last executing test programs:

10m25.163869274s ago: executing program 3 (id=51):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mq_open(0x0, 0x80, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bic', 0x3)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
sched_setscheduler(0x0, 0x0, 0x0)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002680)={0x0, 0x4, 0x0, 0xffff1e26})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$nullb(0xffffffffffffff9c, 0x0, 0xe4000, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3e9, 0x100, 0x70bd27, 0x25dfdbfc, {0xb, 0x2, 0x3, 0x0, 0x9, 0xfffffffd, 0x3ff, 0x4, 0x0, 0xf, 0x686}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040085}, 0x8000)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@host})
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000})
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000580))

10m24.243069102s ago: executing program 3 (id=57):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4)
r4 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
socket$kcm(0x11, 0x3, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000440))
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r8, 0x54a3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
times(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0xc9c39e3b45a2d6f7, 0x40, 0x38}, 0x18)
syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd29, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x0, 0xfa9a, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000, 0x80000000}, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0xfffffffe, 0x2, 0x3, 0x0, 0x0, 0xfffffffc}]}]}, 0xf8}}, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000ac0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f47cf7", 0x38, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x1}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x1, 0x89, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote}}}}}}}, 0x0)

10m23.623376844s ago: executing program 3 (id=59):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100224e0000", 0x58}], 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020303000000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000100003050000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00'], 0x84}}, 0x20008040)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)

10m22.465556047s ago: executing program 3 (id=65):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xc, &(0x7f0000000140)={0x0, 0x0})
write(r0, &(0x7f0000000000)="fa", 0xfffffdef)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92)
mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="faa6003bfa3b41b3", @ANYRES16=r3, @ANYBLOB="010024bd7000fcdbdf250100000000000000014100000018001700000011000000076574683a6772653000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xcc, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xf4}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f0000000080)='./bus\x00')
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus\x00', 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r10, &(0x7f0000000040)='ns/mnt\x00')
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r10, 0x3, 0x4002)

10m21.765569116s ago: executing program 3 (id=67):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x2000000})
syz_usbip_server_init(0x5)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'macsec0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001000000300000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="3582000000000000080025000100000008000500", @ANYRES32=r5, @ANYBLOB="e05925844668c7ca741648659c21c7ee5ffcd884aea1023310e1291729724d3957462c8af69c189ffea99a45379cdd7fa075cf39b1b3a12b55d8b8c7334a23981744be62b2e3116d6d0ca4afeac03fa159c639ef9e4b098a82d001703372c444fe7a281b"], 0x30}, 0x1, 0xba01, 0x0, 0x85}, 0x10)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000f00090600000000fedbdf25000000000000", @ANYBLOB="a7ffa888000000001c00128009000100766c616e000008000c00020606000100010000", @ANYRESHEX, @ANYBLOB="997b101848e4a0bca97977dac50fa9ac6223bb13468c86bc7fbf804ddedda12f11685c74be5214b032340b6fc385edf39fca593d7df3ee6b92c6a0e2a215d7e16411eed81f92798a561d45ce06441b3306c186a0aa8474f76727b831e8c3ba98cc75007aaff63734be0bb3dae91da4d7"], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4)
socket(0x10, 0x803, 0x8)

10m21.395056933s ago: executing program 3 (id=71):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
rmdir(&(0x7f0000000240)='./cgroup/../file0\x00')
write$cgroup_subtree(r5, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff5b, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f90224fc6028000e000a73e300053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b"}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x26}, 0x28)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
ioctl$TCSETAF(r6, 0x5408, 0x0)
write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e)
r7 = openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x59f, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
syz_open_pts(r6, 0x200)
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req={0x200, 0xfffffff9, 0x0, 0x7f}, 0x10)
recvmmsg$unix(r8, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/251, 0xfb}], 0x1}}], 0x1, 0x40010020, 0x0)
r9 = dup3(r8, r7, 0x80000)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x12)

10m20.484368528s ago: executing program 32 (id=71):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
rmdir(&(0x7f0000000240)='./cgroup/../file0\x00')
write$cgroup_subtree(r5, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff5b, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f90224fc6028000e000a73e300053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b"}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x26}, 0x28)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
ioctl$TCSETAF(r6, 0x5408, 0x0)
write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e)
r7 = openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x59f, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
syz_open_pts(r6, 0x200)
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req={0x200, 0xfffffff9, 0x0, 0x7f}, 0x10)
recvmmsg$unix(r8, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/251, 0xfb}], 0x1}}], 0x1, 0x40010020, 0x0)
r9 = dup3(r8, r7, 0x80000)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x12)

9.284834523s ago: executing program 1 (id=3010):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpgid(0x0)
prlimit64(r1, 0xd, &(0x7f0000000040)={0x14, 0xd233}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x20, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x20048010)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r7, 0xc10c5541, &(0x7f0000000280)={0x0, 0x804})
ioctl$TCSETS(r6, 0x404c4701, 0x0)
ioctl$TIOCSTI(r6, 0x5412, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0x28)

8.197171874s ago: executing program 1 (id=3017):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2)
socket$nl_sock_diag(0x10, 0x3, 0x4)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000002c0)="e3447830", 0x4)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000600)={0x12})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(r5, 0x5402, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x800)
fsopen(&(0x7f0000000000)='udf\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3, 0x0, 0xe, 0x60a00, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, r0, 0x4, 0x5, 0x4, 0x7}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
openat$tcp_congestion(0xffffff9c, &(0x7f0000000280), 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

7.226003912s ago: executing program 1 (id=3021):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0xffdd, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc})
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x1, 0x84)
statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000080))
socket$qrtr(0x2a, 0x2, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000140)=@fd={0xfffffffe, 0xc, 0x4, 0x2, 0x401, {0x77359400}, {0x5, 0x8, 0x3, 0x1, 0x5, 0x65, "f846dd2f"}, 0x650, 0x4, {}, 0x5})
socket(0x1e, 0xa, 0x2000001)
syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x727b, 0x0, 0x800000, 0x15b}, &(0x7f0000000000), &(0x7f0000000100))
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x80010, 0xffffffffffffffff, 0x23a78000)

6.074033475s ago: executing program 2 (id=3026):
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
write(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}})
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

5.752240579s ago: executing program 4 (id=3028):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x808, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fe8000000000000000000000000000aa000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d46c00000000000000000000000000000000000000000000000000000092010000000000000600000000000008ffff0000000000001c252800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fdffffffffffffff02000000fcffffff000000002abd7000043500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
setrlimit(0x6, &(0x7f0000000080)={0x4, 0x9})
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
writev(0xffffffffffffffff, 0x0, 0x0)
fsopen(0x0, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x150)
inotify_init1(0x0)
r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x8, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00000000000000000000000000002000", "90be8b1c55f96400", [0x800, 0x8]}})

5.194765994s ago: executing program 1 (id=3029):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x103100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000280))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000080)={0x2, 0x2, 0x8c86, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket(0x1d, 0x2, 0x6)
r2 = add_key$keyring(&(0x7f0000001080), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='Q', 0x1, r2)
pipe2$watch_queue(&(0x7f0000001100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
r4 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x10, 0xc, 0x7a, 0x2}, {0x9, 0x5, 0x0, 0x2, 0x3ff, 0x3, 0x3, 0x7}, {0x9, 0x5, 0x6, 0x3, 0x3ff, 0x7, 0xda, 0x1a}}}}}}]}}, 0x0)
syz_usb_control_io(r4, &(0x7f0000001640)={0x18, &(0x7f00000003c0)={0x10, 0xc, 0x8a, {0x8a, 0x22, "00126ae242478b3ec31d306a97ade4c67d9500e99842cfe5a37be02c513bf020f4d860a4e79e48c964763f7b173afec30ba02315590fc4c2f3c874d76a41d8f83c3b78f0a85744a10d8fdfc84099a8613e27a9d8308fa590418e502eddd9bcd3a07702fb7daa278868ea30c0031c5284b9f3156fd6d8a16ad1fc2d891d2baba3a3803233da8f12f5"}}, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000014c0)=ANY=[@ANYBLOB="000fed000000050fed00040a1003020a006304010014100a790200000000f00700f0ff0000003f00000b1001040400f882001002a5100a3374a67634db05e80162bd786332591af89089a289ea5ad2757ada9fc9beb80a269d4a7c3cd1aac6ea2e52ae8306c1df56b72a2c519d37f054d295c2a0739530c895ad023fb5c32dbc3384999446046bcd918ceaf3a8205d82295d48663d0a845bd769390b27300154f8ab75eeb71f3b08fcf0dd156a0098cb7ebb63225cf5f82f76aa6e027b4e216f8746feea463a4aa028d632431cbf35977063cc43d9430fb1ffb81aedcaadd4ea9b3dd81f4369ecc93a86f414b6b5059effdacf"], &(0x7f00000015c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x2, 0x81, "f20915e0", "b6ddc6e7"}}, &(0x7f0000001600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x10, 0x1, 0x9, 0xff, 0x4, 0x7}}}, &(0x7f0000001b40)={0x44, &(0x7f0000001680)={0x40, 0x16, 0xe2, "8a4b2b9f65a691a3b9a69c278b32934fe890ec087e7e57b2773139e8dc134ba41154383bc58243d35ff7f7235e578b3a7fad29bfe10afb15bb49e3395570ad15aa980575477147b7c4b09c19b257097ff492b8a0510e00c4476a5bc04cf85d116ccb189f9cc210ec2e33367507bffc7d397f59a89041af2c96335f3a076ee7aa7b6bf779b428538dca0f7ae448891459ece5f0c43d01a45b940721e96ed35892efc62a7e1124a5c34f036c091bbe3fe82a268cde3f69abcc095ef470ffccf5f25a400c7066600a352057eafa56d75c3a319e6e0fb16947a5b1a75526de4e686262a4"}, 0x0, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x3, 0x7}}, &(0x7f0000001840)=ANY=[@ANYBLOB="2000049e6900300004"], &(0x7f0000001880)={0x40, 0x7, 0x2, 0xb}, 0x0, &(0x7f0000001900)={0x40, 0xb, 0x2, "2fa4"}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xa}, 0x0, &(0x7f00000019c0)={0x40, 0x17, 0x6}, 0x0, 0x0, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xac}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}})
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xc2)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xd, "fe4042c317ae82c6d1a51a1e45"}, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000))
write$cgroup_devices(r3, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r6=>0x0)
timer_create(0x4, &(0x7f0000000140)={0x0, 0xc, 0x1, @tid=r6}, &(0x7f0000000180))
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

4.979002215s ago: executing program 0 (id=3030):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
rmdir(&(0x7f0000000240)='./cgroup/../file0\x00')
write$cgroup_subtree(r5, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b", 0xbc}], 0x2}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x26}, 0x28)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
ioctl$TCSETAF(r6, 0x5408, 0x0)
write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e)
r7 = openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x59f, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
syz_open_pts(r6, 0x200)
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req={0x200, 0xfffffff9, 0x0, 0x7f}, 0x10)
recvmmsg$unix(r8, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/251, 0xfb}], 0x1}}], 0x1, 0x40010020, 0x0)
r9 = dup3(r8, r7, 0x80000)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x12)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0)

4.666386873s ago: executing program 4 (id=3031):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @loopback, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, r3, 0x40099d}}, 0x48)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
tee(r2, 0xffffffffffffffff, 0x6, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x80, @multicast1}})
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r5, 0x3)
accept4(r5, 0x0, 0x0, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
close(0x3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8646983447a381dac42e13022d783101", @ANYRES16=r1, @ANYBLOB="3103fd1f00000000084008000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0)

4.054102976s ago: executing program 0 (id=3032):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
ioctl$sock_netdev_private(r0, 0x8914, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x2f00, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x6e6bc0}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfc}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0xb4, 0x0, 0x7fffffff}, 0x0, 0x0)

3.544344626s ago: executing program 2 (id=3033):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="0000800000000000180034", @ANYRESHEX], 0x38}, 0x1, 0x300}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)

3.510656345s ago: executing program 4 (id=3034):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0xf334, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1})
io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x20000000000000, 0x7fffffff}, 0x0, 0x0)

3.509630427s ago: executing program 2 (id=3035):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x4006, 0x7fffffff, 0x400081})
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00')
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
ptrace(0x4207, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380))
socket$packet(0x11, 0x2, 0x300)
creat(&(0x7f0000000280)='./file0\x00', 0x179)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r3, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x900a, &(0x7f0000000340)=ANY=[@ANYBLOB="6472616e733d7463702c706f72743d307830303030303030303030303034653232d9be6754426490f5269e12f90b000a6c1933b1e113b2be23d40117"])
close_range(0xffffffffffffffff, r3, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001880))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r4 = fsopen(&(0x7f0000000040)='pstore\x00', 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mprotect(&(0x7f00007a7000/0x4000)=nil, 0x4000, 0x4)
fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000080)='nomand\x00', 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000})
setns(r1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200)=0x100000000000, 0x12)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r6, &(0x7f00000000c0), 0x10)
recvfrom$inet(r6, 0x0, 0x10, 0x40002022, 0x0, 0x0)
sendto$l2tp(r6, &(0x7f00000005c0)="e5786a8d000000000000003b", 0xc, 0x20080004, &(0x7f0000000240)={0x2, 0x0, @local, 0x20000004}, 0x70)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0xc, 0x20113, r0, 0x487d4000)

2.598047344s ago: executing program 4 (id=3036):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz0:', 'syz1'}, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f00000000c0)={[{@dyn}, {@dyn}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}]})
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14008081}, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x4, &(0x7f0000000280)=[{0x5, 0x4, 0x9, 0x8001}, {0xf0f, 0x0, 0x4, 0x9}, {0x3, 0xf4, 0x6, 0x6}, {0xe1, 0x3, 0xa, 0xffffffff}]})
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000)

2.423054846s ago: executing program 0 (id=3037):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010001ffffffffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000010000008008000100676a59000c0002800600020260ab67950000000000"], 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) (async)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async)
r3 = socket(0x2, 0x5, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d6400000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async)
setpriority(0x0, 0x0, 0x10000)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) (async)
getsockopt(r7, 0xd, 0x7, &(0x7f0000000780)=""/160, &(0x7f0000000840)=0xa0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x2, 0xd, 0x9, 0x9, 0x5, 0x2, 0x80000000}, &(0x7f0000000300)={0x0, 0xfffffffffffffff7, 0x7, 0xffffffffffffffff, 0x7, 0x331, 0x2, 0x9}, &(0x7f0000000440)={0x5, 0x8, 0x4, 0x8000, 0x1ff, 0xffffffffffffffff, 0x100, 0x1000}, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x80000001, 0x10]}, 0x8})
fstat(0xffffffffffffffff, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x400, 0x10, &(0x7f0000000a00)) (async)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000740)=r2, 0x4) (async)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @local}, 0x1c) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x25dfdbff, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r6)

2.367386832s ago: executing program 0 (id=3038):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000000003e7000800a000d615000008009f0005000000080026000816"], 0x40}}, 0x200040b4)

2.337577657s ago: executing program 0 (id=3039):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_emit_ethernet(0x85, 0x0, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000700)={0x2, 0x0, [{0xd8, 0x4, 0x0, 0x0, @msi={0xe8dd, 0x200, 0x3, 0x5}}, {0x8, 0x5, 0x1, 0x0, @irqchip={0x3, 0x200}}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000841}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000005c0)={{0xa, 0x1, 0x8a9c, 0x3, 'syz0\x00', 0x3}, 0x3, 0x2, 0x3, 0x0, 0x1, 0x8, 'syz0\x00', &(0x7f0000000240)=['/dev/sequencer\x00'], 0xf})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r4)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x40004)

2.321635599s ago: executing program 2 (id=3040):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
rmdir(&(0x7f0000000240)='./cgroup/../file0\x00')
write$cgroup_subtree(r5, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b", 0xbc}], 0x2}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x26}, 0x28)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
ioctl$TCSETAF(r6, 0x5408, 0x0)
write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e)
r7 = openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x59f, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
syz_open_pts(r6, 0x200)
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req={0x200, 0xfffffff9, 0x0, 0x7f}, 0x10)
recvmmsg$unix(r8, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/251, 0xfb}], 0x1}}], 0x1, 0x40010020, 0x0)
r9 = dup3(r8, r7, 0x80000)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x12)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0)

2.155356363s ago: executing program 1 (id=3041):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2)
socket$nl_sock_diag(0x10, 0x3, 0x4)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000002c0)="e3447830", 0x4)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000600)={0x12})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(r5, 0x5402, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x800)
fsopen(&(0x7f0000000000)='udf\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3, 0x0, 0xe, 0x60a00, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, r0, 0x4, 0x5, 0x4, 0x7}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
openat$tcp_congestion(0xffffff9c, &(0x7f0000000280), 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

940.721509ms ago: executing program 0 (id=3042):
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
write(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}})
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

876.660309ms ago: executing program 2 (id=3043):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
rmdir(&(0x7f0000000240)='./cgroup/../file0\x00')
write$cgroup_subtree(r5, 0x0, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x26}, 0x28)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
ioctl$TCSETAF(r6, 0x5408, 0x0)
write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e)
r7 = openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x59f, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
syz_open_pts(r6, 0x200)
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req={0x200, 0xfffffff9, 0x0, 0x7f}, 0x10)
recvmmsg$unix(r8, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/251, 0xfb}], 0x1}}], 0x1, 0x40010020, 0x0)
r9 = dup3(r8, r7, 0x80000)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x12)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0)

685.552741ms ago: executing program 4 (id=3044):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
sendto$inet(r3, &(0x7f0000000400)="628640be286d506c212011", 0xb, 0x4, 0x0, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x3010}, 0x1})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x4, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x268, 0x278, 0x278, 0x268, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0xff, 0xff000000, 0xff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88, 0x0, 0x0, 0x3a}, 0x0, 0xf4, 0x13c, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e23], [0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xfd], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7095, 0x5, 0xf461, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xdc, 0xfc, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950f", 0x55}, {&(0x7f0000000900)="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", 0x3af}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc2", 0x1b}], 0x3}, 0x1a000)

