last executing test programs: 4m2.466544878s ago: executing program 0 (id=711): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x571000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="0f20e035010000000f22e06666f30f0966f3aa0f20c035000000800f22c0b805000000b9001800000f01c10f0db0ba00000065360f01cf0f01c1b92d0300000f320f01ca66ed", 0x46}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000001c0)={0x800, 0x18, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) 4m2.326932899s ago: executing program 0 (id=712): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r0, 0x82836000) 4m2.322559634s ago: executing program 0 (id=713): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000002f53ec37325574079e5300"/27], 0x0, 0x1b, 0x0, 0x40, 0x0, 0x10000, @value=r0}, 0x28) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x8040) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$setstatus(r7, 0x4, 0x2c00) preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x168, 0xfffffffd, 0x0) bind$inet6(r5, &(0x7f00000037c0)={0xa, 0x4e23, 0x6, @mcast1, 0x2}, 0x1c) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000000c0)='b2g]\xb1\xf4\xb5\xf6\xfd\xff\xad\xab!\x80F\xb0\xcf\x89\xeb\xae\xe2\xa8\x03\"jV\xdfA\xaej\t\xf3\x9e\x1dM\xd6\xaf\xc9c\xa3\xd9 \xe9-\x85\xa4\x19\xe1\xc2>]k\x1c:\xd8\"|\xe2\x15\xf8f\xdc\xca\xffH\t\xe9\x93\x95\x85:') 4m2.193477085s ago: executing program 0 (id=717): madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x60040, 0x1f2) fcntl$setlease(r1, 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 4m2.049348446s ago: executing program 0 (id=718): ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={r0}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@getnexthop={0x20, 0x76, 0xb0d, 0x70bd25, 0x0, {0x3}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 4m1.747025577s ago: executing program 0 (id=722): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x100, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0e1d6c77e161"}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8000, 0x0, 0x0, 0xa9}, 0x0, 0x1000000}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x18, &(0x7f0000000000)=0xffff, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r5, 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x8}}}, 0xc0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001a000100000000060000000081"], 0x38}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r8, &(0x7f00000000c0)=""/55, 0x37) r9 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x624000, 0x0) ioctl$FBIOGET_FSCREENINFO(r9, 0x4602, &(0x7f0000000180)) 4m1.682245002s ago: executing program 32 (id=722): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x100, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0e1d6c77e161"}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8000, 0x0, 0x0, 0xa9}, 0x0, 0x1000000}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x18, &(0x7f0000000000)=0xffff, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r5, 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x8}}}, 0xc0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001a000100000000060000000081"], 0x38}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r8, &(0x7f00000000c0)=""/55, 0x37) r9 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x624000, 0x0) ioctl$FBIOGET_FSCREENINFO(r9, 0x4602, &(0x7f0000000180)) 3m57.047189124s ago: executing program 1 (id=788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="840000000001010400000000000000000200000024002d046b69ca5fd37a36cc3f960d9a8101801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08054f00001414000ced7f735300010000000000080007400000000010001700", @ANYRESDEC=r0], 0x84}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30004001) (async) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x60, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x58}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x900) 3m57.046664999s ago: executing program 1 (id=789): socket$alg(0x26, 0x5, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405515, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b74af54728fa8517ae030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001b510918500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r4}) socket$nl_generic(0x10, 0x3, 0x10) 3m56.985871922s ago: executing program 1 (id=790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r2 = syz_usb_connect$printer(0x2, 0x77, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000004c0)=0x10000) write$char_usb(r3, &(0x7f0000001680)="f3", 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30]}}}}]}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00"], 0x1c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x34}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0, 0x10}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3m54.80666721s ago: executing program 1 (id=810): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x201, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x13, 0x1, 0x1, 0x0, 0x0, 0x0}) 3m54.736676293s ago: executing program 1 (id=813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x161) mount$fuse(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000200)='./file1\x00', 0x90) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0x3f28, 0x2, 0x0, 0x2fb}, &(0x7f0000000000), &(0x7f0000000200)) io_uring_enter(r2, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x800c0d0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000740)={0x0, 0x8, 0xfffffffffffffffa, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@delqdisc={0x1ec, 0x25, 0x300, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xb, 0x9}, {0xffe0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xd, 0x0, 0x9, 0x0, 0x600, 0x7, 0x1}}, {0x6, 0x2, [0xc0d3]}}, {{0x1c, 0x1, {0xd8, 0x81, 0x7, 0x7e, 0x3, 0x6, 0x7ff80000, 0x3}}, {0xa, 0x2, [0x9, 0x8, 0x71]}}, {{0x1c, 0x1, {0xf, 0xa, 0x6, 0xffffffff, 0x0, 0x4, 0xfffffe01, 0x2}}, {0x8, 0x2, [0x3, 0x4]}}, {{0x1c, 0x1, {0xc, 0x4, 0x2a8, 0x8, 0x1, 0x3fe9, 0x10000, 0x7}}, {0x12, 0x2, [0xdf, 0x5, 0xd8d, 0xfa, 0x8, 0x13, 0x5]}}, {{0x1c, 0x1, {0x7f, 0x1, 0x1, 0x5, 0x1, 0x6, 0x8, 0x2}}, {0x8, 0x2, [0x7fff, 0x4]}}, {{0x1c, 0x1, {0xfb, 0x81, 0x2601, 0x3, 0x0, 0xfd, 0x0, 0x3}}, {0xa, 0x2, [0xa227, 0x6, 0xa]}}, {{0x1c, 0x1, {0x95, 0x7, 0x3, 0xe, 0x0, 0x7, 0x9, 0x8}}, {0x14, 0x2, [0xad0, 0x8, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x3, 0x8, 0x7359, 0x3, 0x1, 0x6, 0xf, 0xa}}, {0x18, 0x2, [0x317e, 0xae, 0x1952, 0x7, 0x5cd7, 0x0, 0xf3d5, 0xd6fb, 0x7f, 0x0]}}]}, @TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x8, 0x1, 0xf05, 0x1, 0x6, 0x0, 0x9}}, {0x16, 0x2, [0x3, 0x2, 0x5, 0x2, 0x33a5, 0x4, 0xc70, 0xfff, 0x3]}}, {{0x1c, 0x1, {0x7, 0x7f, 0x8, 0xfff, 0x1, 0x2, 0x9, 0x6}}, {0x10, 0x2, [0x9, 0x6, 0x35, 0x7dda, 0x9, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb7c3}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x20000, 0x4}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000face6fbc0969e02c8737c3630cfff18066516e800d"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="00005c7ec1220000b7030000000020ff8500007051cfd66360db93568b001b000000b70000000000"], &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000010000106000000a44d5f4d0000000000", @ANYRES32=0x0, @ANYBLOB=']X\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8040) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff2a4, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m54.542715021s ago: executing program 1 (id=817): r0 = socket$netlink(0x10, 0x3, 0x14) shutdown(r0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x1402, 0x2, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000041080000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe0000000066090000feee4f8bc7aaf0ff50000000bf8600000000000007080000c8070000bfa400000000ecff06040000f0ffffffd5000000080000001822000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m39.152196555s ago: executing program 33 (id=817): r0 = socket$netlink(0x10, 0x3, 0x14) shutdown(r0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x1402, 