3, 0x1, 0xe, 0x8, 0xd0, 0xa}, {0x4, 0x9, 0x5, 0xa4, 0x80000001, 0xfffff000}, {0xa, 0x4, 0x1, 0x5, 0x2, 0x8}, {0x3, 0x2, 0x3, 0x7, 0xb59, 0x8000}, {0x4, 0x4, 0x1, 0xa6, 0x1, 0x53b}, {0x3, 0x101, 0x9, 0x400, 0x5, 0xd}, {0x7, 0x10, 0x7, 0x9, 0x9, 0x7}, {0x2, 0xa568, 0x6, 0x8, 0x9, 0x4}, {0x4, 0x86, 0x2, 0x0, 0x8, 0x2d1}, {0x400000, 0xffffffff, 0x4, 0x6000, 0x6, 0x1}, {0x9, 0x1, 0x1, 0x8, 0x3, 0x101}, {0x21956ad, 0x4, 0x8, 0x5, 0x5, 0x3}, {0xd, 0xfffffffb, 0xb, 0x6, 0x0, 0x98d1}, {0x40, 0x3, 0x1ff, 0x7fffffff, 0x81, 0x4}, {0x9, 0x1, 0xcfa5, 0x400, 0x1, 0xffff}, {0xffff1b5e, 0x5, 0x9, 0x400, 0x0, 0xdb}, {0x7fffffff, 0x2, 0x80000, 0x4, 0xfffffffb, 0x5}, {0x7, 0x1, 0xe, 0x9, 0x7fffffff, 0x8}, {0x101, 0x1, 0x80, 0x800, 0x534be971, 0x9}, {0x2, 0x4, 0x80000001, 0x1, 0x7fff, 0x165e}, {0xfffffff8, 0x3, 0x23e, 0x10001, 0x1000, 0x5}, {0x7, 0xb895, 0xffffff00, 0x8000, 0x6a, 0x3ff}, {0x8, 0x9, 0x1, 0x8, 0xffffffff, 0x2b}, {0x3, 0x2, 0x3, 0xadb4, 0x7, 0x7}, {0x9, 0x48610, 0x9, 0x7, 0x2, 0x200}, {0x7, 0x7, 0x3, 0x0, 0x8, 0x2}, {0x0, 0x9, 0xc, 0x6, 0x5, 0x2}], [{0x4}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x2}, {0x1}, {0x4}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x7267b0b6755077a7}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {}, {}, {0x1, 0x1}, {0x9}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {}, {}, {0x4, 0x3}, {0x2}, {0x3}, {0x2, 0x1}, {0x4}, {0x2}, {}, {0x5}, {0x2}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0xd177b0852d1a6497}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0xa3b, 0x3, 0x7, 0x45cd8261, 0x2}, 0x7, 0x0, [{0x11e6, 0x4, 0x1, 0x6, 0x80000001}, {0x0, 0x5, 0x1, 0x2, 0x6, 0x9fc}, {0x58a3, 0x1, 0x0, 0x1, 0x2, 0x7ff}, {0xd1e8, 0x6, 0x6, 0x8, 0x3ff, 0x844}, {0x4, 0x9, 0x8001, 0x4, 0x2}, {0x9, 0x7, 0x3, 0x9, 0x0, 0x3}, {0x10, 0x3e, 0x200, 0x9, 0x5, 0xfffffff7}]}, [{0x66, 0x2, 0x400, 0x1, 0x3, 0x140}, {0xc2b3, 0x3fff8000, 0x20a0, 0x3, 0x5, 0xe1b}, {0x9, 0x4, 0xffff, 0xfffffffb, 0x6, 0x5}, {0x5, 0x7, 0xff, 0x9, 0x40, 0x441f}, {0x7, 0x1, 0x7f, 0x5, 0xfffffff7, 0x86}, {0x2, 0x5, 0xfff, 0x3, 0x0, 0x7}, {0xfff, 0x5324, 0x9, 0x7, 0x7fffffff, 0xf}, {0x8, 0x1, 0x4, 0x0, 0x9, 0xffff}, {0x8b6, 0x6220, 0x80000001, 0x1065, 0x0, 0x3}, {0x34, 0x3530, 0x9, 0x3, 0x4, 0x10000}, {0x6, 0x81, 0x9, 0x4, 0x7ff, 0x4}, {0x100, 0x3, 0x7ff, 0x401, 0xffffffff, 0x3ff}, {0xff, 0x0, 0x7, 0x1, 0x101, 0x16a4}, {0x6, 0x9, 0x6, 0xef5, 0xffffe015, 0x101}, {0x1, 0x400, 0x0, 0x341a, 0x3, 0x3}, {0x6, 0x1, 0x6, 0x9, 0x1, 0x2}, {0x8b63, 0x0, 0x6, 0xc, 0x401, 0x4}, {0x8001, 0x401, 0x10000, 0x2, 0x8, 0xf8}, {0x7ca, 0x5, 0x34, 0x8, 0x4, 0x5}, {0xa, 0x4030, 0x9cf, 0x6, 0x7, 0xfffffffc}, {0x401, 0x7, 0x3, 0x4, 0x80000000, 0x26}, {0x6, 0x6, 0x8, 0x7030, 0x4c, 0xff}, {0xe8, 0x1, 0x1d, 0x1, 0x8001, 0x8}, {0x4, 0x2, 0x10000, 0x8, 0x2, 0xffffe3dc}, {0x1, 0x7, 0xa29c, 0x6, 0x2, 0x8}, {0x1, 0x7, 0x5, 0x10001, 0x0, 0x1}, {0x4, 0x9, 0xd2, 0x1, 0x2, 0x2fcfd84f}, {0x5, 0x2, 0xc05, 0x5cd3, 0xcef, 0xfffff2d9}, {0x1ff, 0x1, 0xdd, 0x7, 0x7}, {0x8, 0x0, 0x9, 0xa57, 0x100, 0x98}, {0x1, 0x80000001, 0x8, 0x9, 0x0, 0x7f}, {0x5f3f39c3, 0x1, 0x9, 0x200, 0xe, 0x2e2}, {0x2, 0x2, 0x7, 0x5, 0x81a6, 0x4}, {0x0, 0x6, 0xce41, 0xfffffff7, 0x6, 0x3}, {0x5, 0x3, 0xf6, 0xb73, 0x79, 0x2}, {0x7fff, 0x3, 0x8, 0x4, 0x8c53, 0xfffffff4}, {0x7f, 0x2e2d, 0x7ca073a5, 0x7, 0x96f8, 0x5}, {0x9, 0x6, 0x5, 0x7, 0x6, 0x1800000}, {0x2, 0x10, 0x0, 0x200, 0x4, 0x8}, {0x4, 0xc4, 0x852d, 0xf37, 0x6f3, 0x2}, {0x362, 0xf, 0x2, 0x2, 0x3, 0x1f}, {0x9e, 0x2, 0x81, 0xe, 0x2, 0x3}, {0xfff, 0xd, 0x6, 0x100, 0x4, 0xf72}, {0x1, 0x5, 0x9, 0x3ff, 0x400, 0x1d4}, {0x200, 0x1000, 0xfffffffb, 0x2, 0x1000, 0x3ff}, {0x0, 0xff5, 0x646, 0xfff, 0x7, 0x31}, {0xfca, 0x6, 0x7fffffff, 0x0, 0xfffffffb, 0xffffffff}, {0x5, 0x8, 0x8000, 0x4, 0x1, 0x200}, {0xc, 0x5, 0xe7d, 0x91, 0x4, 0x3}, {0x8, 0x7, 0x3, 0x8, 0xfffffff9, 0xa32e115}, {0x5, 0x2, 0x9, 0x101, 0x446, 0xcef}, {0x1, 0x80000001, 0x8000, 0x5, 0x2, 0x4}, {0x7, 0x1, 0x80000001, 0x200, 0x80000000, 0xe4e3}, {0x7ab, 0x3, 0x66, 0xef45, 0x7, 0x9}, {0x4, 0x10001, 0xbc, 0x2, 0x1}, {0xffffffff, 0xffff, 0x4, 0x5, 0x7, 0x1c0}, {0xffffffff, 0x4, 0x72c, 0x7, 0xcb, 0x77}, {0xfff, 0x4, 0x6, 0x0, 0x506d, 0x8}, {0x0, 0x9, 0x3c, 0x1, 0x0, 0x5}, {0x3, 0x0, 0xfe, 0x5, 0xffff, 0xbce}, {0xac69, 0xb, 0x2, 0x4, 0x8000, 0x7}, {0x9e0, 0x0, 0x5a, 0x5, 0x1, 0x10}, {0x8000, 0x7f, 0x9, 0x0, 0xc1b4, 0x2}, {0x7, 0x0, 0x2, 0x1, 0x1, 0xfffffffa}, {0x4, 0x5, 0xfffffff7, 0x6, 0x6, 0x8974}, {0x4, 0x80000001, 0x856f, 0x9, 0x45f, 0x68c}, {0x101, 0xa90, 0xfffffffd, 0x1, 0x3}, {0x800, 0x7, 0x7, 0x7b, 0x8, 0x8}, {0x66e, 0x3, 0x6, 0x7, 0x3, 0xfffff0fc}, {0xa, 0x2, 0x4, 0x5, 0xfffff5d4, 0xd}, {0xe0, 0x3, 0x5, 0xa8b, 0x39, 0x6}, {0x8, 0xef8a9cb, 0x6, 0x8, 0x7984a61e, 0x8}, {0x81, 0xfffffff7, 0x5, 0x8, 0x3, 0x5}, {0x200, 0xd6000000, 0x6, 0x5, 0x2, 0x7}, {0x80, 0x5, 0x0, 0xffff, 0x8000}, {0x5, 0xfffffffc, 0x4, 0x6, 0xe299, 0x6}, {0x0, 0x1, 0x5, 0x3, 0x1, 0xfff}, {0xfffffffc, 0x5, 0x4, 0x1, 0x3, 0x5}, {0x4, 0x6, 0xffffffe1, 0x2, 0x23d, 0x7fffffff}, {0x4c2, 0xd, 0x2, 0x3, 0x1, 0x400}, {0xffffff01, 0x0, 0x6, 0x7, 0x7ff, 0x200}, {0x1, 0x8000, 0x80000000, 0x5, 0x0, 0x2}, {0x5, 0x32, 0x2, 0xbc, 0x80000001, 0x81}, {0xfffffffd, 0x3e, 0x0, 0x4, 0x7f, 0x2e7}, {0x1, 0x1, 0xa9cb, 0x4, 0x5417, 0x5}, {0x5, 0x2, 0x5, 0x0, 0x7, 0x3}, {0x3, 0x0, 0xfffffff2, 0x4, 0x7fff, 0x4}, {0x1, 0x1ff, 0x2046, 0x0, 0x18f59409, 0x80}, {0x7fff, 0x1, 0x9, 0x1, 0x26, 0x7fff}, {0xd, 0x800, 0x8000, 0xfffffffd, 0x8, 0x3ff}, {0x800, 0x7, 0x5, 0x7, 0x566, 0x1}, {0x8, 0x1, 0x7, 0xfffffffb, 0x101, 0x4}, {0x1, 0x2, 0xf, 0x0, 0x1, 0x8}, {0xfffffff1, 0x7fff, 0x2, 0x8, 0x7fff, 0x2}, {0x8, 0x3798, 0xd5c1, 0x7ff, 0x80, 0xc2be}, {0x9, 0xd, 0xc, 0x9, 0x1f58, 0x2}, {0x7ff, 0x1, 0x4, 0x80, 0x10, 0xfffffff8}, {0x0, 0x4, 0x0, 0xffff, 0xb, 0x8}, {0x0, 0x8, 0x6, 0x3ff, 0x7, 0x3ff}, {0x5, 0xc, 0x2, 0x4, 0x6}, {0x9, 0xffffffff, 0x6, 0x5, 0x6, 0x5}, {0x2, 0x7, 0x6, 0xffffffc0, 0x9}, {0x1000, 0x0, 0x3, 0x9eab, 0x9, 0x6}, {0x400, 0x8001, 0x5, 0x0, 0x4, 0x4}, {0x8000, 0xffff, 0xffff, 0x6, 0x5, 0x6}, {0x4, 0x7, 0x5, 0x1, 0x6, 0x9}, {0x2, 0x5, 0x401, 0x7, 0x1ff}, {0x7fff, 0x2, 0xfffff894, 0x3, 0x8, 0xfffff001}, {0x3, 0xe, 0x2, 0x3, 0x8, 0x1}, {0x592, 0xfffffffd, 0x80000000, 0x1, 0x80000001, 0x200}, {0x9, 0x6, 0x5, 0x3a5e, 0x1, 0x176e}, {0xc65, 0x40800000, 0x8, 0x7, 0x5, 0x35}, {0x26b1, 0x6d, 0x7, 0x8, 0x2c93, 0xb}, {0x400, 0x4, 0x5, 0x9, 0x2, 0x6}, {0x6, 0x7, 0x2, 0xd, 0xde42, 0x4}, {0x7, 0x8, 0x2, 0x1, 0x3, 0x2}, {0x9, 0x5, 0x0, 0x40, 0x101, 0x7f}, {0x7fffffff, 0x631a2407, 0x8, 0x5, 0x7159, 0x6}, {0x4, 0x0, 0x17, 0x8, 0x4, 0x6}, {0x10, 0x80000001, 0xb, 0x8, 0x7, 0xfc000000}, {0xf, 0x3, 0xa0, 0x3, 0x401, 0x7}, {0x6, 0x4f, 0x9, 0xfffffffd, 0x9, 0x1000}, {0x2, 0x5, 0x7, 0xffffff02, 0x8, 0x4}, {0x8, 0x9, 0xbf5d, 0x1, 0x4}, {0x3, 0x4, 0x3ff, 0x40, 0x9f63, 0xfff}, {0x0, 0x5, 0xaee4f788, 0x0, 0x3, 0x2}, {0x66de, 0x3, 0x6b78, 0x3, 0x7fffffff, 0x1ff}, {0x3, 0x0, 0x3, 0x10001, 0x8f, 0x7}], [{0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0xe, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x9da5bb6b1c3e6707, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x7da6bc09b95ac682}, {0x5}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1d1e6c7a1a8c5e37, 0x1}, {0x3}, {0x1}, {0x3}, {}, {0x2}, {0x2}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xc22031c4129b7fd1}, {0x4, 0x1}, {}, {0x4}, {0x2}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {}, {0x1}, {0x4, 0x1}], 0x1}}]}, {0xdc, 0x6, "222d13c60ce7f6d44e6fa5a7af86a0704a29e9512e4cceca0d72350e2a711599c72badbe001cfb10ed00752cc238bd3789aff40f70c8d2862d0104a24cc091880057dcd0ff13e16bebfe69b14a40bfb27ebd7fa8f995c8b588435629a202b9536c8f41bc6b6c1465f1df52ede81fbfc952e3474776817087816d200f246f9fb62a2ea591e1aff616fb0a985163551663ff382dda717641ae8de2a4d87c2044708a6a331c0b85a6efe9c6de5db0c70debb45885e29f6eab5b73a406638f42bd92aab331dfc682fc1b04aa1bc47f48e1a71c98d097cf7dc9bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x104, 0x5, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8}]}, {0xcb, 0x6, "2081fea44b11e1da99dd5916b02869561b70d7eff2e84b8d3877f895d179e8a0f76a7a53c9b7032e1d5afc4b40d0a82af3832275c919233038d10eb073f210b28beacc170843097a60fcdd8ecd3bced9a2c05586ed7a8d0e114ba7ca8d84d8e6f1cee68768df0fd5125342d4d34ea2043c653d880b7408ac4d9478a932d9931a5f0425dc88356b58b6d2a0b1fc85e1dc7f14f78f859bb80df0918dd51ae1a7088b21bf97c00a97fae060488e742d5d3fb977060402ab44ae1c8c0ad021b830bc55419cf46b8cd1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x5c50}, 0x1, 0x0, 0x0, 0x4915}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_TASK_FD_QUERY(0x24, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x4cbe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x1, 0x0, 0x4, 0x401}, 0x0)

7m12.601232732s ago: executing program 3 (id=1243):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x6, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000240))
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
ioctl$sock_bt_hci(r6, 0x400448c9, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)
unshare(0x40020000)
bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)

6m58.685121577s ago: executing program 2 (id=1249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001006000"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4d489}}, 0x20}, 0x1, 0x0, 0x0, 0x40850}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r3, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

6m56.400860572s ago: executing program 32 (id=1243):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x6, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000240))
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
ioctl$sock_bt_hci(r6, 0x400448c9, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)
unshare(0x40020000)
bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)

6m43.168823951s ago: executing program 33 (id=1249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001006000"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4d489}}, 0x20}, 0x1, 0x0, 0x0, 0x40850}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r3, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

6m41.931779078s ago: executing program 1 (id=1261):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0483, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x4c81, 0x8)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x33, 0x1, [{0xfe, 0x80000000}]}})
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0xa0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8808}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x101, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x70, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x234d}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xfffffff5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x81}}]}]}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}]}, 0xa0}, 0x1, 0xba01, 0x0, 0x20004401}, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="0b01000020000000fe0100c2040000000005020004000000"], 0x18)

6m33.486894189s ago: executing program 1 (id=1262):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x5, 0x6a735d0a, {r0}, {<r3=>0xffffffffffffffff}, 0x5, 0xfffffffc})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4854}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @multicast2}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="1c005e8008000700d20000000800060001000080080005001d000000", @ANYRES8=r5, @ANYRES16=r2, @ANYRESDEC, @ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