377.946086ms ago: executing program 1 (id=3045):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x1df0, 0x2c, 0xd27, 0x70bd25, 0x7ffd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xd, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc0, 0x2, [@TCA_BASIC_ACT={0xb0, 0x3, [@m_ctinfo={0xac, 0xa, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x2, 0x3, 0x6, 0x80000000}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7fffffff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x80}]}, {0x57, 0x6, "893e71c627db1fd0189b82848628233dc30a62cbbfebf5c4fe89d175fe1cb76dab64ac87876f675a75ecf4c3b029b95362a48690f4eac0d376ba6499d924fc036cbf993fddef214f5cd70beb178ca8c626ad2e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BASIC_POLICE={0x1078, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x533}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x0, 0x0, 0x8, 0x7fff, 0x4, 0x3, 0x4a, 0x0, 0x9, 0x6, 0x0, 0x2, 0x7, 0x8, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x7e5, 0x4, 0x101, 0x5, 0x6, 0x5, 0xffff, 0x3, 0x423, 0x8, 0xffffffff, 0x3, 0x9, 0xfffffff8, 0x60000, 0x4, 0x8e98, 0x2e0c, 0x1, 0x6, 0x10000, 0x2, 0x2, 0x79e, 0xff, 0x3ff, 0x0, 0x1, 0x1, 0xc2, 0x9, 0x5, 0x1, 0x80000000, 0xa, 0x754, 0x8, 0x5, 0x3ff, 0x0, 0x1, 0x3, 0x7, 0x5, 0x8, 0x7fff, 0x2, 0x37, 0x8, 0x5, 0x10001, 0xffffff01, 0x8001, 0x7fff, 0x40, 0x962, 0xff, 0x6, 0x95b1, 0xc, 0x10, 0x8, 0x7fff, 0xfff, 0x7ff, 0x6, 0xffffffff, 0xc, 0xa, 0x1, 0xfff, 0x4, 0xfff, 0x6, 0x3, 0xa8c, 0x0, 0x1, 0x6, 0xffff, 0xf, 0x2, 0x40e, 0x67b, 0x200, 0x3, 0x81, 0xffffff25, 0x7, 0x3, 0xffffffff, 0xfffffffb, 0x1, 0x4a611e0b, 0xfffff81b, 0xb76f, 0x8, 0x4, 0x8, 0x3, 0x9, 0x8, 0x2, 0xf8000000, 0x9, 0x7a4cc7e, 0x7f, 0x4d, 0x7, 0x81, 0x10000000, 0x9, 0x3, 0x8, 0x742a, 0x5, 0x8, 0x5, 0x0, 0x3b, 0x8, 0xd6f3, 0x10001, 0x401, 0x200, 0x8, 0xcf22, 0x29, 0x9e3, 0x8, 0x9, 0xfffffff8, 0x1ff, 0x401, 0x15f, 0x4, 0x6, 0x7, 0xd, 0xfffff700, 0x1, 0x4, 0x123, 0x81, 0x6, 0x0, 0xd0000, 0xe, 0x7, 0x7fffffff, 0x6, 0x7fffffff, 0x55b7, 0x0, 0x5, 0x0, 0xffffffff, 0x56, 0x9, 0xffffffff, 0x81, 0x2745, 0x80000001, 0x3, 0x9, 0x4, 0xb320, 0x7, 0x10001, 0x64dd, 0x2, 0x5, 0x16ed, 0xfffffff9, 0x80000001, 0x6, 0x28fc, 0x6e1089e, 0xbf, 0xd7, 0x1f4e16a3, 0x7, 0x80000000, 0x80000001, 0x6, 0x0, 0x2, 0xffffffff, 0xffffffff, 0xdb6, 0x9d, 0x6, 0x5, 0x9, 0x7fffffff, 0x7, 0x5, 0x0, 0x100, 0x80d, 0x3, 0x6, 0x0, 0x6, 0xc, 0x3, 0x1, 0xd, 0x9, 0x9, 0x4, 0x9, 0x4, 0x33c6, 0x14, 0xc, 0xf, 0x9, 0x4, 0x3, 0x6, 0x8, 0x95, 0x0, 0x3, 0x0, 0x682, 0x286, 0x0, 0x7d, 0x8, 0x2, 0xe, 0x1, 0x4, 0xe1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80, 0x2, 0x8001, 0xc, 0xdc99, 0x7, 0x9, 0x8001, 0x3b9, 0x5, 0x217, 0x401, 0x5, 0x79, 0xe, 0x8, 0x3, 0x1, 0x7, 0x6, 0xfb2, 0x2, 0xfffffff8, 0x4, 0x9, 0x7, 0x599, 0x0, 0x1, 0x4, 0x200, 0xf, 0x8, 0x1, 0xffffffff, 0x2, 0xe, 0xd9f, 0x3, 0x9, 0x0, 0x32, 0x5, 0x9, 0x4, 0x9, 0x1, 0x73f, 0x8, 0x3, 0x86, 0x3, 0x3ff, 0x9, 0x7, 0x6, 0x3, 0x5, 0x1ef, 0x6, 0x1, 0x66, 0xff, 0x6, 0xc6a2, 0x8, 0x7fffffff, 0x5, 0x6, 0x7, 0x5, 0x3, 0x8, 0x2, 0x4, 0xd, 0x4, 0xffff, 0x10001, 0x401, 0x4, 0x1, 0x0, 0x4, 0x3, 0x7, 0x6, 0x8001, 0x8, 0xf, 0x80000000, 0x8, 0x4, 0xffff, 0xfffffffb, 0x80, 0x7, 0x1, 0xffffffff, 0x8, 0x3, 0xa, 0x7, 0x90, 0x401, 0x10001, 0x4, 0x0, 0x100, 0xc0, 0x401, 0x401, 0x7, 0x4, 0x5, 0x5, 0x9, 0x4, 0x7fff, 0x80000, 0x9, 0x0, 0x7f, 0x9, 0x8, 0xe631, 0x3, 0x6, 0x3, 0x100, 0xffff1c56, 0x4, 0x9, 0x0, 0x8, 0x200, 0x10000, 0x40, 0xb, 0x6, 0x0, 0x401, 0x9, 0x10, 0xfffffffb, 0xd, 0x4, 0x7fff, 0xfff, 0x2, 0x6, 0x9, 0xffffffff, 0x9, 0x1, 0x1, 0x80000000, 0x5, 0xfffffffa, 0x1000, 0x6, 0x8, 0x5, 0x2, 0x800, 0x8, 0xd3d4, 0x2, 0x6, 0xd, 0x0, 0x3e, 0x7, 0x8, 0x7, 0xfffffffd, 0x10001, 0x4, 0x7246, 0x0, 0x66c4, 0x3, 0x3, 0x7, 0x6, 0x2, 0x3, 0x3, 0x7, 0x1, 0x9, 0xfffffff7, 0x4, 0x80, 0xb2b, 0x80000001, 0x1, 0x100, 0x1, 0x0, 0x40000000, 0x2, 0x6, 0x7, 0x1edcaeb4, 0x3, 0x8, 0x9, 0x0, 0x10001, 0x5fd0f06a, 0x76, 0x6, 0xfffffffc, 0x5, 0x81, 0x7, 0x1, 0x9, 0x7f, 0x9, 0x80, 0x1, 0xde72, 0x7, 0x10001, 0x7ff, 0x0, 0x6e99, 0x3, 0x8c40, 0xd86, 0x4, 0x1ff, 0x0, 0x6, 0x1, 0x5, 0x1, 0x3, 0x4, 0xa, 0x2, 0xa, 0x0, 0xffff, 0x4, 0x8e, 0x7, 0x9, 0xfffffffe, 0x3, 0x43c, 0x8, 0x94]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xffffffff, 0x401, 0x2, 0x9, 0x32d2, 0xc, 0x7, 0x7f5, 0x1ff, 0x3, 0xfffffff8, 0xfffffffc, 0xfffffffa, 0x7ff, 0x5, 0x457, 0x9, 0x3, 0xe, 0x9, 0x7, 0x7, 0x80000000, 0x4, 0x3, 0x1ff, 0x6, 0x3, 0xff3, 0x81, 0x7, 0x101, 0x0, 0x3, 0x0, 0x3ff, 0x6, 0x5602, 0xd, 0x6, 0xfffffffe, 0x8, 0x200, 0x2, 0x7, 0x2, 0x2, 0x800000, 0x8, 0x4, 0xca41, 0x5, 0x6, 0x0, 0x7, 0x4, 0xf8d, 0x24000, 0x9, 0x1e93a146, 0x2, 0x5, 0xb80d, 0x8, 0x9, 0x8a, 0x2, 0x7, 0x8, 0x5d0, 0x4, 0xffffffff, 0x2, 0x1, 0x4, 0x7, 0x8, 0xd23, 0xf, 0xff, 0x7, 0x101, 0xc, 0xb77, 0x2, 0x6, 0x0, 0x2, 0x10000, 0x721, 0x4, 0x40, 0x5, 0x6, 0x3, 0x6, 0x2, 0x6, 0x7, 0x7ff, 0x1, 0x6, 0x3, 0x80, 0xfffffff8, 0x3, 0x4, 0x844, 0x8, 0x72, 0xfff, 0x0, 0x7f55, 0x7, 0x8, 0xdcf, 0x40, 0xab, 0x9, 0x8, 0xfc67, 0x4, 0x7ff, 0xe, 0x10001, 0x2, 0x25e3, 0x80, 0xfffffffe, 0xfff, 0x1000, 0x4, 0x42e80, 0x6, 0x8000, 0x1, 0xfffffffa, 0x4, 0x100, 0xd, 0x0, 0x80, 0x3ff, 0x7000, 0x8000, 0x43, 0x1000, 0x4e4, 0x80000000, 0x98a, 0xffffff81, 0x96, 0x5, 0x6, 0x3, 0x80000001, 0x6, 0x7fffffff, 0x4, 0x43c, 0x9, 0x6, 0xce, 0x9, 0x66ed, 0x8a4, 0x0, 0x2, 0x8, 0x5280, 0x800, 0x5, 0x6, 0x5, 0x3ff, 0x669, 0x3, 0xffffffff, 0x7a48f3ab, 0x6, 0x800, 0x0, 0x408b, 0x2, 0x55bf, 0x5, 0x0, 0x4, 0x4, 0x7, 0x86e, 0x7ff, 0x1, 0xffffff5c, 0x0, 0x4, 0xb4cb, 0x8, 0x0, 0x2, 0x9, 0x2, 0x5, 0x554, 0x5, 0x2, 0xb, 0x10, 0x4, 0x2, 0xd, 0x0, 0xfffffffd, 0x4000000, 0x2, 0x10001, 0x43d3147, 0xfffffff9, 0xcc0, 0x5, 0x2, 0x8, 0x2, 0xbd, 0x40000000, 0x80000001, 0x139e, 0x9, 0x5, 0x9, 0xa5a, 0x0, 0x7, 0x1, 0x0, 0x7ff, 0x1020000, 0x55a9, 0x3, 0x40, 0x3, 0x6c3, 0x6, 0x9, 0xd6b3, 0xff, 0x3, 0xfff, 0xa, 0x1ff, 0x10, 0xfffffffb, 0x5, 0x7ff, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x4, 0x2, 0xc83, 0x4, 0x80000000, 0x80000001, 0x7f, 0x83ff, 0x101, 0x0, 0x5, 0x200, 0x3, 0x100, 0x8, 0x9c4e, 0x0, 0x4, 0x9, 0xa, 0x0, 0xffff88e9, 0xfffffff7, 0x7, 0x8, 0x80000001, 0x7, 0x73ec, 0x0, 0x101, 0x73, 0x0, 0x6, 0x261, 0x6, 0xa1dd, 0x10001, 0x1, 0x0, 0x3, 0xffffffff, 0x2aca, 0x5, 0xa, 0x3ff, 0xdf, 0x0, 0x38f, 0x7ff, 0x1a5, 0x10, 0xc11, 0x0, 0x42cb3772, 0xae, 0x1, 0x3, 0x9, 0x7, 0x8, 0x7, 0x3, 0x8, 0x7, 0x9, 0x0, 0xfffffffa, 0xa3, 0x6, 0x48000000, 0x40, 0x3, 0x41e075ab, 0x8000, 0x2e9, 0x7, 0xffff, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6, 0xff, 0x6, 0x9, 0x3, 0x3, 0x8, 0x9c1, 0xffff, 0x27, 0x8020000, 0x1, 0x5, 0x6, 0x400, 0x3, 0x3, 0x3, 0x6, 0x7, 0x9, 0x6, 0x2, 0x2, 0x33cfad00, 0xffffffff, 0x9, 0x92, 0x7, 0x7, 0x7, 0x2a17cd05, 0x7, 0x3, 0xfffffff9, 0x7, 0xfffffffd, 0xd, 0xfffff54f, 0xa, 0x7fffffff, 0x8, 0x3, 0xf, 0xf, 0x56f, 0x0, 0xd, 0xfffffff7, 0x5, 0x2, 0x8190, 0x7, 0x3, 0x401, 0x2, 0x7f, 0xfffffffc, 0x8, 0x10001, 0xfffffc01, 0x7f, 0x1, 0x4, 0xe1, 0x4, 0x9d, 0xfcef, 0x1, 0x3e7f5170, 0x1ff, 0x5, 0x80000000, 0x7fff, 0x9, 0x80, 0x9, 0x400, 0x1ff, 0x1ffc000, 0x1, 0xfffffc01, 0x9, 0x7fd7, 0x0, 0x4, 0x7ff, 0xf8, 0x4, 0x1, 0xb, 0x1, 0x56a4, 0x9, 0x5, 0x3, 0x401, 0x100, 0x4, 0x8, 0x2450, 0x1, 0x3ff, 0xc, 0xd6c, 0x3ff, 0xd6, 0x0, 0x4, 0x3, 0x80, 0x2, 0x84c, 0x8001, 0x5, 0x7, 0x80000001, 0xee, 0xff, 0x13592d68, 0x7, 0x80, 0x2, 0x43a, 0x5, 0x6, 0x5, 0x9, 0xf, 0x5, 0x5, 0x4, 0x3, 0x8, 0x9, 0x3ff, 0x1, 0x10, 0x10000, 0x8000, 0x0, 0x1, 0x5, 0x0, 0x8, 0x8, 0x94c5, 0x7, 0x7, 0x8, 0x4, 0x200, 0x6, 0x6, 0x1, 0x4, 0x0, 0x1, 0x80000000, 0x3, 0xda0, 0x5, 0x7, 0xb, 0x3, 0x6, 0x5, 0x5, 0x60000, 0x6, 0x2342bf34, 0x8, 0xd]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2cc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0xffff7fff, 0x15c, 0x5, {0x0, 0x1, 0x31, 0xd7b9, 0xa, 0x8}, {0x7a, 0x1, 0xfff4, 0x0, 0x2, 0x3}, 0x80, 0x9, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xdb3a}]}, @TCA_BASIC_POLICE={0x874, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffff800}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3ff, 0x3, 0x8, 0x1, 0x109, 0x2, 0x1000, 0x80000001, 0x3, 0xffff, 0x7, 0x3, 0x401, 0x3, 0xfff, 0xc8, 0x1000, 0xf, 0x8, 0x8, 0x2, 0x0, 0xe, 0x1, 0x2, 0xff, 0x80000000, 0x6, 0x3, 0xfffffffa, 0x7, 0x3, 0x0, 0x3, 0xfffffff7, 0x1, 0x6, 0x3, 0x4, 0x5, 0x6, 0x55, 0xadb, 0x7, 0xffffffff, 0xfffffff8, 0x2fa0, 0xc8c0, 0xffff179e, 0x3e, 0x81, 0x44098812, 0x80000000, 0x7c59000, 0x1, 0xffffffff, 0x1, 0x6, 0xc, 0x0, 0x1, 0x1000, 0x9f32, 0x7, 0x0, 0x9, 0x19, 0xd, 0x3, 0x2418, 0x68, 0x3a, 0x3, 0x40, 0xffff, 0x7f, 0x9, 0x6, 0xff, 0x9, 0x8000000, 0x8, 0x8, 0x404, 0xe132, 0x7, 0x100, 0x8, 0xa, 0x2, 0x7, 0xffffffff, 0x26e, 0x3, 0x604b, 0x400, 0x7, 0x7, 0xd15, 0x8001, 0x6, 0x1, 0x8, 0xffffffff, 0x99, 0x7ff, 0x80000000, 0x100, 0x1ff, 0x2, 0x1ff, 0x7, 0xa13, 0x8, 0x7ff, 0xfdc, 0x41e7dff1, 0x400, 0x10000, 0x80000001, 0x9, 0xffffffff, 0x4, 0x1, 0x0, 0xc61, 0x8, 0x6, 0xc922, 0x6, 0x4, 0x40, 0xc, 0x9, 0x1ff, 0xb6, 0x3, 0x2, 0x7, 0xaa3, 0xffe00, 0x4, 0xdab7, 0xdbe, 0x3, 0x1, 0x6, 0x7, 0x794, 0x8, 0xfffffff7, 0x3548, 0x44be4aa5, 0x32f5c00, 0x2, 0x7f, 0xfff, 0x0, 0x8, 0x80000001, 0x200, 0x3, 0x9, 0x7fffffff, 0x6, 0x1, 0x5, 0x93a, 0x8, 0x8, 0x3, 0x8, 0xa34b, 0xb, 0x5f, 0x91, 0xe8a, 0xff, 0x8001, 0x4, 0x5, 0x42cd, 0x5, 0x100, 0x7, 0x9, 0xffffffff, 0x10001, 0x2, 0x20, 0x2, 0x2, 0x5f, 0x2, 0xfff, 0x0, 0x1, 0x6, 0x200, 0x908, 0x7fff, 0x8, 0x5, 0x8, 0x1, 0x10, 0xfffff000, 0x2, 0x6, 0x6, 0xfffffffc, 0x0, 0x9, 0x6, 0x23b, 0x1, 0x7fff, 0x8, 0x5, 0x0, 0x0, 0x3, 0x3a222637, 0x9, 0xcc, 0x10, 0x3, 0x3, 0x35, 0x7, 0x8, 0x5, 0xfffffeff, 0x2, 0x2, 0x401, 0x80000001, 0x79b5, 0xffffffff, 0xffff, 0x1ff, 0x0, 0x7, 0x3, 0x6, 0x3, 0x8001, 0x0, 0x7, 0xb, 0x2, 0x2, 0x5, 0x7fffffff, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x2, 0x0, 0x5, {0xd, 0x0, 0x7, 0x7, 0x74, 0xff}, {0xe, 0x0, 0x9, 0x5, 0xff, 0x8}, 0x2240, 0x2, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x9, 0x8, 0x7ff, 0xf8c, 0x4, 0xfffffff7, 0x0, 0x7fffffff, 0xb97, 0x6, 0x7, 0x7, 0x3, 0x0, 0x3, 0xfffffff8, 0xdf, 0x5, 0x2, 0x1, 0x8, 0x5, 0xd4a8, 0x1, 0x0, 0x0, 0x7, 0x94a2, 0x2, 0x6, 0x400, 0xa5a7, 0x800, 0x9, 0x5, 0x4, 0x4000000, 0x8ff5, 0x4113, 0xf3, 0x42, 0x8, 0x3, 0x3, 0x344, 0x8, 0x400, 0x5, 0x3, 0x1, 0x6, 0x9, 0x7, 0x8, 0x6, 0x8, 0x5, 0xc99, 0x9, 0x1, 0x2, 0x6, 0x800, 0x6, 0x4, 0x9, 0x5, 0x7, 0xe684, 0x0, 0x8000, 0x8, 0x7f, 0xffffffff, 0x101, 0x4, 0x4, 0x1, 0x3, 0x1, 0xffffffff, 0x1000000, 0x6, 0x9, 0x67, 0x401, 0x1, 0x4, 0xffffffff, 0x0, 0x605, 0x7fff, 0x10000, 0x7e6f3d2, 0x6, 0x5, 0xd31, 0x97, 0x9, 0x3, 0x7, 0x9, 0x80, 0x101, 0x200, 0x2, 0x4, 0x7, 0x7f, 0xac5, 0x3c71, 0xfffffffb, 0x1a43, 0x7fff, 0x1, 0x6, 0x4f79, 0x3, 0x8, 0x5, 0x9, 0x8, 0xfec6, 0x6, 0x3, 0xffff7fff, 0x45, 0x401, 0x910, 0x400, 0x100, 0xb, 0x10000, 0x5, 0xd34e, 0x3, 0x8, 0xfe, 0x71, 0x9, 0x5, 0xfffffffd, 0x7fff, 0x4, 0x7, 0x1, 0x3, 0x7f, 0x33, 0x7, 0x1000, 0x1, 0x1, 0x7, 0x0, 0x8, 0x1, 0x6, 0xfffffc01, 0x5, 0x7, 0x6, 0x3, 0x6, 0x1, 0x6, 0x2, 0x78, 0x6, 0x80000001, 0x0, 0xfffffff9, 0xfd, 0x3, 0x7, 0x2, 0x100, 0x7, 0x5, 0x200, 0x2, 0x8, 0x1bc, 0x6, 0x3, 0xc, 0x8060, 0x81, 0x9, 0xfffffff8, 0x4, 0x7fffffff, 0x3, 0x7f, 0x7, 0x0, 0xfffffffd, 0xff, 0x561, 0xffff, 0x81, 0x4, 0x3, 0x1000, 0x3, 0x9, 0x7, 0x3, 0xfffffffb, 0x682, 0x101, 0x7, 0x81, 0x1, 0x5, 0x3, 0x6, 0x8, 0x1, 0x8, 0x8f, 0x200, 0x0, 0x698, 0xfffffffd, 0x0, 0x2, 0x5e5, 0x6, 0x2, 0x3, 0xff, 0x5a, 0x3, 0x10000, 0x1, 0xc, 0x8, 0x9f1, 0x51, 0x1, 0x6, 0x3, 0x3, 0xfff00000, 0x83, 0x0, 0x0, 0x1, 0x4, 0x4, 0x4, 0x2dc0, 0x1, 0x2]}]}, @TCA_BASIC_POLICE={0x420, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x100, 0x8, 0x90, 0x1, 0x9, 0x6, 0x8, 0x81, 0x3, 0x6, 0x3a, 0x6, 0x7, 0x0, 0x0, 0x80000000, 0x4c, 0x8, 0x46, 0x10001, 0x0, 0xfffff2d5, 0x6, 0x6, 0x40, 0x4, 0x1000, 0x40, 0x7, 0x2, 0x80000000, 0x6, 0x0, 0x2, 0xb9b, 0xf, 0x2, 0x0, 0xa, 0x7b5, 0x73098131, 0xa, 0x2, 0xc665, 0xd49, 0x2, 0xd, 0x7ff, 0x0, 0x2, 0xffffffff, 0x5, 0x9, 0x6, 0x0, 0x4, 0x0, 0x101, 0x7, 0xe, 0xffff, 0x0, 0x8, 0x3ff, 0xd4a1, 0x800, 0x9, 0x100, 0x8, 0xfffff572, 0x40, 0x2, 0x7, 0xe, 0xa, 0x1, 0xa, 0x104f, 0x1, 0x1, 0x2, 0x5, 0x7, 0x32, 0x5, 0x86fa, 0x0, 0x6, 0xff, 0x6, 0x0, 0x8a7, 0x2, 0x0, 0x7, 0x3e3, 0x3, 0x4, 0x2, 0xa893, 0x8, 0x101, 0xfffffffd, 0x5, 0xfff, 0x8, 0xf, 0x7fff, 0x2, 0x8, 0x200, 0x10, 0x7, 0xffffff80, 0x2, 0x7fff, 0x0, 0x0, 0x80000000, 0x9, 0x7, 0x5, 0x1a1, 0x80000001, 0xfffffff7, 0x0, 0x4, 0x2, 0x4, 0x3, 0x54, 0x2ea, 0x5, 0x2, 0x9, 0xa6, 0xfb0, 0x5, 0x0, 0x7, 0x2, 0xfffffffa, 0x9, 0xfc4, 0x90bd, 0x3, 0x0, 0x747, 0xfa19, 0x8, 0x19ba, 0x1917, 0x2, 0x3, 0x7, 0x6, 0x8, 0x7, 0x3800000, 0xf, 0xb3c, 0x101, 0x7, 0x2, 0x7fff, 0x0, 0x8, 0x2, 0x3, 0x24c, 0xfc, 0x1, 0x1, 0x800, 0xe0, 0x5, 0x2, 0x10001, 0x7ee, 0x1fc0, 0x4, 0xbef, 0x6, 0x5, 0xffffff36, 0x8, 0x6, 0x9, 0x0, 0xe9, 0x7fffffff, 0x6, 0x6, 0x8, 0x100, 0x7, 0x0, 0x0, 0x5, 0x1, 0x7, 0x200, 0xcc9, 0x2, 0x5748, 0x5, 0x72, 0x5, 0x6, 0x9, 0x5, 0x7f, 0x8, 0x4, 0x9, 0x1, 0x7fffffff, 0x2, 0x9, 0xc1, 0x3, 0x6, 0xd91e, 0xffff, 0x4, 0x3, 0x2, 0x4, 0xac6, 0x1, 0x10, 0x3, 0x0, 0x3, 0x6, 0x9, 0x101, 0x9, 0x6520, 0x6, 0x4, 0x40, 0x8, 0x5, 0x9, 0x9b3, 0x200, 0x8, 0x9, 0x5, 0x8, 0x9, 0x6, 0x5e86, 0x30]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}]}}]}, 0x1df0}, 0x1, 0x0, 0x0, 0xc041}, 0x804)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r8 = syz_io_uring_setup(0x48a, 0x0, 0x0, 0x0)
nanosleep(0x0, 0x0)
r9 = syz_io_uring_setup(0xa07, 0x0, &(0x7f0000000140), &(0x7f0000000280))
io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000300)=[{r8, 0x8000}, {r1, 0x600}, {0xffffffffffffffff, 0x1122}, {0xffffffffffffffff, 0x9000}, {0xffffffffffffffff, 0x6111}, {r6, 0x200}, {r7, 0x4}, {r7, 0xa093}, {r6, 0x5005}, {r9, 0x2}], 0xa, &(0x7f0000000180)={0x77359400}, &(0x7f0000000480)={[0x1, 0x401]}, 0x8)