0x2, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000041080000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe0000000066090000feee4f8bc7aaf0ff50000000bf8600000000000007080000c8070000bfa400000000ecff06040000f0ffffffd5000000080000001822000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m29.874712413s ago: executing program 4 (id=2046): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=@newtaction={0x655c, 0x30, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{0x641c, 0x1, [@m_pedit={0x4a9c, 0x2, 0x0, 0x0, {{0xa}, {0x49ec, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x10, 0x80000001, 0x5, 0x80000000, 0x3}, 0x4, 0x7, [{0xf0ce480, 0x7, 0x5c7, 0x3, 0x4b8b384d, 0xfffffc00}, {0xa4, 0x3, 0x7d1238c6, 0x400, 0x9, 0xffff}, {0xd4d5, 0x7, 0x1, 0x9, 0x2, 0x81}, {0x8, 0x1, 0x3ff, 0x4, 0x1, 0x4}, {0x1, 0x0, 0x6, 0x7d77, 0x80}, {0x5, 0xfffffff8, 0x7, 0x7, 0x6, 0x10001}, {0x2, 0xff54, 0x3, 0x80, 0x7fffffff, 0x10000}, {0x2, 0x2, 0x7, 0x5, 0x101, 0x5}]}, [{0x3c, 0x7, 0xfffffe17, 0x0, 0x2, 0x9}, {0x7, 0x6f, 0x0, 0x2, 0x7, 0x5}, {0x3, 0x2, 0x401, 0x8001, 0x1ff, 0x8}, {0x0, 0x4, 0xf, 0x6, 0x149b}, {0x81f, 0x8, 0x6, 0x9, 0x8, 0x7}, {0x0, 0x6, 0x10, 0x6c, 0x5, 0x80000000}, {0x9, 0x1ff, 0x2, 0x12c, 0x5, 0x4}, {0x200, 0x7fff, 0x8, 0x3, 0x7fffffff, 0x3}, {0x10001, 0x100, 0x81, 0xffff, 0x1, 0xfffffffe}, {0x8e0a, 0x2, 0x7, 0x1, 0x7c8f, 0x100}, {0x7, 0x1, 0x8, 0x100, 0x8, 0x2}, {0x401, 0xa, 0x6, 0x0, 0x7, 0x6}, {0x3ff, 0x9, 0x6, 0xf, 0x5, 0x3}, {0xc, 0x1000, 0xd57, 0x5, 0x6, 0x7}, {0x40, 0x8, 0x2, 0x4, 0x1, 0x8}, {0x6, 0xffffff80, 0x2, 0x1, 0x1000, 0xfffffd65}, {0x0, 0x9, 0x38, 0x5, 0xe10, 0x6}, {0x1ff, 0x80000000, 0x8d8, 0xfffffff9, 0x0, 0x7fff}, {0xa, 0x6, 0x4, 0x5, 0x7, 0x5}, {0xc, 0x9, 0x80, 0x3, 0x3, 0x4b}, {0x74, 0xfffffc01, 0x80000000, 0x5, 0x50000, 0x1}, {0x9, 0xfffffff8, 0x7, 0x7, 0x6, 0x7}, {0x8, 0x0, 0x4, 0x7, 0x8001, 0x1}, {0x0, 0x3a8e66e4, 0x1, 0x6, 0xffffffc0, 0x8001}, {0x8, 0x8, 0xffffffff, 0x800, 0x8, 0x1}, {0x6, 0xe0e0000, 0x15, 0xa, 0xcbaf, 0x8}, {0x10, 0x6, 0x1ff, 0x6, 0x1, 0x3}, {0xa, 0x40, 0xfffffffc, 0xffffffff, 0x5, 0x26}, {0x7fff, 0xcc2c, 0xe44, 0x1, 0x9, 0x9}, {0x8, 0x100000, 0x9, 0x4, 0x4, 0x40}, {0x10001, 0x4, 0x8, 0x5, 0x90c, 0x1000}, {0x9, 0xaa, 0x6, 0x7, 0x2, 0x9}, {0x0, 0x0, 0x800, 0x2, 0x9, 0xfffffffa}, {0xd16, 0x3, 0x10, 0x5, 0x400000, 0x90ec}, {0x101, 0x1, 0xa9c, 0x3, 0x0, 0x2b}, {0x10000, 0x1ff, 0x577, 0xc3, 0x17a3a94b, 0xfffff001}, {0x101, 0xfffffffb, 0x0, 0x1, 0x6, 0x4}, {0x9, 0x4, 0x3, 0xad, 0xe, 0x6c}, {0x200, 0x7ff, 0xf23, 0x0, 0x6, 0x5}, {0x1, 0x5, 0x0, 0x401, 0x3, 0x6}, {0x3, 0xa33, 0x2, 0x3, 0x7fffffff, 0x7}, {0x0, 0x6, 0xf, 0x779b, 0x8, 0xff}, {0x8c04, 0x6, 0x0, 0xfffffbff, 0x3}, {0x9, 0xd251, 0xe4, 0x8, 0x9, 0x4}, {0x3, 0x240000, 0x9, 0xb, 0x1}, {0x3, 0x9, 0xfffffffe, 0x187f2dbb, 0x2, 0x8}, {0x0, 0x9, 0x1, 0x1, 0x8e4, 0x4}, {0x5, 0x4, 0x1, 0x7fffffff, 0x7f, 0x3ff}, {0x5, 0x2, 0xfffffff2, 0xd4, 0x81, 0x10001}, {0x9, 0x100, 0x9, 0x9, 0x5, 0x4}, {0x8, 0x8, 0x0, 0x4, 0xf8fc, 0x4}, {0x6, 0x100, 0x0, 0x0, 0x100, 0xffff8f9f}, {0x7, 0xfffffff9, 0x80000000, 0x2, 0x10001, 0x3}, {0x6, 0x7, 0x1, 0xffffff81, 0x1, 0x9}, {0x5, 0x47b, 0x9, 0x0, 0x9, 0xc3b}, {0x6, 0x0, 0x0, 0x0, 0x3, 0x3}, {0x0, 0x0, 0x6, 0x1, 0x6, 0x9}, {0x80000001, 0x1, 0xff, 0x7ff, 0x8001, 0x302}, {0x0, 0x3, 0x0, 0x8, 0x10001, 0x101}, {0x3, 0x7, 0x2, 0x7503, 0x6, 0x6db}, {0x6, 0x36b, 0x5, 0xffffe72c, 0x1, 0x80}, {0xb, 0x3, 0x8001, 0x7, 0xda, 0x96}, {0x8, 0x9, 0xe9, 0x400, 0x8, 0x3}, {0x1ff, 0x6, 0x6, 0xffff3be1, 0x7df, 0x31}, {0x1d7f, 0x3, 0x62, 0xa15, 0x8, 0x7}, {0x94c0f0, 0x0, 0x100, 0xffff3935, 0x7, 0xff}, {0x9, 0x5, 0x401, 0x40, 0x7, 0x3}, {0x2, 0x3, 0xfffffffe, 0xffff, 0x80000000, 0x5}, {0x8, 0x80000000, 0x7fffffff, 0x0, 0x7ad, 0xcfa}, {0x8000, 0x2, 0x80, 0x400, 0x6, 0x1000}, {0x8, 0x6, 0xffffffff, 0xffff, 0x1c1, 0x3}, {0x8000, 0x1, 0x1, 0x6d9, 0x8, 0x4}, {0x40, 0x2, 0x4, 0xffffc675, 0x4, 0xdd2}, {0x776, 0x6, 0x7fff, 0x8001, 0x1, 0x7}, {0x8000, 0x1, 0x2, 0x5f, 0x985, 0x8000}, {0x1, 0x8, 0x0, 0x3, 0x0, 0x5}, {0x29, 0x80, 0x3, 0x6a3, 0x6, 0xfffffffd}, {0x9d7b, 0x8, 0x2, 0x7, 0x5, 0x8b5}, {0xff, 0xa, 0x2, 0x68a, 0x3, 0x9}, {0x6, 0x1, 0x4, 0xe, 0x1, 0xd}, {0x5, 0x6, 0x38, 0x1, 0x6, 0x7}, {0x200, 0x0, 0xff, 0x8, 0x2, 0x38f0}, {0x80000000, 0x10001, 0x0, 0x4, 0xc8}, {0x10000, 0x42, 0x9, 0x7, 0x3, 0xffff5905}, {0x10, 0x7, 0x101, 0x0, 0x6, 0x7}, {0x4, 0x4, 0x6, 0x209, 0x10, 0x3}, {0x2ed, 0x9, 0x7, 0x9, 0x0, 0xc639}, {0x2, 0x3, 0xb3b, 0x0, 0x7, 0x2210}, {0x1, 0xff, 0x100, 0x7, 0x80000001, 0x7}, {0x0, 0x80000001, 0x0, 0x8, 0x5, 0x5}, {0x6, 0x7, 0xf072, 0x2, 0x4d6342e5, 0xfffffffd}, {0x12, 0x7fffffff, 0x0, 0xffffffff, 0x10, 0x9}, {0x4, 0x2, 0x6, 0x68, 0xffffff79, 0x31}, {0x3, 0x2d, 0xd8, 0x101, 0x4, 0x5}, {0x10, 0x8, 0x10000, 0xe637, 0x7, 0xe}, {0x0, 0x9, 0x400, 0x2, 0x3, 0x3}, {0x27, 0x7, 0x7, 0x3b62, 0x57b9, 0xde}, {0x6b, 0xca3, 0x727, 0x3, 0x4ea, 0x1}, {0x0, 0xd, 0x4, 0xb, 0x9, 0x8}, {0x3ff, 0x7, 0x800, 0x9, 0x1c, 0xfffffffb}, {0x7, 0x3, 0x2, 0x1ff, 0x7ff}, {0x7fff, 0x1ff, 0x10000, 0x200, 0x5, 0x6}, {0x7, 0x3, 0x9, 0x4, 0xff, 0x3800}, {0x6, 0x4, 0x3, 0x100, 0x0, 0x80}, {0x7, 0x9, 0x10001, 0xfffffff8}, {0xa52d, 0x200, 0x5, 0x8c, 0x6, 0x80000000}, {0x6, 0xfff, 0xd3, 0x1, 0x81, 0xf572}, {0xffff, 0x9, 0x0, 0xffffffc2, 0x1000, 0x6}, {0x4, 0x7fffffff, 0x1, 0x2d8d, 0x809, 0x3}, {0x2, 0x5, 0x2, 0x8, 0xf}, {0xc9e4, 0x2, 0x401, 0x7ff, 0x5, 0x1}, {0x46, 0xffffffff, 0x5, 0x8, 0x10000, 0x9}, {0x2, 0x18, 0x1, 0x4, 0x7, 0x101}, {0x8, 0x1, 0x1, 0x3, 0x6, 0x5}, {0x9, 0x3, 0x1960000, 0x2, 0x2, 0x878}, {0xf, 0x916, 0x9, 0x10, 0x1000, 0x4}, {0x2, 0x7, 0x2, 0x227a, 0xc000, 0x7}, {0x8, 0x81, 0x7fffffff, 0x9}, {0x6, 0x5, 0x569fee9a, 0x1, 0x6, 0x10001}, {0x6, 0x7fff, 0x8001, 0x7, 0x8000, 0x100}, {0x4, 0x5, 0xffff7c0e, 0x20, 0x7, 0x8000}, {0x200, 0x800, 0x3ff, 0x3, 0x4, 0x38f84b52}, {0x1ff, 0x80000000, 0x2, 0xc6b, 0x7, 0x2}, {0xd, 0x6, 0x0, 0x8, 0xe}, {0x743, 0x0, 0x1ff, 0x61e2, 0xbf3, 0x4}, {0x5, 0x7f, 0x48000, 0x4, 0x2, 0x8}, {0x1, 0x1bb58f11, 0xd, 0xf7, 0x0, 0x6}, {0x7, 0x7, 0x4, 0xf, 0x8, 0x3}], [{0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1}, {0xbe005d5770113dc, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x6}, {0x5}, {0x4}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x3}, {}, {}, {0x2}, {}, {0x1}, {}, {0x2}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x7fbed0ba31aa282c}, {}, {0x5}, {0x4}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5d95dd5372192475, 0x1}, {}, {0x3}, {0x0, 0x614819c9b045594c}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x6, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {0x3}, {0x4}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x4, 0xcd05, 0x20000000, 0x4, 0x3}, 0x0, 0x8, [{0x2, 0x9, 0x7, 0x6, 0x6, 0x9fd5}, {0x2, 0xfffffffc, 0x7fff, 0x5, 0xfffffffa, 0x4}, {0xc, 0xdc, 0x3ff, 0x0, 0x5eb, 0x1}, {0x8001, 0xffffffff, 0xff, 0x8a, 0x5, 0xa09}, {0xfc7, 0x3ff, 0x3, 0x8, 0xffffffff, 0x8}, {0xb, 0xec, 0x0, 0x6, 0x5, 0xb}]}, [{0x533df740, 0x401, 0x3ffc000, 0x3, 0x8, 0x401}, {0x80, 0x2, 0x10001, 0x100, 0x9f8, 0x2}, {0x5, 0xfffffffa, 0xb602ad6, 0x0, 0x5, 0x9}, {0xb, 0x9, 0x100, 0x3, 0x40, 0xffffffff}, {0xff, 0x6, 0x7, 0xffffffff, 0x1, 0x85d7}, {0x7, 0x3, 0x7, 0x0, 0x5, 0xfff}, {0xfffffffa, 0x6cd, 0x28000000, 0x3, 0x5, 0x2}, {0x4, 0xff, 0x0, 0x7, 0x4d29, 0x8}, {0x487b, 0x3, 0xf, 0x2, 0x1, 0x8}, {0x4, 0xffffffff, 0x1, 0x2, 0x3e, 0xfe}, {0x3, 0xd, 0xdd, 0x1, 0x80000001, 0x6}, {0x3, 0x10, 0x0, 0x8, 0x5, 0xb2}, {0x40, 0x5, 0xffffff01, 0x0, 0xc0000, 0x5}, {0x10001, 0x8, 0x1000, 0x5, 0xffff7b71, 0x4}, {0xf, 0xa62, 0x3, 0xb, 0x7fffffff, 0xfffffffa}, {0x7, 0x6fd4, 0x2e, 0x800, 0xfffffffb, 0x7}, {0xb2, 0x3, 0x4, 0x39d, 0x3, 0x7}, {0x10, 0xfffffffd, 0x2, 0x1, 0x9, 0xe}, {0x4, 0x844d, 0x66, 0x7, 0x3ff, 0xae84}, {0x101, 0x1e7, 0x3e, 0xa7c9, 0x83, 0x4}, {0x4, 0x9, 0x11, 0x5, 0x1eae, 0x7}, {0x1, 0x6, 0xc922927, 0x389a, 0x4, 0x8}, {0x6, 0xeb1, 0x694, 0x8, 0xfe, 0x3738087e}, {0x90, 0x1, 0xf, 0x625, 0x7, 0xc}, {0x10000, 0x12, 0x101, 0x0, 0x4, 0x7fffffff}, {0x8779, 0x1, 0xf, 0x7, 0x3ff, 0x10}, {0x9, 0x6, 0x8, 0x7ff, 0xffff4cd6, 0x8}, {0x7, 0x6, 0x7f, 0xfff, 0x3c, 0xb94}, {0x7ff, 0x5, 0x9, 0x1, 0x6, 0x4}, {0x8, 0x0, 0x6, 0x1, 0xa, 0x4}, {0x401, 0x5, 0x8, 0x10, 0x5, 0x1}, {0x26, 0xc, 0x4, 0x10000, 0x81}, {0x4, 0x3, 0x6, 0x4, 0x4, 0x4}, {0x109, 0xd, 0x9, 0x8, 0x5, 0x24e}, {0xa690, 0xa, 0x9, 0x4, 0xfffffffb, 0xfffffff8}, {0x401, 0x2, 