6m28.987487684s ago: executing program 1 (id=1265):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
stat(&(0x7f0000004b00)='./file0\x00', &(0x7f0000004b40))
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'erspan0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, &(0x7f0000000200)='bridge0\x00')
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x1, 0x1}, {0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x30)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000200)=[{&(0x7f0000000240)="8e3800ef9fafb47f13feed6dfc7e19df8f0cb8e719f45a078f3b3b78486cd212f38c208e7d1c083819289995db44de8756f537458e2a636e43ef57722ed307a6746007ad486dc9149aa4eff0d5ca9d83feaf9315e557aa35642b0f25a5df51774750130ce025610bd463bf251c7e05182c38df931cbde4fb82779b0a8ea83ca98d00000000000000", 0xfffffd8d}, {&(0x7f0000000040)="4771256c0ba447a3f8f94e5528d7deb46aac8029da03c9aa"}, {&(0x7f0000000080)="1b413404dc72608c874817a39e8b9b36c1c64ae7803a2581de69d3aa5718f21d7c53d1e3d7479b"}, {&(0x7f0000000100)="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"}], 0x3c}, 0xc810)

6m25.88041361s ago: executing program 1 (id=1267):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10000000000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r6=>0x0})
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
read$FUSE(r7, &(0x7f0000002640)={0x2020}, 0x2020)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000304000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

6m24.674978685s ago: executing program 1 (id=1269):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mlockall(0x2)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mlockall(0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r3, 0x3516, 0xf00, 0x20, 0x0, 0x0)

6m17.978130056s ago: executing program 1 (id=1271):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4)
io_uring_setup(0x4505, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c200000000900000200000000000000006b63e321352985000000", @ANYRES32=r4, @ANYBLOB="04050500000000001c00128009000100626f6e64000000000c0002800500010005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001000010400000000000000e50e000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

6m2.620736558s ago: executing program 34 (id=1271):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4)
io_uring_setup(0x4505, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c200000000900000200000000000000006b63e321352985000000", @ANYRES32=r4, @ANYBLOB="04050500000000001c00128009000100626f6e64000000000c0002800500010005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001000010400000000000000e50e000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

3m46.412541717s ago: executing program 6 (id=1405):
r0 = fanotify_init(0x202, 0x0)
read(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_cache\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc})
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x48, r4, 0x1, 0x0, 0x0, {0x21}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x48}}, 0x0)
read$alg(r2, &(0x7f0000000e80)=""/4096, 0x1000)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424", 0x21)

3m46.252638467s ago: executing program 6 (id=1406):
socket$netlink(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2000000000002)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
bind$netlink(r3, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
r5 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f0000000180), 0xfe)
syz_open_procfs(0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)
syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9}, "b5379732e66d85089ccd3090ced52c972eb5573aac348712b25685a2717bf5cbfef5e20f85b2226910b886a9fc4d1dd31c4a4b7ca31f8bd25a8610443436e2ae85b6890d4bd9c12a895cbfe43efbfd2d2ddb2647dea8c426f4e96e333bb668af5264250ff18bdd8a61e4"}, 0x2c)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd601927f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0800010e0000000080000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000090780006"], 0x0)

3m41.186843496s ago: executing program 4 (id=1409):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDSKBLED(r0, 0x4b65, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = gettid()
signalfd4(r1, &(0x7f0000000100)={[0x800]}, 0x8, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x4}, [@NHA_GROUP={0x1c, 0x2, [{0x2, 0x8}, {0x0, 0x10}, {0x2, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
chmod(&(0x7f0000000240)='./file0\x00', 0x10)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x1c)
fallocate(r4, 0x52, 0x3, 0xcfd5)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0)
syz_open_procfs(r2, 0x0)
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x400)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3000000})

3m39.934796202s ago: executing program 4 (id=1410):
r0 = socket$packet(0x11, 0x2, 0x300)
flistxattr(r0, &(0x7f0000000040)=""/7, 0x7)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x3, 0x4002004c2, 0xffffffffffffffff, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffefd, 0x7fffffff, 0x20000000008, 0x6, 0xfffffffffffffff7], 0x100000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'})
r5 = socket$tipc(0x1e, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
socket$packet(0x11, 0x3, 0x300)
sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x18, 0x4c00}, 0x4000)
getrandom(0x0, 0x0, 0x3)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, <r9=>0x0, <r10=>0x0, <r11=>0x0}, 0x2020)
write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, r9, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r8, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x178, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x42, 0x5, 0x1, {0x6, 0x9, 0x0, 0x80000000000020ff, 0x0, 0x0, 0x7fffffff, 0x59, 0xac8, 0x8000, 0x3ff, r10, r11, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xd9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}, {{0x5, 0x2, 0xff, 0x7fff, 0x5, 0x3, {0x1, 0x4, 0x1ff80, 0x8000000000000000, 0x1, 0x1, 0x9, 0x5, 0x7fffffff, 0xa000, 0xfffffff8, r10, r11, 0x2, 0xfffffffd}}, {0x3, 0x7, 0x8, 0x40000, 'rootmode'}}]}, 0x0, 0x0, 0x0})
getdents64(r12, &(0x7f0000000100)=""/134, 0x86)
pread64(r7, &(0x7f0000000680)=""/235, 0xeb, 0x10002)
sendmsg$tipc(r5, &(0x7f0000000600)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000000c0)="a2c8da3adc79d9e4513396b2ec48ed1e5932e11abedcb8652a4829fc3ae7d2a862ab6bc4cbaf2a4b2d8f50", 0x2b}, {&(0x7f0000000100)="cbe1b6ea372f1beb47adfdd033e3acb1791f8400ffecf0344f35518582eee42a2be087a0567d82bdc7938dddee9c918b38e92b5dd8cba2697e96ca9dccc41b874aaedb745225ac8a9509db6705d7ae0bca1fe0e0f2d7eb316add8b5889f6d6f2aecc59d5e3abe7be3c09911a7e0903a31088584f34", 0x75}, {&(0x7f0000000240)="9e6e5e473a7b7f32b34c6c9dbefb6afee98d1363017fe49f08a523e455855aad813df9db8d1cbcea63ea8458272897f92da2adb752dcb00cc056756a9e04651d3178c4631541fee77617b88a82df79b0100b1979fe24ad275b6675e90081a6b129015a2dbe2ec362fe80164194aefbb668d71b2df301ffdb0bdc1d934162694f0bc4aa0e305c2fab6a424ddc9cd6c70a7dc52d61784f4a5d24ae52e2d449eb8cabb8d185515199400449594190fa7234e18f8d9daf05ffd12bd5609f2767afc2af03b14ce3d3c240dcefd0c78c638db749669acf78bb50f576", 0xd9}, {&(0x7f0000000340)="c297947764ad225ba7d4266060a9f2fbeda68fa88796fad1c968522e60ce2d5d21ac92f0539fd39bf60091864bf334538d32e8b856949679acd3457c67c009462911cd455802cba1776d3550198b2cfc025df283e5dbd5cd68a0393af1618b3fd10ea5c765648b59bc5a799cc0dcb65366830729bbb61af14238010c01b785ef914cb1b7c1c79d2ca0af1fe860fc6e5af02336191cd65c7f583d9735ce", 0x9d}, {&(0x7f0000000400)="069602f2839817aee3a66fc0c6f0a6784fbbfd822849de87fb75fef4574a5b64349f5084a915fbeb3eb2bef294f748919365f42537a993b46cb222736ba611337b6d744c1933c2244f9b4dedf0840842b9e6446727d94cda491dbb94e83f9b3b8c5812b70276f5eb7c24301bd72d2b3dccde82dc25627e553e54869f80e5aaf1e8dedbdfddd81c7dc0ad937d0ee86f84dba3695a83e07dc137888c", 0x9b}, {&(0x7f00000004c0)="510c1e309c674e2131633ec85b8f2a42355c6cd59c624f3469d1792678006ff96c1fd3ee8f5c6071335fc33e92e7074b366eebb8cde1d0f67e0963c0fd8925192bea1c335ca6971afe546dc26bb5596e5543ebfb4a9a44d52b9eab844f288e83e1c4df4ad1b75615b2ea9c1428fa1f53f6dfc39e8f30", 0x76}], 0x6, &(0x7f0000000580)="8b93b230173b5a447db5d82ffaedadf4c9f95d750b0fd5de44ad4f618fc28ffa0fecd91a590ae148133a171d2791d752e22f1521f382e8a6e27623dd233561b6264f7659c90e1849a52236502cd2e87c3778c925d7361c37125462907d30d76e3ac68255ca290fff87", 0x69, 0x4000000}, 0x40100)
write$sndseq(r1, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8)

3m39.6630224s ago: executing program 6 (id=1411):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDSKBLED(r0, 0x4b65, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = gettid()
signalfd4(r1, &(0x7f0000000100)={[0x800]}, 0x8, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x4}, [@NHA_GROUP={0x1c, 0x2, [{0x2, 0x8}, {0x0, 0x10}, {0x2, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
chmod(&(0x7f0000000240)='./file0\x00', 0x10)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x1c)
fallocate(r4, 0x52, 0x3, 0xcfd5)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r2, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x400)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3000000})

3m38.334467122s ago: executing program 4 (id=1412):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffe82)
ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0)
read$FUSE(r1, &(0x7f0000003780)={0x2020}, 0x2020)

3m38.243784553s ago: executing program 6 (id=1413):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
timer_create(0x1, &(0x7f0000000e00)={0x0, 0xb, 0x1}, &(0x7f0000000e40)=<r1=>0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0)
timer_gettime(r1, &(0x7f0000000e80)={{}, {<r5=>0x0}})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r8 = accept4(r7, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000001c0)={0x10000, 0x2, 0xffff1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]})
r12 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0})
r13 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r12, r13, r12}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
recvmmsg(r8, &(0x7f0000004c00), 0x0, 0x40000021, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0)
r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x6}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x2000000000000054, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close_range(r14, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r6})

3m36.579480764s ago: executing program 4 (id=1414):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0xdedc, 0x5, 0x9, 0x81, 0x101, 0x7, 0x2, 0x7fffffff, 0xfffffffd, 0xd, 0xb, 0x3, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}}, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = syz_open_dev$video4linux(&(0x7f0000000240), 0x80000001, 0x101002)
ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}})
r6 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000300)='auxv\x00')

3m32.874578156s ago: executing program 6 (id=1415):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100})
lseek(r2, 0x0, 0x3)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb1"], 0x50)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="02000010011000"/28], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9, 0x8, 0x0, 0x0}}, 0x10)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x3, 0x12)
sendfile(r3, r1, &(0x7f0000000000)=0x9, 0x3fffff)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0904000000000000000002000000580004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000180001800d00010073796e70726f787900000000050002800900010073797a30000000000900020073797a320000000014000000110001"], 0xac}}, 0x0)

3m32.731219761s ago: executing program 4 (id=1416):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000c3fb0000000000000000850000000700000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d696e7465f7ffffff76653a302d000000"])

3m31.110578861s ago: executing program 4 (id=1419):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x3ff, &(0x7f0000000500)=<r1=>0x0)
io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180), 0x8})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000004000"/28], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r8=>r5, {r6}}, './file0\x00'})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x0, 0x1, 0x0, 0x4}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r9 = openat$vcsa(0xffffff9c, &(0x7f0000000340), 0x28900, 0x0)
ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000380)={0x0, 0x2, 0x8})
r10 = msgget$private(0x0, 0x0)
msgrcv(r10, 0x0, 0x0, 0x3, 0x2000)

3m30.67357288s ago: executing program 5 (id=1420):
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x6, 0x1)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x800, 0x0)
ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f00000000c0))
socket$rxrpc(0x21, 0x2, 0xa)

3m29.261342288s ago: executing program 5 (id=1421):
r0 = socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x8000, 0x2}, {}, {0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x218}, 0x1c)

3m29.260938168s ago: executing program 5 (id=1422):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
gettid()
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)={0x84, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x10}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x101}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4c814)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000001140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000011c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001180), 0x111, 0x9}}, 0x20)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000080)={{<r3=>0x0, 0x8, 0x957e, 0x2, 0x9, 0xffffffffffff75d3, 0xb, 0x9, 0x81, 0x7, 0x8, 0xe000, 0xfffffffffffffffa, 0x7c8, 0x2}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40, 0x41}, 0x5e)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x359}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = dup2(r2, r1)
ioctl$RTC_VL_READ(r7, 0x80047013, &(0x7f0000001340))
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x0, 0x25dfdbff, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000140)={0x0, r3, "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", "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"})
ioctl$int_in(r1, 0x40000000af01, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x23}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040144}, 0x80)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000040)={0x0, 0xb})

3m28.766900902s ago: executing program 5 (id=1423):
mkdir(0x0, 0x51)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x10)

3m28.030323594s ago: executing program 6 (id=1424):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x120)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000400)='\x00\xd1\xd3\xe8\x1a\x82\x0e\xee\x8a\x94Ae\x92\xa55m\xa9m\xb4\x81P\xea\xe0\x84W\xfb\xc3\x0e\xce^~~1\x8c\xb2\xb4\xb2\xf8\xbd\xdbs\xe6\\#\x9a@\x94/', 0x30, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}, 0x88a8ffff}], 0x400000000000179, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))

3m26.683855823s ago: executing program 5 (id=1425):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8981f23689eb65be16f4264404ead3486d8a823382092e64c0800d8de6d01309d6a7e6c1c52167af", 0x28)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r4, 0x0)
listen(r1, 0x0)
read$FUSE(r0, &(0x7f00000077c0)={0x2020}, 0x2020)

3m26.542794491s ago: executing program 5 (id=1426):
r0 = getpid() (async, rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg$sock(r2, &(0x7f0000003ac0)=[{{&(0x7f0000000800)=@rc={0x1f, @none, 0x8}, 0x80, 0x0}}, {{&(0x7f0000002540)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x1c, "28839e3f0d065c97361e42d944b1661f81be1063c82d2dab2db7606161f1ab5e58037806c0ca1099295fcf6a9301135139f80cf8f8d42084a8d4fd41e5a157", 0x1a}, 0x80, &(0x7f0000003980)=[{&(0x7f00000025c0)="554c6bf09a07554ada4d286262ba851be52d6642d7d89f267acdbabf18d6026997f20c7197704e47858f551bea2dadb0c9565e6915f1c1d12a791769182df0d63a5cc3535ebb6307ee1e0485ae016792ddda805858daccffab804bdd0bf1aaa1dcfec143669b59f7054950b69ed88c9806", 0x71}], 0x1}}], 0x2, 0x20004084) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xc}) (async, rerun: 32)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (rerun: 32)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000000308"], 0xfdef) (async)
syz_pidfd_open(r0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000b40)={'wpan0\x00', <r8=>0x0}) (async, rerun: 32)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f00000008c0)=@arm64={0x6, 0x2, 0x25, '\x00', 0x64}) (async, rerun: 64)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r8, @ANYBLOB="1c002d8005000400eaffffff070002"], 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) (async)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1f4, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x160, 0x2a8, 0x2a8, 0xd0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x1, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'macvtap0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x250)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r16=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b729bd5ede0fff55f9dad2b4ec4328910108", @ANYRES16=r14, @ANYBLOB="010027bd7000fedbdf252700000008000300", @ANYRES32=r16, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x20004841}, 0x80)

3m11.297066586s ago: executing program 35 (id=1419):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x3ff, &(0x7f0000000500)=<r1=>0x0)
io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180), 0x8})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000004000"/28], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r8=>r5, {r6}}, './file0\x00'})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x0, 0x1, 0x0, 0x4}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r9 = openat$vcsa(0xffffff9c, &(0x7f0000000340), 0x28900, 0x0)
ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000380)={0x0, 0x2, 0x8})
r10 = msgget$private(0x0, 0x0)
msgrcv(r10, 0x0, 0x0, 0x3, 0x2000)

3m11.288778258s ago: executing program 36 (id=1424):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x120)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000400)='\x00\xd1\xd3\xe8\x1a\x82\x0e\xee\x8a\x94Ae\x92\xa55m\xa9m\xb4\x81P\xea\xe0\x84W\xfb\xc3\x0e\xce^~~1\x8c\xb2\xb4\xb2\xf8\xbd\xdbs\xe6\\#\x9a@\x94/', 0x30, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}, 0x88a8ffff}], 0x400000000000179, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))

3m11.28861188s ago: executing program 37 (id=1426):
r0 = getpid() (async, rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg$sock(r2, &(0x7f0000003ac0)=[{{&(0x7f0000000800)=@rc={0x1f, @none, 0x8}, 0x80, 0x0}}, {{&(0x7f0000002540)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x1c, "28839e3f0d065c97361e42d944b1661f81be1063c82d2dab2db7606161f1ab5e58037806c0ca1099295fcf6a9301135139f80cf8f8d42084a8d4fd41e5a157", 0x1a}, 0x80, &(0x7f0000003980)=[{&(0x7f00000025c0)="554c6bf09a07554ada4d286262ba851be52d6642d7d89f267acdbabf18d6026997f20c7197704e47858f551bea2dadb0c9565e6915f1c1d12a791769182df0d63a5cc3535ebb6307ee1e0485ae016792ddda805858daccffab804bdd0bf1aaa1dcfec143669b59f7054950b69ed88c9806", 0x71}], 0x1}}], 0x2, 0x20004084) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xc}) (async, rerun: 32)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (rerun: 32)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000000308"], 0xfdef) (async)
syz_pidfd_open(r0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000b40)={'wpan0\x00', <r8=>0x0}) (async, rerun: 32)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f00000008c0)=@arm64={0x6, 0x2, 0x25, '\x00', 0x64}) (async, rerun: 64)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r8, @ANYBLOB="1c002d8005000400eaffffff070002"], 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) (async)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1f4, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x160, 0x2a8, 0x2a8, 0xd0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x1, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'macvtap0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x250)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r16=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b729bd5ede0fff55f9dad2b4ec4328910108", @ANYRES16=r14, @ANYBLOB="010027bd7000fedbdf252700000008000300", @ANYRES32=r16, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x20004841}, 0x80)