84.18117ms ago: executing program 4 (id=3046):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffbfef}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x8, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
poll(&(0x7f0000000180)=[{r3, 0x201}], 0x1, 0x10000)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, r3, 0x8000000)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x13, r3, 0x10000000)
r6 = io_uring_setup(0x1de0, &(0x7f0000001040)={0x0, 0x764, 0x0, 0x0, 0x1d2})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x1c, 0x20000048, r7)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x8000, 0x4e1d, 0x3, 0x2, 0x20, 0x20, 0x33}, {0x80000000, 0x6, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0x7, 0x4a, 0x3, 0x4}, 0x85, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x5, 0x8, 0x1000000}}, 0xe8)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r8, &(0x7f0000001280), 0x6)
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x23, 0x0, 0x4, 0x1, &(0x7f00000002c0)="0b0994dae4cee1a46044bce2cceb11367e7b63ae3da373616744fae35e8433abebfe2b0f546e2ef62f00889c95c2832531c68212", 0x4, 0x0, 0x1, {0x0, r7}})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c00000010004641bd71b0ed9c56df2500000000", @ANYRES32=0x0, @ANYBLOB="a108000000000000440012800e000100697036677265746170000000300002800500160002000000080015002daf0c0014000600fc020000000000000000000000000000050008000200000008001f0003000000"], 0x6c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x44080)
socket$l2tp(0x2, 0x2, 0x73)
r12 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r13=>0x0, &(0x7f0000000000)=<r14=>0x0)
syz_io_uring_submit(r13, r14, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23})
io_uring_enter(r12, 0x48e9, 0x0, 0x2, 0x0, 0x0)
r15 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000300)={'bond0\x00'})

0s ago: executing program 2 (id=3047):
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x391e1000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000112020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000000a6301900"])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c9, &(0x7f0000000100))
readv(r7, &(0x7f0000000000)=[{&(0x7f0000000100)=""/54, 0x36}], 0x1)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r9 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
syz_usb_disconnect(0xffffffffffffffff)
fchdir(r10)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r11 = syz_open_procfs(r9, &(0x7f0000000040)='statm\x00')
read$FUSE(r11, &(0x7f0000001580)={0x2020}, 0x2020)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[])
syz_emit_ethernet(0x36, &(0x7f0000001200)={@local, @random="60c84a239955", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x0, 0x0, @local, @local}}}}, 0x0)
openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x3230c1, 0x0)

kernel console output (not intermixed with test programs):