0x0, 0xfff, 0x4, 0x80}, {0x7, 0x1, 0x0, 0x5, 0xc8af, 0x8001}, {0x80000001, 0x9, 0x5, 0x1, 0xc2, 0x5}, {0x300, 0x7, 0x6, 0x2, 0x3f, 0x80}, {0x10000, 0x6, 0x7ff, 0x9, 0x40, 0x2}, {0x9, 0x5, 0x9, 0x48b, 0xed, 0x1}, {0x0, 0x0, 0x10001, 0x1, 0xc, 0x3800}, {0x200, 0x4, 0x2, 0xffff, 0x9, 0x3}, {0x101, 0x8001, 0x10000, 0x2, 0x0, 0x4}, {0xf7, 0x7, 0x1ff, 0x4, 0x60, 0xb6}, {0x9, 0xd, 0x3, 0x3, 0x3, 0x2}, {0x8, 0xff, 0xffffffff, 0xffffffff, 0x81, 0x6}, {0xfffffff9, 0xa2, 0x4, 0xf, 0xb6d, 0x3}, {0x2, 0x101, 0x7fffffff, 0x9, 0x5, 0x7}, {0xb, 0x9, 0x5, 0xf1, 0x81, 0x9422}, {0x520f, 0x3, 0x7ff, 0x3, 0x4, 0xe22e}, {0xe, 0x5, 0xdc, 0x1, 0xd33, 0x6}, {0x8, 0x5, 0x2, 0x8, 0x7, 0x6}, {0x4, 0xf06, 0xa93, 0x5, 0x7, 0x8}, {0x1, 0x3, 0x5, 0x1, 0x2, 0x9}, {0x9, 0x5, 0x9, 0x80000, 0xe46, 0x5}, {0x0, 0xfffffe00, 0xc8ef, 0x2, 0x7fff, 0x2}, {0x9, 0x2, 0x98a, 0x2, 0x8, 0x2}, {0x1, 0xffffffff, 0x9, 0x8, 0x2003, 0x7}, {0x1, 0x0, 0x10000, 0x2, 0xfffffff2, 0xcf38}, {0x7, 0xa76, 0x6, 0xb, 0x81, 0x8}, {0xc, 0x1, 0x8, 0x7, 0x7037}, {0x10, 0x3, 0x1, 0x8000, 0xce8b, 0x3}, {0x8, 0x0, 0x0, 0x1, 0x8, 0x9}, {0x8, 0x60b, 0x5, 0x5, 0x6, 0x80000000}, {0x8, 0x4, 0x2, 0x2, 0xb, 0x7f}, {0xff, 0x6, 0x2, 0xe, 0x4, 0x800}, {0x8, 0x5, 0x31fb92a, 0xff, 0x9, 0x6}, {0x1, 0x6fc6, 0x4, 0x80, 0x2, 0x9}, {0x8a0, 0x2, 0x9, 0x3, 0x4, 0xfffffff8}, {0xd, 0x401, 0x80000000, 0x9, 0xb, 0x5}, {0x2, 0x7, 0xfa8, 0xbf81, 0x7, 0x371}, {0x7, 0x9, 0x4e, 0xffff, 0x5246, 0xda3}, {0x2, 0x0, 0xa, 0xe4, 0x80, 0x6}, {0xe, 0x6, 0x80000, 0x8000, 0x0, 0x20c}, {0xdb, 0x9, 0x5f, 0x2, 0xffff7fff, 0x8000}, {0x0, 0xffffffff, 0xb, 0x6, 0x2, 0x200}, {0x8, 0x8, 0x2, 0x8000, 0x4, 0x4}, {0x9, 0x4, 0x8, 0x0, 0x229, 0xffff}, {0x0, 0xad0, 0x2, 0x80000001, 0x9, 0xe}, {0x4, 0x3, 0x1, 0x100, 0x67, 0x10000}, {0x0, 0x0, 0xc5, 0xffffffff, 0x50, 0x1}, {0x4, 0x2, 0x8, 0x1, 0x8}, {0x8001, 0x4, 0x7ff, 0x1, 0x3, 0x6}, {0x6ec7, 0x7, 0x76, 0x6, 0x3, 0xf}, {0xd123, 0xb, 0x8, 0xf51, 0x4e5, 0x400}, {0x5517, 0xb2, 0x1, 0xd1, 0x8000, 0x2}, {0x4, 0xc, 0x4, 0x6, 0x3, 0x7}, {0x2, 0x401, 0x3a1, 0x0, 0x611fcc14, 0x3}, {0xfffffff5, 0x5, 0x3, 0x3ff, 0x7, 0x5}, {0x8, 0x4, 0xb93, 0x7, 0x4, 0x9da}, {0x6, 0xfde3, 0x8001, 0xff}, {0x1, 0x8, 0x6, 0x7, 0xf9d8, 0x8}, {0x200, 0xea, 0x0, 0x7ff, 0x100, 0x72f}, {0x2, 0x400, 0x10001, 0x3, 0x7, 0x1}, {0x2, 0x7fff, 0x6842, 0x0, 0xdd8, 0xfffffffb}, {0x2, 0x8, 0xc, 0x8, 0xe, 0x8}, {0xfffffffc, 0x1, 0xb, 0x15, 0x7, 0x2}, {0x1, 0x8, 0xffffffff, 0x8001, 0x2}, {0x2, 0x0, 0x1, 0xffffffff, 0x100}, {0x7, 0x7, 0x5, 0x0, 0x2, 0x75}, {0x3, 0x8, 0x9, 0x2, 0x1, 0xe}, {0x0, 0x1, 0x1, 0x2, 0x0, 0x6}, {0x2, 0xf, 0x6, 0x3, 0xd, 0x401}, {0x0, 0x6, 0x4, 0x5, 0x1, 0xe}, {0x3c073483, 0xe, 0x9, 0x3ff, 0x0, 0x8}, {0x9, 0x800, 0xe796, 0x8, 0x4, 0x9}, {0x10001, 0x7ff, 0x1, 0x9, 0x200, 0x3}, {0x6, 0x9, 0xf7, 0x9, 0x8001, 0x1}, {0x0, 0x2, 0xa47, 0x0, 0x4, 0x7}, {0x1, 0x1, 0x9, 0x6, 0x0, 0x9}, {0x8, 0x401, 0x8, 0x0, 0x1, 0x2}, {0x6, 0x100, 0x4, 0x7, 0x7fffffff, 0x1}, {0x1, 0x8, 0x1, 0x40, 0x4, 0xfffffffe}, {0xdf, 0xa, 0x73, 0x9, 0xe, 0xc}, {0x400, 0x5, 0x3, 0x1000, 0x5, 0x9}, {0x1, 0xfffffff2, 0x0, 0x2, 0x2, 0xe}, {0x67d, 0xfffffffc, 0xfffff800, 0x40, 0x80000001, 0x18dc0000}, {0x9, 0x1, 0xf, 0x36, 0x8000, 0xac3e}, {0x1, 0xffc5, 0x8, 0x80000001, 0x1, 0xfffffffb}, {0x2, 0xd7c2, 0xb, 0x6, 0x9, 0x7}, {0x10, 0xb, 0x1000, 0x3986, 0x2, 0x1ff}, {0x2, 0x7fff, 0x3, 0x5, 0xb, 0xdc}, {0x5, 0xffffffff, 0x8000, 0x7, 0xf}, {0x7, 0x0, 0x0, 0x5, 0x0, 0x1}, {0x1, 0x9, 0x7, 0x5b7800, 0x0, 0x3}, {0x3, 0xc, 0x0, 0x3, 0x8, 0x2}, {0x5, 0x0, 0x9, 0x0, 0xef, 0x8000}], [{0x2}, {0x4}, {0x5}, {0x4}, {0x1}, {0x1}, {}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x5}, {0x7, 0x1}, {0x4}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x30289971e4e3159e}, {}, {0x4}, {0x4}, {0x5}, {0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0xe56edc0967ab36d8, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x5}, {0x5}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {}, {0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x108, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xe30552960177dff9}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x7, 0xd5, 0x6, 0x1, 0x8}, 0xa6, 0x81, [{0x4, 0xffffffff, 0xc, 0x4, 0x75, 0x2}, {0x7, 0x2, 0x3, 0x6, 0x1}, {0x9, 0xcdd, 0x30000, 0xb, 0x6, 0x9}, {0x1, 0x1f9, 0x42bf26cb, 0x1, 0xfff}]}, [{0xb7e, 0x5, 0xffffffff, 0x5, 0x80000001, 0x8}, {0xc5f6faf5, 0x6, 0x6, 0xc75, 0xff, 0xf4}, {0x81, 0x70142223, 0x6, 0x19, 0x7fffffff}, {0x6a7e, 0x10000, 0x4, 0x1, 0x12, 0x5}, {0xfffffe01, 0x400, 0x3, 0x7f, 0x5a6e, 0x8}, {0x81, 0x5, 0x6, 0x6, 0x6, 0x7fff}, {0x8, 0x1a1, 0x0, 0xfffffcb0, 0x85, 0x1a}, {0xd, 0x6, 0x1000, 0x0, 0x81, 0x5b}, {0xff, 0x7, 0xee30, 0x5, 0x9, 0xfff}, {0x0, 0x40, 0x3, 0xd3c4, 0x144d, 0x80000001}, {0x5, 0x80, 0x8, 0x9, 0x6, 0x56a0}, {0x6d5b, 0x8, 0x1000, 0x7ff, 0x3, 0x8}, {0xffffffff, 0xa, 0x928, 0x401, 0x7, 0x1}, {0x12, 0xffff5efb, 0x7fff, 0x1c7, 0x3ff, 0x3ff}, {0x9, 0x9, 0x5, 0x80000000, 0x2}, {0x8, 0xfffffff9, 0xffffffff, 0x4, 0x1, 0x8001}, {0x3ff, 0x40, 0xa48, 0x11d6, 0x9, 0x38}, {0x8, 0x0, 0xffff8001, 0x1ff, 0x5, 0x5}, {0x80000001, 0x62, 0xbe, 0x2, 0x5, 0x3}, {0x2, 0x8165, 0x6, 0x1, 0x1ff, 0x1}, {0x5, 0x13, 0x3, 0xfffffff7, 0x0, 0x4}, {0x3, 0x3, 0x6, 0xd85e, 0x80000000, 0x8}, {0x6, 0x2, 0x4, 0x33, 0x9}, {0x9, 0x1, 0x5, 0x10, 0x9, 0x98a}, {0x5, 0x2, 0xf08, 0x9, 0x8001, 0x6}, {0x3, 0x3, 0xffff, 0xce00, 0x401, 0x7}, {0x0, 0x6, 0x5, 0x9, 0x100, 0x6}, {0x6, 0x6, 0xa17, 0x0, 0x1, 0x1}, {0x600c, 0x200, 0x4, 0xff, 0x0, 0x4}, {0x0, 0xfffffffd, 0xddc, 0xd9, 0x400, 0x7}, {0x2, 0x0, 0xfffffc00, 0x5, 0x3, 0x101}, {0x5, 0x1, 0x200, 0x36, 0x9, 0xe}, {0x7, 0x7, 0x4, 0xb1}, {0xb32, 0x1, 0x10000, 0xc1, 0x6, 0x2}, {0x21, 0x8, 0x7, 0x5, 0x34af2305, 0x2}, {0x0, 0x94, 0xfae, 0x400, 0x6, 0x7}, {0x3c, 0x7, 0x1, 0x8, 0x2905, 0x2}, {0x1, 0x0, 0x0, 0x6, 0x7fff, 0xff}, {0x2c, 0x5688, 0x3, 0x22c5, 0x0, 0x2}, {0x8, 0x3f, 0xe3f6, 0x8f5, 0x1ff, 0x7}, {0xde, 0x6, 0x3, 0x10001, 0x16c399ce, 0xfffffffc}, {0xf0ce, 0xfffffff8, 0x80000001, 0xb, 0x4, 0x4}, {0xf74, 0x3, 0x3, 0xfffffff9, 0xd, 0x9b}, {0x4b91, 0x5, 0x6, 0x7, 0x3, 0x4}, {0x2, 0xe0000000, 0x6, 0x7, 0x97d, 0xffffff80}, {0x6cf, 0x9, 0xffff8000, 0x91b, 0x2, 0xffffff1c}, {0x2, 0x1, 0x0, 0xe1c, 0xd2dc, 0xc35}, {0x4b1b7507, 0xfff, 0xd5, 0xf, 0x5, 0x1000}, {0xffffde8f, 0xfffffff8, 0xcc, 0x5, 0x5, 0x7ff}, {0x8, 0x10, 0x40, 0xd, 0xf, 0x7}, {0x831e, 0x40, 0x1, 0x42, 0x0, 0x9}, {0xffff7fff, 0x2, 0x6, 0x4010000, 0x4, 0x4}, {0x7ff, 0x0, 0x100, 0x2a, 0x8, 0x4}, {0x3, 0x7, 0x4, 0x8, 0x6, 0x80000001}, {0x3, 0x6, 0xfffffff7, 0x0, 0x4da, 0x7}, {0x2b4d, 0x3, 0x1, 0x1, 0x6, 0x8}, {0x506f864d, 0x8, 0x9, 0x7, 0x7, 0x3}, {0x5, 0x6, 0x7, 0x6, 0x7, 0x5}, {0x0, 0x80, 0x8000, 0x3, 0x9, 0x5}, {0x9, 0x4386, 0x7fffffff, 0x0, 0x2, 0x2}, {0x0, 0x5, 0x101, 0x100, 0xb, 0x1}, {0x5, 0x12, 0x8, 0x5, 0x4, 0x8}, {0x1, 0x0, 0x5, 0x4, 0x4, 0x2}, {0xaa, 0x5a1e00, 0x3, 0x9, 0x0, 0x9}, {0x5, 0xfffffffd, 0x4, 0x8, 0x2, 0xa}, {0xe102, 0x401, 0x8, 0x7f, 0x1, 0xc}, {0x2, 0x5, 0x1, 0xf8, 0xfffffff8, 0x1}, {0x7, 0x0, 0x85b, 0x80, 0x4, 0x7fffffff}, {0x4, 0x3ff, 0x57e7, 0xb022, 0x101, 0x8}, {0xd, 0x9, 0xffff7046, 0xfad, 0x0, 0x42}, {0x3, 0x5, 0x7, 0x3, 0xae77, 0x3}, {0x6, 0xc00, 0xf, 0x80000000, 0x2, 0x4}, {0x5, 0xfffffffd, 0xc7, 0x7, 0x3754, 0x8}, {0x0, 0x6, 0x363b, 0x2, 0x4, 0x4}, {0x4, 0x8000000, 0xa6b7, 0x7, 0x7, 0x2}, {0x40, 0x1, 0x7, 0x40, 0x1, 0x400}, {0x400, 0x9, 0xd102, 0x9c, 0x40000, 0x7}, {0x2, 0x0, 0x288, 0xba9, 0x4, 0x3}, {0x7, 0x0, 0x7, 0xe, 0x3, 0x781e}, {0xb9ae, 0x800, 0x3ff, 0x0, 0x3, 0x6}, {0x1, 0x3, 0x9, 0x9, 0x8, 0xf640}, {0x2, 0xffffffff, 0x7fc1, 0x1000, 0x6, 0x7}, {0x9, 0xca, 0x7, 0x1, 0x0, 0x2}, {0x6, 0xfffffff7, 0x2, 0x80, 0x280000, 0x3}, {0x8001, 0x3, 0x4, 0x1, 0x2, 0x6}, {0x8, 0xffffffff, 0x6, 0x0, 0x7, 0x2}, {0x0, 0x2, 0xc75, 0x5, 0x8, 0xd}, {0xca6, 0x3f, 0x8, 0xfffffffc, 0x8, 0x9000}, {0x4, 0xffff, 0xbfc, 0x1, 0x100, 0x8}, {0x8000000, 0x3, 0x8, 0xa86, 0x0, 0x5}, {0xfffffffd, 0x0, 0x6, 0x7, 0x1, 0x7}, {0x1, 0x3, 0x1ff, 0x3, 0xfffffff9, 0x6}, {0x80000001, 0x82, 0x8, 0x7, 0x9, 0x3}, {0x9, 0x9, 0x1, 0x6, 0xfffff544, 0x5}, {0x5, 0x4, 0x4, 0x7fffffff, 0x650, 0x3ff}, {0x3, 0x1, 0x5, 0xb4e, 0x3, 0x3}, {0x1, 0x3, 0x10000, 0xa8, 0x2, 0x2}, {0x80000001, 0x9, 0x5, 0xe84, 0x1de0, 0xfffff000}, {0x2, 0xfffffffe, 0x1, 0x4, 0xffff, 