3.910478364s ago: executing program 0 (id=4521):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20)

3.858378681s ago: executing program 0 (id=4523):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2})
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)

3.858263418s ago: executing program 0 (id=4524):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b000"], 0xb0)
write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x80000, 0x2d63, 0x6c2, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x1ff}}, 0x50)
getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000400)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3])
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

3.806369329s ago: executing program 0 (id=4525):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYRES32], 0x80}}, 0x0)

3.729134217s ago: executing program 0 (id=4527):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

3.72884539s ago: executing program 0 (id=4530):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5e114b6f, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000040))

2.540007104s ago: executing program 8 (id=4553):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = dup(r0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xd0e29cde0b9a4f94, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)

1.660573171s ago: executing program 8 (id=4562):
syz_emit_ethernet(0x53, &(0x7f00000004c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x45, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x200, "c135f0b1926b2e39d4400f6f6e47e80e1aac68da501067eb39b1e8da86714e9b8e08db1028ee0092ea"}}}}}, 0x0)

1.600340578s ago: executing program 8 (id=4563):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/64, 0x40}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}], 0x6}, 0x5}], 0x1, 0x2000, 0x0)

290.556508ms ago: executing program 8 (id=4564):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}]}}}]}, 0x68}}, 0x0)

229.068409ms ago: executing program 8 (id=4566):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc)
sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)

228.847913ms ago: executing program 9 (id=4567):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48)

228.723511ms ago: executing program 7 (id=4568):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)

150.412558ms ago: executing program 9 (id=4569):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r3, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007)

150.126405ms ago: executing program 8 (id=4570):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x5})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48)

149.939927ms ago: executing program 7 (id=4571):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='W', 0x1}], 0x1)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f", @ANYRES32, @ANYBLOB="00008e"], 0x48)

149.815843ms ago: executing program 9 (id=4572):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000200), &(0x7f0000000340)=r1}, 0x20)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70)

149.560744ms ago: executing program 7 (id=4573):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4dfd, 0x80000, @empty, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'], 0x28}, 0xc4)

59.111579ms ago: executing program 9 (id=4574):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4f27f69b0618d8ae}, 0x10)

58.872726ms ago: executing program 7 (id=4575):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)

58.746142ms ago: executing program 7 (id=4576):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x3}]}}}]}, 0x3c}}, 0x4)

58.584605ms ago: executing program 9 (id=4577):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

380.635µs ago: executing program 7 (id=4578):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="10180000075005004c0012800b00010062726964676500003c00028005001900020000000500170000000000080018"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4008040)

0s ago: executing program 9 (id=4579):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
close_range(r5, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}}, {{&(0x7f0000000840)={0xa, 0x4e23, 0x94, @mcast1, 0x4}, 0x1c, &(0x7f0000002d00)=[{&(0x7f0000000880)}, {0x0}, {0x0}, {&(0x7f0000000980)}, {&(0x7f0000001b00)="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", 0xbfa}, {&(0x7f0000002b00)="9a9f2748b482562e54f0d74d6a3e7b913ae769b8698282caea60f0ceb3f481d70fcc51131136227c3646947675eab6057c0837a13797ecc8fe4ce2", 0x3b}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)}, {0x0}], 0x9}}, {{&(0x7f0000002e40)={0xa, 0x4e23, 0x1000, @empty, 0x5}, 0x1c, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=[@hopopts={{0x28, 0x29, 0x36, {0x2c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0xfffffffa}]}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000003040), 0x0, &(0x7f0000003080)=[@tclass={{0x14, 0x29, 0x43, 0x81}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003140)=[{0x0}, {&(0x7f0000003100)="4cee1b6423b8270d93f41bffeb788d855fa648996650cbf1007ad9ec3015622f4e3f14824a7534207554bf480db87eb9865db41b9f7b37bff6b0", 0x3a}], 0x2, &(0x7f0000003240)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003340)}], 0x1}}], 0x6, 0x14)
r6 = socket(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)

kernel console output (not intermixed with test programs):