[ T6005] usb 7-1: USB disconnect, device number 11
[  464.451001][T12462] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1723'.
[  464.943902][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1727'.
[  464.946613][T12470] openvswitch: netlink: Flow key attr not present in new flow.
[  465.031608][   T29] usb 5-1: USB disconnect, device number 10
[  465.178441][T12475] 9pnet_virtio: no channels available for device syz
[  465.191643][T12475] loop6: detected capacity change from 0 to 524287999
[  465.195880][T12475] buffer_io_error: 23 callbacks suppressed
[  465.195918][T12475] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.200525][T12475] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.203433][T12475] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.206120][T12475] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.208875][T12475] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.212600][T12475] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.215373][T12475] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.218105][T12475] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.221110][T12475] ldm_validate_partition_table(): Disk read failed.
[  465.223353][T12475] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.226062][T12475] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.229032][T12475] Dev loop6: unable to read RDB block 0
[  465.231866][T12475]  loop6: unable to read partition table
[  465.234247][T12475] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  465.318060][T12476] syz2: rxe_newlink: already configured on ipvlan0
[  465.660403][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'.
[  466.099323][T12423] ldm_validate_partition_table(): Disk read failed.
[  466.101484][T12423] Dev loop6: unable to read RDB block 0
[  466.103371][T12423]  loop6: unable to read partition table
[  466.229603][T12494] wireguard0: entered promiscuous mode
[  466.231355][T12494] wireguard0: entered allmulticast mode
[  466.954653][T12512] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1738'.
[  467.625468][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'.
[  467.895574][T12534] vlan0: entered promiscuous mode
[  468.911511][T12552] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  469.651128][T12564] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  469.653570][T12564] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  469.658141][T12564] vhci_hcd vhci_hcd.0: Device attached
[  469.791372][T12573] vhci_hcd: connection closed
[  469.792971][   T46] vhci_hcd: stop threads
[  469.796131][   T46] vhci_hcd: release socket
[  469.797646][   T46] vhci_hcd: disconnect device
[  470.176918][T12586] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.1759'.
[  470.227215][T12589] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1760'.
[  473.202238][T12635] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1771'.
[  473.692492][T12643] sctp: [Deprecated]: syz.4.1773 (pid 12643) Use of struct sctp_assoc_value in delayed_ack socket option.
[  473.692492][T12643] Use struct sctp_sack_info instead
[  473.921207][T12656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1778'.
[  473.924209][T12656] openvswitch: netlink: Flow key attr not present in new flow.
[  474.260905][T12666] 9pnet_virtio: no channels available for device syz
[  474.287682][T12666] loop6: detected capacity change from 0 to 524287999
[  474.294373][T12666] buffer_io_error: 23 callbacks suppressed
[  474.294456][T12666] Buffer I/O error on dev loop6, logical block 0, async page read
[  474.301054][T12666] Buffer I/O error on dev loop6, logical block 0, async page read
[  474.305075][T12666] Buffer I/O error on dev loop6, logical block 0, async page read
[  474.309497][T12666] Buffer I/O error on dev loop6, logical block 0, async page read
[  474.313540][T12666] Buffer I/O error on dev loop6, logical block 0, async page read
[  474.317693][T12666] Buffer I/O error on dev loop6, logical block 0, async page read
[  474.322218][T12666] Buffer I/O error on dev loop6, logical block 0, async page read
[  474.326514][T12666] Buffer I/O error on dev loop6, logical block 0, async page read
[  474.330257][T12666] ldm_validate_partition_table(): Disk read failed.
[  474.333518][T12666] Buffer I/O error on dev loop6, logical block 0, async page read
[  474.337599][T12666] Buffer I/O error on dev loop6, logical block 0, async page read
[  474.342680][T12666] Dev loop6: unable to read RDB block 0
[  474.346513][T12666]  loop6: unable to read partition table
[  474.360944][T12666] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  474.424911][T12666] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  475.200735][T12608] ldm_validate_partition_table(): Disk read failed.
[  475.202995][T12608] Dev loop6: unable to read RDB block 0
[  475.204837][T12608]  loop6: unable to read partition table
[  475.251644][T12663] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1779'.
[  475.270185][T12665] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1780'.
[  475.673512][T12678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  475.681430][T12678] netlink: 'syz.1.1782': attribute type 10 has an invalid length.
[  475.684873][T12678] bond0: (slave wlan1): Opening slave failed
[  476.179711][T12710] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  476.199104][T12707] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1787'.
[  476.438296][T12720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1792'.
[  476.441560][T12720] openvswitch: netlink: Flow key attr not present in new flow.
[  476.693853][T12726] 9pnet_virtio: no channels available for device syz
[  476.702799][T12726] loop6: detected capacity change from 0 to 524287999
[  476.707683][T12726] ldm_validate_partition_table(): Disk read failed.
[  476.710558][T12726] Dev loop6: unable to read RDB block 0
[  476.714449][T12726]  loop6: unable to read partition table
[  476.717726][T12726] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  476.799001][T12728] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  477.595842][T12733] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.1794'.
[  478.006772][T12743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1797'.
[  478.025263][T12743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1797'.
[  478.346460][T12756] vlan0: entered promiscuous mode
[  478.388599][T12757] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.1800'.
[  479.593892][T12774] siw: device registration error -23
[  480.510958][T12797] binder: 12796:12797 ioctl 0 80000040 returned -22
[  481.204140][T12809] team0: No ports can be present during mode change
[  481.209059][T12809] vlan0: entered promiscuous mode
[  481.220213][T12809] team0: Port device vlan0 added
[  481.324387][T12807] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1813'.
[  481.834950][T12816] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1815'.
[  482.031909][T12819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1816'.
[  482.063007][T12819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1816'.
[  482.497899][T12824] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1826'.
[  483.029077][T12834] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1822'.
[  485.656870][T11885] Process accounting resumed
[  486.259614][T12872] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  486.262648][T12872] overlayfs: failed to set xattr on upper
[  486.265053][T12872] overlayfs: ...falling back to redirect_dir=nofollow.
[  486.267845][T12872] overlayfs: ...falling back to index=off.
[  486.352546][T12872] overlayfs: ...falling back to uuid=null.
[  486.911731][T12870] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1834'.
[  487.602775][T12901] binder: 12900:12901 ioctl 0 80000040 returned -22
[  487.797806][T12912] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.1846'.
[  487.863471][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'.
[  487.878694][T12913] loop8: detected capacity change from 0 to 7
[  487.888602][T12913]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  487.891746][T12913] loop8: partition table partially beyond EOD, truncated
[  487.895347][T12913] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  487.904173][T12913] loop8: p2 start 956478 is beyond EOD, truncated
[  488.122716][T12916] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  488.125309][T12916] overlayfs: failed to set xattr on upper
[  488.128522][T12916] overlayfs: ...falling back to redirect_dir=nofollow.
[  488.131092][T12916] overlayfs: ...falling back to index=off.
[  488.133226][T12916] overlayfs: ...falling back to uuid=null.
[  488.524310][T12921] netlink: 'syz.2.1849': attribute type 1 has an invalid length.
[  488.611012][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1852'.
[  488.614988][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1852'.
[  488.819053][   T40] kauditd_printk_skb: 25 callbacks suppressed
[  488.819069][   T40] audit: type=1800 audit(1762079537.509:643): pid=12936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1855" name="bus" dev="overlay" ino=2391 res=0 errno=0
[  488.967584][T12939] bridge12: entered promiscuous mode
[  489.129921][T12942] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  489.132158][T12942] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  489.135026][T12942] vhci_hcd vhci_hcd.0: Device attached
[  489.417709][T11885] usb 42-1: SetAddress Request (15) to port 0
[  489.419870][T11885] usb 42-1: new SuperSpeed USB device number 15 using vhci_hcd
[  489.863163][T12943] vhci_hcd: connection reset by peer
[  489.865973][   T12] vhci_hcd: stop threads
[  489.867718][   T12] vhci_hcd: release socket
[  489.872969][   T12] vhci_hcd: disconnect device
[  490.219632][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'.
[  490.238524][T12962] loop8: detected capacity change from 0 to 7
[  490.243739][T12962]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  490.246813][T12962] loop8: partition table partially beyond EOD, truncated
[  490.250790][T12962] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  490.266784][T12962] loop8: p2 start 956478 is beyond EOD, truncated
[  490.882469][T12970] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  490.885102][T12970] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  490.888482][T12970] vhci_hcd vhci_hcd.0: Device attached
[  491.153818][T12971] vhci_hcd: connection closed
[  491.208434][ T1243] vhci_hcd: stop threads
[  491.211583][   T29] usb 38-1: SetAddress Request (30) to port 0
[  491.213502][   T29] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd
[  491.216964][ T1243] vhci_hcd: release socket
[  491.219007][ T1243] vhci_hcd: disconnect device
[  491.228833][   T29] usb 38-1: enqueue for inactive port 0
[  491.250081][T12982] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1866'.
[  491.629152][   T29] usb usb38-port1: attempt power cycle
[  492.050852][T12993] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1870'.
[  492.219113][   T29] usb usb38-port1: unable to enumerate USB device
[  493.122462][T13015] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1877'.
[  493.276838][T13019] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  493.280365][T13019] batadv_slave_0: entered allmulticast mode
[  493.287787][T13019] netlink: 'syz.2.1879': attribute type 10 has an invalid length.
[  493.291952][T13019] bond0: (slave wlan1): Opening slave failed
[  493.350421][T13019] syz.2.1879 (13019): drop_caches: 4
[  494.079597][T13038] syzkaller1: entered promiscuous mode
[  494.082123][T13038] syzkaller1: entered allmulticast mode
[  494.090007][T13038] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 22
[  494.328658][  T842] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  494.580269][  T842] usb 7-1: config 1 has an invalid descriptor of length 77, skipping remainder of the config
[  494.585458][  T842] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  494.589828][  T842] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  494.594585][  T842] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  494.611277][  T842] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  494.618842][  T842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.627330][  T842] hub 7-1:1.0: bad descriptor, ignoring hub
[  494.635469][  T842] hub 7-1:1.0: probe with driver hub failed with error -5
[  494.636094][T13044] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1887'.
[  494.639291][  T842] cdc_wdm 7-1:1.0: skipping garbage
[  494.645946][  T842] cdc_wdm 7-1:1.0: skipping garbage
[  494.652420][  T842] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  494.659644][  T842] cdc_wdm 7-1:1.0: Unknown control protocol
[  494.858672][T11885] usb 42-1: device descriptor read/8, error -110
[  495.076158][T13058] D‹\
[  495.130048][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1891'.
[  495.270766][T11885] usb usb42-port1: attempt power cycle
[  495.649639][T13038] usb 7-1: reset full-speed USB device number 12 using dummy_hcd
[  495.789546][T13079] vhci_hcd vhci_hcd.0: port 0 already used
[  495.844339][T13038] cdc_wdm 7-1:1.0: Error submitting int urb - -90
[  495.937228][T11885] usb usb42-port1: unable to enumerate USB device
[  496.208746][  T842] usb 7-1: USB disconnect, device number 12
[  496.308475][T13087] bond4: Unable to set up delay as MII monitoring is disabled
[  496.313451][T13087] bond4 (unregistering): Released all slaves
[  496.643375][T13092] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1900'.
[  496.930714][T13097] D‹\
[  497.011560][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'.
[  497.292612][T13117] wireguard0: entered promiscuous mode
[  497.295086][T13117] wireguard0: entered allmulticast mode
[  498.296839][T13135] bond4: Unable to set up delay as MII monitoring is disabled
[  498.366733][T13135] bond4 (unregistering): Released all slaves
[  498.383801][T13140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1915'.
[  499.152213][T13161] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  499.155010][T13161] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  499.159365][T13161] vhci_hcd vhci_hcd.0: Device attached
[  499.386105][T13172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1926'.
[  499.430266][T13162] vhci_hcd: connection closed
[  499.430487][   T46] vhci_hcd: stop threads
[  499.434033][   T46] vhci_hcd: release socket
[  499.436390][   T46] vhci_hcd: disconnect device
[  499.438825][   T29] usb 42-1: enqueue for inactive port 0
[  499.521454][T13180] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1929'.
[  499.815948][T13188] bond5: Unable to set up delay as MII monitoring is disabled
[  499.821640][T13188] bond5 (unregistering): Released all slaves
[  499.951266][   T29] usb usb42-port1: attempt power cycle
[  500.204235][   T40] audit: type=1800 audit(1762079548.889:644): pid=13195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1932" name="bus" dev="overlay" ino=2471 res=0 errno=0
[  500.204740][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1935'.
[  500.319194][T13195] bridge3: entered promiscuous mode
[  500.614773][T13201] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1934'.
[  500.791504][   T29] usb usb42-port1: unable to enumerate USB device
[  501.005495][T13209] wireguard0: entered promiscuous mode
[  501.008841][T13209] wireguard0: entered allmulticast mode
[  501.134452][T13213] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1941'.
[  501.364431][T13220] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1943'.
[  502.269087][T13230] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1945'.
[  502.581160][T13235] overlay: Unknown parameter 'smackfsfloor'
[  502.812180][T13245] overlayfs: failed to clone upperpath
[  502.905919][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1963'.
[  503.009703][T13264] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  503.053282][T13263] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1956'.
[  505.163607][T13289] fuse: Bad value for 'fd'
[  505.464623][T13290] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1965'.
[  505.726051][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'.
[  506.045399][T13303] wireguard0: entered promiscuous mode
[  506.047244][T13303] wireguard0: entered allmulticast mode
[  506.222142][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  506.224953][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[  506.454468][T13316] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  506.915853][T13320] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  506.918625][T13320] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  506.922622][T13320] vhci_hcd vhci_hcd.0: Device attached
[  507.479106][   T29] usb 42-1: SetAddress Request (23) to port 0
[  507.481956][   T29] usb 42-1: new SuperSpeed USB device number 23 using vhci_hcd
[  507.892425][T13322] vhci_hcd: connection reset by peer
[  507.897139][   T61] vhci_hcd: stop threads
[  507.898525][   T61] vhci_hcd: release socket
[  507.900464][   T61] vhci_hcd: disconnect device
[  508.305771][T13351] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  509.136869][T13359] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1982'.
[  511.192789][T13376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1991'.
[  511.196121][   T40] audit: type=1326 audit(1762079559.869:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  511.204076][   T40] audit: type=1326 audit(1762079559.869:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  511.217461][   T40] audit: type=1326 audit(1762079559.869:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  511.228294][   T40] audit: type=1326 audit(1762079559.869:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  511.238858][   T40] audit: type=1326 audit(1762079559.869:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  511.284762][   T40] audit: type=1326 audit(1762079559.879:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  511.291804][   T40] audit: type=1326 audit(1762079559.879:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  511.310595][   T40] audit: type=1326 audit(1762079559.879:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  511.317255][   T40] audit: type=1326 audit(1762079559.879:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  511.326065][   T40] audit: type=1326 audit(1762079559.879:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  511.381663][T13383] virtio-fs: tag <c:::> not found
[  511.384715][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1992'.
[  511.394281][T13383] IPv6: sit1: Disabled Multicast RS
[  512.032650][T13398] netlink: 'syz.2.1999': attribute type 1 has an invalid length.
[  512.069906][T13398] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  512.074964][T13398] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  512.112876][T13403] ip6erspan0: entered promiscuous mode
[  512.118513][T13404] macvlan3: entered promiscuous mode
[  512.120302][T13404] macvlan3: entered allmulticast mode
[  512.122321][T13404] bond6: entered promiscuous mode
[  512.124207][T13404] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  512.128727][T13404] bond6: left promiscuous mode
[  512.169927][T13405] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2000'.
[  512.418205][T13417] overlayfs: failed to clone upperpath
[  512.542824][   T29] usb 42-1: device descriptor read/8, error -110
[  512.939610][   T29] usb usb42-port1: attempt power cycle
[  512.997721][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2011'.
[  513.016303][T13432] 8021q: adding VLAN 0 to HW filter on device bond4
[  513.023327][T13432] bond0: (slave bond4): Enslaving as an active interface with an up link
[  513.100469][T13441] overlayfs: failed to clone upperpath
[  513.117066][T13443] 8021q: VLANs not supported on gre0
[  513.200264][T13449] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2017'.
[  513.369122][ T6452] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  513.427865][T13459] netlink: 'syz.4.2022': attribute type 1 has an invalid length.
[  513.451319][T13459] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  513.455201][T13459] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  513.482518][T13461] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.2021'.
[  513.500027][   T29] usb usb42-port1: unable to enumerate USB device
[  513.510369][ T6452] usb 5-1: device descriptor read/64, error -71
[  513.515445][T13459] bond5: (slave gretap2): making interface the new active one
[  513.519517][T13459] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  513.571252][T13465] netlink: 'syz.4.2023': attribute type 23 has an invalid length.
[  513.617063][T13467] 8021q: VLANs not supported on gre0
[  513.828722][ T6452] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  513.958791][ T6452] usb 5-1: device descriptor read/64, error -71
[  514.069166][ T6452] usb usb5-port1: attempt power cycle
[  514.168039][T13477] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2028'.
[  514.408633][ T6452] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  514.435933][ T6452] usb 5-1: device descriptor read/8, error -71
[  514.600131][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'.
[  514.755174][ T6452] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  514.779702][ T6452] usb 5-1: device descriptor read/8, error -71
[  514.889673][ T6452] usb usb5-port1: unable to enumerate USB device
[  515.189156][T13508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2039'.
[  515.192082][T13508] netlink: 'syz.1.2039': attribute type 7 has an invalid length.
[  515.194510][T13508] netlink: 'syz.1.2039': attribute type 8 has an invalid length.
[  515.196950][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2039'.
[  515.805263][T13521] netlink: 'syz.2.2044': attribute type 17 has an invalid length.
[  515.808141][T13521] netlink: 'syz.2.2044': attribute type 16 has an invalid length.
[  516.461411][T13532] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  517.456226][T13571] __nla_validate_parse: 1 callbacks suppressed
[  517.456237][T13571] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2057'.
[  517.590434][T13576] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  518.033986][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'.
[  518.268743][T13596] wireguard0: entered promiscuous mode
[  518.270511][T13596] wireguard0: entered allmulticast mode
[  519.198275][T13618] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2070'.
[  519.958611][T13652] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2081'.
[  520.180765][T13661] rtc_cmos 00:05: Alarms can be up to one day in the future
[  520.537052][T13681] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2090'.
[  520.650679][T13684] veth0: entered promiscuous mode
[  522.248103][T13712] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.315047][T13712] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.350834][ T5985] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  522.361486][T13712] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.378687][T13718] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2100'.
[  522.435967][T13712] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.536598][   T76] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.545653][   T76] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.554441][   T76] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.562822][   T46] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.750184][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'.
[  522.889969][T13746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'.
[  522.924103][T13748] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2112'.
[  523.016501][T13751] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2113'.
[  523.261138][T13684] veth0: left promiscuous mode
[  523.455316][T13767] overlayfs: failed to clone upperpath
[  523.871204][T13782] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2124'.
[  524.869618][T13802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2132'.
[  524.904497][T13804] netlink: 'syz.0.2133': attribute type 23 has an invalid length.
[  525.133695][T13810] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.2135'.
[  525.254056][T13811] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  525.256140][T13811] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  525.259930][T13811] vhci_hcd vhci_hcd.0: Device attached
[  525.418931][T13825] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2138'.
[  525.498810][ T6452] usb 37-1: new low-speed USB device number 6 using vhci_hcd
[  525.573720][T13831] overlayfs: failed to clone upperpath
[  525.898160][T13812] vhci_hcd: connection reset by peer
[  525.906258][ T1243] vhci_hcd: stop threads
[  525.907660][ T1243] vhci_hcd: release socket
[  525.911588][ T1243] vhci_hcd: disconnect device
[  526.147874][T13849] pim6reg: entered allmulticast mode
[  526.169536][T13850] siw: device registration error -23
[  526.361093][T13861] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  526.641722][T13861] /dev/sr0: Can't open blockdev
[  526.978681][   T40] kauditd_printk_skb: 46 callbacks suppressed
[  526.978696][   T40] audit: type=1326 audit(1762079575.659:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.0.2153" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x0
[  527.090954][T13868] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2152'.
[  527.499523][T13884] tipc: Enabled bearer <udp:s>, priority 10
[  527.888522][T13900] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  527.963154][T13902] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.2163'.
[  529.001634][T13929] binder: BINDER_SET_CONTEXT_MGR already set
[  529.004496][T13929] binder: 13928:13929 ioctl 4018620d 80004a80 returned -16
[  529.066957][T13930] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  529.145398][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2175'.
[  529.328607][T13942] loop2: detected capacity change from 0 to 7
[  529.331094][T13942]  loop2:
[  529.331129][T13942] loop2: partition table partially beyond EOD, truncated
[  529.401549][T13944] wireguard0: entered promiscuous mode
[  529.401610][T13944] wireguard0: entered allmulticast mode
[  529.796981][T13957] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.2181'.
[  529.859917][T13965] overlayfs: failed to clone upperpath
[  529.899311][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'.
[  529.900262][T13967] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2186'.
[  529.900306][T13967] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2186'.
[  530.608733][ T6452] vhci_hcd: vhci_device speed not set
[  531.209212][T14016] overlayfs: failed to clone upperpath
[  531.645543][T14026] loop6: detected capacity change from 0 to 524287999
[  531.658281][T13715] buffer_io_error: 40 callbacks suppressed
[  531.658296][T13715] Buffer I/O error on dev loop6, logical block 65535998, async page read
[  531.680029][T14026] netfs: Couldn't get user pages (rc=-14)
[  532.092170][T14035] binder: 14034:14035 ioctl 41009432 800003c0 returned -22
[  532.611468][T14048] FAULT_INJECTION: forcing a failure.
[  532.611468][T14048] name failslab, interval 1, probability 0, space 0, times 0
[  532.616205][T14048] CPU: 2 UID: 0 PID: 14048 Comm: syz.0.2216 Not tainted syzkaller #0 PREEMPT(full) 
[  532.616220][T14048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  532.616226][T14048] Call Trace:
[  532.616231][T14048]  <TASK>
[  532.616236][T14048]  dump_stack_lvl+0x16c/0x1f0
[  532.616269][T14048]  should_fail_ex+0x512/0x640
[  532.616287][T14048]  ? fs_reclaim_acquire+0xae/0x150
[  532.616303][T14048]  should_failslab+0xc2/0x120
[  532.616317][T14048]  __kmalloc_noprof+0xdd/0x880
[  532.616334][T14048]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  532.616349][T14048]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  532.616360][T14048]  tomoyo_realpath_from_path+0xc2/0x6e0
[  532.616374][T14048]  ? tomoyo_profile+0x47/0x60
[  532.616388][T14048]  tomoyo_path_number_perm+0x245/0x580
[  532.616405][T14048]  ? tomoyo_path_number_perm+0x237/0x580
[  532.616422][T14048]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  532.616453][T14048]  ? find_held_lock+0x2b/0x80
[  532.616464][T14048]  ? hook_file_ioctl_common+0x145/0x410
[  532.616478][T14048]  ? __fget_files+0x20e/0x3c0
[  532.616491][T14048]  security_file_ioctl_compat+0x9b/0x240
[  532.616503][T14048]  __ia32_compat_sys_ioctl+0xc3/0x370
[  532.616520][T14048]  __do_fast_syscall_32+0x7c/0x300
[  532.616534][T14048]  do_fast_syscall_32+0x32/0x80
[  532.616547][T14048]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  532.616561][T14048] RIP: 0023:0xf7f93579
[  532.616569][T14048] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  532.616583][T14048] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  532.616593][T14048] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000004008ae89
[  532.616599][T14048] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  532.616605][T14048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  532.616622][T14048] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  532.616628][T14048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  532.616642][T14048]  </TASK>
[  532.616749][T14048] ERROR: Out of memory at tomoyo_realpath_from_path.
[  532.917676][T14054] netlink: 'syz.0.2218': attribute type 1 has an invalid length.
[  533.568946][T14059] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2219'.
[  534.097423][T14071] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2224'.
[  534.564375][T14079] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.2227'.