0x3}, {0x80000000, 0x7, 0x2400, 0x7fff, 0x3ff, 0xd002}, {0xb2, 0x1, 0x9, 0x6b, 0x1ff, 0xffff}, {0x2, 0xfffffffc, 0xf, 0xdb, 0x7fff, 0xfffffff7}, {0x0, 0x9, 0xc, 0x3, 0xfffffffa, 0x80000001}, {0x0, 0x0, 0x53, 0x6, 0x8, 0x4}, {0x7fff, 0x9, 0xfffffffe, 0x4, 0x5, 0x10000}, {0x4, 0xf98, 0x0, 0x60, 0x10, 0xb247}, {0x3, 0x6a, 0x9, 0x800, 0x5, 0x100}, {0x5, 0x3, 0x5c, 0x5, 0x0, 0x3}, {0x9, 0x3, 0xffffffff, 0x8, 0x80000000, 0x18000000}, {0xa, 0x5, 0x1, 0x6, 0xb, 0x6}, {0xa, 0x9, 0x107, 0x50b, 0xf421, 0x3}, {0xffffff36, 0x5, 0x8, 0x9, 0x6, 0x2}, {0x811, 0x0, 0x5, 0x0, 0xff, 0x3}, {0x7fff, 0x3, 0x1, 0xe, 0xff, 0x8}, {0xfffffffc, 0x8, 0x2, 0xfffff402, 0x7, 0x9a2f}, {0x4, 0x0, 0x5, 0x3, 0x3}, {0xfff, 0x9, 0x3, 0x0, 0xfff, 0xf71}, {0x6, 0x0, 0x2, 0x6b38, 0x7fffffff, 0x5}, {0x7, 0x1, 0x5, 0x2, 0x101, 0x8001}, {0x4, 0x7, 0x7, 0x2, 0x4, 0x3}, {0x9, 0x3, 0x7, 0xe69b, 0x8d0, 0xfffffff9}, {0x8, 0x7, 0x8, 0x6, 0x9, 0x1}, {0x7, 0x2, 0xffff, 0x1, 0x3, 0x7f}, {0x9, 0x5, 0x10, 0x10001, 0x3, 0x80000001}, {0x7, 0x7, 0xb, 0x40, 0x100, 0x7}, {0x3, 0x18, 0x1, 0x4, 0x8000, 0x8}, {0xff, 0x30, 0x0, 0xe, 0xac9, 0x6}, {0x0, 0x6, 0x8, 0x8, 0x9, 0xfffffffe}], [{0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {}, {0x6}, {0x4}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x1}, {0x2af27fc47c01e156, 0x1}, {0x1}, {0x5}, {0x5}, {0x4}, {0x1, 0x2}, {0x1}, {}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x6}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x5}, {0x3}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xff, 0xa7, 0xffffffffffffffff, 0x6e, 0xf}, 0x3, 0x4, [{0x1, 0x66, 0x7fff, 0x3, 0x0, 0x2}]}, [{0x9, 0xa5, 0x7ff, 0x593, 0x3, 0x7}, {0x4, 0xa, 0x0, 0x4, 0x7, 0x6}, {0x8, 0x7, 0x7, 0x9, 0x7, 0x7fffffff}, {0x17, 0x9, 0x4, 0x91e, 0x8001, 0x7}, {0xfff, 0xc8, 0x3ff, 0x3, 0x80000000, 0xfffffffe}, {0xffffffff, 0x80000000, 0x9, 0x5, 0x3ff, 0x50000}, {0x10000, 0x6, 0x5, 0x8, 0x4, 0x80000000}, {0x9, 0x8, 0x800, 0xe1c, 0x9, 0x9}, {0x6, 0x2, 0x10001, 0xe, 0x8, 0x4}, {0x2, 0x0, 0x45, 0x8, 0xa576, 0xfff}, {0x5, 0x1, 0x4, 0xfffffff9, 0x2, 0x100}, {0xb, 0x1, 0x3, 0x3, 0x0, 0x7}, {0x81, 0x200, 0x1000, 0x0, 0x3ff, 0xfffffffa}, {0x1, 0x2, 0xd1a, 0x400, 0xa, 0x9}, {0x9, 0x8, 0x400, 0x2, 0x7, 0x7}, {0x2, 0x912, 0x3, 0xc9f, 0x414, 0x1}, {0xd74, 0x6, 0xfd9, 0x7ff, 0x3, 0x6}, {0xffff, 0x0, 0x7fffffff, 0x40, 0x2, 0x10}, {0x5, 0x81, 0x7, 0x7, 0x1, 0x1}, {0x1, 0xe0f, 0x7fff, 0x5, 0x2, 0x4}, {0x9, 0x5, 0x4d, 0x96, 0x7, 0x6}, {0x7, 0x7, 0x2, 0x8, 0xf95, 0xc84}, {0x3, 0x2, 0xba17, 0x2, 0x7, 0x1}, {0xa2d, 0x0, 0xa01, 0x1, 0x80, 0xa}, {0x4, 0x5, 0x6, 0x343, 0x8, 0x5}, {0x6, 0x3, 0x200, 0x1, 0x3, 0x80000001}, {0x3, 0x2, 0x200, 0x1, 0x1, 0xe}, {0x6, 0x5, 0x4e69, 0x401, 0x7fff, 0x1}, {0x4, 0xfffffffb, 0x4, 0x1, 0x50, 0xae9d}, {0x6, 0x800, 0x3ff, 0x9, 0x0, 0x9}, {0xd85, 0x7ff, 0x1, 0x2, 0x9, 0xff}, {0xcb, 0x1, 0x7fff, 0x0, 0x1, 0xbf}, {0x10, 0x46, 0x7cf1, 0x9, 0x3, 0x8}, {0x9, 0x6, 0x5, 0x8, 0x40, 0xd}, {0x80, 0x0, 0x4, 0x6e1, 0x6, 0x2fda7d90}, {0x400, 0x7, 0xffffff01, 0x8, 0x20000000, 0x9}, {0x10, 0x1, 0x5, 0xfffffffe, 0x70, 0x7b}, {0x5, 0x2, 0x40, 0x9, 0x3d, 0xc95}, {0x7f, 0x2, 0x4, 0x8, 0x100, 0x85}, {0x9, 0xf45, 0x7, 0x6, 0x800, 0x80000000}, {0x1000, 0x38, 0xa4, 0x4, 0xfffffff8, 0x100}, {0xfffffffe, 0x4, 0x5, 0x81, 0xffff0000, 0x3}, {0x8, 0xff, 0xcd, 0x9, 0x3ff, 0x1}, {0xc, 0x81d, 0x4, 0xffff1a2f, 0x0, 0x2}, {0x1, 0x9, 0xffff, 0xffffff10, 0x4, 0x4}, {0xda6, 0xd27, 0x4, 0x300, 0x0, 0x4}, {0x101, 0x0, 0x8, 0x8, 0x8, 0x9}, {0x2, 0x1ff, 0x2, 0x400, 0x9, 0x10}, {0x1ff, 0x10, 0x1, 0xffffffff, 0x3, 0xc00000}, {0x800, 0xc4, 0x1, 0x1, 0x3ff, 0x1000}, {0x3, 0x2, 0xa, 0x8000, 0x200, 0xfffffffe}, {0x8, 0x7, 0x8000, 0x9, 0x10000, 0xfffffffb}, {0x9, 0x0, 0x0, 0x7, 0x765, 0xcfd}, {0xc, 0x8618, 0x4, 0x7, 0x4, 0x2}, {0x8000, 0x542e, 0x10, 0x5, 0x6101, 0x8}, {0x1, 0x2, 0x2, 0x7f, 0x4, 0x5}, {0x8, 0x8000, 0x0, 0xb, 0xfffffff1, 0xfffffff7}, {0xa, 0x5, 0x7, 0x3, 0x855, 0x117e}, {0x9, 0x4, 0x8, 0x4, 0x9, 0x8}, {0xa3, 0xb503, 0x8, 0x1, 0x101, 0x9}, {0x0, 0x6, 0x7, 0x1, 0xc9, 0xffe00}, {0x8000, 0x91b, 0x5, 0x1, 0x9, 0xec8}, {0x7, 0x3, 0x36, 0x7fff, 0x319a, 0x1}, {0x4, 0x7e, 0x81d6, 0x5, 0x1000, 0x2}, {0x62c1, 0x7f, 0x4, 0x9, 0x6, 0x5}, {0xeb8, 0x1, 0x0, 0x2, 0x9, 0x1}, {0x7, 0x1, 0x4, 0x7, 0x4243, 0x2}, {0x0, 0x4, 0x4, 0x759, 0x72b5, 0x4}, {0x9, 0x868b, 0x6, 0x2, 0x2, 0x2}, {0x3, 0x0, 0x72, 0x6, 0x7, 0x1ff}, {0x4, 0xffff, 0xfffffeff, 0x80, 0x9, 0x3}, {0x325c, 0x8, 0xb, 0x50c2, 0x7fffffff, 0x101}, {0x9, 0x2, 0x3, 0x6, 0x2, 0x7}, {0x0, 0x2, 0x3, 0xffffffff, 0xb, 0x7}, {0x1, 0x9, 0x8, 0x80000000, 0x3, 0x2}, {0x5, 0x51, 0xad6, 0x6, 0x5, 0x9}, {0x0, 0x7, 0x4, 0x9, 0x7ff, 0x20a3f259}, {0x0, 0xca, 0xfff, 0x5, 0xffffff80, 0x5}, {0x6, 0x6, 0x6, 0x10001, 0x5, 0x1}, {0xffff4d8d, 0x1, 0x23, 0x401, 0x7, 0x8}, {0xf991, 0x2, 0xbcb, 0x4, 0x4, 0xffff}, {0x202000, 0x2f30, 0x2140, 0x3, 0x4, 0x3}, {0xf4d, 0xffffffff, 0x7c, 0x0, 0x7, 0x3}, {0x7ff, 0xcd, 0xa9, 0x4, 0x9, 0x7}, {0x40, 0x0, 0x3ff, 0x10001, 0xffffff07, 0x2}, {0x2, 0x4, 0xe, 0x91, 0xffffff36, 0x80}, {0x0, 0x9, 0xfffffff7, 0xc, 0x9, 0x6}, {0xae, 0xc, 0x1, 0xffff, 0xfff, 0x9}, {0x0, 0xe, 0x4, 0x3, 0xfffffff8, 0x9}, {0x9, 0x1, 0x4, 0xb, 0x2, 0x2}, {0x70, 0x2, 0x7f, 0xb0c1, 0xf}, {0x10, 0x8, 0x39, 0xfffffffe, 0x5, 0x9}, {0x1, 0x7, 0x3, 0x9, 0x6, 0x2f7f339e}, {0x8, 0x80000001, 0x7, 0xffff8ade, 0x8, 0x7}, {0x9, 0x6, 0xe, 0x7, 0x0, 0x7}, {0xfffffc00, 0x9, 0x101, 0xfffffffe, 0x7, 0x4}, {0x9, 0x2, 0x1, 0xfff, 0x1, 0x3c4}, {0x9, 0x3ddfacde, 0xfffffffe, 0x1, 0x97, 0x3ff}, {0x1, 0x4, 0xfffffff7, 0x2, 0x800, 0x4}, {0x200, 0x8, 0x5, 0x2175, 0x6e96, 0x7}, {0x9a3, 0x100, 0x4, 0x2d, 0x7, 0x1}, {0x101, 0x0, 0x0, 0x3ff, 0x4, 0x8001}, {0x80000001, 0x2, 0x3, 0x1ff, 0x0, 0xe}, {0x0, 0xc, 0x8, 0x40008000, 0x9, 0x9}, {0xa, 0x7, 0x8000000, 0x9, 0xbe8, 0x5958bbdb}, {0x1000, 0xffffffff, 0x5, 0x1, 0x2, 0xf}, {0x8, 0x8, 0x0, 0x1, 0x49, 0xd7}, {0x3, 0xb2df, 0xfc000000, 0x1, 0xfffff801, 0x87aa}, {0x9, 0x8, 0x10000, 0x7cd, 0x1, 0x6}, {0xfffffff8, 0x4, 0x9, 0x3, 0x4, 0x101}, {0x9, 0x8, 0x0, 0x5, 0x0, 0xffffffff}, {0x9, 0x80000001, 0x1, 0x200000, 0x6, 0x46}, {0x1, 0x1, 0x1, 0x100, 0x0, 0x81}, {0x9, 0x0, 0x10001, 0x800, 0x2, 0x7f}, {0x3, 0xe, 0x1, 0xffffa323, 0x7fffffff, 0x8}, {0x9, 0x2, 0xb, 0x8, 0x7aa, 0xfd}, {0x40, 0x7f, 0xaa98, 0xc73e, 0xb, 0x9}, {0xc1, 0x8, 0x4, 0x8, 0x9, 0x100}, {0xf159, 0x5, 0x0, 0x80, 0x3, 0x8}, {0x8, 0xf27, 0x7, 0xffff, 0x3, 0x8}, {0x3, 0x3903, 0xffffff83, 0x2, 0x0, 0x80000000}, {0xff, 0x4, 0x1ff, 0x5, 0xfff, 0x6}, {0xc, 0x400, 0x5, 0x8, 0x7, 0x2}, {0xffffffff, 0x2, 0x7, 0xe, 0x3, 0x10001}, {0x0, 0x10, 0xd88, 0xc, 0x2, 0x2}, {0x8, 0x351c, 0x3, 0x5, 0x80000000, 0x33b60375}, {0x8, 0x4, 0xb, 0x8, 0x7, 0xe2}, {0x0, 0x2, 0x4, 0x9, 0x3, 0x6e}], [{0x4, 0x1}, {0x1cf14cde5fe2c6a5}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x5}, {0x3}, {}, {}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x3}, {0x2}, {}, {0x5}, {0x5}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x2}, {0x6}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x3}]}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xc9, 0x5, 0x7, 0x3, 0x9}, 0xb, 0x10, [{0x10000, 0x16, 0x18b, 0x24, 0x407, 0x481b61a2}, {0xdf3, 0x4, 0x0, 0x2, 0x2, 0x1}, {0x0, 0x2, 0x1, 0x0, 0xd, 0x5}, {0x2b, 0xd1, 0x80000000, 0xffff8000, 0x7, 0x8e}, {0x2, 0x8, 0x8001, 0x6, 0xffffffff, 0x2}]}, [{0xdd, 0x6, 0xffffff0f, 0xffff, 0x8, 0xfff}, {0xcf1, 0x7, 0x7fffffff, 0xdf, 0x1, 0x7}, {0x8, 0x2, 0x8, 0x7f, 0x5511, 0x5}, {0x101f3fe5, 0x8, 0xff, 0x1, 0x0, 0x9}, {0x3ff, 0x6, 0x1ff, 0x400, 0x7, 0x1}, {0x25f4, 0x2, 0x2, 0x3, 0x0, 0x2}, {0x10000, 0xf, 0x5, 0x5, 0x12000, 0x9}, {0x7, 0x1, 0x7, 0x9, 0x5, 0x4}, {0x80, 0xff, 0x1, 0x3a, 0x43, 0x2}, {0x9, 0x0, 0x40, 0x7f, 0x5, 0x8c}, {0x0, 0x3, 0x0, 0x9, 0x216, 0x931}, {0xa9d, 0x6, 0x2, 0x7, 0x7, 0xfffffffe}, {0x6611, 0xf8, 0x0, 0x9, 0x8, 0x9}, {0x80, 0x2, 0x7, 0x6, 0x10, 0x800}, {0x8, 0x4, 0xff, 0x9, 0x7, 0x400}, {0x3062, 0x0, 0x2, 0x4, 0x5, 0x7}, {0x7, 0x8, 0x6, 0x5, 0x1, 0x4}, {0x80000001, 0x8, 0xd, 0xfffffffb, 0x1, 0xd285}, {0x10, 0xd, 0x7f, 0x0, 0x5, 0x6}, {0xfffffe01, 0x7, 0x8000, 0x5, 0x6, 0x4}, {0x9, 0x7fff, 0x3, 0x1, 0x190, 0xfffffedb}, {0x0, 0x10d, 0x89, 0x9, 0x1000}, {0x800, 0x4, 0xfffffff8, 0x4, 0x4, 0x8}, {0xa29, 0x0, 0x2, 0x4, 0x6e, 0x1}, {0x10, 0x5, 0x400, 0x6, 0x3, 0x10000}, {0x1800, 0x2, 