4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.127212][ T9858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  641.139014][T11683] veth1_vlan: entered promiscuous mode
[  641.145115][T11687] veth0_vlan: entered promiscuous mode
[  641.154868][T11687] veth1_vlan: entered promiscuous mode
[  641.181675][T11685] veth0_macvtap: entered promiscuous mode
[  641.188104][T10970] Bluetooth: hci3: command tx timeout
[  641.188552][T11685] veth1_macvtap: entered promiscuous mode
[  641.195034][T11683] veth0_macvtap: entered promiscuous mode
[  641.199955][T11683] veth1_macvtap: entered promiscuous mode
[  641.214486][ T9858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.218408][ T9858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  641.237536][T11687] veth0_macvtap: entered promiscuous mode
[  641.244850][T11685] batman_adv: batadv0: Interface activated: batadv_slave_0
[  641.248886][T11687] veth1_macvtap: entered promiscuous mode
[  641.254793][T11683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  641.258483][T11685] batman_adv: batadv0: Interface activated: batadv_slave_1
[  641.268012][T10970] Bluetooth: hci6: command tx timeout
[  641.268833][T11683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  641.270417][T10970] Bluetooth: hci4: command tx timeout
[  641.280177][ T9883] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.283434][ T9883] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.290509][ T9883] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.300204][T11687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  641.304353][ T9883] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.308015][ T9883] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.337639][ T9858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.342523][ T9858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  641.372733][T11687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  641.375953][ T9883] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.410322][ T9843] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.413145][ T9843] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.416083][ T9843] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.426243][ T9843] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.432605][ T9843] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.452559][ T9843] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.467485][ T9883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.471819][ T9883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.484701][ T9885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.487936][ T9885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.508857][ T9883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.512274][ T9883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.541985][ T9843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.548563][ T9843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.551689][ T9858] erspan0: left allmulticast mode
[  641.553360][ T9858] erspan0: left promiscuous mode
[  641.555235][ T9858] bridge0: port 3(erspan0) entered disabled state
[  641.559443][ T9858] bridge_slave_1: left allmulticast mode
[  641.561362][ T9858] bridge_slave_1: left promiscuous mode
[  641.563546][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.564383][T11802] netlink: 'syz.0.1442': attribute type 10 has an invalid length.
[  641.570772][ T9858] bridge_slave_0: left allmulticast mode
[  641.572718][ T9858] bridge_slave_0: left promiscuous mode
[  641.575247][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.589922][ T9858] erspan0: left allmulticast mode
[  641.592124][ T9858] erspan0: left promiscuous mode
[  641.594397][ T9858] bridge0: port 3(erspan0) entered disabled state
[  641.598553][ T9858] bridge_slave_1: left allmulticast mode
[  641.600498][ T9858] bridge_slave_1: left promiscuous mode
[  641.602350][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.606110][ T9858] bridge_slave_0: left allmulticast mode
[  641.608473][ T9858] bridge_slave_0: left promiscuous mode
[  641.610399][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.965363][ T9858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  641.972779][ T9858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  641.979584][ T9858] bond0 (unregistering): Released all slaves
[  642.348622][ T9858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  642.354642][ T9858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  642.359691][ T9858] bond0 (unregistering): Released all slaves
[  642.407530][ T9885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.411022][ T9885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.432653][ T9842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.435345][ T9842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.533132][T11814] dummy0: entered promiscuous mode
[  642.534904][T11814] dummy0: entered allmulticast mode
[  642.703134][T11815] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.706758][T11815] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.960456][T11815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  642.967618][T11815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  643.007869][T11505] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  643.077933][T10925] usb 12-1: new full-speed USB device number 2 using dummy_hcd
[  643.172024][T11505] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  643.176151][T11505] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  643.179976][T11505] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  643.183035][T11505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.190274][T11505] usb 5-1: config 0 descriptor??
[  643.230946][T10925] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  643.238675][T10925] usb 12-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  643.243097][T10925] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.246939][T10925] usb 12-1: Product: syz
[  643.249501][T10925] usb 12-1: Manufacturer: syz
[  643.251837][T10925] usb 12-1: SerialNumber: syz
[  643.256137][T10925] usb 12-1: config 0 descriptor??
[  643.338893][T11823] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.342291][T11823] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.472808][T11505] usbhid 5-1:0.0: can't add hid device: -71
[  643.475013][T11505] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  643.482671][T11505] usb 5-1: USB disconnect, device number 29
[  643.622475][T11823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  643.632941][T11823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  643.717906][ T9867] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.721523][ T9867] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.745113][T11813] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.757558][ T9867] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.768842][ T9849] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.790731][ T9849] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.801202][ T9849] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.804263][ T9849] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.820384][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1445'.
[  644.326373][T11843] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  644.777531][ T9858] hsr_slave_0: left promiscuous mode
[  644.780642][ T9858] hsr_slave_1: left promiscuous mode
[  644.783024][ T9858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  644.785430][ T9858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  644.791213][ T9858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  644.795480][ T9858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  644.819214][ T9858] hsr_slave_0: left promiscuous mode
[  644.821909][ T9858] hsr_slave_1: left promiscuous mode
[  644.824286][ T9858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  644.827074][ T9858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  644.830691][ T9858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  644.833601][ T9858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  644.978011][ T9858] veth1_macvtap: left promiscuous mode
[  644.980062][ T9858] veth0_macvtap: left promiscuous mode
[  644.981944][ T9858] veth1_vlan: left promiscuous mode
[  644.983792][ T9858] veth0_vlan: left promiscuous mode
[  645.000858][ T9858] veth1_macvtap: left promiscuous mode
[  645.003913][ T9858] veth0_macvtap: left promiscuous mode
[  645.005901][ T9858] veth1_vlan: left promiscuous mode
[  645.009239][ T9858] veth0_vlan: left promiscuous mode
[  645.792454][T10925] keyspan 12-1:0.0: Keyspan 1 port adapter converter detected
[  645.795968][T10925] keyspan 12-1:0.0: found no endpoint descriptor for endpoint 82
[  645.857943][T10925] keyspan 12-1:0.0: found no endpoint descriptor for endpoint 81
[  645.858014][T10925] keyspan 12-1:0.0: found no endpoint descriptor for endpoint 1
[  645.858068][T10925] keyspan 12-1:0.0: found no endpoint descriptor for endpoint 2
[  645.881636][T10925] usb 12-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  645.892903][T10925] usb 12-1: USB disconnect, device number 2
[  645.898441][T10925] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  645.898740][T10925] keyspan 12-1:0.0: device disconnected
[  646.449005][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1451'.
[  646.571407][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1451'.
[  646.574603][T11862] netlink: 'syz.8.1451': attribute type 15 has an invalid length.
[  646.579346][T11868] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  646.582279][T11868] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  646.597956][T11868] vhci_hcd vhci_hcd.0: Device attached
[  646.878173][T11505] usb 54-1: SetAddress Request (2) to port 0
[  646.882652][T11505] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd
[  646.976017][ T9858] team0 (unregistering): Port device team_slave_1 removed
[  647.054230][ T9858] team0 (unregistering): Port device team_slave_0 removed
[  647.098829][T11870] vhci_hcd: connection reset by peer
[  647.107917][ T9883] vhci_hcd: stop threads
[  647.109408][ T9883] vhci_hcd: release socket
[  647.110966][ T9883] vhci_hcd: disconnect device
[  647.234526][T11890] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  647.236814][T11890] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  647.239802][T11890] vhci_hcd vhci_hcd.0: Device attached
[  647.270995][T11890] No source specified
[  647.507948][ T5988] usb 38-1: SetAddress Request (30) to port 0
[  647.510052][ T5988] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd
[  647.637976][ T6871] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  647.789849][ T6871] usb 12-1: too many configurations: 9, using maximum allowed: 8
[  647.793533][ T6871] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  647.796806][ T6871] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  647.800711][ T6871] usb 12-1: config 0 interface 0 has no altsetting 0
[  647.808800][ T6871] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  647.811911][ T6871] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  647.815732][ T6871] usb 12-1: config 0 interface 0 has no altsetting 0
[  647.823585][ T6871] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  647.826870][ T6871] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  647.830836][ T6871] usb 12-1: config 0 interface 0 has no altsetting 0
[  647.833988][ T6871] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  647.837065][ T6871] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  647.840977][ T6871] usb 12-1: config 0 interface 0 has no altsetting 0
[  647.844039][ T6871] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  647.847370][ T6871] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  647.851531][ T6871] usb 12-1: config 0 interface 0 has no altsetting 0
[  647.854597][ T6871] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  647.857721][ T6871] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  647.861665][ T6871] usb 12-1: config 0 interface 0 has no altsetting 0
[  647.864758][ T6871] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  647.868036][ T6871] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  647.871879][ T6871] usb 12-1: config 0 interface 0 has no altsetting 0
[  647.875499][ T6871] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  647.879035][ T6871] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  647.882806][ T6871] usb 12-1: config 0 interface 0 has no altsetting 0
[  647.886856][ T6871] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  647.890258][ T6871] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  647.893191][ T6871] usb 12-1: Product: syz
[  647.894683][ T6871] usb 12-1: Manufacturer: syz
[  647.896364][ T6871] usb 12-1: SerialNumber: syz
[  647.897998][T11891] vhci_hcd: connection reset by peer
[  647.900854][ T9867] vhci_hcd: stop threads
[  647.901438][ T6871] usb 12-1: config 0 descriptor??
[  647.902709][ T9867] vhci_hcd: release socket
[  647.906118][ T9867] vhci_hcd: disconnect device
[  647.908320][ T6871] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0
[  648.209477][   T55] usb 12-1: USB disconnect, device number 3
[  648.223841][   T55] yurex 12-1:0.0: USB YUREX #0 now disconnected
[  648.632093][ T9858] team0 (unregistering): Port device team_slave_1 removed
[  648.708489][ T9858] team0 (unregistering): Port device team_slave_0 removed
[  649.426023][T11018] lo speed is unknown, defaulting to 1000
[  649.428929][T11018] infiniband syz0: ib_query_port failed (-19)
[  649.438003][T11923] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  649.532575][T11933] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1460'.
[  649.778005][ T6871] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  650.067384][ T6871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  650.079347][ T6871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  650.083746][ T6871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  650.095699][ T6871] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  650.100295][ T6871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.103942][ T6871] usb 5-1: Product: syz
[  650.105868][ T6871] usb 5-1: Manufacturer: syz
[  650.108569][ T6871] usb 5-1: SerialNumber: syz
[  650.114403][ T6871] usb 5-1: config 0 descriptor??
[  650.315601][T11943] overlayfs: overlapping lowerdir path
[  650.323512][T11925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.326771][T11925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.335865][ T6871] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  650.545869][T11925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.551783][T11925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.745920][T11954] FAULT_INJECTION: forcing a failure.
[  650.745920][T11954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  650.751776][T11954] CPU: 1 UID: 0 PID: 11954 Comm: syz.8.1465 Not tainted syzkaller #0 PREEMPT(full) 
[  650.751802][T11954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  650.751813][T11954] Call Trace:
[  650.751820][T11954]  <TASK>
[  650.751829][T11954]  dump_stack_lvl+0x16c/0x1f0
[  650.751856][T11954]  should_fail_ex+0x512/0x640
[  650.751885][T11954]  _copy_to_user+0x32/0xd0
[  650.751906][T11954]  store_msg+0x44/0x160
[  650.751928][T11954]  compat_do_msg_fill+0xa5/0xf0
[  650.751954][T11954]  do_msgrcv+0x1020/0x16c0
[  650.751975][T11954]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  650.751998][T11954]  ? __pfx_compat_do_msg_fill+0x10/0x10
[  650.752029][T11954]  ? __pfx_do_msgrcv+0x10/0x10
[  650.752059][T11954]  ? __pfx_ksys_write+0x10/0x10
[  650.752087][T11954]  ? __do_fast_syscall_32+0x7c/0x300
[  650.752110][T11954]  __do_fast_syscall_32+0x7c/0x300
[  650.752136][T11954]  do_fast_syscall_32+0x32/0x80
[  650.752168][T11954]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  650.752193][T11954] RIP: 0023:0xf7f92579
[  650.752208][T11954] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  650.752226][T11954] RSP: 002b:00000000f544455c EFLAGS: 00000296 ORIG_RAX: 0000000000000191
[  650.752244][T11954] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800002c0
[  650.752255][T11954] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000800
[  650.752268][T11954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  650.752279][T11954] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  650.752289][T11954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  650.752316][T11954]  </TASK>
[  651.445234][T11958] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1467'.
[  651.787952][ T6012] usb 14-1: new high-speed USB device number 2 using dummy_hcd
[  651.924911][T11966] netlink: 'syz.0.1468': attribute type 10 has an invalid length.
[  651.928584][T11966] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1468'.
[  651.937967][ T6012] usb 14-1: Using ep0 maxpacket: 16
[  651.941899][ T6012] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  651.946452][ T6012] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  652.024795][T11505] usb 54-1: device descriptor read/8, error -110
[  652.027937][ T6012] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  652.033362][ T6012] usb 14-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  652.037175][ T6012] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.108984][ T6012] usb 14-1: config 0 descriptor??
[  652.222997][T11018] usb 5-1: USB disconnect, device number 30
[  652.378464][T11973] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  652.419773][T11505] usb usb54-port1: attempt power cycle
[  652.548293][ T5988] usb 38-1: device descriptor read/8, error -110
[  652.786636][ T6012] usbhid 14-1:0.0: can't add hid device: -71
[  652.795754][ T6012] usbhid 14-1:0.0: probe with driver usbhid failed with error -71
[  652.827116][ T6012] usb 14-1: USB disconnect, device number 2
[  652.946758][ T5988] usb usb38-port1: attempt power cycle
[  653.011857][T11505] usb usb54-port1: unable to enumerate USB device
[  653.535281][ T5988] usb usb38-port1: unable to enumerate USB device
[  653.936161][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1475'.
[  654.020100][T12012] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6)
[  654.022505][T12012] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  654.027053][T12012] vhci_hcd vhci_hcd.0: Device attached
[  654.298255][T11505] usb 52-1: SetAddress Request (2) to port 0
[  654.301554][T11505] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd
[  654.648638][T12013] vhci_hcd: connection reset by peer
[  654.650915][ T9867] vhci_hcd: stop threads
[  654.676508][ T9867] vhci_hcd: release socket
[  654.696834][ T9867] vhci_hcd: disconnect device
[  655.032188][T12023] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  655.038884][T12023] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  655.053628][T12023] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  655.057549][T12023] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  655.061056][T12023] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  655.067443][T12023] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  655.073788][T12023] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  655.076637][T12023] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  655.081435][T12023] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  656.012220][T12046] overlay: Unknown parameter '//bus'
[  656.047482][T12047] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  656.073511][T12048] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  656.586859][T12069] overlayfs: missing 'lowerdir'
[  657.120844][T10970] Bluetooth: hci4: command 0x0c1a tx timeout
[  657.120899][ T5954] Bluetooth: hci6: command 0x0405 tx timeout
[  657.121787][ T5298] Bluetooth: hci3: command 0x0c1a tx timeout
[  657.505843][T12081] hpfs: hpfs_map_sector(): read error
[  657.680287][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1500'.
[  657.685356][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1500'.
[  657.748833][   T40] audit: type=1326 audit(1764580056.600:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12085 comm="syz.8.1501" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f92579 code=0x0
[  658.592786][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1505'.
[  658.705657][T12104] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  658.707862][T12104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  658.711752][T12104] vhci_hcd vhci_hcd.0: Device attached
[  658.744418][   T40] audit: type=1804 audit(1764580057.599:937): pid=12104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1504" name="/newroot/402/file0/file1" dev="overlay" ino=2218 res=1 errno=0
[  658.925442][T12116] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1505'.
[  658.943800][T10970] Bluetooth: hci4: unexpected event for opcode 0xad13
[  658.952613][ T6012] usb 37-1: new high-speed USB device number 6 using vhci_hcd
[  659.192814][T10970] Bluetooth: hci3: command 0x0c1a tx timeout
[  659.192828][ T5298] Bluetooth: hci6: command 0x0405 tx timeout
[  659.257665][T12124] lo speed is unknown, defaulting to 1000
[  659.259757][T12124] lo speed is unknown, defaulting to 1000
[  659.266767][T12124] lo speed is unknown, defaulting to 1000
[  659.295996][T12124] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  659.462177][T12124] lo speed is unknown, defaulting to 1000
[  659.469462][T12124] lo speed is unknown, defaulting to 1000
[  659.479746][T12124] lo speed is unknown, defaulting to 1000
[  659.486145][T12124] lo speed is unknown, defaulting to 1000
[  659.493807][T12124] lo speed is unknown, defaulting to 1000
[  659.503160][T12124] lo speed is unknown, defaulting to 1000
[  659.595213][T11505] usb 52-1: device descriptor read/8, error -110
[  659.665045][T12105] vhci_hcd: connection reset by peer
[  659.668444][   T80] vhci_hcd: stop threads
[  659.670392][   T80] vhci_hcd: release socket
[  659.672432][   T80] vhci_hcd: disconnect device
[  659.782309][T12127] XFS (nullb0): Invalid superblock magic number
[  660.194741][T11505] usb usb52-port1: attempt power cycle
[  660.261920][T12144] trusted_key: encrypted_key: keylen parameter is missing
[  660.469353][T12144] lo speed is unknown, defaulting to 1000
[  660.755364][T11505] usb usb52-port1: unable to enumerate USB device
[  660.826747][T12154] netlink: 'syz.9.1516': attribute type 8 has an invalid length.
[  661.108911][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1517'.
[  661.113790][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1517'.
[  661.274876][ T5298] Bluetooth: hci6: command 0x0405 tx timeout
[  661.284912][ T5298] Bluetooth: hci3: command 0x0c1a tx timeout
[  661.334691][T12165] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1519'.
[  661.436527][T12167] lo speed is unknown, defaulting to 1000
[  661.541232][T12174] FAULT_INJECTION: forcing a failure.
[  661.541232][T12174] name failslab, interval 1, probability 0, space 0, times 0
[  661.547237][T12174] CPU: 2 UID: 0 PID: 12174 Comm: syz.7.1522 Not tainted syzkaller #0 PREEMPT(full) 
[  661.547263][T12174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  661.547275][T12174] Call Trace:
[  661.547294][T12174]  <TASK>
[  661.547302][T12174]  dump_stack_lvl+0x16c/0x1f0
[  661.547330][T12174]  should_fail_ex+0x512/0x640
[  661.547352][T12174]  ? kmem_cache_alloc_lru_noprof+0x66/0x6e0
[  661.547367][T12174]  should_failslab+0xc2/0x120
[  661.547383][T12174]  kmem_cache_alloc_lru_noprof+0x79/0x6e0
[  661.547414][T12174]  ? __d_alloc+0x32/0xae0
[  661.547431][T12174]  ? __d_alloc+0x32/0xae0
[  661.547442][T12174]  __d_alloc+0x32/0xae0
[  661.547457][T12174]  d_alloc_parallel+0x111/0x1510
[  661.547477][T12174]  ? find_held_lock+0x2b/0x80
[  661.547490][T12174]  ? __d_lookup+0x25c/0x4a0
[  661.547507][T12174]  ? __pfx_d_alloc_parallel+0x10/0x10
[  661.547524][T12174]  ? __d_lookup+0x266/0x4a0
[  661.547540][T12174]  ? lockdep_init_map_type+0x5c/0x280
[  661.547557][T12174]  ? lockdep_init_map_type+0x5c/0x280
[  661.547576][T12174]  proc_fill_cache+0x2e6/0x470
[  661.547591][T12174]  ? __pfx_proc_pident_instantiate+0x10/0x10
[  661.547611][T12174]  ? __pfx_proc_fill_cache+0x10/0x10
[  661.547626][T12174]  ? __lock_acquire+0x622/0x1c90
[  661.547651][T12174]  ? get_pid_task+0xfc/0x250
[  661.547670][T12174]  proc_pident_readdir+0x1bc/0x530
[  661.547689][T12174]  iterate_dir+0x296/0xaf0
[  661.547708][T12174]  __ia32_sys_getdents64+0x13b/0x2c0
[  661.547726][T12174]  ? native_tss_update_io_bitmap+0x3e1/0x770
[  661.547744][T12174]  ? __pfx___ia32_sys_getdents64+0x10/0x10
[  661.547763][T12174]  ? __pfx_native_tss_update_io_bitmap+0x10/0x10
[  661.547780][T12174]  ? __pfx_filldir64+0x10/0x10
[  661.547800][T12174]  ? rcu_is_watching+0x12/0xc0
[  661.547814][T12174]  __do_fast_syscall_32+0x7c/0x300
[  661.547831][T12174]  do_fast_syscall_32+0x32/0x80
[  661.547846][T12174]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  661.547860][T12174] RIP: 0023:0xf706d579
[  661.547870][T12174] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  661.547881][T12174] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000dc
[  661.547893][T12174] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080002f40
[  661.547900][T12174] RDX: 0000000000000ffc RSI: 0000000000000000 RDI: 0000000000000000
[  661.547907][T12174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  661.547913][T12174] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  661.547920][T12174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  661.547935][T12174]  </TASK>
[  661.770975][T12182] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  661.773529][T12182] batman_adv: batadv0: Removing interface: batadv_slave_0
[  661.777467][T12182] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  661.779959][T12182] batman_adv: batadv0: Removing interface: batadv_slave_1
[  661.882877][T12186] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  661.885238][T12186] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  661.890671][T12186] vhci_hcd vhci_hcd.0: Device attached
[  661.921933][T12186] FAULT_INJECTION: forcing a failure.
[  661.921933][T12186] name failslab, interval 1, probability 0, space 0, times 0
[  661.926334][T12186] CPU: 1 UID: 0 PID: 12186 Comm: syz.0.1521 Not tainted syzkaller #0 PREEMPT(full) 
[  661.926351][T12186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  661.926358][T12186] Call Trace:
[  661.926362][T12186]  <TASK>
[  661.926367][T12186]  dump_stack_lvl+0x16c/0x1f0
[  661.926385][T12186]  should_fail_ex+0x512/0x640
[  661.926406][T12186]  should_failslab+0xc2/0x120
[  661.926422][T12186]  kmem_cache_alloc_node_noprof+0x78/0x770
[  661.926435][T12186]  ? find_held_lock+0x2b/0x80
[  661.926446][T12186]  ? alloc_io_context+0x21/0x2f0
[  661.926467][T12186]  ? alloc_io_context+0x21/0x2f0
[  661.926483][T12186]  alloc_io_context+0x21/0x2f0
[  661.926500][T12186]  set_task_ioprio+0x49e/0x670
[  661.926513][T12186]  __do_sys_ioprio_set+0x24f/0xb50
[  661.926530][T12186]  ? rcu_is_watching+0x12/0xc0
[  661.926542][T12186]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  661.926571][T12186]  __do_fast_syscall_32+0x7c/0x300
[  661.926588][T12186]  do_fast_syscall_32+0x32/0x80
[  661.926602][T12186]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  661.926616][T12186] RIP: 0023:0xf7f31579
[  661.926625][T12186] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  661.926655][T12186] RSP: 002b:00000000f53e455c EFLAGS: 00000296 ORIG_RAX: 0000000000000121
[  661.926666][T12186] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000585