[  534.647784][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  534.653629][ T5943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  534.657478][ T5943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  534.668165][ T5943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  534.671978][ T5943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  534.698802][   T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  534.704219][   T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  534.707695][   T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  534.712645][   T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  534.718994][   T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  534.937846][T14091] binder: 14090:14091 ioctl 0 80000040 returned -22
[  534.946101][T14088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2229'.
[  534.961916][T10031] vhci_hcd: connection reset by peer
[  534.982378][ T1243] vhci_hcd: stop threads
[  534.984111][ T1243] vhci_hcd: release socket
[  534.987767][T14081] lo speed is unknown, defaulting to 1000
[  534.987775][ T6023] usb 40-1: device descriptor read/8, error -110
[  534.987779][ T1243] vhci_hcd: disconnect device
[  534.990748][T14081] lo speed is unknown, defaulting to 1000
[  535.019658][T14088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2229'.
[  535.023930][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2232'.
[  535.026767][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2232'.
[  535.369162][ T6023] usb usb40-port1: attempt power cycle
[  535.438674][  T957] vhci_hcd: vhci_device speed not set
[  535.560570][T14106] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2234'.
[  535.783820][T14081] chnl_net:caif_netlink_parms(): no params data found
[  535.972692][T14081] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.975139][T14081] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.977326][T14081] bridge_slave_0: entered allmulticast mode
[  535.985580][T14081] bridge_slave_0: entered promiscuous mode
[  536.016746][T14081] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.019222][T14081] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.021517][T14081] bridge_slave_1: entered allmulticast mode
[  536.028732][T14081] bridge_slave_1: entered promiscuous mode
[  536.089588][T14081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.094082][T14081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.130098][T14081] team0: Port device team_slave_0 added
[  536.133400][T14081] team0: Port device team_slave_1 added
[  536.183137][T14081] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.185930][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.196187][T14081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.202031][T14081] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.204747][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.216052][T14081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.225542][T14126] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2237'.
[  536.344567][T14081] hsr_slave_0: entered promiscuous mode
[  536.347538][T14081] hsr_slave_1: entered promiscuous mode
[  536.351492][T14081] debugfs: 'hsr0' already exists in 'hsr'
[  536.353825][T14081] Cannot create hsr debugfs directory
[  536.565008][T14135] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  536.643932][T14081] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  536.747616][T14081] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  536.778660][   T64] Bluetooth: hci4: command tx timeout
[  536.865137][T14081] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  536.948298][T14081] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  536.966281][ T6023] usb usb40-port1: unable to enumerate USB device
[  537.473152][T14081] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  537.505663][T14081] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  537.534290][T14081] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  537.570929][T14081] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  538.024681][T14081] 8021q: adding VLAN 0 to HW filter on device bond0
[  538.036386][T14081] 8021q: adding VLAN 0 to HW filter on device team0
[  538.049910][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.053001][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.070005][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.072667][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.249259][T14152] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2245'.
[  538.548101][T14081] 8021q: adding VLAN 0 to HW filter on device batadv0
[  538.623452][T14081] veth0_vlan: entered promiscuous mode
[  538.628377][T14081] veth1_vlan: entered promiscuous mode
[  538.640627][T14081] veth0_macvtap: entered promiscuous mode
[  538.644414][T14081] veth1_macvtap: entered promiscuous mode
[  538.654003][T14081] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.672737][T14081] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.690025][  T220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.702070][  T220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.718403][  T220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.729514][  T220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.807078][  T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.810764][  T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.835227][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.837991][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.868950][   T64] Bluetooth: hci4: command tx timeout
[  539.519240][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2251'.
[  539.678436][T14179] bridge15: entered promiscuous mode
[  539.680990][   T40] audit: type=1800 audit(1762079588.309:702): pid=14179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2252" name="bus" dev="overlay" ino=2847 res=0 errno=0
[  540.551271][T14181] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  540.553896][T14181] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  540.557514][T14181] vhci_hcd vhci_hcd.0: Device attached
[  540.707359][T14184] vhci_hcd: connection closed
[  540.708242][   T61] vhci_hcd: stop threads
[  540.711914][   T61] vhci_hcd: release socket
[  540.713675][   T61] vhci_hcd: disconnect device
[  540.948697][   T64] Bluetooth: hci4: command tx timeout
[  541.007542][T14191] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2254'.
[  541.234126][T14195] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2255'.
[  541.957316][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2257'.
[  543.051647][   T64] Bluetooth: hci4: command tx timeout
[  543.112145][T14230] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2265'.
[  543.532086][T14235] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2267'.
[  543.535091][T14235] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2267'.
[  543.606927][T14236] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  543.943051][T14240] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2266'.
[  544.325022][T14254] usb usb7: usbfs: process 14254 (syz.1.2271) did not claim interface 0 before use
[  544.348382][T14253] overlay: ./file0 is not a directory
[  544.911913][T14258] lo speed is unknown, defaulting to 1000
[  544.914613][T14258] lo speed is unknown, defaulting to 1000
[  545.385446][T14279] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2279'.
[  545.880664][T14287] bond4: Unable to set up delay as MII monitoring is disabled
[  545.907193][T14287] bond4 (unregistering): Released all slaves
[  547.508651][T14311] ceph: No mds server is up or the cluster is laggy
[  547.554924][T11885] libceph: connect (1)[c::]:6789 error -101
[  547.560837][T11885] libceph: mon0 (1)[c::]:6789 connect error
[  547.666004][T14320] netlink: 'syz.1.2291': attribute type 1 has an invalid length.
[  547.679229][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'.
[  547.739320][T14320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2291'.
[  548.554494][T14339] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  548.556617][T14339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  548.559533][T14339] vhci_hcd vhci_hcd.0: Device attached
[  548.696506][T14340] vhci_hcd: connection closed
[  548.696889][ T1243] vhci_hcd: stop threads
[  548.701058][ T1243] vhci_hcd: release socket
[  548.703154][ T1243] vhci_hcd: disconnect device
[  548.759074][ T6452] vhci_hcd: vhci_device speed not set
[  549.308693][T14348] lo speed is unknown, defaulting to 1000
[  549.311445][T14348] lo speed is unknown, defaulting to 1000
[  549.846134][T14359] No control pipe specified
[  551.026182][T14393] netlink: 'syz.4.2314': attribute type 2 has an invalid length.
[  551.360486][T14405] fuseblk: Unknown parameter 'rootmo»--00000000Ù'
[  553.014890][T14412] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  553.194018][T14422] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.2321'.
[  554.163220][T14439] binder: 14438:14439 ioctl c0306201 80000080 returned -14
[  554.169208][T14439] binder: 14438:14439 ioctl c0306201 80000180 returned -14
[  554.265484][T14443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2328'.
[  554.630487][T14449] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2331'.
[  555.460907][T14471] binder: 14459:14471 ioctl 0 80000040 returned -22
[  555.470842][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2333'.
[  555.875336][T14478] /dev/nullb0: Can't open blockdev
[  556.396427][T14483] binder: BINDER_SET_CONTEXT_MGR already set
[  556.420406][T14483] binder: 14482:14483 ioctl 4018620d 800002c0 returned -16
[  556.766007][T14501] ceph: No mds server is up or the cluster is laggy
[  556.793380][T14504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  557.263331][ T6452] libceph: connect (1)[c::]:6789 error -101
[  557.265407][ T6452] libceph: mon0 (1)[c::]:6789 connect error
[  557.479689][T14506] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  557.482179][T14506] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  557.485385][T14506] vhci_hcd vhci_hcd.0: Device attached
[  557.508399][T14497] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  558.128950][ T6452] usb 46-1: SetAddress Request (27) to port 0
[  558.438630][ T6452] usb 46-1: new SuperSpeed USB device number 27 using vhci_hcd
[  558.519161][T14521] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2349'.
[  558.523355][T14521] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2349'.
[  558.613189][T14507] vhci_hcd: connection reset by peer
[  558.621805][  T220] vhci_hcd: stop threads
[  558.623740][  T220] vhci_hcd: release socket
[  558.638892][  T220] vhci_hcd: disconnect device
[  559.066449][T14535] tipc: Failed to obtain node identity
[  559.068304][T14535] tipc: Enabling of bearer <ib:gre0> rejected, failed to enable media
[  559.759425][T14543] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2354'.
[  559.809419][T14547] virtio-fs: tag <c:::> not found
[  559.812445][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'.
[  559.820810][T14547] IPv6: sit1: Disabled Multicast RS
[  560.967098][T14558] netlink: 'syz.0.2360': attribute type 1 has an invalid length.
[  560.993136][T14558] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  560.996867][T14558] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  561.043232][T14566] macvlan3: entered promiscuous mode
[  561.045056][T14566] macvlan3: entered allmulticast mode
[  561.047118][T14566] bond4: entered promiscuous mode
[  561.050320][T14566] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  561.057824][T14566] bond4: left promiscuous mode
[  561.113145][T14576] netlink: 'syz.4.2365': attribute type 1 has an invalid length.
[  561.146815][T14580] 8021q: VLANs not supported on gre0
[  561.237810][T14586] netlink: 'syz.4.2368': attribute type 23 has an invalid length.
[  561.375012][T14587] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.2367'.
[  561.890292][T14602] virtio-fs: tag <c:::> not found
[  561.895778][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2372'.
[  561.912019][T14602] IPv6: sit1: Disabled Multicast RS
[  562.132826][T14604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2373'.
[  562.394800][T14614] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  562.553289][T14619] nvme_fabrics: missing parameter 'transport=%s'
[  562.555644][T14619] nvme_fabrics: missing parameter 'nqn=%s'
[  562.611944][   T34] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  562.850059][   T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  562.854976][   T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  562.858488][   T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  562.867721][   T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  562.873301][   T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.925347][   T34] usb 9-1: config 0 descriptor??
[  563.460598][   T34] hid_parser_main: 28 callbacks suppressed
[  563.460610][   T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  563.466811][   T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  563.471568][   T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  563.481469][   T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  563.481530][T14629] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26
[  563.483921][   T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  563.492068][   T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  563.494275][   T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  563.496723][   T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  563.500382][   T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  563.502902][   T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  563.508733][ T6452] usb 46-1: device descriptor read/8, error -110
[  563.522773][   T34] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  563.846013][T14645] input: syz1 as /devices/virtual/input/input27
[  563.927706][ T6452] usb usb46-port1: attempt power cycle
[  564.798622][   T34] usb 9-1: reset high-speed USB device number 11 using dummy_hcd
[  565.393933][T14650] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2387'.
[  565.797310][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2395'.
[  565.979338][ T6452] usb usb46-port1: unable to enumerate USB device
[  566.080936][T14685] FAULT_INJECTION: forcing a failure.
[  566.080936][T14685] name failslab, interval 1, probability 0, space 0, times 0
[  566.086296][T14685] CPU: 3 UID: 0 PID: 14685 Comm: syz.1.2400 Not tainted syzkaller #0 PREEMPT(full) 
[  566.086319][T14685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  566.086329][T14685] Call Trace:
[  566.086335][T14685]  <TASK>
[  566.086342][T14685]  dump_stack_lvl+0x16c/0x1f0
[  566.086367][T14685]  should_fail_ex+0x512/0x640
[  566.086392][T14685]  ? fs_reclaim_acquire+0xae/0x150
[  566.086418][T14685]  should_failslab+0xc2/0x120
[  566.086440][T14685]  __kmalloc_noprof+0xdd/0x880
[  566.086468][T14685]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  566.086494][T14685]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  566.086512][T14685]  tomoyo_realpath_from_path+0xc2/0x6e0
[  566.086535][T14685]  ? tomoyo_profile+0x47/0x60
[  566.086560][T14685]  tomoyo_path_number_perm+0x245/0x580
[  566.086585][T14685]  ? tomoyo_path_number_perm+0x237/0x580
[  566.086614][T14685]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  566.086675][T14685]  ? find_held_lock+0x2b/0x80
[  566.086692][T14685]  ? hook_file_ioctl_common+0x145/0x410
[  566.086717][T14685]  ? __fget_files+0x20e/0x3c0
[  566.086740][T14685]  security_file_ioctl_compat+0x9b/0x240
[  566.086767][T14685]  __ia32_compat_sys_ioctl+0xc3/0x370
[  566.086796][T14685]  __do_fast_syscall_32+0x7c/0x300
[  566.086819][T14685]  do_fast_syscall_32+0x32/0x80
[  566.086839][T14685]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  566.086859][T14685] RIP: 0023:0xf700d579
[  566.086873][T14685] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  566.086888][T14685] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  566.086903][T14685] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040086203
[  566.086913][T14685] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000
[  566.086923][T14685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  566.086932][T14685] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  566.086942][T14685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  566.086966][T14685]  </TASK>
[  566.086974][T14685] ERROR: Out of memory at tomoyo_realpath_from_path.
[  566.162987][  T842] usb 9-1: USB disconnect, device number 11
[  567.069916][T14708] program syz.0.2407 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  567.502948][T14720] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard
[  567.507282][T14720] exFAT-fs (nbd1): unable to read boot sector
[  567.509518][T14720] exFAT-fs (nbd1): failed to read boot sector
[  567.511592][T14720] exFAT-fs (nbd1): failed to recognize exfat type
[  567.661855][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  567.663916][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[  569.014311][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2417'.
[  569.334506][T14759] 9pnet_fd: Insufficient options for proto=fd
[  569.730055][T14766] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  570.315511][T14773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2429'.
[  570.853382][  T842] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  571.308413][T14781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  571.315450][T14780] syzkaller0: MTU too low for tipc bearer
[  571.317883][T14780] tipc: Disabling bearer <eth:syzkaller0>
[  571.328640][  T842] usb 9-1: Using ep0 maxpacket: 8
[  571.332804][  T842] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  571.337078][  T842] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  571.340489][  T842] usb 9-1: config 0 interface 0 has no altsetting 0
[  571.343202][  T842] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  571.346721][  T842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.351336][  T842] usb 9-1: config 0 descriptor??
[  571.455955][T14787] overlayfs: failed to resolve './bus': -2
[  571.488109][T14790] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0)
[  571.494416][T14790] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.562068][T14790] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.573639][T14769] : entered promiscuous mode
[  571.579827][T14792] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2435'.
[  571.606779][T14790] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.682907][T14790] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.805396][   T76] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  571.812944][   T76] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  571.820238][   T76] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  571.828050][   T76] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  571.980607][  T842] usbhid 9-1:0.0: can't add hid device: -71
[  571.984848][  T842] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  571.992068][  T842] usb 9-1: USB disconnect, device number 12
[  572.060979][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  572.067234][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  572.070628][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  572.074387][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  572.077709][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  572.078061][T14811] rtc_cmos 00:05: Alarms can be up to one day in the future
[  572.206510][T14808] lo speed is unknown, defaulting to 1000
[  572.209253][T14808] lo speed is unknown, defaulting to 1000
[  572.337841][T14808] chnl_net:caif_netlink_parms(): no params data found
[  572.455248][T14808] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.458330][T14808] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.461754][T14808] bridge_slave_0: entered allmulticast mode
[  572.465283][T14808] bridge_slave_0: entered promiscuous mode
[  572.468603][T14808] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.470791][T14808] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.473260][T14808] bridge_slave_1: entered allmulticast mode
[  572.475786][T14808] bridge_slave_1: entered promiscuous mode
[  572.527503][T14808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  572.533659][T14808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  572.581204][T14823] geneve2: entered allmulticast mode
[  572.605593][T14827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2444'.
[  572.610947][T14827] openvswitch: netlink: Flow key attr not present in new flow.
[  572.615581][T14808] team0: Port device team_slave_0 added
[  572.642310][T14808] team0: Port device team_slave_1 added
[  573.007072][T14808] batman_adv: batadv0: Adding interface: batadv_slave_0
[  573.009413][T14808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  573.017143][T14808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  573.021836][T14808] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.024003][T14808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  573.031890][T14808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.068344][T14808] hsr_slave_0: entered promiscuous mode
[  573.070605][T14808] hsr_slave_1: entered promiscuous mode
[  573.072653][T14808] debugfs: 'hsr0' already exists in 'hsr'
[  573.074423][T14808] Cannot create hsr debugfs directory
[  573.162200][T14808] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.241019][T14832] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  573.300108][T14808] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.589583][T14808] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.634138][T14808] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.763336][T14827] loop6: detected capacity change from 0 to 524287999
[  573.768396][T13715] Buffer I/O error on dev loop6, logical block 0, async page read
[  573.770930][T13715] Buffer I/O error on dev loop6, logical block 0, async page read
[  573.773356][T13715] Buffer I/O error on dev loop6, logical block 0, async page read
[  573.775713][T13715] Buffer I/O error on dev loop6, logical block 0, async page read
[  573.778099][T13715] Buffer I/O error on dev loop6, logical block 0, async page read
[  573.780846][T13715] Buffer I/O error on dev loop6, logical block 0, async page read
[  573.783438][T13715] Buffer I/O error on dev loop6, logical block 0, async page read
[  573.786124][T13715] Buffer I/O error on dev loop6, logical block 0, async page read
[  573.788854][T13715] ldm_validate_partition_table(): Disk read failed.
[  573.791060][T13715] Buffer I/O error on dev loop6, logical block 0, async page read
[  573.794207][T13715] Buffer I/O error on dev loop6, logical block 0, async page read
[  573.796853][T13715] Dev loop6: unable to read RDB block 0
[  573.799350][T13715]  loop6: unable to read partition table
[  573.809758][T14827] ldm_validate_partition_table(): Disk read failed.
[  573.812469][T14827] Dev loop6: unable to read RDB block 0
[  573.814810][T14827]  loop6: unable to read partition table
[  573.820396][T14827] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  573.859802][T14827] ldm_validate_partition_table(): Disk read failed.
[  573.862552][T14827] Dev loop6: unable to read RDB block 0
[  573.864537][T14827]  loop6: unable to read partition table
[  573.866395][T14827] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  574.140157][ T5943] Bluetooth: hci1: command tx timeout
[  574.163204][T14843] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2448'.
[  574.848177][T14854] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2453'.
[  574.910144][T14856] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  575.148314][T14862] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.213136][T14862] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.253632][T14862] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.343856][T14862] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.453063][ T1142] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  575.465782][ T1142] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  575.476632][ T1142] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  575.495915][   T46] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  575.549636][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2459'.
[  575.826115][T14879] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2463'.
[  576.009549][T14884] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  576.218823][ T5943] Bluetooth: hci1: command tx timeout
[  577.462915][T14808] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  577.467482][T14808] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  577.482134][T14808] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  577.488462][T14808] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  577.544653][T14808] 8021q: adding VLAN 0 to HW filter on device bond0
[  577.555618][T14808] 8021q: adding VLAN 0 to HW filter on device team0
[  577.563470][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.565859][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  577.573773][  T220] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.576793][  T220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  577.606040][   T61] bridge_slave_1: left allmulticast mode
[  577.608193][   T61] bridge_slave_1: left promiscuous mode
[  577.610854][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.616687][   T61] bridge_slave_0: left allmulticast mode
[  577.619565][   T61] bridge_slave_0: left promiscuous mode
[  577.622348][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.903945][   T61] bond1 (unregistering): (slave gretap1): Releasing active interface
[  577.916695][   T61] bond5 (unregistering): (slave gretap2): Releasing active interface
[  578.298850][ T5943] Bluetooth: hci1: command tx timeout
[  578.523975][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  578.533169][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  578.542706][   T61] bond0 (unregistering): Released all slaves
[  578.557141][   T61] bond1 (unregistering): Released all slaves
[  578.583855][   T61] bond2 (unregistering): Released all slaves
[  578.596782][   T61] bond3 (unregistering): Released all slaves
[  578.611438][   T61] bond4 (unregistering): Released all slaves
[  578.626773][   T61] bond5 (unregistering): Released all slaves
[  578.647259][   T61] bond6 (unregistering): Released all slaves
[  578.714223][T14936] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  578.752517][   T61] tipc: Left network mode
[  578.978399][T14808] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.095727][T14808] veth0_vlan: entered promiscuous mode
[  579.230596][T14808] veth1_vlan: entered promiscuous mode
[  579.377060][T14959] netlink: 'syz.1.2486': attribute type 23 has an invalid length.
[  579.680077][   T61] hsr_slave_0: left promiscuous mode
[  579.688967][   T61] hsr_slave_1: left promiscuous mode
[  579.696268][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  579.703924][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  579.713511][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  579.795974][   T61] veth1_macvtap: left promiscuous mode
[  579.799223][   T61] veth0_macvtap: left promiscuous mode
[  579.802169][   T61] veth1_vlan: left promiscuous mode
[  579.804747][   T61] veth0_vlan: left promiscuous mode
[  579.967017][   T61] pim6reg (unregistering): left allmulticast mode
[  580.378715][ T5943] Bluetooth: hci1: command tx timeout
[  581.400598][T14808] veth0_macvtap: entered promiscuous mode
[  581.405710][ T5985] lo speed is unknown, defaulting to 1000
[  581.407595][T14808] veth1_macvtap: entered promiscuous mode
[  581.408177][ T5985] syz0: Port: 1 Link DOWN
[  581.427759][T14808] batman_adv: batadv0: Interface activated: batadv_slave_0
[  581.439690][T14808] batman_adv: batadv0: Interface activated: batadv_slave_1
[  581.450602][   T76] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.454685][   T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.458300][   T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.469406][   T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  581.545405][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.547855][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.578940][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.582223][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.785595][T14988] 9pnet_fd: Insufficient options for proto=fd
[  582.789341][   T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  582.794696][   T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  582.798358][   T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  582.808057][   T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  582.816326][   T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  582.830202][T14999] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  583.011253][T15001] lo speed is unknown, defaulting to 1000
[  583.105298][T15001] chnl_net:caif_netlink_parms(): no params data found
[  583.220457][T15001] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.222741][T15001] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.224976][T15001] bridge_slave_0: entered allmulticast mode
[  583.227846][T15001] bridge_slave_0: entered promiscuous mode
[  583.231694][T15001] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.234177][T15001] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.237690][T15001] bridge_slave_1: entered allmulticast mode
[  583.246039][T15001] bridge_slave_1: entered promiscuous mode
[  583.346670][T15001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  583.352372][T15001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.419180][T15001] team0: Port device team_slave_0 added
[  583.424498][T15001] team0: Port device team_slave_1 added