0x9, 0x4, 0x5, 0x9}, {0x7ff, 0xfffffff9, 0x216c, 0x2, 0x400, 0x8}, {0x6, 0x100000, 0x4, 0xdf0, 0x5, 0x4e4b}, {0x1, 0x5, 0x1, 0x62f, 0xfffffffa, 0x3b07}, {0x6, 0x1, 0xffff2f9c, 0xc2, 0x7}, {0x4, 0x81, 0xb7, 0x7fff, 0x0, 0x4}, {0x2, 0x4d03, 0x9f, 0x2, 0x4, 0x800}, {0x80, 0x4, 0x7bc8, 0x4, 0x23, 0x7}, {0x2, 0xe7d6, 0x45, 0x1231, 0x6, 0x80000000}, {0x7fffffff, 0x40, 0xf, 0x100, 0x9, 0x80000001}, {0x3, 0xfff, 0x3, 0x9, 0x51, 0x2}, {0x4, 0x9, 0x80000001, 0x31e7, 0xfffffffb, 0x6}, {0x10, 0x5, 0x100, 0x5, 0x7}, {0x9, 0x6, 0xfffffffa, 0x6, 0x4, 0x4}, {0xfff, 0xffff, 0xfffffff7, 0x200000, 0x7}, {0x1, 0x8, 0x5, 0x8, 0x1ff}, {0x80000000, 0x8001, 0x7, 0x7, 0x2, 0xfffffff9}, {0x6, 0x6, 0x4, 0x2, 0x7, 0x8}, {0xfffffff8, 0xa, 0x1, 0x6, 0x3, 0xa3}, {0x8, 0x7df, 0x8, 0x800, 0x380, 0xfffffffd}, {0x5, 0x1, 0x8, 0x9, 0x8, 0xffff}, {0x7, 0x4, 0x80000000, 0x3e2, 0x6, 0x9018}, {0x5, 0x3, 0xd, 0xff, 0xa, 0x80000000}, {0x81, 0x3, 0x3, 0x9, 0x9, 0xffffffff}, {0xb2, 0x9, 0x8, 0x8, 0x7, 0x2}, {0x800, 0x10, 0x5, 0x8241, 0xfff, 0x8}, {0x1, 0x8, 0xfffffffa, 0x10000, 0x7, 0x8}, {0x7, 0x826, 0xf, 0x3, 0x1, 0x10000000}, {0x6, 0x80000001, 0x40, 0xffffbdf0, 0x9, 0x8}, {0x20000000, 0x8001, 0x6, 0x8, 0x6, 0x7ff}, {0x6, 0x6b, 0x9, 0x2e9, 0x7, 0x5}, {0x4, 0x6, 0xc4a, 0x8001, 0x0, 0x4}, {0xde, 0xffffff45, 0x8, 0x8, 0x2, 0x7}, {0x7, 0x5, 0x3, 0x4, 0x7, 0x80}, {0x3, 0x7, 0xc0, 0x167400, 0x8, 0x4000000}, {0xffff8000, 0x8, 0x1fb, 0x80, 0x8, 0xffffffff}, {0xf, 0x7fff, 0xffffffff, 0x1, 0x7fffffff, 0x2}, {0x10000000, 0x800, 0xe, 0x6, 0xa70, 0xc000}, {0x266a, 0x2, 0x80000000, 0x0, 0x5, 0xa}, {0x5, 0x9, 0xbd, 0x81, 0x8, 0x81}, {0x3f97, 0x5, 0x4, 0xfff, 0x9, 0x8}, {0x9, 0x5f4, 0x43e8, 0x1ff, 0x1, 0x5}, {0x4991, 0x8, 0x1000, 0x1, 0x7, 0xff}, {0x5cb, 0x2, 0x80000001, 0x4, 0x2, 0x3}, {0x556, 0x8, 0x9, 0x4, 0x2, 0x6}, {0x9d, 0x7, 0x8f16, 0xf3, 0x7, 0x5}, {0x424651fc, 0x9, 0x10000, 0x5, 0x1, 0x2}, {0x9, 0xfffffffc, 0x9, 0x8, 0x3, 0x6}, {0x4, 0x9, 0x6, 0x800, 0x8, 0x4}, {0x80000000, 0x5c, 0x2, 0x7, 0x9, 0x7}, {0x8, 0x7fffffff, 0xeceb, 0x329, 0x800, 0xfffffffe}, {0x2, 0x1, 0x2, 0xffff, 0xfffffff9, 0x200}, {0x80000000, 0x1, 0x0, 0x81, 0x7fff, 0x1}, {0x3, 0x4, 0x3, 0xb4, 0x6, 0x7f}, {0x401, 0xff, 0x8, 0x7fffffff, 0x41e0, 0x4}, {0xe, 0x7, 0xb0, 0x5, 0x9, 0x9}, {0x7fff, 0x7, 0x8, 0x400, 0x6f11, 0x7afb}, {0xfff, 0x3, 0x8001, 0xa70a, 0x8eac, 0xe}, {0x1, 0x371, 0x2, 0x0, 0x1000, 0x4}, {0x3, 0x3, 0x3, 0x6, 0x0, 0x1}, {0xff, 0x3ff, 0xb55, 0x4, 0x7, 0x1d5da3f5}, {0x8000, 0x1, 0x9, 0x5, 0x2cf, 0x9}, {0x4, 0x5, 0x3, 0x7, 0x101, 0x80000000}, {0x1, 0x8b, 0x3, 0xfffe00, 0x2, 0x7}, {0xfffff800, 0x0, 0x5, 0x7, 0xe, 0x7}, {0x9, 0x8, 0x10, 0x830, 0x8, 0x633}, {0x2f, 0x9, 0xd, 0x6, 0x5, 0x101}, {0x7ff, 0x100, 0x7, 0x3, 0xd, 0x3}, {0xfffff001, 0x81, 0x5, 0x10000, 0x5, 0x7}, {0x4, 0xf6, 0x55e, 0x4, 0x9321, 0x9}, {0x97, 0x6, 0x74d, 0x80, 0x77, 0x2}, {0x5, 0x1, 0x1f, 0xa318, 0x5, 0x8}, {0xfffffffb, 0x9, 0x3, 0x4, 0x0, 0x7}, {0x9, 0x4, 0xfffffffa, 0x400, 0x1, 0xb}, {0x86, 0x5, 0xfffff7d5, 0xff, 0x2, 0x9}, {0x8000, 0x1000, 0x9, 0xb, 0x5, 0x4}, {0xffff704d, 0x6, 0x41d3, 0x8001, 0x4, 0x80000000}, {0x7, 0x101, 0x5b, 0x7fff, 0x4, 0x1}, {0x9, 0x6, 0x0, 0x521, 0x5, 0xd}, {0x101, 0x0, 0x6, 0x640000, 0xffffffa5, 0x9}, {0x280000, 0x80, 0x0, 0x5, 0xf, 0x6}, {0x100, 0xffff985a, 0xc2, 0x8, 0x40, 0x7}, {0x5, 0x5, 0x40000000, 0x100, 0x6, 0x1ff}, {0x7, 0x400, 0x9, 0x4, 0xe, 0x7}, {0x3, 0x9, 0x5, 0x8, 0x4, 0xfff}, {0x10000, 0x3, 0x10000, 0x3, 0xeed5, 0x35}, {0x28, 0x100, 0x8, 0x2143, 0x7, 0x1000}, {0x8000, 0x80, 0x8, 0x0, 0xffff, 0x7a22}, {0x10, 0x1, 0x0, 0x5, 0x9, 0xffff}, {0x4, 0x7ff, 0xb5c, 0x359, 0xb36, 0xc}, {0x8, 0x3, 0xfdd, 0x3, 0xb0b8, 0x8}, {0x2, 0x3ff, 0x9, 0xf, 0xfff80000, 0x9}, {0x26, 0x80000000, 0x0, 0xe, 0x1000, 0x10000}, {0x10, 0x3, 0xa5, 0x6, 0x5, 0xff}, {0xe76, 0x9, 0xfffffffa, 0x6, 0x8, 0x6}, {0x4, 0x80, 0x7, 0xa, 0x9, 0x7fffffff}, {0x1, 0x7, 0x9, 0xfff, 0x9, 0x4}, {0xa, 0x8, 0xff, 0xfffffffb, 0x200, 0x3}, {0x800, 0x5, 0xb87, 0x5, 0x7e, 0x9}, {0x100, 0xff, 0x1, 0xf754, 0x6, 0xbb2}, {0x1ff, 0x6, 0x80000001, 0x7, 0x48, 0x3}, {0xfff, 0x101, 0x4, 0x80, 0x2, 0x80000001}, {0x4, 0x80, 0x6, 0x4, 0x6, 0x39}], [{}, {}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x2}, {0x5}, {0x3}, {0x4}, {0x3}, {}, {0x5}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {}, {}, {0x6}, {0x1, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x7}, {0x2}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x5}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x6}, {0x4}, {0x4}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}], 0x1}}]}, {0x85, 0x6, "a31d52b79559e8110d0f39874b3ea33abb71adfb30526eae2a5891cf6b388d6010f360c92e9a3ba8a3a604e50a186e37477a962c1be97219bb9105d7c491ad27467a6c6ca5de88d43e478ff22df9fa957059e445275bc231a747e0dbe12b8e1b159bba808b5b599877489063df927e15b24b4a536bc5e02de5e911de5874b07edc"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0xc8, 0x4, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x10000, 0x20000000, 0x9, 0x40}, @loopback, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x101, 0x1, 0x7, 0x4}, @dev={0xac, 0x14, 0x14, 0x25}, @empty, 0xffffff00, 0x1}}]}, {0x4f, 0x6, "88c0c67e387c20bec88a2d25642f2e590f8b3011efeffa45191589151c0c164f1ecbc081fb67e947d0168db364116c29fb51df2cb379ac578d904af15a97a758c7464edfd61ec52ba8f8c3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x98, 0x1f, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f5}]}, {0x41, 0x6, "c9a93466b257144fe0a78a417334f71ed7abbfdaced9fafc8cf1d17c81a6980fe9366ed971f4a0116e1b6c54c9333edff3d9142b1392124e2fcf8b5ba2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x144, 0x4, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '-*o%-\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}]}, {0xe7, 0x6, "48d394699ba08479a6d64b9283b7fcda067134dad251549cef5476bb0980973a6f597babe09fdbb662e0750f5dfd794f7471e98482f83851925268901530099bc164c5735122efc53415ba2e66938c48de24d20df68760b399a2679b05a1a8b8c76348d50f929c3db492871b690fc7cd7322a852f02c4fa801a81731348d6b69c6b520dc6e6d0843065822c89deffc43d04979984cc1e58915b8abf3d12a89acae5f5690915f6a5c875c00d47aafe25717f6f4c41e73f9886d3add4915740e0aa7da1f34bd697b1afd46f819fd9795057a8096baa0e0fee33b442c421e224ae3ef0a10"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x168, 0x19, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x82, 0x9, 0x6, 0x1c96000, 0x3ff}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x7, 0x7, 0x7fffffff}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x20, 0x9, 0xa267efa03b4e2aa3, 0x1, 0xa5a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x6, 0x7ff, 0xb7}, @local, @empty, 0xff000000}}]}, {0xa0, 0x6, "6756f40fdd5c08517e3df9010ce0b558dc9973840294ca6b0e3d174e49a175d1db623b372a5aed835016ad8695435937355f98a64eeda545bca6f8586a9fe5fdd91da2ea1a88f6e9e64e304d24d846542117620804da7217152dce47f8e537c0e2cb4d1567ed28a1242c56dc818cf642bc235cb72060b87a20701d42e49f1c255ffbd112b0a47469b150c1737681e088964d43b99c050677dcdbc12e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x134, 0x1a, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xc}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="4e6cf67d835b"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6}]}, {0xe2, 0x6, "3aec168e49d0aee0f8efb3f4e4580ceba89633eec52a54afe14ad350cd1709d875b5183682060bf1ebd8a9335127f18389ca9743413524581b70a3c4e86c0ff029abb009ee132e27c5d567eca43c37a887451f9ccfc512f73f5c174949d64d380e0338b71a4f219bbef0781ef15e242e9b02ad7d3df53ad57ea615bbc27961a7f31c355800eb97d1aa2a4434139bbfe4f0e7053303aa779d7163ff42fa6ce4ff581697032e75a16408794ab1846bcddf5b458246c0965d9bb1713617be4bfa5ba9f68eb7f18a534cf475089abe032535f1baf995256de51e9bec75a6f7a7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x1058, 0x1d, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x3ff, 0x6, 0x3}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10000}]}, {0x1004, 