[  661.926673][T12186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  661.926680][T12186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  661.926686][T12186] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  661.926692][T12186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  661.926718][T12186]  </TASK>
[  662.082537][T12187] vhci_hcd: connection closed
[  662.082827][ T9867] vhci_hcd: stop threads
[  662.087307][ T9867] vhci_hcd: release socket
[  662.089417][ T9867] vhci_hcd: disconnect device
[  662.100693][T12199] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1528'.
[  662.960457][T12239] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1540'.
[  662.972396][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1540'.
[  663.132198][T12252] ipvlan4: entered promiscuous mode
[  663.136125][T12252] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  663.310612][T12258] overlayfs: failed to resolve 'appraise_type=imasig': -2
[  663.356881][ T5298] Bluetooth: hci6: command 0x0405 tx timeout
[  663.376689][T12262] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1549'.
[  663.423209][T12269] sp0: Synchronizing with TNC
[  664.518041][ T6012] vhci_hcd: vhci_device speed not set
[  664.646491][T12291] overlayfs: missing 'lowerdir'
[  664.781198][T12291] netlink: 'syz.8.1557': attribute type 1 has an invalid length.
[  664.785050][T12291] netlink: 'syz.8.1557': attribute type 2 has an invalid length.
[  665.308136][T12309] overlayfs: missing 'lowerdir'
[  665.339280][T12310] syz_tun: entered allmulticast mode
[  665.390309][T12310] pimreg: entered allmulticast mode
[  665.409622][T12307] syz_tun: left allmulticast mode
[  665.412078][T12307] pimreg: left allmulticast mode
[  665.538869][   T34] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  665.702933][   T34] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  665.706715][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.710105][   T34] usb 5-1: Product: syz
[  665.711821][   T34] usb 5-1: Manufacturer: syz
[  665.713762][   T34] usb 5-1: SerialNumber: syz
[  665.717644][   T34] usb 5-1: config 0 descriptor??
[  665.804955][T12318] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1566'.
[  665.831047][T11505] usb usb38-port1: attempt power cycle
[  665.930733][   T34] usb 5-1: Firmware version (0.0) predates our first public release.
[  665.932160][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1564'.
[  665.937034][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1564'.
[  665.944818][   T34] usb 5-1: Please update to version 0.2 or newer
[  665.980867][   T34] usb 5-1: USB disconnect, device number 31
[  666.053041][T12329] lo speed is unknown, defaulting to 1000
[  667.192134][T11505] usb usb38-port1: unable to enumerate USB device
[  668.441700][ T5988] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  668.594252][ T5988] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  668.601850][ T5988] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.606418][ T5988] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.612847][ T5988] usb 5-1: config 0 interface 0 has no altsetting 0
[  668.619276][ T5988] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.623905][ T5988] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.629275][ T5988] usb 5-1: config 0 interface 0 has no altsetting 0
[  668.634855][ T5988] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.639457][ T5988] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.644856][ T5988] usb 5-1: config 0 interface 0 has no altsetting 0
[  668.650925][ T5988] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.655534][ T5988] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.660650][ T5988] usb 5-1: config 0 interface 0 has no altsetting 0
[  668.665747][ T5988] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.670241][ T5988] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.675601][ T5988] usb 5-1: config 0 interface 0 has no altsetting 0
[  668.680951][ T5988] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.685591][ T5988] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.690864][ T5988] usb 5-1: config 0 interface 0 has no altsetting 0
[  668.695702][ T5988] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.700134][ T5988] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.705407][ T5988] usb 5-1: config 0 interface 0 has no altsetting 0
[  668.710350][ T5988] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.714892][ T5988] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.720152][ T5988] usb 5-1: config 0 interface 0 has no altsetting 0
[  668.728699][ T5988] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  668.732200][ T5988] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  668.736351][ T5988] usb 5-1: Product: syz
[  668.738490][ T5988] usb 5-1: Manufacturer: syz
[  668.740921][ T5988] usb 5-1: SerialNumber: syz
[  668.752030][ T5988] usb 5-1: config 0 descriptor??
[  668.776301][ T5988] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  668.960026][ T5988] usb 5-1: USB disconnect, device number 32
[  668.963256][ T5988] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  669.327544][T12342] overlayfs: missing 'lowerdir'
[  669.446935][T12344] netlink: 'syz.8.1571': attribute type 1 has an invalid length.
[  669.450175][T12344] netlink: 'syz.8.1571': attribute type 2 has an invalid length.
[  669.677536][T12361] Cannot find del_set index 65533 as target
[  669.876050][T12368] 9pnet: Unknown protocol version 9p2000.u-����X-
�d��;9 t&i�T
AZ��ݏ�f��t��âS��{���c
[  669.979981][T12376] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  669.982839][T12376] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  670.002973][T12376] vhci_hcd vhci_hcd.0: Device attached
[  670.117413][T12380] 9pnet_fd: Insufficient options for proto=fd
[  670.147237][T12372] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.150896][T12372] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.273551][ T6012] usb 54-1: SetAddress Request (6) to port 0
[  670.276872][ T6012] usb 54-1: new SuperSpeed USB device number 6 using vhci_hcd
[  670.604641][T12377] vhci_hcd: connection reset by peer
[  670.611442][   T80] vhci_hcd: stop threads
[  670.615007][   T80] vhci_hcd: release socket
[  670.617267][   T80] vhci_hcd: disconnect device
[  670.647491][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  670.651441][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  670.656316][   T34] lo speed is unknown, defaulting to 1000
[  670.658331][   T34] syz0: Port: 1 Link DOWN
[  670.658787][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  670.663327][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  670.666875][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  670.670998][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  670.675450][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  670.679064][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  670.682070][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  670.685577][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  670.701530][   T80] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  670.708689][   T80] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  670.711678][   T80] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  670.718912][   T80] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.021346][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  671.028098][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  671.034881][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  671.041224][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  671.046833][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  671.053056][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  671.059353][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  671.065235][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  671.072021][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  671.077600][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  672.090804][T12409] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  672.093711][T12409] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  672.097544][T12409] vhci_hcd vhci_hcd.0: Device attached
[  672.345367][T11505] usb 37-1: new low-speed USB device number 7 using vhci_hcd
[  672.708164][T12410] vhci_hcd: connection reset by peer
[  672.710222][ T9885] vhci_hcd: stop threads
[  672.711809][ T9885] vhci_hcd: release socket
[  672.713373][ T9885] vhci_hcd: disconnect device
[  672.928203][T12415] overlayfs: failed to resolve './file0': -2
[  673.334055][T12425] syzkaller1: entered promiscuous mode
[  673.337659][T12425] syzkaller1: entered allmulticast mode
[  673.515841][T12431] infiniband syz1: set down
[  673.519856][T12431] infiniband syz1: added syz_tun
[  673.537543][T12431] RDS/IB: syz1: added
[  673.539462][T12431] smc: adding ib device syz1 with port count 1
[  673.541710][T12431] smc:    ib device syz1 port 1 has no pnetid
[  674.441373][ T6025] IPVS: starting estimator thread 0...
[  674.543315][T12451] IPVS: using max 22 ests per chain, 52800 per kthread
[  675.138456][T12472] overlayfs: missing 'lowerdir'
[  675.300581][T12471] netlink: 'syz.9.1607': attribute type 1 has an invalid length.
[  675.303293][T12471] netlink: 'syz.9.1607': attribute type 2 has an invalid length.
[  675.378887][ T6012] usb 54-1: device descriptor read/8, error -110
[  675.770907][ T6012] usb usb54-port1: attempt power cycle
[  675.989098][T12477] netlink: 'syz.9.1608': attribute type 12 has an invalid length.
[  675.994350][T12477] netlink: 'syz.9.1608': attribute type 29 has an invalid length.
[  675.997791][T12477] __nla_validate_parse: 68 callbacks suppressed
[  675.997805][T12477] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1608'.
[  676.008799][T12477] netlink: 'syz.9.1608': attribute type 2 has an invalid length.
[  676.012154][T12477] netlink: 'syz.9.1608': attribute type 3 has an invalid length.
[  676.018840][T12477] netlink: 15 bytes leftover after parsing attributes in process `syz.9.1608'.
[  676.028928][    C3] net_ratelimit: 7843 callbacks suppressed
[  676.028940][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  676.034831][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  676.038846][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  676.043350][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  676.047379][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  676.051476][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  676.055537][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  676.060243][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  676.064273][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  676.068335][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  676.349586][ T6012] usb usb54-port1: unable to enumerate USB device
[  677.442695][T12505] overlayfs: missing 'lowerdir'
[  677.445508][T11505] vhci_hcd: vhci_device speed not set
[  677.502008][T12506] netlink: 'syz.9.1616': attribute type 1 has an invalid length.
[  677.504728][T12506] netlink: 'syz.9.1616': attribute type 2 has an invalid length.
[  677.817776][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'.
[  677.946509][T12515] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2670080939 (5340161878 ns) > initial count (411158038 ns). Using initial count to start timer.
[  678.191485][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1623'.
[  680.271074][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1626'.
[  680.761408][T12531] ip6erspan0: entered allmulticast mode
[  680.784117][T12533] netlink: 'syz.7.1619': attribute type 1 has an invalid length.
[  680.841175][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1628'.
[  680.868483][T12531] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1619'.
[  681.014589][T12541] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1629'.
[  681.043957][    C3] net_ratelimit: 7754 callbacks suppressed
[  681.043971][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  681.050411][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  681.055035][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  681.059846][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  681.064223][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  681.069261][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  681.073465][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  681.077921][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  681.083197][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  681.088467][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  681.383211][T12547] overlayfs: missing 'lowerdir'
[  681.439102][T12548] netlink: 'syz.9.1630': attribute type 1 has an invalid length.
[  681.441794][T12548] netlink: 'syz.9.1630': attribute type 2 has an invalid length.
[  681.869158][T12549] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  681.871348][T12549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  681.873859][T12549] vhci_hcd vhci_hcd.0: Device attached
[  682.114599][T11505] usb 37-1: new low-speed USB device number 8 using vhci_hcd
[  682.120064][ T6012] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  682.286125][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  682.289717][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  682.292817][ T6012] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  682.304620][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.308379][ T6012] usb 5-1: config 0 descriptor??
[  682.719522][ T6012] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  682.722223][ T6012] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  682.726203][ T6012] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0005/input/input17
[  682.803606][ T6012] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[  683.256307][T12564] ������: renamed from lo
[  684.057505][ T6012] usb 5-1: reset high-speed USB device number 33 using dummy_hcd
[  684.105569][T12570] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1638'.
[  684.217682][T12574] sd 0:0:0:0: PR command failed: 1026
[  684.219495][T12574] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  684.223766][T12574] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  685.047231][T12551] vhci_hcd: connection reset by peer
[  685.057619][ T9885] vhci_hcd: stop threads
[  685.060013][ T9885] vhci_hcd: release socket
[  685.087272][ T9885] vhci_hcd: disconnect device
[  685.458572][T12592] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2670080939 (5340161878 ns) > initial count (411158038 ns). Using initial count to start timer.
[  685.875504][ T1327] usb 5-1: USB disconnect, device number 33
[  686.058163][    C3] net_ratelimit: 6381 callbacks suppressed
[  686.058176][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  686.065542][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  686.071424][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  686.076251][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  686.084643][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  686.090710][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  686.095512][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  686.102749][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  686.107550][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  686.113439][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  686.241638][T12600] overlayfs: missing 'lowerdir'
[  686.299478][T12602] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  686.314794][T12603] netlink: 'syz.7.1645': attribute type 1 has an invalid length.
[  686.318355][T12603] netlink: 'syz.7.1645': attribute type 2 has an invalid length.
[  686.400298][T12605] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1647'.
[  689.020883][T11505] vhci_hcd: vhci_device speed not set
[  689.370797][T12621] ptrace attach of "/syz-executor exec"[5941] was attempted by "/syz-executor exec"[12621]
[  689.559238][T12635] FAULT_INJECTION: forcing a failure.
[  689.559238][T12635] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  689.565096][T12635] CPU: 2 UID: 0 PID: 12635 Comm: syz.7.1655 Not tainted syzkaller #0 PREEMPT(full) 
[  689.565121][T12635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  689.565131][T12635] Call Trace:
[  689.565138][T12635]  <TASK>
[  689.565146][T12635]  dump_stack_lvl+0x16c/0x1f0
[  689.565174][T12635]  should_fail_ex+0x512/0x640
[  689.565204][T12635]  _copy_from_user+0x2e/0xd0
[  689.565232][T12635]  input_event_from_user+0x137/0x290
[  689.565252][T12635]  ? __pfx_input_event_from_user+0x10/0x10
[  689.565275][T12635]  ? input_inject_event+0x1c0/0x3b0
[  689.565298][T12635]  evdev_write+0x26b/0x440
[  689.565322][T12635]  ? __pfx_evdev_write+0x10/0x10
[  689.565338][T12635]  ? common_file_perm+0x1a9/0x340
[  689.565358][T12635]  ? bpf_lsm_file_permission+0x9/0x10
[  689.565377][T12635]  ? security_file_permission+0x71/0x210
[  689.565397][T12635]  ? rw_verify_area+0xcf/0x6c0
[  689.565416][T12635]  ? __pfx_evdev_write+0x10/0x10
[  689.565434][T12635]  vfs_write+0x2a0/0x11d0
[  689.565458][T12635]  ? __pfx_vfs_write+0x10/0x10
[  689.565476][T12635]  ? find_held_lock+0x2b/0x80
[  689.565494][T12635]  ? __fget_files+0x204/0x3c0
[  689.565515][T12635]  ? __fget_files+0x20e/0x3c0
[  689.565531][T12635]  ? handle_mm_fault+0x250/0xd10
[  689.565565][T12635]  ksys_write+0x1f8/0x250
[  689.565590][T12635]  ? __pfx_ksys_write+0x10/0x10
[  689.565610][T12635]  ? rcu_is_watching+0x12/0xc0
[  689.565632][T12635]  __do_fast_syscall_32+0x7c/0x300
[  689.565659][T12635]  do_fast_syscall_32+0x32/0x80
[  689.565682][T12635]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  689.565702][T12635] RIP: 0023:0xf706d579
[  689.565728][T12635] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  689.565744][T12635] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  689.565762][T12635] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  689.565773][T12635] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000
[  689.565784][T12635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  689.565795][T12635] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  689.565805][T12635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  689.565837][T12635]  </TASK>
[  689.593060][T12633] loop2: detected capacity change from 0 to 7
[  689.669102][T12637] FAULT_INJECTION: forcing a failure.
[  689.669102][T12637] name failslab, interval 1, probability 0, space 0, times 0
[  689.678539][T12637] CPU: 2 UID: 0 PID: 12637 Comm: syz.7.1656 Not tainted syzkaller #0 PREEMPT(full) 
[  689.678570][T12637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  689.678580][T12637] Call Trace:
[  689.678587][T12637]  <TASK>
[  689.678595][T12637]  dump_stack_lvl+0x16c/0x1f0
[  689.678622][T12637]  should_fail_ex+0x512/0x640
[  689.678648][T12637]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  689.678668][T12637]  should_failslab+0xc2/0x120
[  689.678691][T12637]  kmem_cache_alloc_noprof+0x75/0x6e0
[  689.678709][T12637]  ? __kvm_mmu_topup_memory_cache+0x455/0x600
[  689.678733][T12637]  ? __kvm_mmu_topup_memory_cache+0x18f/0x600
[  689.678763][T12637]  ? __kvm_mmu_topup_memory_cache+0x18f/0x600
[  689.678785][T12637]  __kvm_mmu_topup_memory_cache+0x18f/0x600
[  689.678818][T12637]  mmu_topup_memory_caches+0x25/0x170
[  689.678847][T12637]  kvm_mmu_load+0xd6/0x23c0
[  689.678874][T12637]  ? kvm_apic_has_interrupt+0x106/0x1f0
[  689.678898][T12637]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  689.678922][T12637]  ? __pfx_kvm_mmu_load+0x10/0x10
[  689.678948][T12637]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  689.678974][T12637]  ? kvm_check_and_inject_events+0x71c/0x1310
[  689.679008][T12637]  vcpu_run+0x3779/0x54d0
[  689.679039][T12637]  ? __pfx_vcpu_run+0x10/0x10
[  689.679072][T12637]  ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1920
[  689.679090][T12637]  kvm_arch_vcpu_ioctl_run+0xfd3/0x1920
[  689.679117][T12637]  kvm_vcpu_ioctl+0x5eb/0x1690
[  689.679143][T12637]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  689.679167][T12637]  ? tomoyo_path_number_perm+0x18d/0x580
[  689.679199][T12637]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  689.679235][T12637]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  689.679265][T12637]  ? do_vfs_ioctl+0x128/0x14f0
[  689.679291][T12637]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  689.679330][T12637]  kvm_vcpu_compat_ioctl+0x20f/0x3d0
[  689.679354][T12637]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  689.679374][T12637]  ? __fget_files+0x20e/0x3c0
[  689.679398][T12637]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  689.679423][T12637]  __ia32_compat_sys_ioctl+0x242/0x370
[  689.679452][T12637]  __do_fast_syscall_32+0x7c/0x300
[  689.679478][T12637]  do_fast_syscall_32+0x32/0x80
[  689.679497][T12637]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  689.679518][T12637] RIP: 0023:0xf706d579
[  689.679532][T12637] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  689.679554][T12637] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  689.679572][T12637] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[  689.679584][T12637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  689.679595][T12637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  689.679604][T12637] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  689.679612][T12637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  689.679636][T12637]  </TASK>
[  689.685124][T12633] Dev loop2: unable to read RDB block 7
[  689.794851][T12633]  loop2: unable to read partition table
[  689.797545][T12633] loop2: partition table beyond EOD, truncated
[  689.800289][T12633] loop_reread_partitions: partition scan of loop2 (�被xy����� �) failed (rc=-5)
[  689.863931][ T1418] ieee802154 phy0 wpan0: encryption failed: -22
[  689.866089][ T1418] ieee802154 phy1 wpan1: encryption failed: -22
[  690.360451][T12659] ������ speed is unknown, defaulting to 1000
[  690.537270][T12663] overlayfs: missing 'lowerdir'
[  690.622070][T12659] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1663'.
[  690.867224][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1659'.
[  691.072683][    C3] net_ratelimit: 5133 callbacks suppressed
[  691.072696][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.080162][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.084820][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.090585][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  691.094844][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.100102][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  691.104727][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  691.108930][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  691.114062][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.118288][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.443982][T12669] 8021q: adding VLAN 0 to HW filter on device bond0
[  691.447967][T12669] 8021q: adding VLAN 0 to HW filter on device team0
[  693.460830][T12706] input: syz1 as /devices/virtual/input/input18
[  693.501276][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1675'.
[  693.671434][T12717] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1677'.
[  693.696634][ T5298] Bluetooth: hci4: SCO packet for unknown connection handle 201
[  693.740183][T12723] FAULT_INJECTION: forcing a failure.
[  693.740183][T12723] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  693.755241][T12723] CPU: 0 UID: 0 PID: 12723 Comm: syz.8.1680 Not tainted syzkaller #0 PREEMPT(full) 
[  693.755270][T12723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  693.755282][T12723] Call Trace:
[  693.755289][T12723]  <TASK>
[  693.755297][T12723]  dump_stack_lvl+0x16c/0x1f0
[  693.755325][T12723]  should_fail_ex+0x512/0x640
[  693.755356][T12723]  strncpy_from_user+0x3b/0x2e0
[  693.755384][T12723]  bpf_prog_load+0x1df8/0x2850
[  693.755410][T12723]  ? __pfx_bpf_prog_load+0x10/0x10
[  693.755427][T12723]  ? __lock_acquire+0xb8a/0x1c90
[  693.755479][T12723]  __sys_bpf+0x3e72/0x4980
[  693.755510][T12723]  ? __pfx___sys_bpf+0x10/0x10
[  693.755527][T12723]  ? find_held_lock+0x2b/0x80
[  693.755552][T12723]  ? find_held_lock+0x2b/0x80
[  693.755577][T12723]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  693.755615][T12723]  ? fput+0x9b/0xd0
[  693.755640][T12723]  ? ksys_write+0x1ac/0x250
[  693.755659][T12723]  ? __pfx_ksys_write+0x10/0x10
[  693.755684][T12723]  __ia32_sys_bpf+0x76/0xe0
[  693.755705][T12723]  __do_fast_syscall_32+0x7c/0x300
[  693.755730][T12723]  do_fast_syscall_32+0x32/0x80
[  693.755755][T12723]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  693.755777][T12723] RIP: 0023:0xf7f92579
[  693.755793][T12723] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  693.755811][T12723] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[  693.755830][T12723] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200
[  693.755842][T12723] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  693.755852][T12723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  693.755863][T12723] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  693.755874][T12723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  693.755899][T12723]  </TASK>
[  693.861594][T12726] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  694.659578][T12742] overlayfs: missing 'lowerdir'
[  695.005891][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'.
[  695.202517][T12754] bridge0: port 6(netdevsim0) entered blocking state
[  695.205896][T12754] bridge0: port 6(netdevsim0) entered disabled state
[  695.209119][T12754] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  695.216754][T12754] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  695.222296][T12754] bridge0: port 6(netdevsim0) entered blocking state
[  695.224605][T12754] bridge0: port 6(netdevsim0) entered forwarding state
[  695.805200][T12759] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  695.807411][T12759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  695.810805][T12759] vhci_hcd vhci_hcd.0: Device attached
[  695.860327][T12768] warn_alloc: 187 callbacks suppressed
[  695.860338][T12768] syz.8.1691: vmalloc error: size 8192, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  695.867649][T12768] CPU: 2 UID: 0 PID: 12768 Comm: syz.8.1691 Not tainted syzkaller #0 PREEMPT(full) 
[  695.867664][T12768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  695.867671][T12768] Call Trace:
[  695.867675][T12768]  <TASK>
[  695.867680][T12768]  dump_stack_lvl+0x16c/0x1f0
[  695.867697][T12768]  warn_alloc+0x248/0x3a0
[  695.867710][T12768]  ? __pfx_warn_alloc+0x10/0x10
[  695.867723][T12768]  ? alloc_pages_mpol+0x25a/0x550
[  695.867739][T12768]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  695.867753][T12768]  ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10
[  695.867772][T12768]  ? trace_kmalloc+0x2b/0xd0
[  695.867786][T12768]  ? __get_vm_area_node+0x1dc/0x330
[  695.867801][T12768]  ? __vmalloc_node_range_noprof+0x3e5/0x1480
[  695.867821][T12768]  __vmalloc_node_range_noprof+0x119b/0x1480
[  695.867843][T12768]  ? kernel_clone+0xfc/0x930
[  695.867861][T12768]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  695.867881][T12768]  ? rcu_is_watching+0x12/0xc0
[  695.867895][T12768]  ? kernel_clone+0xfc/0x930
[  695.867908][T12768]  __vmalloc_node_noprof+0xad/0xf0
[  695.867924][T12768]  ? kernel_clone+0xfc/0x930
[  695.867939][T12768]  copy_process+0x2c77/0x76a0
[  695.867960][T12768]  ? __pfx_copy_process+0x10/0x10
[  695.867982][T12768]  kernel_clone+0xfc/0x930
[  695.867996][T12768]  ? __pfx_kernel_clone+0x10/0x10
[  695.868016][T12768]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  695.868034][T12768]  __do_compat_sys_ia32_clone+0xcb/0x110