[  583.462203][T15001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  583.466275][T15001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.480687][T15001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  583.485819][T15001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  583.488213][T15001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.496855][T15001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  583.538246][T15001] hsr_slave_0: entered promiscuous mode
[  583.540647][T15001] hsr_slave_1: entered promiscuous mode
[  583.542828][T15001] debugfs: 'hsr0' already exists in 'hsr'
[  583.544706][T15001] Cannot create hsr debugfs directory
[  583.682807][T15001] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.760137][T15001] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.838719][T15001] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.911601][T15001] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.050988][T15001] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  584.058140][T15001] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  584.064865][T15001] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  584.077162][T15001] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  584.102618][T15001] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.104926][T15001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  584.107195][T15001] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.109462][T15001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  584.137671][T15001] 8021q: adding VLAN 0 to HW filter on device bond0
[  584.147365][  T220] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.151428][  T220] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.166826][T15001] 8021q: adding VLAN 0 to HW filter on device team0
[  584.171984][  T220] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.174252][  T220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  584.180079][  T220] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.182403][  T220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  584.187832][T15041] fuseblk: Unknown parameter 'rootmo»--00000000Ù'
[  584.307034][T15001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  584.488359][T15001] veth0_vlan: entered promiscuous mode
[  584.499156][T15001] veth1_vlan: entered promiscuous mode
[  584.518970][T15001] veth0_macvtap: entered promiscuous mode
[  584.522992][T15001] veth1_macvtap: entered promiscuous mode
[  584.533006][T15001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  584.539428][T15001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  584.550187][   T76] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  584.553074][   T76] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  584.556834][   T76] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  584.561596][   T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  584.606877][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.610780][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.623581][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.626068][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.877028][ T5943] Bluetooth: hci3: command tx timeout
[  584.981059][T15056] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2497'.
[  585.631236][T15067] overlayfs: missing 'lowerdir'
[  585.985828][T15076] netlink: 'syz.0.2510': attribute type 1 has an invalid length.
[  586.673631][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'.
[  586.764628][T15084] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2510'.
[  586.939340][ T5943] Bluetooth: hci3: command tx timeout
[  586.962681][T15092] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2514'.
[  587.551067][T15102] rtc_cmos 00:05: Alarms can be up to one day in the future
[  588.173371][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2517'.
[  588.775500][T15114] overlayfs: missing 'lowerdir'
[  589.067392][ T5943] Bluetooth: hci3: command tx timeout
[  589.195995][T15123] fuseblk: Unknown parameter 'rootmo»--00000000Ù'
[  591.180638][T15142] usb usb7: usbfs: process 15142 (syz.4.2524) did not claim interface 0 before use
[  591.338656][ T5943] Bluetooth: hci3: command tx timeout
[  592.271152][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  592.276066][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  592.280217][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  592.284546][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  592.287428][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  592.499045][T15159] lo speed is unknown, defaulting to 1000
[  592.650330][   T46] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.700788][T15159] chnl_net:caif_netlink_parms(): no params data found
[  592.736990][T15165] overlayfs: missing 'lowerdir'
[  592.813703][   T46] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.031565][   T46] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.320812][   T46] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.328250][T15159] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.332385][T15159] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.335175][T15159] bridge_slave_0: entered allmulticast mode
[  593.339294][T15159] bridge_slave_0: entered promiscuous mode
[  593.345185][T15159] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.348042][T15159] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.353124][T15159] bridge_slave_1: entered allmulticast mode
[  593.357027][T15159] bridge_slave_1: entered promiscuous mode
[  593.399044][T15159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  593.403733][T15159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  593.445501][T15159] team0: Port device team_slave_0 added
[  593.463750][T15159] team0: Port device team_slave_1 added
[  593.760622][T15159] batman_adv: batadv0: Adding interface: batadv_slave_0
[  593.762888][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  593.770696][T15159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  593.774922][T15159] batman_adv: batadv0: Adding interface: batadv_slave_1
[  593.777016][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  593.785111][T15159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  593.891093][T15182] netlink: 'syz.4.2536': attribute type 1 has an invalid length.
[  593.945868][T15159] hsr_slave_0: entered promiscuous mode
[  593.948109][T15159] hsr_slave_1: entered promiscuous mode
[  593.951392][T15159] debugfs: 'hsr0' already exists in 'hsr'
[  593.953226][T15159] Cannot create hsr debugfs directory
[  594.031693][   T46] bridge_slave_1: left allmulticast mode
[  594.033640][   T46] bridge_slave_1: left promiscuous mode
[  594.035441][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.041881][   T46] bridge_slave_0: left allmulticast mode
[  594.045135][   T46] bridge_slave_0: left promiscuous mode
[  594.046956][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.103240][T15189] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2537'.
[  594.312299][   T46] bond2 (unregistering): (slave gretap2): Releasing active interface
[  594.381208][   T64] Bluetooth: hci0: command tx timeout
[  594.932333][T15197] binder: 15196:15197 ioctl 41009432 800003c0 returned -22
[  595.400365][T15204] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2540'.
[  595.428665][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  595.434483][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  595.439513][   T46] bond0 (unregistering): Released all slaves
[  595.451030][   T46] bond1 (unregistering): Released all slaves
[  595.457557][   T46] bond2 (unregistering): Released all slaves
[  595.550738][   T46] bond3 (unregistering): Released all slaves
[  595.561501][   T46] bond4 (unregistering): Released all slaves
[  595.574057][   T46] bond5 (unregistering): Released all slaves
[  595.589438][T15182] gretap1: entered promiscuous mode
[  595.617451][T15183] macvlan2: entered promiscuous mode
[  595.619284][T15183] macvlan2: entered allmulticast mode
[  595.695801][T15207] overlayfs: missing 'lowerdir'
[  595.773115][   T46] tipc: Left network mode
[  596.461881][   T64] Bluetooth: hci0: command tx timeout
[  596.995891][T15243] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  597.251483][T15243] /dev/sr0: Can't open blockdev
[  597.722007][T15159] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  597.813879][T15159] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  597.843922][T15159] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  597.975833][   T46] hsr_slave_0: left promiscuous mode
[  597.980832][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  597.983733][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  597.999029][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  598.002033][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  598.044776][   T46] veth1_vlan: left allmulticast mode
[  598.046515][   T46] veth1_macvtap: left promiscuous mode
[  598.053030][   T46] veth0_macvtap: left promiscuous mode
[  598.059181][   T46] veth1_vlan: left promiscuous mode
[  598.099306][T15266] overlayfs: missing 'lowerdir'
[  598.183009][T15272] overlayfs: missing 'lowerdir'
[  598.340882][T15279] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2563'.
[  598.548980][   T64] Bluetooth: hci0: command tx timeout
[  599.507608][T15159] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  599.828269][T15159] 8021q: adding VLAN 0 to HW filter on device bond0
[  599.945445][T15159] 8021q: adding VLAN 0 to HW filter on device team0
[  599.986696][  T220] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.989886][  T220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  600.020519][  T220] bridge0: port 2(bridge_slave_1) entered blocking state
[  600.023701][  T220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  600.567638][T15159] 8021q: adding VLAN 0 to HW filter on device batadv0
[  600.590490][T15159] veth0_vlan: entered promiscuous mode
[  600.595455][T15159] veth1_vlan: entered promiscuous mode
[  600.610332][T15159] veth0_macvtap: entered promiscuous mode
[  600.614179][T15159] veth1_macvtap: entered promiscuous mode
[  600.624049][T15159] batman_adv: batadv0: Interface activated: batadv_slave_0
[  600.630741][   T64] Bluetooth: hci0: command tx timeout
[  600.635245][T15159] batman_adv: batadv0: Interface activated: batadv_slave_1
[  600.642219][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  600.646060][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  600.650381][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  600.654161][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  600.745778][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.749500][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.769946][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.772498][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.897815][T15318] ip6erspan0: entered promiscuous mode
[  600.909110][T15311] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  602.075382][T15329] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  602.184413][T15311] /dev/sr0: Can't open blockdev
[  602.284512][T15332] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  602.289490][T15332] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  602.406026][T15338] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2566'.
[  602.516091][T15340] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  605.002932][T15364] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  605.005751][T15364] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  605.048774][T15365] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  606.467603][T15392] netlink: 'syz.1.2586': attribute type 10 has an invalid length.
[  606.531309][T15389] bridge_slave_0: left allmulticast mode
[  606.546738][T15389] bridge_slave_0: left promiscuous mode
[  606.562844][T15389] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.926123][T15389] bridge_slave_1: left allmulticast mode
[  606.928675][T15389] bridge_slave_1: left promiscuous mode
[  606.931165][T15389] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.954074][T15389] bond0: (slave bond_slave_0): Releasing backup interface
[  606.964481][T15389] bond0: (slave bond_slave_1): Releasing backup interface
[  606.977610][T15389] team0: Port device team_slave_0 removed
[  606.988044][T15389] team0: Port device team_slave_1 removed
[  606.991899][T15389] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  606.995089][T15389] batman_adv: batadv0: Removing interface: batadv_slave_0
[  607.000255][T15389] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  607.002855][T15395] overlayfs: missing 'lowerdir'
[  607.003379][T15389] batman_adv: batadv0: Removing interface: batadv_slave_1
[  607.011441][T15389] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  608.271783][T15415] netlink: 'syz.0.2594': attribute type 5 has an invalid length.
[  608.291547][T15415] bridge_slave_0: left allmulticast mode
[  608.294060][T15415] bridge_slave_0: left promiscuous mode
[  608.296627][T15415] bridge0: port 1(bridge_slave_0) entered disabled state
[  608.309561][T15415] bridge_slave_1: left allmulticast mode
[  608.312022][T15415] bridge_slave_1: left promiscuous mode
[  608.314611][T15415] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.332044][T15415] bond0: (slave bond_slave_0): Releasing backup interface
[  608.345774][T15415] bond0: (slave bond_slave_1): Releasing backup interface
[  608.390713][T15415] team0: Port device team_slave_0 removed
[  608.399966][T15415] team0: Port device team_slave_1 removed
[  608.403077][T15415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  608.406296][T15415] batman_adv: batadv0: Removing interface: batadv_slave_0
[  608.410858][T15415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  608.413644][T15415] batman_adv: batadv0: Removing interface: batadv_slave_1
[  608.417217][T15415] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  608.462457][T15424] overlayfs: missing 'lowerdir'
[  608.567837][T15428] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  608.745128][T15420] tipc: Started in network mode
[  608.750492][T15420] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  608.754340][T15420] tipc: Enabled bearer <eth:team0>, priority 0
[  609.741350][T15443] tipc: Started in network mode
[  609.743719][T15443] tipc: Node identity ac1414aa, cluster identity 4711
[  609.764677][T15443] tipc: Enabled bearer <udp:s>, priority 10
[  609.884563][T15437] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  610.105072][ T5985] tipc: Node number set to 11578026
[  610.758647][  T957] tipc: Node number set to 2886997162
[  611.117984][T15457] binder_alloc: 15456: binder_alloc_buf, no vma
[  611.126357][T15457] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  611.317188][T15463] lo speed is unknown, defaulting to 1000
[  611.319849][T15463] lo speed is unknown, defaulting to 1000
[  611.324060][T15463] lo speed is unknown, defaulting to 1000
[  611.359898][T15463] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  611.405683][T15463] lo speed is unknown, defaulting to 1000
[  611.410647][T15463] lo speed is unknown, defaulting to 1000
[  611.477087][T15463] lo speed is unknown, defaulting to 1000
[  611.483409][T15463] lo speed is unknown, defaulting to 1000
[  611.488003][T15463] lo speed is unknown, defaulting to 1000
[  611.494278][T15463] lo speed is unknown, defaulting to 1000
[  611.791530][T15467] /dev/sr0: Can't open blockdev
[  612.181697][T15484] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  613.178280][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'.
[  613.186899][T15495] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2618'.
[  613.190924][T15495] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2618'.
[  613.318464][T15505] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  613.650542][T15509] overlayfs: missing 'workdir'
[  615.632158][T15544] overlayfs: missing 'workdir'
[  615.783957][T15550] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  618.633946][   T13] af_packet: tpacket_rcv: packet too big, clamped from 4356 to 3952. macoff=96
[  619.443679][T15605] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  619.446295][T15605] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  619.449749][T15605] vhci_hcd vhci_hcd.0: Device attached
[  619.768702][T15606] vhci_hcd: connection closed
[  619.769185][   T46] vhci_hcd: stop threads
[  619.776362][   T46] vhci_hcd: release socket
[  619.786684][   T46] vhci_hcd: disconnect device
[  620.144348][T15619] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  621.971751][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2667'.
[  621.987965][T15662] macvlan2: entered allmulticast mode
[  621.989815][T15662] veth1_vlan: entered allmulticast mode
[  622.435438][T15654] infiniband syz1: set active
[  622.437744][T15654] infiniband syz1: added syz_tun
[  622.481373][T15654] RDS/IB: syz1: added
[  622.484532][T15654] smc: adding ib device syz1 with port count 1
[  622.486559][T15654] smc:    ib device syz1 port 1 has no pnetid
[  622.869214][T15690] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  624.053894][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2674'.
[  626.279856][T15721] binder: 15720:15721 ioctl 0 80000040 returned -22
[  626.322961][T15724] veth1_to_bond: entered allmulticast mode
[  626.325557][T15723] veth1_to_bond: left allmulticast mode
[  626.334574][T15726] netlink: 'syz.4.2684': attribute type 1 has an invalid length.
[  626.343470][T15726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'.
[  626.621568][ T6452] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  626.792703][ T6452] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  626.796486][ T6452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.800679][ T6452] usb 5-1: Product: syz
[  626.802504][ T6452] usb 5-1: Manufacturer: syz
[  626.804464][ T6452] usb 5-1: SerialNumber: syz
[  626.820134][ T6452] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  626.911268][T15743] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  627.162467][  T957] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  628.408778][  T957] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  628.413040][  T957] ath9k_htc: Failed to initialize the device
[  628.443800][  T957] usb 5-1: ath9k_htc: USB layer deinitialized
[  628.636924][T15753] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2693'.
[  628.667996][   T34] usb 5-1: USB disconnect, device number 15
[  628.755975][T15756] binder: 15755:15756 ioctl 0 80000040 returned -22
[  629.101002][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2696'.
[  629.104937][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  629.106975][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[  630.538931][T15793] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  630.809096][T15801] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  630.811266][T15801] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  630.830145][T15801] vhci_hcd vhci_hcd.0: Device attached
[  630.995886][T15805] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  630.998019][T15805] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  631.002923][T15805] vhci_hcd vhci_hcd.0: Device attached
[  631.099131][ T6023] usb 38-1: SetAddress Request (34) to port 0
[  631.101923][ T6023] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd
[  631.248821][  T957] usb 39-1: new low-speed USB device number 9 using vhci_hcd
[  631.417279][T15802] vhci_hcd: connection reset by peer
[  631.422280][   T46] vhci_hcd: stop threads
[  631.423744][   T46] vhci_hcd: release socket
[  631.425339][   T46] vhci_hcd: disconnect device
[  631.527996][T15806] vhci_hcd: connection reset by peer
[  631.531642][   T13] vhci_hcd: stop threads
[  631.536167][   T13] vhci_hcd: release socket
[  631.539502][   T13] vhci_hcd: disconnect device
[  632.834883][T15847] binder: 15842:15847 ioctl 0 80000040 returned -22
[  632.841275][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2722'.
[  633.713827][T15864] binder: 15863:15864 ioctl c0306201 80000080 returned -14
[  633.720038][T15864] binder: 15863:15864 ioctl c0306201 80000180 returned -14
[  633.892150][T15870] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  635.808674][T13744] usb 7-1: new low-speed USB device number 14 using dummy_hcd
[  635.954081][T15902] netlink: 'syz.1.2738': attribute type 2 has an invalid length.
[  635.974343][T13744] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  635.977862][T13744] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  635.984261][T13744] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  635.989330][T13744] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  635.992966][T13744] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  635.999801][T13744] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  636.002389][T13744] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  636.005785][T13744] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  636.013623][T13744] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  636.017825][T13744] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  636.024825][T13744] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  636.030331][T13744] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  636.034047][T13744] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  636.037855][T13744] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  636.042413][T13744] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  636.056588][T13744] usb 7-1: string descriptor 0 read error: -22
[  636.058930][T13744] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  636.062054][T13744] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.092492][T13744] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  636.138671][ T6023] usb 38-1: device descriptor read/8, error -110
[  636.328258][T15899] netlink: 'syz.2.2737': attribute type 1 has an invalid length.
[  636.339230][   T55] usb 7-1: USB disconnect, device number 14
[  636.379630][  T957] vhci_hcd: vhci_device speed not set
[  636.529152][ T6023] usb usb38-port1: attempt power cycle
[  636.558727][T15917] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  637.089937][ T6023] usb usb38-port1: unable to enumerate USB device
[  639.168862][T15938] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  639.170940][T15938] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  639.188975][T15938] vhci_hcd vhci_hcd.0: Device attached
[  639.468674][  T957] usb 42-1: SetAddress Request (27) to port 0
[  639.470705][  T957] usb 42-1: new SuperSpeed USB device number 27 using vhci_hcd
[  639.748444][T15946] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  639.882913][T15939] vhci_hcd: connection reset by peer
[  639.884862][   T12] vhci_hcd: stop threads
[  639.886265][   T12] vhci_hcd: release socket
[  639.887762][   T12] vhci_hcd: disconnect device
[  641.435391][T15963] overlayfs: missing 'lowerdir'
[  641.686047][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2755'.
[  641.700019][T15961] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2755'.
[  641.790395][T15973] netlink: 'syz.1.2759': attribute type 1 has an invalid length.
[  641.822355][T15973] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  641.827269][T15973] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  641.860186][   T40] audit: type=1326 audit(1762079690.549:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15970 comm="syz.2.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000
[  641.867072][   T40] audit: type=1326 audit(1762079690.549:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15970 comm="syz.2.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000
[  641.874647][   T40] audit: type=1326 audit(1762079690.569:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15970 comm="syz.2.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf70dd579 code=0x7ffc0000
[  641.884317][   T40] audit: type=1326 audit(1762079690.569:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15970 comm="syz.2.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000
[  641.893786][   T40] audit: type=1326 audit(1762079690.569:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15970 comm="syz.2.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000
[  641.904557][   T40] audit: type=1326 audit(1762079690.569:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15970 comm="syz.2.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf70dd579 code=0x7ffc0000
[  641.913178][   T40] audit: type=1326 audit(1762079690.569:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15970 comm="syz.2.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000
[  641.921309][T15973] bond1: (slave gretap1): making interface the new active one
[  641.922791][   T40] audit: type=1326 audit(1762079690.569:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15970 comm="syz.2.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000
[  641.926194][T15973] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  641.932343][   T40] audit: type=1326 audit(1762079690.569:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15970 comm="syz.2.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd579 code=0x7ffc0000
[  641.932368][   T40] audit: type=1326 audit(1762079690.569:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15970 comm="syz.2.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000
[  642.468661][T15053] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  642.643517][T15053] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  642.659112][T15053] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  642.662479][T15053] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  642.666355][T15053] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  642.688706][T15053] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  642.694680][T15053] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  642.708653][T15053] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  642.711925][T15053] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  642.715554][T15053] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  642.728706][T15053] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  642.758666][T15053] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  642.761033][T15053] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  642.764339][T15053] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  642.767902][T15053] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  642.778668][T15053] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  642.787128][T15053] usb 6-1: string descriptor 0 read error: -22
[  642.789440][T15053] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  642.792328][T15053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.800942][T15053] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  642.822675][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'.
[  642.889464][T16000] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  642.892316][T16000] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  642.896659][T16000] vhci_hcd vhci_hcd.0: Device attached
[  642.928864][T16003] virtio-fs: tag <c:::> not found
[  642.938374][T16003] IPv6: sit1: Disabled Multicast RS
[  643.031220][T15985] netlink: 'syz.1.2762': attribute type 1 has an invalid length.
[  643.040183][T15053] usb 6-1: USB disconnect, device number 7
[  643.309430][T16001] vhci_hcd: connection closed
[  643.310724][   T61] vhci_hcd: stop threads
[  643.314321][   T61] vhci_hcd: release socket
[  643.328095][   T61] vhci_hcd: disconnect device
[  643.681823][T16022] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  644.604147][T16032] overlayfs: missing 'lowerdir'
[  644.841697][  T957] usb 42-1: device descriptor read/8, error -110
[  645.011000][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2773'.
[  645.014774][T16032] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2773'.
[  645.264682][  T957] usb usb42-port1: attempt power cycle
[  645.328756][ T6023] vhci_hcd: vhci_device speed not set
[  645.679437][T16043] input: syz1 as /devices/virtual/input/input28
[  646.259156][T16051] 8021q: adding VLAN 0 to HW filter on device bond2
[  646.262527][T16051] bond0: (slave bond2): Enslaving as an active interface with an up link
[  646.367868][T16056] netlink: 'syz.2.2781': attribute type 1 has an invalid length.
[  646.401261][T16056] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  646.405329][T16056] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  646.451107][T16063] gretap1: entered promiscuous mode
[  646.455220][T16063] bond1: (slave gretap1): making interface the new active one
[  646.459794][T16063] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  646.478314][T16063] macvlan3: entered promiscuous mode
[  646.481546][T16063] macvlan3: entered allmulticast mode
[  646.483752][T16063] bond1: entered promiscuous mode
[  646.485960][T16063] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  646.491113][T16063] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  646.497147][T16063] bond1: left promiscuous mode
[  646.815659][  T957] usb usb42-port1: unable to enumerate USB device
[  647.490052][T16074] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  649.964410][T16105] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  649.967057][T16105] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  649.969804][T16105] vhci_hcd vhci_hcd.0: Device attached
[  650.238914][ T6452] usb 40-1: SetAddress Request (14) to port 0
[  650.241730][ T6452] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd
[  650.453180][T16106] vhci_hcd: connection reset by peer
[  650.455709][ T1243] vhci_hcd: stop threads
[  650.458052][ T1243] vhci_hcd: release socket
[  650.459733][ T1243] vhci_hcd: disconnect device
[  650.595787][T16125] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  652.201982][T16142] macvtap1: entered promiscuous mode