0x6, "6164ef5863b0957ebae44548ad8db6e581462b7d851eef91b3e019dd13415b76265182589020fdfef928a378dee17445488943c1972c7035164d63a968bf1e4eeb74a0f7e5e871ee4c145ebd0a85a5322034290c4afe98b4d46c041c6c83fa2d275e8fe96535832f568fb19fad0cf20cb22103d3b7d91abf0e29567777c51bccc63872570db0b347c587b83f336dd786b22e6f1606f67c6bdfa511acfd1ee7162a346db5ded318ecc5bc84d9cff727914b6f2030865dc3a1ba9889986502450cc445bedaf623717e0b3ef37c6f09d68c64ba9812631ee3cc494b25458d4f0def8d9063258918a290b3d6bc2bc26c6d08bf2dc7a3d031733cc2f73985077b7dd49b07583262bad268ec41bce7881a3339bff0aebf0743a88531aec99d5499364c186f0b56d234ff396403ae31e7ecb7118e5dd38964820cd6a72d79ca6a626b3fdc8cca78e5ef47e1d9db35d0b959e9cafff562b4250dae465638b89af4b20deb52bd04ef1f423ef4cb1db5da6aa592fd66de78df0b01f474a8748110c3dba8f4b92f5ff90e8d57c0d4caebcfd91fb837021e385eefde5add8bfa9b54fe175ebe8ce5321a8da368e06a21a07d90fd77feae2d62e25643db92377641efa6af526c149230b68e210e35d7d157d592c1ab3b9b7c36492e4218e786a6fcf7a1a5fb9185f9df06f881b9d041f043cc50c8b814f9d8667881e97a941900a9db54ea637250d595f961c9b14ef7a56c3de290549dd9e5bc04cbcdc6472aba5c3cfbe68a0911cc2093faeb8f0701f968ffea18c4fe1f4c94d3694411cfa4ca46163f0c5d79e2b5aaa92484b0ec7b7053e17ce54c76059bfed53721b51ffeb66c72c906024a2fee4dc664bb8b682b9c816528ab978e317d3a8a0d0ed3f1d5e5fac81cc61bb84ee836090008ffed9c4bed60f23821f07efcf1f6257ec26e0e3873548ff86da4aca2161e4760cca6f1eab7a6d9a4497ef2b6f27c1926583c4c6f3e0c008a2b9e5c3d17c818da733222e816eefc99bb058e1766e78fa8e01d5e2d49ce9aae8d72740ed343f9e18add6f3ee62f64782badc0f50fe6fd75ed9976529c40eb38dfe248668d454c9ad53f519dd979d37b7caee271061b56246b6be7813dd240279d19e398c0b2273d4bd2851d37cb46d172eec3aadf84b1deb7d952263ff54ff808528e83711eeb0bd4c4a660f50982ad151ca7a9597bda98c073e4b4f55b5cf9bae87d5ecd61900989a161ba9df58dfc40c13bddad55090d40bd17f53ad5ff5ef7b0fd3dd40cbf0d4837f58416e2b4d3d8aa1522729a8c0cdea61b161658c25d77fd7d4875d7e56d5f9b4a43082dad78c26d990e563c2cf6a623dfaa85ac58e7909b3bf7a611be571b2359024aa8b29287917cd51c22c90c4e1ba6a3f9dacaa48d7534ed107475e769b5e749fd22ed53e58f91ad6cc32253bf15d80a92e447c236b893f20f9d89655558ba16d02c3e62368d10ab49e488282d0cb6928c802926e890401227943d6459423c3e56d093eb63389519e1eef53f24d1788214d9704163f8e8a3b0d7056baef8c995f290be070c022af5fcf30765a0edc54f3c49f3e51f66f23ca2ba448be6b81850f2d7ebb19693cd3a62992e5650b45cbdf698dc1806528d5b71a840991442b780f424eec35c17fc92103d51d0dced013c9a56ef124dba5fbfcc971f3cf959166ef7923e0fd47c987b1eacf89a8c5d51b7b6d134afc2f25ce7d5bbf8b85fd2bf6010ad57f075c1197681b4209149f00954cb666ecd4bd67ab3df1c2ac9faea679403ec12eb950c7226e436f2375577ed5b9e8c1b5bf89131a8cbb423effab10090b16c899041296f856e28c4e2a1a2c7f922d1b6690093cb277461befb5a50f5cc818819e42b76a8a6fab73d1e81b770860df17e205ed747695ddbd07f1d930f5eb279529cee23eef78aae4cf304244b65d6ddc89de95569b83b488ddda5f28b9ec90fc5709402d7f858f9deaff6cd39562232ff88ca7a2b8eed8ad77a29d6d193893d694e06cafc6ce02386f8726768f675441cf716eb9a6db1fc492595834df6451c03042ef463b83ba62fe0afdd0e0cc9548cf8f752db66dcaeb6823ced18efac44ce7471fecf093ddec8397576c7f9360f0b4fa173ffee8340c168c93f741f36803a467761f8ec4e6b29097015007dedc6498ae81254e7fdc9a352d3a0bbf5884c05dec892a088e4f7aaca12d95c853c0a53192c7d2115972d80df05fba411a2d4643efb7c69e8493e6d0d1701f3efa64b2da75a6063b91b709fa6d369016ea9fb4564afef84b42d802e8f95f59ea243f93c88558215fd951413a24bbf3a1c91153fff2bf900b29cc371bbea5b85171ff236ad00d514ff8d965d38f2330c9027b61e63c160930d7ce2c9fc4ca259e66cfa7ecd47ee6dad44e68f35f03bfd5b87344b28f940e09661b962ea135ad38a403902236b203106727f321598c82e00e4b505238cc58c3d000b05073698ab0f87885cd5c6ff5a41b27d78dc7b2df7bc1e24d368669d06102cd4119e55ca7b0f7625928701d721c4836da722638783f8102cd51d07818d7393f56430b0255772c7bcfbc8d0247a7544ddb0099cd23a6c3394fac9db46f3a3c9b7becad00f50707810a2af1475304805740767f77e96f7dbb936c2b3cc8648ef0da8f51dc1c49ffbc4563ef5e1975068516f294195854f0ecd8a7db2c407842659f6b54412b85ded487f4093f62175145bbfcb0be02806a038d76123a97b0fb7cab4dff063ba1982a6d67c3a08caf1e84d61e7905c000c5fbe966df035e6f85b91d993593ca0d4394fd1357e62f81bdfef9607dd9ef99c9a05a9972543198aff512f29e2d21f5133e33dd09db8537ac7d8852edd082c344cf1d7639fc36c3a643876ea44e4246c003a1ce953000bb70c75faa621a3c1c02b792ac07c648f5c6bb24d560071934d4c9c24cc6fe2e86a214a78a11ec81403b696316dc6a02eb7540c16268064cc707c3ee49c3cdb3476e48a208709452f86f0b2571a100d627eb32e7e777df8fb83bd24431fd408b3831193607b95d8b64ceb00a21fd0966a7c48131b82039d1bc25962e7b7fad3d99fb1a739fcb1e9245a3251877abdfcde6bb38168d7cdffcfcf52cde031c18762977f56708848f1d16314c70a866cbfbcf77117dcf7dd2efe44059c47ebef06337c0c6e332453945832e9784ffc2f7f1594df50aa816362b6188ed0b3aa6c3a42a6205d8a225def6246075146ff3130c5cf5c91d4d2d037ef992ecbbe1f520d70b020f36d6625413faba04b63152933976c706f600d00f42e02fa2e9d95e1ad6b02dc9dc8e61f2e72770252bfb191fc1fe9752751af39c9d79c8c136bf86c20e1e035cce992537720ea954fa64a3942eb604bf52975528554a5ac823a58f132d2e5eb5a51e1ff01f00bb093424aa1627b477976c410a1ec4a7e09e7c872444a0bae59f81db8543d094e57542bc2fded77a2567071090b01599c6bd5019cf0ed44e3e0bbe9605563f6aa88888f93fd47cf52a4274c8e490d91cd276b06ff68030f2548e0411e8d637e0d119019faaff78a59d6022478370cf2457b69b9e3f250f429f09f1bb5618b6956516631d653e849fa71d53d7a851708e5edddce8107fc22ae1cbe79642ed1434e57c539ae543905cb42f987c7a3c61578fb7280e178224e765b07763dabf990c808a3c5c2d8fa376a530bc7abb83e7fa55b40235c69e476e7c1fb562fb765fe248d63770abbd85a4619abb72d7677e42024b138f94b45faf8d6459b4a191446801fd643b6bd818e3d9839b15153924e3da8d45fb22c89cc9d91f117e2d9b6f001143a558e1272025fbb6f1e9e1d20ae858d3bf1679d32645b2d77f87b4e3a88494fc3f012a9526bf8115e33675851e7b4cfcba8649cb1cbe1e605a3e16600597dcdc98ad695d27f5738646244bba825d86ff84714ce89963c010ffed5625c67259702e376dfd1bca8ab5876e9b4305abb243197f35eb67fc950e25e866b577a1dacf7643a40c4f393c6f9b556932c1649eb9fb128b488b6113a761eda5cfbf8fff14a6fb0608eb72ec60688daa061111f98bb4e32fd1ba158c8dd2d249a1b8586f7a23f548d2fb4d37995cd2766a6ff2df04b83ca182c897a398712dc6fb522856c88c7622de2b16b6736529c3f471640aebc6c246429836adb6020d180c60a518f6785f1af4c7342c5e2a151acb1527c158032c1aef453372ca40271153d0a43d534862aaa8893af5056ec4b01a2df34cc891ce1447b38575263403268495d9747121549c717f84458aa1645cdb17f6264963cce21a181d94f561db781c5f77d2d9abb4502452bedad731809d7bcf9d2fb999ed36324b49c6395b8cb4cabdbe344b4c5953a2e0924f19c70a893fd24a188b2f7cc3e4fe93c74071842b9123a27d9049961203fe28c145fef55e64e417468aa2e610055b7a7cde2bbe96509b86385ca92a21a4715122e0558b23ca3007264c5234750b0ddd192f2fafbf8a9f556f329f9d7041df8cc73c14eb5a3842e1df8ed6a3f857c580d72dd74fe96d00f1ee4747f451f9c93d775a20cd80f006b6592b3c4efd62633343d1b1158b7aad6dfe08c8aee9a093a6de3e3d278e9fa5e2ff50e2dd16fa58169f5eca1065f4723fe0b0f40da62d3b9d19004b494c4b686056ca7c441d393b58a356f8ceffbbeb2939db9244e4123013c496ef43ad7304b84b91e02597766a05964a5ee67445f064896ebab4826ce1cc6fb96fc111d3460aaaeed1961470510ef29947ed7a8ed7af26a12898d9ebea722a1d74bd3ebdfeaa920211868eab77be39c123551b24d74d9764c200e33bcfd630043cb701ac0c5dc941dbdf058991066f58c8bc30ab6c0ad69c800630c4443a3cb48498d280ff3e0f6a451ae60ba2f3342919babb19c842068679dcbcd3caa1f13fab71460a8f0a8d932a67c61c1f55bb5a3c7a6f494876208d107521e8af9adc90b4278ffb6d8c62b6356a21a248374f4f5c0422e0c80cab7bc715bb32110e8a04789e14d7588d1bb7834a403e53d9432b1d5355ace08166df199748e46d57a6dd6c139a04e3ac713cf7bd343945b2de14bdf0a78e27320b83f49ade20a16f1b051f0f00a2394d2d2b2ccf0c45e256f293bc8645a7bcba8bcc437e079404a68993fd94c88284fde88a6e1aa2e1f97f679be8ecd99e35d1844dc661bad16a52856b51c0c0eab206f7215208432e75960f9b80f181cf5a3099159b2f81f61be020365341ec02f58496060943eb3f680b8aae38b039f6236cde5900572ed4247439231e782f9f310ecca97c99e2085e47701cfe41d1e180b75736bd5c1c377d323600d560349f407eb282b195802fb5c8ba0c3073b21f50dcbef243b5bc012f0f73543aa63c65d2978b821fcf6d70c2f82c514451fb15d946d463abe534097bdb3373e89e535c5349ac932e16f9ac17b13967f2f78e3762d1a549ebd15dd7e023e10b4c3c905d611692ee610b95263740bde51574f372d22a0e2128c2fc37d30b674decf8d1be181375081050a732eca80d8262ed50a3bbcec98adf522ce2f5ce0646df966fde46716364635de814e7009ce451c606c14f3b65a1e5e46524fad54f7f5ca2d4c7da052f6aabbfafe2f50e796813cdd0b3a21c35be9ee33fc5a192290f6b776e38a0c57eefef8f0296925e356c78399d06ecc8738eba5fc5b1de9e4bbcd40ffdee3f59f92315c2d5bd4ddc9b0ecd060ba0aa271b4298f269c469f28d4e951304a15d6037041d39b15f0453289d1ee5c004b7d92df55ecca33822b437d7d29a6c7a1066ea0edb61f1435"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x138, 0x1c, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xb}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3ff}]}, {0xfc, 