[  695.868050][T12768]  ? __pfx___do_compat_sys_ia32_clone+0x10/0x10
[  695.868072][T12768]  ? ksys_write+0x1ac/0x250
[  695.868085][T12768]  ? __pfx_ksys_write+0x10/0x10
[  695.868098][T12768]  ? rcu_is_watching+0x12/0xc0
[  695.868112][T12768]  __do_fast_syscall_32+0x7c/0x300
[  695.868129][T12768]  do_fast_syscall_32+0x32/0x80
[  695.868143][T12768]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  695.868173][T12768] RIP: 0023:0xf7f92579
[  695.868182][T12768] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  695.868193][T12768] RSP: 002b:00000000f548650c EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[  695.868203][T12768] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  695.868210][T12768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  695.868217][T12768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  695.868223][T12768] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  695.868229][T12768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  695.868244][T12768]  </TASK>
[  695.868321][T12768] Mem-Info:
[  695.959816][T12768] active_anon:5048 inactive_anon:595 isolated_anon:0
[  695.959816][T12768]  active_file:2655 inactive_file:11465 isolated_file:0
[  695.959816][T12768]  unevictable:1768 dirty:232 writeback:0
[  695.959816][T12768]  slab_reclaimable:6591 slab_unreclaimable:67090
[  695.959816][T12768]  mapped:28414 shmem:5361 pagetables:1036
[  695.959816][T12768]  sec_pagetables:321 bounce:0
[  695.959816][T12768]  kernel_misc_reclaimable:0
[  695.959816][T12768]  free:61861 free_pcp:14530 free_cma:0
[  695.975080][T12768] Node 0 active_anon:0kB inactive_anon:104kB active_file:4kB inactive_file:148kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8272kB pagetables:1268kB sec_pagetables:1180kB all_unreclaimable? yes Balloon:0kB
[  695.985402][T12768] Node 1 active_anon:22792kB inactive_anon:2276kB active_file:10616kB inactive_file:45712kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:116332kB dirty:920kB writeback:0kB shmem:20608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4824kB pagetables:2876kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB
[  695.996121][T12768] Node 0 DMA free:2596kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  696.005993][T12768] lowmem_reserve[]: 0 294 294 294 294
[  696.008049][T12768] Node 0 DMA32 free:40448kB boost:30252kB min:43700kB low:47060kB high:50420kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:104kB active_file:4kB inactive_file:148kB unevictable:3536kB writepending:8kB zspages:92kB present:1032196kB managed:301132kB mlocked:0kB bounce:0kB free_pcp:2312kB local_pcp:52kB free_cma:0kB
[  696.019317][T12768] lowmem_reserve[]: 0 0 0 0 0
[  696.020980][T12768] Node 1 DMA32 free:194764kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:2048KB active_anon:24792kB inactive_anon:2276kB active_file:10616kB inactive_file:45712kB unevictable:3536kB writepending:920kB zspages:3780kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:60728kB local_pcp:18460kB free_cma:0kB
[  696.032364][T12768] lowmem_reserve[]: 0 0 0 0 0
[  696.033965][T12768] Node 0 DMA: 53*4kB (U) 18*8kB (U) 10*16kB (U) 5*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2596kB
[  696.039132][T12768] Node 0 DMA32: 1276*4kB (UME) 502*8kB (UME) 238*16kB (UME) 266*32kB (UME) 81*64kB (UME) 38*128kB (UE) 11*256kB (U) 4*512kB (U) 2*1024kB (U) 1*2048kB (U) 0*4096kB = 40448kB
[  696.044989][T12768] Node 1 DMA32: 546*4kB (UE) 840*8kB (UE) 1932*16kB (UE) 329*32kB (UE) 293*64kB (UME) 166*128kB (UME) 119*256kB (UME) 80*512kB (UM) 20*1024kB (UM) 6*2048kB (MH) 0*4096kB = 194536kB
[  696.051134][T12768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  696.054339][T12768] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  696.054355][T12768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  696.054371][T12768] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB
[  696.054387][T12768] 22117 total pagecache pages
[  696.054396][T12768] 758 pages in swap cache
[  696.054403][T12768] Free swap  = 110888kB
[  696.054410][T12768] Total swap = 124996kB
[  696.054417][T12768] 524155 pages RAM
[  696.054421][T12768] 0 pages HighMem/MovableOnly
[  696.054426][T12768] 207977 pages reserved
[  696.054429][T12768] 0 pages cma reserved
[  696.080522][T12763] vhci_hcd: connection closed
[  696.080732][ T9842] vhci_hcd: stop threads
[  696.080838][T11505] usb 38-1: SetAddress Request (38) to port 0
[  696.082347][ T9842] vhci_hcd: release socket
[  696.083797][T11505] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd
[  696.085921][ T9842] vhci_hcd: disconnect device
[  696.087441][    C3] net_ratelimit: 6376 callbacks suppressed
[  696.087451][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.098080][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.103557][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  696.107960][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.114450][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  696.117279][T11505] usb 38-1: enqueue for inactive port 0
[  696.120212][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  696.125642][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  696.130683][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.134845][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.139397][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.233429][   T40] audit: type=1326 audit(1764580095.054:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.9.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  696.247333][   T40] audit: type=1326 audit(1764580095.054:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.9.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  696.249825][T12781] ������ speed is unknown, defaulting to 1000
[  696.254392][   T40] audit: type=1326 audit(1764580095.054:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.9.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  696.264109][   T40] audit: type=1326 audit(1764580095.054:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.9.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  696.277401][   T40] audit: type=1326 audit(1764580095.054:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.9.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  696.289081][T12783] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1694'.
[  696.295534][   T40] audit: type=1326 audit(1764580095.054:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.9.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  696.304688][   T40] audit: type=1326 audit(1764580095.054:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.9.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  696.315138][   T40] audit: type=1326 audit(1764580095.054:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.9.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  696.324645][   T40] audit: type=1326 audit(1764580095.054:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.9.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  696.332874][   T40] audit: type=1326 audit(1764580095.054:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.9.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  696.422587][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1695'.
[  696.650535][T11505] usb usb38-port1: attempt power cycle
[  696.771239][T12791] overlayfs: missing 'lowerdir'
[  696.955345][T12800] tmpfs: Unknown parameter '|uge'
[  697.000103][T12792] usb usb4: usbfs: process 12792 (syz.8.1693) did not claim interface 0 before use
[  697.220843][T11505] usb usb38-port1: unable to enumerate USB device
[  697.618854][T12800] can0: slcan on ptm0.
[  697.941820][T12812] bond2: ARP target 9.0.0.0 is already present
[  697.944039][T12812] bond2: option arp_ip_target: invalid value (9)
[  697.981535][T12799] can0 (unregistered): slcan off ptm0.
[  697.981699][T12812] bond2 (unregistering): Released all slaves
[  698.234209][T12827] 9pnet_fd: Insufficient options for proto=fd
[  698.372995][T12829] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1708'.
[  698.406452][T12829] vlan2: entered allmulticast mode
[  699.324594][T12850] overlayfs: missing 'lowerdir'
[  699.350430][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1715'.
[  699.353493][T12852] FAULT_INJECTION: forcing a failure.
[  699.353493][T12852] name failslab, interval 1, probability 0, space 0, times 0
[  699.358246][T12852] CPU: 0 UID: 0 PID: 12852 Comm: syz.9.1715 Not tainted syzkaller #0 PREEMPT(full) 
[  699.358265][T12852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  699.358271][T12852] Call Trace:
[  699.358296][T12852]  <TASK>
[  699.358304][T12852]  dump_stack_lvl+0x16c/0x1f0
[  699.358326][T12852]  should_fail_ex+0x512/0x640
[  699.358344][T12852]  ? __kmalloc_noprof+0xca/0x880
[  699.358363][T12852]  should_failslab+0xc2/0x120
[  699.358379][T12852]  __kmalloc_noprof+0xdd/0x880
[  699.358396][T12852]  ? __pfx_nft_data_init+0x10/0x10
[  699.358411][T12852]  ? nft_set_elem_init+0xcb/0x5b0
[  699.358424][T12852]  ? nft_set_elem_init+0xcb/0x5b0
[  699.358433][T12852]  nft_set_elem_init+0xcb/0x5b0
[  699.358447][T12852]  nft_add_set_elem+0x19ab/0x3d70
[  699.358459][T12852]  ? __sys_sendto+0x501/0x520
[  699.358481][T12852]  ? __pfx_nft_add_set_elem+0x10/0x10
[  699.358495][T12852]  ? __lock_acquire+0x622/0x1c90
[  699.358519][T12852]  ? find_held_lock+0x2b/0x80
[  699.358531][T12852]  ? net_generic+0xea/0x2a0
[  699.358549][T12852]  ? __nla_validate_parse+0x600/0x2880
[  699.358570][T12852]  ? nla_strcmp+0xff/0x130
[  699.358583][T12852]  ? nft_set_lookup_global+0x164/0x390
[  699.358598][T12852]  nf_tables_newsetelem+0x5ff/0xa70
[  699.358611][T12852]  ? __pfx_nf_tables_newsetelem+0x10/0x10
[  699.358626][T12852]  ? __nla_parse+0x40/0x60
[  699.358640][T12852]  nfnetlink_rcv_batch+0x190d/0x2350
[  699.358665][T12852]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  699.358684][T12852]  ? kasan_save_stack+0x33/0x60
[  699.358697][T12852]  ? kasan_save_track+0x14/0x30
[  699.358709][T12852]  ? __kasan_slab_alloc+0x89/0x90
[  699.358722][T12852]  ? kmem_cache_alloc_node_noprof+0x28a/0x770
[  699.358733][T12852]  ? kmalloc_reserve+0x18b/0x2c0
[  699.358768][T12852]  ? __nla_parse+0x40/0x60
[  699.358782][T12852]  nfnetlink_rcv+0x3c1/0x430
[  699.358798][T12852]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  699.358817][T12852]  netlink_unicast+0x5aa/0x870
[  699.358833][T12852]  ? __pfx_netlink_unicast+0x10/0x10
[  699.358851][T12852]  netlink_sendmsg+0x8c8/0xdd0
[  699.358866][T12852]  ? __pfx_netlink_sendmsg+0x10/0x10
[  699.358883][T12852]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  699.358903][T12852]  ____sys_sendmsg+0xa98/0xc70
[  699.358919][T12852]  ? __pfx_____sys_sendmsg+0x10/0x10
[  699.358933][T12852]  ? get_compat_msghdr+0x11a/0x170
[  699.358951][T12852]  ___sys_sendmsg+0x134/0x1d0
[  699.358963][T12852]  ? __pfx____sys_sendmsg+0x10/0x10
[  699.358981][T12852]  ? find_held_lock+0x2b/0x80
[  699.359002][T12852]  __sys_sendmsg+0x16d/0x220
[  699.359014][T12852]  ? __pfx___sys_sendmsg+0x10/0x10
[  699.359031][T12852]  ? rcu_is_watching+0x12/0xc0
[  699.359046][T12852]  __do_fast_syscall_32+0x7c/0x300
[  699.359062][T12852]  do_fast_syscall_32+0x32/0x80
[  699.359077][T12852]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  699.359091][T12852] RIP: 0023:0xf7f53579
[  699.359101][T12852] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  699.359117][T12852] RSP: 002b:00000000f544655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  699.359128][T12852] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  699.359146][T12852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  699.359154][T12852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  699.359161][T12852] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  699.359167][T12852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  699.359187][T12852]  </TASK>
[  699.841145][T12862] netlink: 'syz.9.1719': attribute type 1 has an invalid length.
[  699.943655][T12868] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1722'.
[  700.190966][ T5988] usb 14-1: new full-speed USB device number 3 using dummy_hcd
[  700.342913][ T5988] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  700.346994][ T5988] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 2
[  700.349981][ T5988] usb 14-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  700.356326][ T5988] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.360869][ T5988] usb 14-1: config 0 descriptor??
[  700.371623][ T5988] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  700.374183][ T5988] dvb-usb: bulk message failed: -22 (3/0)
[  700.389794][ T5988] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  700.401578][ T5988] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  700.405737][ T5988] usb 14-1: media controller created
[  700.409000][ T5988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  700.417635][ T5988] dvb-usb: bulk message failed: -22 (6/0)
[  700.419865][ T5988] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  700.423614][ T5988] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb14/14-1/input/input19
[  700.428869][ T5988] dvb-usb: schedule remote query interval to 150 msecs.
[  700.433859][ T5988] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  700.575332][T12868] usb 1-1: USB disconnect, device number 2
[  700.593036][ T5988] dvb-usb: bulk message failed: -22 (1/0)
[  700.595351][ T5988] dvb-usb: error while querying for an remote control event.
[  700.751566][ T5988] dvb-usb: bulk message failed: -22 (1/0)
[  700.754228][ T5988] dvb-usb: error while querying for an remote control event.
[  700.819971][ T6012] usb 14-1: USB disconnect, device number 3
[  700.854644][ T6012] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  701.102817][    C3] net_ratelimit: 5295 callbacks suppressed
[  701.102836][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.113832][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  701.119804][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.127683][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  701.135225][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  701.142161][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  701.150334][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.156507][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.161079][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.167232][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  701.183487][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1728'.
[  701.232138][T12893] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  701.234885][T12893] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  701.237710][T12893] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  701.240554][T12893] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  701.243707][T12893] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  701.246954][T12893] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[  701.250047][T12893] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4)
[  701.253253][T12893] comedi comedi3: 8255: I/O port conflict (0xa,4)
[  701.256093][T12893] comedi comedi3: 8255: I/O port conflict (0x3bf,4)
[  701.259102][T12893] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  701.262218][T12893] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[  701.265461][T12893] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4)
[  701.268333][T12893] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  701.269125][T12895] program syz.8.1730 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  701.271148][T12893] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  701.278093][T12893] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  701.282799][T12893] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  701.285553][T12893] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  701.288484][T12893] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  701.291378][T12893] comedi comedi3: 8255: I/O port conflict (0x10,4)
[  701.294544][T12893] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  701.297352][T12893] comedi comedi3: 8255: I/O port conflict (0xef,4)
[  701.791161][T12898] overlayfs: missing 'lowerdir'
[  702.668346][T12914] Bluetooth: (null): Invalid header checksum
[  702.671760][   T40] kauditd_printk_skb: 17 callbacks suppressed
[  702.671770][   T40] audit: type=1326 audit(1764580101.478:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.8.1736" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f92579 code=0x0
[  702.738359][T12915] syzkaller0: entered promiscuous mode
[  702.740157][T12915] syzkaller0: entered allmulticast mode
[  702.766174][ T9867] Bluetooth: (null): Invalid header checksum
[  702.773292][ T9867] Bluetooth: (null): Invalid header checksum
[  702.848296][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1735'.
[  702.879298][ T9842] Bluetooth: (null): Invalid header checksum
[  702.984626][ T9842] Bluetooth: (null): Invalid header checksum
[  703.022012][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1738'.
[  703.094140][ T9858] Bluetooth: (null): Invalid header checksum
[  703.203803][ T9858] Bluetooth: (null): Invalid header checksum
[  703.313949][ T9858] Bluetooth: (null): Invalid header checksum
[  703.424134][ T9858] Bluetooth: (null): Invalid header checksum
[  703.704674][ T9842] Bluetooth: (null): Invalid header checksum
[  703.707595][ T9842] Bluetooth: (null): Invalid header checksum
[  703.797570][ T9867] Bluetooth: (null): Invalid header checksum
[  703.822028][T12941] FAULT_INJECTION: forcing a failure.
[  703.822028][T12941] name failslab, interval 1, probability 0, space 0, times 0
[  703.826577][T12941] CPU: 0 UID: 0 PID: 12941 Comm: syz.9.1743 Not tainted syzkaller #0 PREEMPT(full) 
[  703.826594][T12941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  703.826600][T12941] Call Trace:
[  703.826606][T12941]  <TASK>
[  703.826610][T12941]  dump_stack_lvl+0x16c/0x1f0
[  703.826629][T12941]  should_fail_ex+0x512/0x640
[  703.826647][T12941]  ? __kmalloc_noprof+0xca/0x880
[  703.826668][T12941]  should_failslab+0xc2/0x120
[  703.826684][T12941]  __kmalloc_noprof+0xdd/0x880
[  703.826702][T12941]  ? ovl_lookup+0x1243/0x21a0
[  703.826716][T12941]  ? ovl_lookup+0x1243/0x21a0
[  703.826725][T12941]  ovl_lookup+0x1243/0x21a0
[  703.826735][T12941]  ? find_held_lock+0x2b/0x80
[  703.826751][T12941]  ? __pfx_ovl_lookup+0x10/0x10
[  703.826761][T12941]  ? __lock_acquire+0xb8a/0x1c90
[  703.826780][T12941]  ? rcu_is_watching+0x12/0xc0
[  703.826796][T12941]  ? do_raw_spin_lock+0x12c/0x2b0
[  703.826817][T12941]  ? do_raw_spin_unlock+0x172/0x230
[  703.826827][T12941]  ? _raw_spin_unlock+0x28/0x50
[  703.826842][T12941]  lookup_one_qstr_excl+0x1d1/0x250
[  703.826859][T12941]  ? mnt_want_write+0x161/0x450
[  703.826877][T12941]  do_unlinkat+0x284/0x6a0
[  703.826892][T12941]  ? __pfx_do_unlinkat+0x10/0x10
[  703.826911][T12941]  ? getname_flags.part.0+0x1c5/0x550
[  703.826929][T12941]  __ia32_sys_unlink+0xc4/0x110
[  703.826943][T12941]  __do_fast_syscall_32+0x7c/0x300
[  703.826960][T12941]  do_fast_syscall_32+0x32/0x80
[  703.826975][T12941]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  703.826990][T12941] RIP: 0023:0xf7f53579
[  703.827012][T12941] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  703.827023][T12941] RSP: 002b:00000000f544655c EFLAGS: 00000296 ORIG_RAX: 000000000000000a
[  703.827034][T12941] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000000000000
[  703.827041][T12941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  703.827047][T12941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  703.827054][T12941] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  703.827060][T12941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  703.827075][T12941]  </TASK>
[  703.864473][ T9858] Bluetooth: (null): Invalid header checksum
[  703.979034][ T9858] Bluetooth: (null): Invalid header checksum
[  704.891500][T12950] netlink: 'syz.8.1746': attribute type 19 has an invalid length.
[  704.948944][T12955] syzkaller0: entered promiscuous mode
[  704.950983][T12955] syzkaller0: entered allmulticast mode
[  704.957017][T12955] IPVS: Error connecting to the multicast addr
[  704.998687][T12958] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1750'.
[  705.178606][T12958] vlan2: entered allmulticast mode
[  705.313536][T12967] ������ speed is unknown, defaulting to 1000
[  705.805646][T12982] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  705.808503][T12982] UDF-fs: Scanning with blocksize 2048 failed
[  705.866199][T12982] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  705.869216][T12982] UDF-fs: Scanning with blocksize 4096 failed
[  705.880072][ T1327] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  706.106409][ T1327] usb 12-1: Using ep0 maxpacket: 32
[  706.117069][    C3] net_ratelimit: 4746 callbacks suppressed
[  706.117085][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  706.124935][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  706.131882][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.137392][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.143313][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.150019][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  706.154230][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.159263][ T1327] usb 12-1: config index 0 descriptor too short (expected 156, got 27)
[  706.159438][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  706.160043][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  706.169684][ T1327] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  706.171539][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  706.195144][ T1327] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  706.212576][ T1327] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  706.258414][ T1327] usb 12-1: config 0 interface 0 has no altsetting 0
[  706.312884][ T1327] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  706.327515][ T1327] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  706.344721][ T1327] usb 12-1: Product: syz
[  706.357086][ T1327] usb 12-1: Manufacturer: syz
[  706.369012][ T1327] usb 12-1: SerialNumber: syz
[  706.544145][ T1327] usb 12-1: config 0 descriptor??
[  706.636740][ T1327] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  706.646796][ T1327] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  706.889332][T13004] tmpfs: Unknown parameter '/dev/loop-control'
[  706.996159][T13008] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3821099475 (7642198950 ns) > initial count (2842047336 ns). Using initial count to start timer.
[  707.005191][T13008] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3447808065 (55164929040 ns) > initial count (14750416992 ns). Using initial count to start timer.
[  707.062054][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1763'.
[  707.245341][T13020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1767'.
[  707.477600][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'.
[  708.515414][T13033] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  709.289489][T13048] binder: BINDER_SET_CONTEXT_MGR already set
[  709.292365][T13048] binder: 13047:13048 ioctl 4018620d 80004a80 returned -16
[  709.400863][T13050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1779'.
[  709.452692][T13050] vlan2: entered allmulticast mode
[  709.462050][ T6025] usb 12-1: USB disconnect, device number 4
[  709.466431][ T6025] ldusb 12-1:0.0: LD USB Device #0 now disconnected
[  709.912135][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1777'.
[  709.924909][T13062] netlink: 'syz.8.1777': attribute type 5 has an invalid length.
[  709.936701][T13062] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1777'.
[  710.221487][T13062] geneve2: entered promiscuous mode
[  710.223952][T13062] geneve2: entered allmulticast mode
[  710.227857][ T9883] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  710.231023][ T9883] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  710.234382][ T9883] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  710.237355][ T9883] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  710.246321][T13067] FAULT_INJECTION: forcing a failure.
[  710.246321][T13067] name failslab, interval 1, probability 0, space 0, times 0
[  710.251227][T13067] CPU: 0 UID: 0 PID: 13067 Comm: syz.7.1782 Not tainted syzkaller #0 PREEMPT(full) 
[  710.251251][T13067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  710.251262][T13067] Call Trace:
[  710.251268][T13067]  <TASK>
[  710.251275][T13067]  dump_stack_lvl+0x16c/0x1f0
[  710.251302][T13067]  should_fail_ex+0x512/0x640
[  710.251331][T13067]  should_failslab+0xc2/0x120
[  710.251354][T13067]  kmem_cache_alloc_node_noprof+0x78/0x770
[  710.251372][T13067]  ? __alloc_skb+0x2b2/0x380
[  710.251402][T13067]  ? __alloc_skb+0x2b2/0x380
[  710.251425][T13067]  __alloc_skb+0x2b2/0x380
[  710.251449][T13067]  ? __pfx___alloc_skb+0x10/0x10
[  710.251477][T13067]  ? if_nlmsg_size+0x475/0xaf0
[  710.251499][T13067]  rtmsg_ifinfo_build_skb+0x81/0x280
[  710.251522][T13067]  rtmsg_ifinfo+0x9f/0x1a0
[  710.251546][T13067]  __dev_notify_flags+0x24c/0x2e0
[  710.251563][T13067]  ? __pfx___dev_notify_flags+0x10/0x10
[  710.251579][T13067]  ? __dev_change_flags+0x3d5/0x720
[  710.251597][T13067]  ? __pfx___dev_change_flags+0x10/0x10
[  710.251613][T13067]  ? validate_linkmsg+0x57c/0xb60
[  710.251629][T13067]  ? find_held_lock+0x2b/0x80
[  710.251651][T13067]  netif_change_flags+0x108/0x160
[  710.251671][T13067]  do_setlink.constprop.0+0xb53/0x4380
[  710.251692][T13067]  ? __schedule+0x11a3/0x5de0
[  710.251714][T13067]  ? __pfx_do_setlink.constprop.0+0x10/0x10
[  710.251737][T13067]  ? __lock_acquire+0xb8a/0x1c90
[  710.251762][T13067]  ? __pfx___schedule+0x10/0x10
[  710.251785][T13067]  ? br_switchdev_set_port_flag+0x134/0x380
[  710.251810][T13067]  ? __pfx_br_switchdev_set_port_flag+0x10/0x10
[  710.251835][T13067]  ? mark_held_locks+0x49/0x80
[  710.251865][T13067]  ? br_port_flags_change+0x6b/0x1d0
[  710.251888][T13067]  ? br_setport+0x1180/0x17d0
[  710.251912][T13067]  ? __pfx_br_setport+0x10/0x10
[  710.251940][T13067]  ? __local_bh_enable_ip+0xa4/0x120
[  710.251961][T13067]  ? br_port_slave_changelink+0xd9/0x190
[  710.251984][T13067]  ? __local_bh_enable_ip+0xa4/0x120
[  710.252004][T13067]  ? __pfx_br_port_slave_changelink+0x10/0x10
[  710.252030][T13067]  rtnl_newlink+0x1446/0x2000
[  710.252054][T13067]  ? is_bpf_text_address+0x94/0x1a0
[  710.252077][T13067]  ? __pfx_rtnl_newlink+0x10/0x10
[  710.252094][T13067]  ? __kernel_text_address+0xd/0x40
[  710.252110][T13067]  ? unwind_get_return_address+0x59/0xa0
[  710.252129][T13067]  ? arch_stack_walk+0xa6/0x100
[  710.252167][T13067]  ? rcu_is_watching+0x12/0xc0
[  710.252194][T13067]  ? find_held_lock+0x2b/0x80
[  710.252210][T13067]  ? __pfx_rtnl_newlink+0x10/0x10
[  710.252226][T13067]  ? __pfx_rtnl_newlink+0x10/0x10
[  710.252243][T13067]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  710.252279][T13067]  ? __pfx_rtnl_newlink+0x10/0x10
[  710.252297][T13067]  rtnetlink_rcv_msg+0x95e/0xe90
[  710.252318][T13067]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  710.252341][T13067]  ? __lock_acquire+0x622/0x1c90
[  710.252367][T13067]  netlink_rcv_skb+0x158/0x420
[  710.252386][T13067]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  710.252405][T13067]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  710.252433][T13067]  ? netlink_deliver_tap+0x1ae/0xd30
[  710.252455][T13067]  netlink_unicast+0x5aa/0x870
[  710.252477][T13067]  ? __pfx_netlink_unicast+0x10/0x10
[  710.252504][T13067]  netlink_sendmsg+0x8c8/0xdd0