[  652.204294][T16142] macvtap1: entered allmulticast mode
[  652.206344][T16142] dummy0: entered promiscuous mode
[  652.208769][T16142] dummy0: entered allmulticast mode
[  652.212962][T16142] team0: Device macvtap1 failed to register rx_handler
[  652.228361][T16142] dummy0: left allmulticast mode
[  652.231341][T16142] dummy0: left promiscuous mode
[  652.525878][   T40] kauditd_printk_skb: 66 callbacks suppressed
[  652.525889][   T40] audit: type=1800 audit(1762079701.209:779): pid=16158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2808" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  653.673156][T16175] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  655.092781][T16193] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  655.190255][T16197] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  655.192577][T16197] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  655.196092][T16197] vhci_hcd vhci_hcd.0: Device attached
[  655.338821][ T6452] usb 40-1: device descriptor read/8, error -110
[  655.488684][ T6023] usb 46-1: SetAddress Request (31) to port 0
[  655.491748][ T6023] usb 46-1: new SuperSpeed USB device number 31 using vhci_hcd
[  655.950234][ T6452] usb usb40-port1: attempt power cycle
[  656.172823][T16198] vhci_hcd: connection reset by peer
[  656.174854][ T1243] vhci_hcd: stop threads
[  656.176727][ T1243] vhci_hcd: release socket
[  656.258776][ T1243] vhci_hcd: disconnect device
[  656.538089][ T6452] usb usb40-port1: unable to enumerate USB device
[  657.592550][T16217] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  658.735629][T16220] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2827'.
[  659.699229][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2834'.
[  659.744453][T16247] rtc_cmos 00:05: Alarms can be up to one day in the future
[  659.747560][T16244] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2834'.
[  659.991001][T16253] bridge_slave_0: left allmulticast mode
[  659.992841][T16253] bridge_slave_0: left promiscuous mode
[  659.994682][T16253] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.017125][T16256] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2834'.
[  660.041832][T16253] bridge_slave_1: left allmulticast mode
[  660.068689][T16253] bridge_slave_1: left promiscuous mode
[  660.073063][T16255] input: syz1 as /devices/virtual/input/input29
[  660.073370][T16253] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.693620][T16253] bond0: (slave bond_slave_0): Releasing backup interface
[  660.704333][T16253] bond0: (slave bond_slave_1): Releasing backup interface
[  660.715108][ T6023] usb 46-1: device descriptor read/8, error -110
[  660.738965][T16253] team0: Port device team_slave_0 removed
[  660.760474][T16253] team0: Port device team_slave_1 removed
[  660.764683][T16253] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  660.769207][T16253] batman_adv: batadv0: Removing interface: batadv_slave_0
[  660.775530][T16253] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  660.779191][T16253] batman_adv: batadv0: Removing interface: batadv_slave_1
[  660.814084][T16253] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  660.814754][T16270] ubi31: attaching mtd0
[  660.837948][T16270] ubi31: scanning is finished
[  660.839727][T16270] ubi31: empty MTD device detected
[  661.101240][T16270] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  661.149619][ T6023] usb usb46-port1: attempt power cycle
[  661.158946][T16270] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  661.167266][T16270] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  661.211064][T16270] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  661.242591][T16270] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  661.245462][T16270] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  661.279015][T16270] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3571765231
[  661.285025][T16270] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  661.289717][T16276] ubi31: background thread "ubi_bgt31d" started, PID 16276
[  661.719141][ T6023] usb usb46-port1: unable to enumerate USB device
[  663.070314][T16299] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2847'.
[  663.074020][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2847'.
[  663.410389][T16320] siw: device registration error -23
[  664.188067][T16324] bridge_slave_0: left allmulticast mode
[  664.199836][T16324] bridge_slave_0: left promiscuous mode
[  664.202583][T16324] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.216473][T16324] bridge_slave_1: left allmulticast mode
[  664.218494][T16324] bridge_slave_1: left promiscuous mode
[  664.222015][T16324] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.235255][T16331] netlink: 'syz.2.2855': attribute type 10 has an invalid length.
[  664.238049][T16324] bond0: (slave bond_slave_0): Releasing backup interface
[  664.244493][T16324] bond0: (slave bond_slave_1): Releasing backup interface
[  664.251922][T16324] team0: Port device team_slave_0 removed
[  664.257511][T16324] team0: Port device team_slave_1 removed
[  664.261196][T16324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  664.263418][T16324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  664.266368][T16324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  664.270100][T16324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  664.274319][T16324] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  664.296169][T15343] tipc: Resetting bearer <eth:team0>
[  664.390696][T16341] tipc: Started in network mode
[  664.392874][T16341] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  664.395782][T16341] tipc: Enabled bearer <eth:team0>, priority 0
[  664.951393][T16352] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  664.954155][T16352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  665.022193][T16352] vhci_hcd vhci_hcd.0: Device attached
[  665.518612][ T6006] tipc: Node number set to 11578026
[  665.526509][ T6023] usb 41-1: new low-speed USB device number 8 using vhci_hcd
[  665.731948][T16353] vhci_hcd: connection reset by peer
[  665.734268][   T46] vhci_hcd: stop threads
[  665.735660][   T46] vhci_hcd: release socket
[  665.737160][   T46] vhci_hcd: disconnect device
[  665.822767][T16375] tipc: Enabled bearer <udp:s>, priority 10
[  666.400848][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2872'.
[  666.405964][T16390] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2872'.
[  666.409086][T16390] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2872'.
[  668.054173][T16421] Bluetooth: MGMT ver 1.23
[  668.068875][T16423] IPv6: addrconf: prefix option has invalid lifetime
[  668.272866][T16427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  669.437493][T16444] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  669.565328][T16456] rdma_rxe: rxe_newlink: failed to add syz_tun
[  669.698582][T16459] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2893'.
[  669.705804][T16456] smc: removing ib device syz2
[  670.592973][T16475] input: syz1 as /devices/virtual/input/input31
[  670.608674][ T6023] vhci_hcd: vhci_device speed not set
[  670.634281][T16475] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  671.433423][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2904'.
[  671.466059][T16495] macvlan2: entered allmulticast mode
[  671.467915][T16495] veth1_vlan: entered allmulticast mode
[  671.510475][T16499] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  671.731612][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'.
[  671.928704][ T6006] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  671.979067][T16504] wireguard0: entered promiscuous mode
[  671.981762][T16504] wireguard0: entered allmulticast mode
[  672.102043][ T6006] usb 9-1: Using ep0 maxpacket: 8
[  672.108151][ T6006] usb 9-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  672.112980][ T6006] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.116431][ T6006] usb 9-1: Product: syz
[  672.118446][ T6006] usb 9-1: Manufacturer: syz
[  672.120928][ T6006] usb 9-1: SerialNumber: syz
[  672.132542][ T6006] usb 9-1: config 0 descriptor??
[  672.140632][ T6006] option 9-1:0.0: GSM modem (1-port) converter detected
[  672.322829][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2909'.
[  672.326381][T16510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2909'.
[  672.388397][ T6023] usb 9-1: USB disconnect, device number 13
[  672.392507][ T6023] option 9-1:0.0: device disconnected
[  672.662010][T16519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2911'.
[  672.696332][T16521] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2912'.
[  673.036013][T16528] veth1_to_bond: entered allmulticast mode
[  673.038638][T16527] veth1_to_bond: left allmulticast mode
[  673.287419][T16534] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input32
[  673.426602][T16536] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  673.428729][T16536] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  673.484249][T16536] vhci_hcd vhci_hcd.0: Device attached
[  673.512615][T16546] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  673.658764][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2918'.
[  673.665843][T16550] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2918'.
[  673.758679][  T957] usb 41-1: new low-speed USB device number 9 using vhci_hcd
[  673.982531][T16538] vhci_hcd: connection reset by peer
[  673.985323][T15343] vhci_hcd: stop threads
[  673.986740][T15343] vhci_hcd: release socket
[  673.988295][T15343] vhci_hcd: disconnect device
[  674.534664][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'.
[  675.470173][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'.
[  675.480858][T16577] rdma_rxe: rxe_newlink: failed to add syz_tun
[  675.494641][T16572] veth3: entered promiscuous mode
[  675.944951][T16585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  675.948480][T16585] syzkaller0: entered promiscuous mode
[  675.951781][T16585] syzkaller0: entered allmulticast mode
[  675.966140][T16585] tipc: Resetting bearer <eth:syzkaller0>
[  675.972662][T16584] tipc: Resetting bearer <eth:syzkaller0>
[  675.982334][T16584] tipc: Disabling bearer <eth:syzkaller0>
[  676.547082][T16596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2931'.
[  677.300649][   T40] audit: type=1326 audit(1762079725.989:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.4.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  677.376144][   T40] audit: type=1326 audit(1762079725.999:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.4.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  677.388617][   T40] audit: type=1326 audit(1762079725.999:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.4.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  677.395433][   T40] audit: type=1326 audit(1762079725.999:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.4.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  677.402373][   T40] audit: type=1326 audit(1762079725.999:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.4.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  677.409240][   T40] audit: type=1326 audit(1762079725.999:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.4.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  677.417680][   T40] audit: type=1326 audit(1762079725.999:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.4.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  677.424596][   T40] audit: type=1326 audit(1762079725.999:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.4.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  677.434122][   T40] audit: type=1326 audit(1762079725.999:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.4.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  677.442310][   T40] audit: type=1326 audit(1762079725.999:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.4.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  678.078740][ T6208] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  678.217134][T16619] input: syz1 as /devices/virtual/input/input33
[  678.238700][ T6208] usb 6-1: Using ep0 maxpacket: 16
[  678.248947][ T6208] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  678.252455][ T6208] usb 6-1: config 0 has no interface number 0
[  678.259055][ T6208] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  678.262998][ T6208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.266379][ T6208] usb 6-1: Product: syz
[  678.268513][ T6208] usb 6-1: Manufacturer: syz
[  678.270720][ T6208] usb 6-1: SerialNumber: syz
[  678.276835][ T6208] usb 6-1: config 0 descriptor??
[  678.281722][ T6208] hub 6-1:0.132: bad descriptor, ignoring hub
[  678.284730][ T6208] hub 6-1:0.132: probe with driver hub failed with error -5
[  678.297662][ T6208] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input34
[  678.320431][T16619] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  678.431470][T16624] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  678.881397][  T957] vhci_hcd: vhci_device speed not set
[  679.059723][T16635] batadv_slave_1: entered promiscuous mode
[  679.064834][ T6208] syz1: Port: 1 Link DOWN
[  679.069400][T16636] veth0: entered promiscuous mode
[  679.074970][   T46] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  679.079766][   T46] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  679.085804][   T46] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  679.091265][   T46] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  680.142044][T16656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2947'.
[  680.204825][T16658] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  680.869514][T16638] veth0: left promiscuous mode
[  680.871739][T16638] batadv_slave_1: left promiscuous mode
[  681.019151][ T6023] usb 6-1: USB disconnect, device number 8
[  681.205045][T16668] input: syz1 as /devices/virtual/input/input35
[  681.285757][T16668] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  682.156952][T16691] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  682.158963][T16691] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  682.229294][T16691] vhci_hcd vhci_hcd.0: Device attached
[  682.438317][T16692] vhci_hcd: connection closed
[  682.438762][   T46] vhci_hcd: stop threads
[  682.442514][   T46] vhci_hcd: release socket
[  682.444395][   T46] vhci_hcd: disconnect device
[  683.700233][T16726] binder: 16713:16726 ioctl 0 80000040 returned -22
[  683.706447][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2962'.
[  685.144978][T16747] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  685.234706][T16742] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  685.236737][T16742] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  685.239315][T16742] vhci_hcd vhci_hcd.0: Device attached
[  685.254211][T16742] binder: Binderfs stats mode cannot be changed during a remount
[  685.518702][ T6023] usb 40-1: SetAddress Request (18) to port 0
[  685.521384][ T6023] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd
[  685.558704][T16750] vhci_hcd: connection reset by peer
[  685.561147][   T13] vhci_hcd: stop threads
[  685.562578][   T13] vhci_hcd: release socket
[  685.564150][   T13] vhci_hcd: disconnect device
[  686.274441][T16763] netlink: 'syz.0.2978': attribute type 1 has an invalid length.
[  686.277829][T16763] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2978'.
[  686.668033][T16767] tipc: Resetting bearer <eth:team0>
[  686.784740][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2980'.
[  686.831250][T15343] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  686.835892][T15343] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  686.846689][T15343] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  686.850874][T15343] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  687.018840][  T957] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  687.168641][  T957] usb 7-1: Using ep0 maxpacket: 16
[  687.206300][  T957] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[  687.342597][  T957] usb 7-1: config 0 has no interface number 0
[  687.401100][  T957] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  687.513092][  T957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.516216][  T957] usb 7-1: Product: syz
[  687.519281][  T957] usb 7-1: Manufacturer: syz
[  687.521225][  T957] usb 7-1: SerialNumber: syz
[  687.531360][  T957] usb 7-1: config 0 descriptor??
[  687.543409][  T957] hub 7-1:0.132: bad descriptor, ignoring hub
[  687.546057][  T957] hub 7-1:0.132: probe with driver hub failed with error -5
[  687.569094][  T957] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input36
[  688.037258][T16792] batadv_slave_1: entered promiscuous mode
[  688.246683][T16795] veth0: entered promiscuous mode
[  688.716739][T16801] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  689.801073][T16795] veth0: left promiscuous mode
[  689.802893][T16795] batadv_slave_1: left promiscuous mode
[  689.938755][  T957] usb 7-1: USB disconnect, device number 15
[  690.552409][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  690.555097][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[  690.618778][ T6023] usb 40-1: device descriptor read/8, error -110
[  690.814483][T16842] veth1_vlan: mtu less than device minimum
[  691.019404][ T6023] usb usb40-port1: attempt power cycle
[  691.048001][T16846] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  691.050132][T16846] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  691.053641][T16846] vhci_hcd vhci_hcd.0: Device attached
[  691.077316][T16850] netlink: 'syz.1.3002': attribute type 23 has an invalid length.
[  691.129167][T16852] netlink: 'syz.1.3003': attribute type 1 has an invalid length.
[  691.149565][T16852] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  691.153520][T16852] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  691.198010][T16854] gretap2: entered promiscuous mode
[  691.202991][T16854] bond3: (slave gretap2): making interface the new active one
[  691.205760][T16854] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  691.216008][T16854] macvlan3: entered promiscuous mode
[  691.218152][T16854] macvlan3: entered allmulticast mode
[  691.220645][T16854] bond3: entered promiscuous mode
[  691.223094][T16854] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  691.228129][T16854] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  691.240529][T16854] bond3: left promiscuous mode
[  691.478752][  T957] usb 42-1: SetAddress Request (31) to port 0
[  691.481344][  T957] usb 42-1: new SuperSpeed USB device number 31 using vhci_hcd
[  691.538492][T16858] 8021q: adding VLAN 0 to HW filter on device bond1
[  691.541672][T16858] bond0: (slave bond1): Enslaving as an active interface with an up link
[  691.729311][ T6023] usb usb40-port1: unable to enumerate USB device
[  691.758896][T16847] vhci_hcd: connection reset by peer
[  691.759038][   T61] vhci_hcd: stop threads
[  691.759051][   T61] vhci_hcd: release socket
[  691.759089][   T61] vhci_hcd: disconnect device
[  692.110172][T16868] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  692.110189][T16868] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  692.111850][T16868] vhci_hcd vhci_hcd.0: Device attached
[  692.409485][ T6023] usb 38-1: SetAddress Request (38) to port 0
[  692.409542][ T6023] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd
[  692.629237][ T5943] Bluetooth: hci4: command 0x0406 tx timeout
[  693.342981][T16869] vhci_hcd: connection reset by peer
[  693.345638][   T61] vhci_hcd: stop threads
[  693.347529][   T61] vhci_hcd: release socket
[  693.350440][   T61] vhci_hcd: disconnect device
[  693.471939][T16884] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  693.504568][T16886] netlink: 'syz.2.3013': attribute type 1 has an invalid length.
[  693.538079][T16886] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  693.543398][T16886] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  693.557890][T16888] bridge2: entered promiscuous mode
[  693.559740][T16888] bridge2: entered allmulticast mode
[  693.588828][T16889] bond2: (slave gretap2): making interface the new active one
[  693.592716][T16889] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  693.697935][T16893] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  696.041122][T16925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3023'.
[  696.538707][  T957] usb 42-1: device descriptor read/8, error -110
[  696.760237][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3028'.
[  696.767374][T16939] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3028'.
[  697.300460][T16942] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  697.574743][T16943] siw: device registration error -23
[  697.574864][ T6452] kernel write not supported for file /uinput (pid: 6452 comm: kworker/1:4)
[  697.583023][ T6023] usb 38-1: device descriptor read/8, error -110
[  697.743048][   T64] Bluetooth: hci1: command 0x0406 tx timeout
[  697.837003][  T957] usb usb42-port1: attempt power cycle
[  698.288086][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3032'.
[  698.529222][ T6023] usb usb38-port1: attempt power cycle
[  699.089715][  T957] usb usb42-port1: unable to enumerate USB device
[  699.475593][ T6023] usb usb38-port1: unable to enumerate USB device
[  699.847708][T16972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3037'.
[  701.619204][ T6023] kernel write not supported for file /uinput (pid: 6023 comm: kworker/1:3)
[  701.677812][T16996] siw: device registration error -23
[  702.178750][ T6006] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  702.296233][T17011] ------------[ cut here ]------------
[  702.298617][T17011] WARNING: CPU: 0 PID: 17011 at fs/exec.c:118 path_noexec+0x1ca/0x230
[  702.301795][T17011] Modules linked in:
[  702.304101][T17011] CPU: 0 UID: 0 PID: 17011 Comm: syz.4.3046 Not tainted syzkaller #0 PREEMPT(full) 
[  702.308812][T17011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  702.312642][T17011] RIP: 0010:path_noexec+0x1ca/0x230
[  702.314252][T17011] Code: ff 83 e3 02 48 89 de e8 24 38 84 ff 48 85 db 41 0f 95 c4 e8 a8 3c 84 ff 44 89 e0 5b 5d 41 5c c3 cc cc cc cc e8 97 3c 84 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 99 d3 eb ff e9 a8 fe ff ff e8 8f d3 eb
[  702.320714][T17011] RSP: 0018:ffffc900223f7c88 EFLAGS: 00010283
[  702.322611][T17011] RAX: 00000000000000ad RBX: ffff88801c348aa0 RCX: ffffc90026742000
[  702.325084][T17011] RDX: 0000000000080000 RSI: ffffffff823830b9 RDI: 0000000000000007
[  702.327856][T17011] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  702.331678][T17011] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000080ffc000
[  702.334988][T17011] R13: 0000000000000001 R14: 0000000000000000 R15: 00000000000000d4
[  702.338388][T17011] FS:  0000000000000000(0000) GS:ffff888097810000(0063) knlGS:00000000f5465b40
[  702.342590][T17011] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  702.345361][T17011] CR2: 000000002e518ff8 CR3: 0000000072587000 CR4: 0000000000352ef0
[  702.348731][T17011] Call Trace:
[  702.350145][T17011]  <TASK>
[  702.351412][T17011]  do_mmap+0xd23/0x1210
[  702.353208][T17011]  ? __pfx_do_mmap+0x10/0x10
[  702.354406][T17014] FAULT_INJECTION: forcing a failure.
[  702.354406][T17014] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  702.355167][T17011]  ? __pfx_down_write_killable+0x10/0x10
[  702.359398][T17014] CPU: 1 UID: 0 PID: 17014 Comm: syz.0.3048 Not tainted syzkaller #0 PREEMPT(full) 
[  702.359413][T17014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  702.359419][T17014] Call Trace:
[  702.359423][T17014]  <TASK>
[  702.359427][T17014]  dump_stack_lvl+0x16c/0x1f0
[  702.359442][T17014]  should_fail_ex+0x512/0x640
[  702.359461][T17014]  _copy_from_user+0x2e/0xd0
[  702.359478][T17014]  dma_buf_ioctl+0x4a8/0x8d0
[  702.359515][T17014]  ? __pfx_dma_buf_ioctl+0x10/0x10
[  702.359528][T17014]  ? find_held_lock+0x2b/0x80
[  702.359539][T17014]  ? hook_file_ioctl_common+0x145/0x410
[  702.359553][T17014]  ? __fget_files+0x20e/0x3c0
[  702.359565][T17014]  ? __pfx_dma_buf_ioctl+0x10/0x10
[  702.359576][T17014]  compat_ptr_ioctl+0x6e/0xa0
[  702.359590][T17014]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  702.359605][T17014]  __ia32_compat_sys_ioctl+0x242/0x370
[  702.359622][T17014]  __do_fast_syscall_32+0x7c/0x300
[  702.359635][T17014]  do_fast_syscall_32+0x32/0x80
[  702.359652][T17014]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  702.359665][T17014] RIP: 0023:0xf70ad579
[  702.359673][T17014] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  702.359684][T17014] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  702.359694][T17014] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040086203
[  702.359701][T17014] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000
[  702.359707][T17014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  702.359712][T17014] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  702.359718][T17014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  702.359731][T17014]  </TASK>
[  702.360272][ T6006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  702.361720][T17011]  vm_mmap_pgoff+0x29e/0x470
[  702.366332][ T6006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  702.369841][T17011]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  702.369879][T17011]  ? __fget_files+0x20e/0x3c0
[  702.377325][ T6006] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  702.378035][T17011]  ksys_mmap_pgoff+0x32c/0x5c0
[  702.380869][ T6006] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  702.382148][T17011]  ? __ia32_sys_mmap_pgoff+0x11/0x1b0
[  702.382184][T17011]  __do_fast_syscall_32+0x7c/0x300
[  702.382213][T17011]  do_fast_syscall_32+0x32/0x80
[  702.384334][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.386362][T17011]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  702.386392][T17011] RIP: 0023:0xf7f95579
[  702.386408][T17011] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  702.416724][ T6006] usb 6-1: config 0 descriptor??
[  702.416880][T17011] RSP: 002b:00000000f546555c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0
[  702.416897][T17011] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000001000
[  702.416904][T17011] RDX: 0000000002000004 RSI: 0000000000000013 RDI: 0000000000000007
[  702.416911][T17011] RBP: 0000000010000000 R08: 0000000000000000 R09: 0000000000000000
[  702.416917][T17011] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  702.416924][T17011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  702.416939][T17011]  </TASK>
[  702.416945][T17011] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  702.416954][T17011] CPU: 0 UID: 0 PID: 17011 Comm: syz.4.3046 Not tainted syzkaller #0 PREEMPT(full) 
[  702.416966][T17011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  702.416973][T17011] Call Trace:
[  702.416977][T17011]  <TASK>
[  702.416982][T17011]  dump_stack_lvl+0x3d/0x1f0
[  702.416997][T17011]  vpanic+0x640/0x6f0
[  702.417014][T17011]  ? path_noexec+0x1ca/0x230
[  702.417024][T17011]  panic+0xca/0xd0
[  702.417039][T17011]  ? __pfx_panic+0x10/0x10
[  702.417059][T17011]  check_panic_on_warn+0xab/0xb0
[  702.417075][T17011]  __warn+0xf6/0x3c0
[  702.417090][T17011]  ? path_noexec+0x1ca/0x230
[  702.417101][T17011]  report_bug+0x3c3/0x580
[  702.417111][T17011]  ? path_noexec+0x1ca/0x230
[  702.417121][T17011]  handle_bug+0x184/0x210
[  702.417136][T17011]  exc_invalid_op+0x17/0x50
[  702.417150][T17011]  asm_exc_invalid_op+0x1a/0x20
[  702.417160][T17011] RIP: 0010:path_noexec+0x1ca/0x230
[  702.417171][T17011] Code: ff 83 e3 02 48 89 de e8 24 38 84 ff 48 85 db 41 0f 95 c4 e8 a8 3c 84 ff 44 89 e0 5b 5d 41 5c c3 cc cc cc cc e8 97 3c 84 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 99 d3 eb ff e9 a8 fe ff ff e8 8f d3 eb
[  702.417182][T17011] RSP: 0018:ffffc900223f7c88 EFLAGS: 00010283
[  702.417191][T17011] RAX: 00000000000000ad RBX: ffff88801c348aa0 RCX: ffffc90026742000
[  702.417197][T17011] RDX: 0000000000080000 RSI: ffffffff823830b9 RDI: 0000000000000007
[  702.417204][T17011] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  702.417211][T17011] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000080ffc000
[  702.417217][T17011] R13: 0000000000000001 R14: 0000000000000000 R15: 00000000000000d4
[  702.417227][T17011]  ? path_noexec+0x1c9/0x230
[  702.417239][T17011]  ? path_noexec+0x1c9/0x230
[  702.417249][T17011]  do_mmap+0xd23/0x1210
[  702.417273][T17011]  ? __pfx_do_mmap+0x10/0x10
[  702.417287][T17011]  ? __pfx_down_write_killable+0x10/0x10
[  702.417304][T17011]  vm_mmap_pgoff+0x29e/0x470
[  702.417320][T17011]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  702.417336][T17011]  ? __fget_files+0x20e/0x3c0
[  702.417350][T17011]  ksys_mmap_pgoff+0x32c/0x5c0
[  702.417363][T17011]  ? __ia32_sys_mmap_pgoff+0x11/0x1b0
[  702.417378][T17011]  __do_fast_syscall_32+0x7c/0x300
[  702.417392][T17011]  do_fast_syscall_32+0x32/0x80
[  702.417405][T17011]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  702.417418][T17011] RIP: 0023:0xf7f95579
[  702.417427][T17011] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  702.417437][T17011] RSP: 002b:00000000f546555c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0
[  702.417447][T17011] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000001000
[  702.417453][T17011] RDX: 0000000002000004 RSI: 0000000000000013 RDI: 0000000000000007
[  702.417459][T17011] RBP: 0000000010000000 R08: 0000000000000000 R09: 0000000000000000
[  702.417466][T17011] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  702.417472][T17011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  702.417485][T17011]  </TASK>
[  702.420691][T17011] Kernel Offset: disabled