0x6, "ee29e9f5935149a93857995fcf234403cfbc148139b7295d3d2b447871487105205580f317e9983f205bbe35278400e7c569270e22a578bed78fc05a24a817255d162d8a343a4997ea2770cec4065b19a96a3c941c53945192e11fc3515940a350335519a607cf927c9873d49144f1de3f9d5970d7e4b47ee29ccae55df582ed87f9452a7b8f19d6e12ee40a918f125302d24968431c1dfe4a0b5fedf19281e2bc9476b3c1de5c33d8647153e84f11374829a9f40d5017f92d13629b47bfd2177ada75ae7a96e859547fad022e7281a85168852986fa561f0f08261519253c882b7eb90602eb2a58283ade35bd4ffffd59eb229619d00ae4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x150, 0x3, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x803, 0x0, 0x2c5, 0x1ff}, @multicast2, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x8, 0x3, 0x3}, @broadcast, @multicast2, 0xffffffff, 0x1}}]}, {0xd7, 0x6, "40a538a8385dfb9fc226910876d866f731da95d4e431b43f29abe0006d636ac215ccb1d5aeecc07d659d35408f41c3d5d07c9fd9d0ba8c66dd2a033f89a0e70b24571b987034cea54f2b39fbb5fb54617a2ab472a9ab37a3094e74b109404f0ebd3814f25d7bf8acc6cc9a7ef4f95a565f2efc40f86d51551cf2305ce2f9293a3508cc91ddafd8ecc99bfc4e628e523f4e850ac8cd33cef67f2d1a440a49856fa80619ce2a93a5095324c5127c19afb641ff83aade03b05364bfaab09b3fe7e2e202e82300d4482a14a8c572f785a458d42d54"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x15c, 0x18, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xfffff954, 0x7, 0x4, 0xcec}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x3, 0xfffffffffffffff1, 0x8000, 0x7fffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_ACT={0x18, 0x3, {0xe, 0x8, 0xffffffffffffffff, 0x8000, 0xee3}}]}, {0xc8, 0x6, "2a99fe219c84a342e1498d68876ec3b84cb4e12aae6a36b0bd2b04aa44d41ba22ec8dc7e87af28980ab23e8e18d3ea7974a431e100420f226b62fb1e8dd69c900b885c2e5a999c914a87ad3f86fdd887ab127a3b57c13983b8650657a54df4a61bb26cbb7d5b007ff13751cff417de9008f594290c70e91293d1fb7bd75209e72e6330ffe256d608b73cbf1a6a181ff884a892c99877d2064aba4c7f3bb1db7e240a2f8bb999b29f4be4297f6ea5c8fb34c64af168fa87765a6f27e5851d418dd0b51f88"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x12c, 0x1, [@m_connmark={0xd8, 0x11, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xfffffffb, 0x5, 0xfffff143, 0x8001}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x16435169, 0x3, 0x9}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xeb88, 0x2, 0x4, 0x40}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8c, 0x4, 0x80, 0x8}, 0x2}}]}, {0x36, 0x6, "3da879c1eecfd7ad3f029084849c36658e240e72520094e8822f4191e111d6a8b6d50159bc5bba4aa48e27331dbe608b3961"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x50, 0xe, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0xd, 0x6, "2b6259c8c885c8e1b3"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x655c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_usbip_server_init(0x1) (async) syz_emit_ethernet(0x136, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000001880)=""/22, &(0x7f0000000240)=0x5e) (async) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f00000000c0)) 2m29.226263143s ago: executing program 4 (id=2047): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) listen(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 2m29.225949147s ago: executing program 4 (id=2048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="15000000210001"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, 0x0, 0x20, 0x70b92d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0xfffffffffffffe65, 0x16, 0xe384}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x10001}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40851}, 0x4014) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x501140, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7fff) 2m29.135339768s ago: executing program 4 (id=2049): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = syz_io_uring_setup(0x7f31, &(0x7f0000000140)={0x0, 0xf97, 0x1000, 0xfffffffc, 0x28a}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc03064ca, &(0x7f0000000380)={&(0x7f0000000000), &(0x7f0000000340), 0x400000000009608, 0x0, 0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='io_uring_fail_link\x00', r7, 0x0, 0xffffffffffffbffe}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYBLOB='X \x00\x00', @ANYRES16=r10, @ANYBLOB="010000000080000000003e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500820000000000"], 0x58}}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000000b00)={0xfd4, 0x10000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x30, r2, 0x8000000) syz_io_uring_submit(r11, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x50, 0x2007, @fd=r2, 0x3, 0x4, 0x1, 0x0, 0x0, {0x3, r8}}) io_uring_enter(r2, 0x47f4, 0x1386, 0xc, 0x0, 0x0) 2m28.924761098s ago: executing program 4 (id=2050): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d040005000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x2000000000000024, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20044014}, 0x0) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="07000000010001", 0x7) creat(&(0x7f0000000040)='./bus\x00', 0x8) mount(&(0x7f0000000000)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001a00010a00000000000000000200000008"], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3801000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff7200000010a0000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000020000000000000000000000000000000010000000000000000000000004000000000000000000004000000000000000000000000040000000000000000000000000000000000000000a0004010000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x801}, 0x4810) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m28.875036577s ago: executing program 4 (id=2051): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000200)={&(0x7f00000000c0)=[r1, 0x0], 0x0, 0x1, 0x2, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2b, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m28.804728806s ago: executing program 34 (id=2051): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000200)={&(0x7f00000000c0)=[r1, 0x0], 0x0, 0x1, 0x2, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2b, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m54.763610273s ago: executing program 5 (id=2282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000280)={{r2}, 0x400, 0x8000000000000000, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x8, 0x0, 0x0}}, 0x10) 1m54.36812709s ago: executing program 5 (id=2285): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x3, 0x1, 0x1ff, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000000c0)="7628833dffb68ebb5715c7f05ca1f245474b4a13de7142fdc8722f7995ae6b682b8cec7e18d100cc9c0fd8ed336c8202b1a78057fa505be5130639d68b42330e27da37ec394b45805382264b77e7d30cea83ef7315a4f2674f6324e3695ef834bfd3737fe9b6c005a2459ff4d7d16a5a192432257351ae90", &(0x7f0000000140)=""/206}, 0x20) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0600, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x9, 0x5, 0x7, 0x2, @time={0x5, 0x81}, {0x6, 0x10}, {0x6e, 0xa9}, @addr={0x0, 0x9}}], 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) 1m53.899996322s ago: executing program 5 (id=2288): r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000240)=@x86={0x49, 0x3c, 0x5, 0x0, 0x401, 0x0, 0x4, 0x7f, 0xd, 0x6, 0x7, 0x2, 0x0, 0x200, 0x7, 0x1, 0x5, 0xc, 0x9, '\x00', 0xf5, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r4, 0x8b1b, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) mbind(&(0x7f00004f4000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f000075d000/0x1000)=nil) 1m53.263128408s ago: executing program 5 (id=2291): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount$afs(&(0x7f00000003c0), &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x1088000, &(0x7f00000004c0)=ANY=[@ANYBLOB="64796e2c666c6f636b3d77726974652c666c6f636b3d6f70656e6166732c666c6f636b3d77726974652c64796e2c6175746f63656c6c2c66736e616d653d2e2f6367726f75702e6e65742f73797a30002c646566636f6e72616973655f747970653d696d617369672c61707072616973655f747970653d696d617369672c736d61636b6673666c6f6f723d5b2c5d2c2c6673757569643d36306637653130362d306106302d336531302d38f300342d36248d00006536652c00"/201]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendto$inet_nvme_of_msg(0xffffffffffffffff, &(0x7f00000002c0)={@icresp={{0x1, 0x8, 0x80, 0x4, 0x55e1}, 0x0, 0x0, 0x2, 0x8}, @val=&(0x7f0000000240)="5249777caa1759b158e76a3eacb9f505747381f0097dd21a457cc4db07cfae407aae1569c6d69ef6fc822f716e6c6eea4586fc32378e66bb9b9fb05149a0cf7d2c6cd15b62"}, 