[  710.252527][T13067]  ? __pfx_netlink_sendmsg+0x10/0x10
[  710.252548][T13067]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  710.252576][T13067]  ____sys_sendmsg+0xa98/0xc70
[  710.252600][T13067]  ? __pfx_____sys_sendmsg+0x10/0x10
[  710.252619][T13067]  ? get_compat_msghdr+0x11a/0x170
[  710.252647][T13067]  ___sys_sendmsg+0x134/0x1d0
[  710.252665][T13067]  ? __pfx____sys_sendmsg+0x10/0x10
[  710.252694][T13067]  ? find_held_lock+0x2b/0x80
[  710.252726][T13067]  __sys_sendmsg+0x16d/0x220
[  710.252744][T13067]  ? __pfx___sys_sendmsg+0x10/0x10
[  710.252771][T13067]  ? rcu_is_watching+0x12/0xc0
[  710.252792][T13067]  __do_fast_syscall_32+0x7c/0x300
[  710.252817][T13067]  do_fast_syscall_32+0x32/0x80
[  710.252838][T13067]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  710.252859][T13067] RIP: 0023:0xf706d579
[  710.252871][T13067] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  710.252887][T13067] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  710.252904][T13067] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[  710.252915][T13067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  710.252925][T13067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  710.252934][T13067] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  710.252943][T13067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  710.252966][T13067]  </TASK>
[  710.850977][T13080] FAULT_INJECTION: forcing a failure.
[  710.850977][T13080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  710.852246][T13074] overlay: ./file1 is not a directory
[  710.855459][T13080] CPU: 2 UID: 0 PID: 13080 Comm: syz.0.1787 Not tainted syzkaller #0 PREEMPT(full) 
[  710.855475][T13080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  710.855482][T13080] Call Trace:
[  710.855487][T13080]  <TASK>
[  710.855491][T13080]  dump_stack_lvl+0x16c/0x1f0
[  710.855509][T13080]  should_fail_ex+0x512/0x640
[  710.855530][T13080]  _copy_from_user+0x2e/0xd0
[  710.855548][T13080]  get_compat_msghdr+0xa7/0x170
[  710.855561][T13080]  ? __pfx_get_compat_msghdr+0x10/0x10
[  710.855573][T13080]  ? __pfx__kstrtoull+0x10/0x10
[  710.855589][T13080]  ___sys_sendmsg+0x1ae/0x1d0
[  710.855603][T13080]  ? __pfx____sys_sendmsg+0x10/0x10
[  710.855613][T13080]  ? __lock_acquire+0x622/0x1c90
[  710.855643][T13080]  ? __pfx___might_resched+0x10/0x10
[  710.855659][T13080]  __sys_sendmmsg+0x2f9/0x420
[  710.855673][T13080]  ? __pfx___sys_sendmmsg+0x10/0x10
[  710.855689][T13080]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  710.855711][T13080]  ? fput+0x9b/0xd0
[  710.855727][T13080]  ? ksys_write+0x1ac/0x250
[  710.855739][T13080]  ? __pfx_ksys_write+0x10/0x10
[  710.855754][T13080]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  710.855765][T13080]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  710.855781][T13080]  __do_fast_syscall_32+0x7c/0x300
[  710.855797][T13080]  do_fast_syscall_32+0x32/0x80
[  710.855812][T13080]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  710.855826][T13080] RIP: 0023:0xf7f31579
[  710.855836][T13080] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  710.855847][T13080] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[  710.855858][T13080] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800020c0
[  710.855865][T13080] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000
[  710.855871][T13080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  710.855877][T13080] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  710.855884][T13080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  710.855898][T13080]  </TASK>
[  711.130807][    C3] net_ratelimit: 5470 callbacks suppressed
[  711.130819][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  711.137237][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  711.141478][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  711.146526][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.150773][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.155248][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.160815][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  711.164999][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.170222][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  711.174942][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  711.200479][T13095] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  711.202757][T13095] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  711.205736][T13095] vhci_hcd vhci_hcd.0: Device attached
[  711.440903][ T6025] usb 53-1: new low-speed USB device number 2 using vhci_hcd
[  712.137348][T13096] vhci_hcd: connection reset by peer
[  712.140081][ T9842] vhci_hcd: stop threads
[  712.142063][ T9842] vhci_hcd: release socket
[  712.151986][ T9842] vhci_hcd: disconnect device
[  712.281694][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1795'.
[  712.285886][T13110] netlink: 'syz.0.1795': attribute type 5 has an invalid length.
[  712.289858][T13110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1795'.
[  712.363331][T13110] geneve0: entered promiscuous mode
[  712.366010][T13110] geneve0: entered allmulticast mode
[  712.380654][ T9883] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  712.391700][ T9883] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  712.395049][ T9883] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  712.401065][ T9883] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  712.415848][T13113] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1793'.
[  712.428893][T13113] vlan2: entered allmulticast mode
[  713.549764][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1798'.
[  713.591005][T13124] netlink: 'syz.9.1799': attribute type 11 has an invalid length.
[  713.593782][T13124] netlink: 199820 bytes leftover after parsing attributes in process `syz.9.1799'.
[  713.645701][T13126] syzkaller0: entered promiscuous mode
[  713.647769][T13126] syzkaller0: entered allmulticast mode
[  713.652544][T13126] nftables ruleset with unbound set
[  713.801636][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'.
[  713.805964][T13127] FAT-fs (nbd7): unable to read boot sector
[  713.913040][T13130] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  713.915247][T13130] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  713.918209][T13130] vhci_hcd vhci_hcd.0: Device attached
[  714.327813][T13133] vhci_hcd: connection closed
[  714.328054][ T9842] vhci_hcd: stop threads
[  714.332027][ T9842] vhci_hcd: release socket
[  714.338051][ T9842] vhci_hcd: disconnect device
[  714.496133][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1810'.
[  714.554355][T13159] tipc: Failed to obtain node identity
[  714.556835][T13159] tipc: Enabling of bearer <ib:wg1> rejected, failed to enable media
[  714.979526][T13172] FAULT_INJECTION: forcing a failure.
[  714.979526][T13172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  714.985316][T13172] CPU: 0 UID: 0 PID: 13172 Comm: syz.7.1815 Not tainted syzkaller #0 PREEMPT(full) 
[  714.985340][T13172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  714.985352][T13172] Call Trace:
[  714.985359][T13172]  <TASK>
[  714.985368][T13172]  dump_stack_lvl+0x16c/0x1f0
[  714.985396][T13172]  should_fail_ex+0x512/0x640
[  714.985427][T13172]  _copy_to_user+0x32/0xd0
[  714.985447][T13172]  simple_read_from_buffer+0xcb/0x170
[  714.985477][T13172]  proc_fail_nth_read+0x197/0x240
[  714.985499][T13172]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  714.985521][T13172]  ? rw_verify_area+0xcf/0x6c0
[  714.985538][T13172]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  714.985557][T13172]  vfs_read+0x1e4/0xcf0
[  714.985582][T13172]  ? __pfx_vfs_read+0x10/0x10
[  714.985599][T13172]  ? find_held_lock+0x2b/0x80
[  714.985625][T13172]  ? __fget_files+0x20e/0x3c0
[  714.985666][T13172]  ksys_read+0x12a/0x250
[  714.985687][T13172]  ? __pfx_ksys_read+0x10/0x10
[  714.985708][T13172]  ? rcu_is_watching+0x12/0xc0
[  714.985732][T13172]  __do_fast_syscall_32+0x7c/0x300
[  714.985759][T13172]  do_fast_syscall_32+0x32/0x80
[  714.985782][T13172]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  714.985804][T13172] RIP: 0023:0xf706d579
[  714.985818][T13172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  714.985835][T13172] RSP: 002b:00000000f545d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  714.985853][T13172] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545d620
[  714.985865][T13172] RDX: 000000000000000f RSI: 00000000f7406ff4 RDI: 0000000000000000
[  714.985876][T13172] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  714.985886][T13172] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  714.985897][T13172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  714.985923][T13172]  </TASK>
[  715.628037][T13184] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  715.630180][T13184] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  715.633080][T13184] vhci_hcd vhci_hcd.0: Device attached
[  716.005940][ T6012] usb 38-1: SetAddress Request (42) to port 0
[  716.008702][ T6012] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd
[  716.145209][    C3] net_ratelimit: 4907 callbacks suppressed
[  716.145227][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.155536][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  716.160288][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.166551][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  716.171132][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  716.175394][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  716.182274][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.187386][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.192265][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.197554][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  716.246284][T13185] vhci_hcd: connection reset by peer
[  716.249416][ T9883] vhci_hcd: stop threads
[  716.251310][ T9883] vhci_hcd: release socket
[  716.255950][ T9883] vhci_hcd: disconnect device
[  716.388191][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1822'.
[  716.392300][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1822'.
[  716.595349][ T6025] vhci_hcd: vhci_device speed not set
[  717.574761][T13223] netlink: 4456 bytes leftover after parsing attributes in process `syz.8.1829'.
[  717.681127][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1831'.
[  717.867306][ T1327] usb usb54-port1: attempt power cycle
[  718.236861][T11505] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  718.396927][T11505] usb 5-1: Using ep0 maxpacket: 8
[  718.408696][T11505] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  718.411534][T11505] usb 5-1: config 0 has no interface number 0
[  718.413495][T11505] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  718.426908][T11505] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  718.430809][T11505] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  718.434383][T11505] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  718.447259][ T1327] usb usb54-port1: unable to enumerate USB device
[  718.457040][T11505] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  718.460764][T11505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.476058][T11505] usb 5-1: config 0 descriptor??
[  718.482224][T11505] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  718.624177][T13239] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.1834'.
[  718.705382][   T55] usb 5-1: USB disconnect, device number 34
[  718.724677][   T55] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  718.736128][T13234] Failed to get privilege flags for destination (handle=0x0:0x0)
[  718.736943][   T40] audit: type=1326 audit(1764580117.534:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.8.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000
[  718.746703][   T40] audit: type=1326 audit(1764580117.534:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.8.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000
[  718.754550][   T40] audit: type=1326 audit(1764580117.544:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.8.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf7f92579 code=0x7ffc0000
[  718.764831][   T40] audit: type=1326 audit(1764580117.544:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.8.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000
[  718.772783][   T40] audit: type=1326 audit(1764580117.554:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.8.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f92579 code=0x7ffc0000
[  718.779807][   T40] audit: type=1326 audit(1764580117.554:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.8.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000
[  718.790366][   T40] audit: type=1326 audit(1764580117.554:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.8.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f92579 code=0x7ffc0000
[  718.799344][   T40] audit: type=1326 audit(1764580117.554:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.8.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000
[  718.808975][   T40] audit: type=1326 audit(1764580117.554:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.8.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f92579 code=0x7ffc0000
[  718.818301][   T40] audit: type=1326 audit(1764580117.554:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.8.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000
[  719.319527][T13267] netlink: 'syz.7.1839': attribute type 10 has an invalid length.
[  719.323556][T13267] netlink: 'syz.7.1839': attribute type 10 has an invalid length.
[  719.327051][T13267] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1839'.
[  719.331178][T13267] team0: entered promiscuous mode
[  719.332839][T13267] team_slave_0: entered promiscuous mode
[  719.334750][T13267] team_slave_1: entered promiscuous mode
[  719.337213][T13267] 8021q: adding VLAN 0 to HW filter on device team0
[  719.340581][T13267] bridge0: port 3(team0) entered blocking state
[  719.342759][T13267] bridge0: port 3(team0) entered disabled state
[  719.345163][T13267] team0: entered allmulticast mode
[  719.346888][T13267] team_slave_0: entered allmulticast mode
[  719.348965][T13267] team_slave_1: entered allmulticast mode
[  719.538480][T13277] netlink: 'syz.9.1842': attribute type 10 has an invalid length.
[  719.543282][T13277] netlink: 'syz.9.1842': attribute type 10 has an invalid length.
[  719.649139][T13283] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1844'.
[  719.904247][T13289] netlink: 'syz.7.1840': attribute type 10 has an invalid length.
[  719.907104][T13289] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1840'.
[  720.579666][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1847'.
[  720.642638][T13307] netlink: 'syz.7.1851': attribute type 33 has an invalid length.
[  720.645136][T13307] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1851'.
[  720.706453][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'.
[  720.710275][T13312] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1848'.
[  720.941034][T13314] MINIX-fs: blocksize too small for device
[  721.089700][ T6012] usb 38-1: device descriptor read/8, error -110
[  721.160629][    C3] net_ratelimit: 5687 callbacks suppressed
[  721.160643][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  721.169354][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.176848][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  721.183244][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  721.189010][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  721.195811][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.201717][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.208138][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.215335][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  721.219625][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.265857][T13332] netlink: 'syz.9.1857': attribute type 10 has an invalid length.
[  721.650403][ T6012] usb usb38-port1: attempt power cycle
[  721.991447][T13339] random: crng reseeded on system resumption
[  722.054820][T13349] siw: device registration error -23
[  722.193668][T13350] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  722.532533][ T6012] usb usb38-port1: unable to enumerate USB device
[  723.189081][T13374] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  723.191908][T13374] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  723.195797][T13374] vhci_hcd vhci_hcd.0: Device attached
[  723.361920][T13383] __nla_validate_parse: 4 callbacks suppressed
[  723.361932][T13383] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1870'.
[  723.507315][T13386] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1871'.
[  723.525902][T10978] usb 38-1: SetAddress Request (46) to port 0
[  723.528625][T10978] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd
[  723.838335][T13375] vhci_hcd: connection reset by peer
[  723.840975][ T9885] vhci_hcd: stop threads
[  723.842945][ T9885] vhci_hcd: release socket
[  723.844960][ T9885] vhci_hcd: disconnect device
[  724.195235][T13396] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  724.197433][T13396] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  724.222161][T13396] vhci_hcd vhci_hcd.0: Device attached
[  724.492128][ T6012] usb 56-1: SetAddress Request (2) to port 0
[  724.494602][ T6012] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd
[  724.632664][T10925] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  724.682566][T13397] vhci_hcd: connection reset by peer
[  724.685575][ T9842] vhci_hcd: stop threads
[  724.687527][ T9842] vhci_hcd: release socket
[  724.689540][ T9842] vhci_hcd: disconnect device
[  724.909062][T10925] usb 12-1: Using ep0 maxpacket: 8
[  725.062223][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1877'.
[  725.069500][T10925] usb 12-1: config 0 has an invalid interface number: 55 but max is 0
[  725.072219][T10925] usb 12-1: config 0 has no interface number 0
[  725.115317][T10925] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  725.118787][T10925] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  725.122509][T10925] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  725.146611][T10925] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  725.150940][T10925] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  725.176756][T10925] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.189978][T10925] usb 12-1: config 0 descriptor??
[  725.239206][T10925] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  725.506565][   T55] usb 12-1: USB disconnect, device number 5
[  725.522598][   T55] ldusb 12-1:0.55: LD USB Device #0 now disconnected
[  726.174004][    C3] net_ratelimit: 5369 callbacks suppressed
[  726.174017][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  726.181295][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  726.185573][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.190618][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.194827][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.199330][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.204712][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.208813][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.213901][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  726.218309][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  726.233484][T13461] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1899'.
[  726.667327][T13494] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  726.917125][T13507] overlayfs: missing 'lowerdir'
[  726.987243][ T9867] Bluetooth: hci0: Frame reassembly failed (-84)
[  727.148318][T13516] ������ speed is unknown, defaulting to 1000
[  727.283416][T13523] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1926'.
[  727.363336][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'.
[  727.441036][T13534] ip6gre1: entered allmulticast mode
[  727.922601][T13558] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1942'.
[  727.943890][T13560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1943'.
[  727.948018][T13560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1943'.
[  727.957422][T13560] sit1: entered allmulticast mode
[  728.265365][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'.
[  728.380415][T13580] ������ speed is unknown, defaulting to 1000
[  728.615669][T10978] usb 38-1: device descriptor read/8, error -110
[  728.901736][T13598] __nla_validate_parse: 1 callbacks suppressed
[  728.901753][T13598] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1959'.
[  729.015999][ T5954] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  729.016020][ T5298] Bluetooth: hci0: command 0x1003 tx timeout
[  729.016896][T10978] usb usb38-port1: attempt power cycle
[  729.023947][T13607] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1964'.
[  729.046474][T13508] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  729.259218][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1975'.
[  729.530233][T13655] ������ speed is unknown, defaulting to 1000
[  729.576489][ T6012] usb 56-1: device descriptor read/8, error -110
[  729.617323][T10978] usb usb38-port1: unable to enumerate USB device
[  729.977721][ T6012] usb usb56-port1: attempt power cycle
[  730.558749][ T6012] usb usb56-port1: unable to enumerate USB device
[  730.777243][   T40] kauditd_printk_skb: 22 callbacks suppressed
[  730.777255][   T40] audit: type=1326 audit(1764580129.564:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13723 comm="syz.9.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  730.788853][   T40] audit: type=1326 audit(1764580129.564:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13723 comm="syz.9.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  730.796066][   T40] audit: type=1326 audit(1764580129.574:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13723 comm="syz.9.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  730.806889][   T40] audit: type=1326 audit(1764580129.574:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13723 comm="syz.9.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  730.818431][   T40] audit: type=1326 audit(1764580129.574:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13723 comm="syz.9.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  730.826334][   T40] audit: type=1326 audit(1764580129.574:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13723 comm="syz.9.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  730.834677][   T40] audit: type=1326 audit(1764580129.574:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13723 comm="syz.9.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  730.842075][   T40] audit: type=1326 audit(1764580129.574:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13723 comm="syz.9.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  730.850635][   T40] audit: type=1326 audit(1764580129.584:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13723 comm="syz.9.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  730.860232][   T40] audit: type=1326 audit(1764580129.584:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13723 comm="syz.9.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000
[  730.877237][T13728] futex_wake_op: syz.8.2018 tries to shift op by 32; fix this program
[  731.032451][T13740] tipc: Failed to remove unknown binding: 66,1,1/0:361151155/361151157
[  731.037141][T13740] tipc: Failed to remove unknown binding: 66,1,1/0:361151155/361151157
[  731.188040][    C3] net_ratelimit: 5454 callbacks suppressed
[  731.188051][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  731.194488][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  731.198677][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.203594][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  731.207841][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  731.212273][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  731.217524][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.221640][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  731.226657][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  731.231295][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:76:6c:0c:4d:79, vlan:0)
[  731.236259][T13759] 9pnet_fd: Insufficient options for proto=fd
[  732.260560][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2066'.
[  824.166419][ T9850] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  824.168850][ T9850] CPU: 3 UID: 0 PID: 9850 Comm: kworker/u32:24 Not tainted syzkaller #0 PREEMPT(full) 
[  824.174036][ T9850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  824.177580][ T9850] Workqueue: netns cleanup_net
[  824.179180][ T9850] Call Trace:
[  824.180286][ T9850]  <TASK>
[  824.181278][ T9850]  dump_stack_lvl+0x3d/0x1f0
[  824.182802][ T9850]  vpanic+0x640/0x6f0
[  824.184172][ T9850]  ? xfrm6_tunnel_net_exit+0x9f/0x160
[  824.185964][ T9850]  panic+0xca/0xd0
[  824.187230][ T9850]  ? __pfx_panic+0x10/0x10
[  824.188807][ T9850]  ? check_panic_on_warn+0x1f/0xb0
[  824.191082][ T9850]  check_panic_on_warn+0xab/0xb0
[  824.193305][ T9850]  __warn+0xf6/0x3c0
[  824.195079][ T9850]  ? xfrm6_tunnel_net_exit+0x9f/0x160
[  824.197513][ T9850]  report_bug+0x3c3/0x580
[  824.199469][ T9850]  ? xfrm6_tunnel_net_exit+0x9f/0x160
[  824.201821][ T9850]  handle_bug+0x184/0x210
[  824.203735][ T9850]  exc_invalid_op+0x17/0x50
[  824.205777][ T9850]  asm_exc_invalid_op+0x1a/0x20
[  824.208008][ T9850] RIP: 0010:xfrm6_tunnel_net_exit+0x9f/0x160
[  824.210723][ T9850] Code: 00 00 00 49 8d 3c dc 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 bd 00 00 00 89 e8 49 8b 04 c4 48 85 c0 74 ab e8 12 4d 9e f7 90 <0f> 0b 90 eb a0 4d 8d ac 24 00 08 00 00 31 db 49 be 00 00 00 00 00
[  824.219125][ T9850] RSP: 0000:ffffc900313d7a90 EFLAGS: 00010293
[  824.221799][ T9850] RAX: 0000000000000000 RBX: 000000000000000a RCX: ffffffff8a1e0a2a
[  824.225173][ T9850] RDX: ffff888022cb8000 RSI: ffffffff8a1e0a6e RDI: ffff88802497c050
[  824.228614][ T9850] RBP: 000000000000000a R08: 0000000000000005 R09: 0000000000000100
[  824.232064][ T9850] R10: 000000000000000a R11: 0000000000000001 R12: ffff88802497c000
[  824.235608][ T9850] R13: dffffc0000000000 R14: fffffbfff205e6a8 R15: ffffffff902f3520
[  824.239073][ T9850]  ? xfrm6_tunnel_net_exit+0x5a/0x160
[  824.241454][ T9850]  ? xfrm6_tunnel_net_exit+0x9e/0x160
[  824.243849][ T9850]  ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10
[  824.246520][ T9850]  ops_undo_list+0x2ee/0xab0
[  824.248574][ T9850]  ? __pfx_ops_undo_list+0x10/0x10
[  824.250649][ T9850]  ? cleanup_net+0x347/0x8b0
[  824.252170][ T9850]  ? idr_destroy+0x62/0x2e0
[  824.253717][ T9850]  cleanup_net+0x41b/0x8b0
[  824.255188][ T9850]  ? __pfx_cleanup_net+0x10/0x10
[  824.256845][ T9850]  process_one_work+0x9cf/0x1b70
[  824.258506][ T9850]  ? __pfx_process_one_work+0x10/0x10
[  824.260270][ T9850]  ? assign_work+0x1a0/0x250
[  824.261805][ T9850]  worker_thread+0x6c8/0xf10
[  824.263333][ T9850]  ? __pfx_worker_thread+0x10/0x10
[  824.265436][ T9850]  kthread+0x3c5/0x780
[  824.266823][ T9850]  ? __pfx_kthread+0x10/0x10
[  824.268322][ T9850]  ? rcu_is_watching+0x12/0xc0
[  824.269912][ T9850]  ? __pfx_kthread+0x10/0x10
[  824.271528][ T9850]  ret_from_fork+0x675/0x7d0
[  824.273055][ T9850]  ? __pfx_kthread+0x10/0x10
[  824.274628][ T9850]  ret_from_fork_asm+0x1a/0x30
[  824.276208][ T9850]  </TASK>
[  824.277937][ T9850] Kernel Offset: disabled
[  824.279411][ T9850] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:37:01  Registers:
info registers vcpu 0