VM DIAGNOSIS:
10:35:50  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85267d75 RDI=ffffffff9adc2de0 RBP=ffffffff9adc2da0 RSP=ffffc900223f75f0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=000000000000005b R14=ffffffff9adc2da0 R15=ffffffff85267d10
RIP=ffffffff85267d9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888097810000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002e518ff8 CR3=0000000072587000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000001bc2e7f RBX=0000000000000001 RCX=ffffffff8b5d42a9 RDX=0000000000000000
RSI=ffffffff8da27d51 RDI=ffffffff8bf075c0 RBP=ffffed1003b58490 RSP=ffffc9000046fde8
R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001
R12=0000000000000001 R13=ffff88801dac2480 R14=ffffffff908239d0 R15=0000000000000000
RIP=ffffffff8b5d2d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097910000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000303cdffc CR3=000000000e182000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000005ac88728 RBX=ffffffff93a73080 RCX=0000000000000002 RDX=00000000000001aa
RSI=ffffffff822e2360 RDI=ffffffff93a73080 RBP=00000000000528c0 RSP=ffffc900036cf3c0
R8 =0000000000040001 R9 =0000000000000000 R10=ffffed100e243000 R11=dffffc0000000000
R12=0000000000000008 R13=ffffea0001c48800 R14=dffffc0000000000 R15=ffff888022114900
RIP=ffffffff8b5d2d9a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f235d350300 ffffffff 00c00000
GS =0000 ffff888097a10000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f43d92cc CR3=00000000227c9000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b009ffffffff8211 afdfffffffff8211 afc7ffffffff8211 af45ffffffff8211
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2814ffffffff8211 b307ffffffff8211 b2f0ffffffff8211 b043ffffffff8211
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2897ffffffff8212 286affffffff8212 2851ffffffff8212 2834ffffffff8212
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e87ffffffff8212 2e4bffffffff8212 2e2affffffff8212 2e20ffffffff8212
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2de4ffffffff8212 2dc9ffffffff8212 2da4ffffffff8212 2d92ffffffff8212
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a37ffffffff8212 29f9ffffffff8212 29b7ffffffff8212 2994ffffffff8212
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2971ffffffff8212 295dffffffff8212 2900ffffffff8212 28e2ffffffff8212
ZMM24=59d1328659d13286 59d1328659d13286 59d1328659d13286 59d1328659d13286 59d1328659d13286 59d1328659d13286 59d1328659d13286 59d1328659d13286
ZMM25=0c4b13f70c4b13f7 0c4b13f70c4b13f7 0c4b13f70c4b13f7 0c4b13f70c4b13f7 0c4b13f70c4b13f7 0c4b13f70c4b13f7 0c4b13f70c4b13f7 0c4b13f70c4b13f7
ZMM26=e63daf0be63daf0b e63daf0be63daf0b e63daf0be63daf0b e63daf0be63daf0b e63daf0be63daf0b e63daf0be63daf0b e63daf0be63daf0b e63daf0be63daf0b
ZMM27=499e1875499e1875 499e1875499e1875 499e1875499e1875 499e1875499e1875 499e1875499e1875 499e1875499e1875 499e1875499e1875 499e1875499e1875
ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=6d4100006d410000 6d4100006d410000 6d4100006d410000 6d4100006d410000 6d4100006d410000 6d4100006d410000 6d4100006d410000 6d4100006d410000
info registers vcpu 3

CPU#3
RAX=0000000000cf943d RBX=0000000000000003 RCX=ffffffff8b5d42a9 RDX=0000000000000000
RSI=ffffffff8da27d51 RDI=ffffffff8bf075c0 RBP=ffffed10037e0000 RSP=ffffc9000048fde8
R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001
R12=0000000000000003 R13=ffff88801bf00000 R14=ffffffff908239d0 R15=0000000000000000
RIP=ffffffff8b5d2d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097b10000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000008001d000 CR3=0000000064a87000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000