CPU#0
RAX=ffff88805b3500c0 RBX=0000000000000000 RCX=ffffffff820887b4 RDX=ffff888020e7a480
RSI=ffffffff820887c2 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc9002c6e7808
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=00000000f6617000 R13=0000000000000000 R14=dffffc0000000000 R15=00000000f6800000
RIP=ffffffff820887c7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88809780d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000000fff3 CR3=000000005795c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000113e5 RBX=ffffc9002c0f7f48 RCX=ffffffff81c4572f RDX=0000000000000000
RSI=ffffffff8da2917b RDI=ffffffff8bf078c0 RBP=ffffc9002c0f7f38 RSP=ffffc9002c0f7f18
R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90824ad7 R11=0000000000000000
R12=00000000000000ad R13=ffff888025f80000 R14=00000000000000ad R15=0000000000000000
RIP=ffffffff8b5d2a29 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88809790d000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000000000ef CR3=0000000062185000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000001f8e6249 RBX=0000000000000001 RCX=00000000733103d9 RDX=00000000ed6570a9
RSI=0000000010085755 RDI=ffff88802265afd8 RBP=ffff88802265a480 RSP=ffffc9000361f238
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=ffff88802265afb0 R13=ffff88802265afd8 R14=00000000ed6570a9 R15=0000000000000001
RIP=ffffffff819833f2 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6242d66300 ffffffff 00c00000
GS =0000 ffff888097a0d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000560b52927f40 CR3=0000000022bdf000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=9b84b56df339678c eecd165cc809fd53 9b84b56df339678c eecd165cc809fd53 9b84b56df339678c eecd165cc809fd53 9b84b56df339678c eecd165cc809fd53
ZMM18=77a82c1cfd257e0e 8681acb58a680008 77a82c1cfd257e0e 8681acb58a680008 77a82c1cfd257e0e 8681acb58a680008 77a82c1cfd257e0e 8681acb58a680008
ZMM19=221a000000000000 0000000000000004 221a000000000000 0000000000000003 221a000000000000 0000000000000002 221a000000000000 0000000000000001
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8030288020002a6 0340020002a40340 020002a203140200 02a00304ddfeeffc
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000298030785f4 d008000290030204 00028c0340040002 880301a808000280
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0302800206800306 80020a9003000800 0a88030fffffffff 020a800300080006
ZMM24=a9d846b5a9d846b5 a9d846b5a9d846b5 a9d846b5a9d846b5 a9d846b5a9d846b5 a9d846b5a9d846b5 a9d846b5a9d846b5 a9d846b5a9d846b5 a9d846b5a9d846b5
ZMM25=61e328f661e328f6 61e328f661e328f6 61e328f661e328f6 61e328f661e328f6 61e328f661e328f6 61e328f661e328f6 61e328f661e328f6 61e328f661e328f6
ZMM26=c04a4f80c04a4f80 c04a4f80c04a4f80 c04a4f80c04a4f80 c04a4f80c04a4f80 c04a4f80c04a4f80 c04a4f80c04a4f80 c04a4f80c04a4f80 c04a4f80c04a4f80
ZMM27=b04b6fd2b04b6fd2 b04b6fd2b04b6fd2 b04b6fd2b04b6fd2 b04b6fd2b04b6fd2 b04b6fd2b04b6fd2 b04b6fd2b04b6fd2 b04b6fd2b04b6fd2 b04b6fd2b04b6fd2
ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=1f2000001f200000 1f2000001f200000 1f2000001f200000 1f2000001f200000 1f2000001f200000 1f2000001f200000 1f2000001f200000 1f2000001f200000
info registers vcpu 3

CPU#3
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85269d55 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc900313d72d8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adc5da0 R15=ffffffff85269cf0
RIP=ffffffff85269d7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097b0d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000080ffc020 CR3=0000000062185000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000