0x88, 0x0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040800) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x5, 0x8, 0x15, @remote, @mcast2, 0x40, 0x7800, 0x1, 0x5}}) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x102, 0x102, 0x4, [@typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x2}]}, @float={0x9, 0x0, 0x0, 0x10, 0xc}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x1}, @enum={0x8, 0x4, 0x0, 0x6, 0x4, [{0xf, 0x3}, {0x6, 0x9}, {0xf, 0x9a4a000}, {0x8, 0x2}]}, @struct={0x5, 0x1, 0x0, 0x4, 0x1, 0xfffff391, [{0x8, 0x4, 0x8}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x4}, @datasec={0xa, 0x5, 0x0, 0xf, 0x2, [{0x1, 0x8, 0xffffff7f}, {0x1, 0x187a78fe, 0x9}, {0x2, 0x1, 0x9}, {0x1, 0x0, 0x3}, {0x3, 0xf55}], "2c0e"}, @fwd={0x5}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000880)=""/69, 0x120, 0x45, 0x1, 0x6}, 0x28) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r8 = open(&(0x7f0000000000)='./file1\x00', 0x109160, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$setlease(r8, 0x400, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000380)={"f9bef8d1aaeadafa287efdb9450ae3e2d260489591c42ab93a0c7bca18e9a19fa8e6cd61e9f62f91123f1311f81f85b4044554cb6e3ca1b6d1fc011bd71bdda82f37ccfa5b87dd5dcd311dbbb67f240dc02c53b7eabf3651660ce801e3878538da8bb24e1dbc480dae36207bf6b7b946c7a8ec08468f9a75ec797b8c11807655272833a7c70ccfc9a8259e7a148eca4d16b6ff519973a20b65f91a7261cdd2440a5a0566d843fa334b0280f0aacc3b417322b9b56098dd842c44139da4bd1e2212a40ba043bd72b995b172b26b71d434e9f3bf74b4ed480b264e0e9d6f628732534db36bfb92ee6419fb244db44abf0cd9357755ce9c4c9a584e5eb89ffd10c8a6c3c6115265f25f798570751917cd7cfc2ca71729e268c3b30c05b3dfdb18cbbfd3036a889f5fefb0f9d56bf970bdbf2524f8e435b721c809e73a5fdafbf1594088ad1974908bf5fc752d564c1a4989a7d1e59564567d9b437442c5c1cfec93526395d18b1ecb18dedd713ced403a00a2cd27b2dc857808287ea88157b3c19075eb33f7cc60a6161a88ad37fb04d0ce0fda24176406391a5ac521299143bdf59a474a17272105e55e9870cec2942a6705993e821e54441c877a64450e739b1321ad17e1ed552e65654bbfcc8ebd1d64fc4e888609a90410f780fe5031c27737f2de05a7ddf00129eb746a2e990438d9bf6a3211779707d615d79111b3fe71c26433482306ce7563c11cdf6f8da283ae147311465af80ba5350e6d65438cd5a20ec155d78227e5336d504f8f1145f4b942180f7ba6e5c9a070d4e31289d4845229780e53713090e782a75b32729c10da28c1f2702dad57a37416fc138040064347a0a290803f51a619402d88d0a4b2bef39bf92696b6d7052459a78a258edfe2e66f2e10a80b168b483c90a1a1dd67c6d6c9b7a2336d1678131ca38552d9acff05dcd57f9f4164064b7781d8a8b5507e21edfe35d65d726bf24799535648cd04f3b7e85c3f6762f353a8f65afdc7ba63bc0eb65d7188cb1adee1d8d14c0413458d2ff65093d972ac3696fa12defc0f8dedf2309e1b80fc672205e6ccfc6b494233c4d00b5471cb52d896c73cddee40e5e51ee8a9bbe453a1a7d5b9832cacc5965220145504ccb2a157a7c1d9d718c0bf96cd350ac5ca330c827bedbff299774707f5840a0d954ae39c9421975d48e05d87a1ceddefbecae936e15ffb308364b69eefd345d6200cd128e48c162a4ebd026fefb7cc73e80204b21ff30d63e8707292f60682c6f6a587fff9c5a0fae24e0406df5363c7c9d31f72829b6a9d9237a84e83e22c33bf6313ee4072f09f9c6254d0eb7239d51cdda77b8e3d42a89449a3e1b6be8953a27651486383879490486fd11b6ac4e1b86f8a71fc294e0ebf572f4ef00582be189ee5a38c18d4d51cd3221fb1475a56cdf3cc7258bf8c559bf1a9"}) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x6000, 0x3, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xfb}, {0x3, 0x9, 0x83, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb, 0x0, '\x00', 0xfd}, {0xfe, 0x9, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {0x0, 0xfa}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x5, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x9, '\x00', 0x2}, {0x80, 0xff, 0x3, '\x00', 0x7}]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x6, 0x8, 0xffff2a91, 0x800, r3, 0x1000, '\x00', r4, r5, 0x4, 0x1}, 0x50) setpgid(r0, 0x0) (async) setpgid(0x0, r0) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0x40049366, 0x0) 1m52.716490989s ago: executing program 5 (id=2293): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffeb2, 0x2}]}}}]}, 0x9c}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x18, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0xb, 0x5, 0xf, 0x6f, 0x7}, @call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000100)='GPL\x00', 0xb, 0xfe, &(0x7f0000000480)=""/254, 0x0, 0x10, '\x00', r5, 0x18, r2, 0x8, &(0x7f0000000180)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x95a8, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000280)=[{0x4, 0x1, 0x3, 0x5}], 0x10, 0x9}, 0x94) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000780)="9d37fcc3ae0fd5b628feef6a7037f20d6387dcc5e25e10d025a5be414ad589c9c3ebd90fb3b19f3e9c79972443d6cb9698f10572f7081ee0d675fab9f728665dea2dd334c3a4a7075374ace0c5d7b39ee83d4fd7127d2170c13209bd3dfecf89610e82fa2c971963e13c195e9ba5e863cc648642e49230ea0539a0461fea4f8fb28e2b00eaaa294bd4084330dd9ab37d20fc023139710c84d2c5a5b70ff9d5e067a1ce9a8e222dcb939d7f8ab48ae546c1b28c73f7082daa690abd109cc8035a79340e117ada", 0xc6}, {&(0x7f0000000880)="6a38a9bf7f71949c46cd526e9a9407cc71ec363b3bc677ef5289e3cba1cf8a615dce13a4935d71bf1a0f1978b3d89a34191098677bba39ab42d7db45b10c1b7eb84bcd004fee0caf9fc71764776e76bb1cf1e4b30add1900f4187b5f5148d7ba8baaab258cb5aaa56d853966110b0cf02653228028218af4fa60a639b63a649f55420eb7dc3ff7d4bab408389b2c5fe40c10e7e43c4d6e7fe3e149bd6914f0cd369384e60907edaa469fb94150849474a8d2ed3f3748e3b147110f067375900fb9463e708ae826cbd2badaaff299975254e3eefc1e157f582bb74791c55759cc26657759f85d30", 0xe7}], 0x3) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r1, 0x0) 1m51.767302131s ago: executing program 5 (id=2297): syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x17}, "f07d09713913528b0c331eca7ad7ee5a643a0f501199f2"}, 0x1b) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x6a}, "337e6f72bf33cf11ebd961d0ab4438aa88fb93a4f4162e51e3d2394cbb3d6c155eaea1eb66f6e8f0506cfd5d88f5741790c71e3dafea6131c9ac71e7b58d55286fa658eb1dd603b60ba65ae4a474ba54ce6044e744e195bf4e0052dc71586d38089a6ed556d753ee25c9"}, 0x6e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000100)) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept(r2, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000240)={0x264c9c3f, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) eventfd2(0x8, 0x100001) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x6, 0xa}, {0x4, 0x2f1, 0xff80, 0x5bf, 0x987}}}}, 0x17) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_pts(r3, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x200000) syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5e}, "4018e73e5e3d843a39e056dac9f7aa3a8a0b21aae250fddc2a6649cff6996e7fdba58fc7bd53e78e872e0e1e6d1c7e7de11f25c2d34cfa0470a091a514d3367557fe92d536e6c59bc55cb79fa66ea41f5edd8336d7368c699e564a126ef6"}, 0x62) read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000002480)={0x18, 0xfffffffffffffffe, r4, {0x6}}, 0x18) lseek(r1, 0x6, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000002500)={0x2020}, 0x2020) mknod$loop(&(0x7f0000004540)='./file0\x00', 0x4, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000004680)={'caif0\x00', &(0x7f0000004580)=@ethtool_rxnfc={0x29, 0x8, 0xe, {0x6, @esp_ip4_spec={@private=0xa010101, @local, 0x3}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, 0xb0e7, 0x401, [0x8, 0x6]}, @sctp_ip4_spec={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4e23, 0x6}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, 0x4, 0x0, [0x7, 0x4]}, 0x6}, 0x5, [0xf, 0x9, 0x0, 0xffff, 0xfffffffb]}}) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f00000046c0)) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000004700)=0x7) r6 = syz_open_dev$vcsa(&(0x7f0000004740), 0xff, 0x400080) ioctl$SG_SCSI_RESET(r6, 0x2284, 0x0) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000004780)=[{}, {}, {}], &(0x7f00000047c0)=0x18) 1m51.443649554s ago: executing program 35 (id=2297): syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x17}, "f07d09713913528b0c331eca7ad7ee5a643a0f501199f2"}, 0x1b) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x6a}, "337e6f72bf33cf11ebd961d0ab4438aa88fb93a4f4162e51e3d2394cbb3d6c155eaea1eb66f6e8f0506cfd5d88f5741790c71e3dafea6131c9ac71e7b58d55286fa658eb1dd603b60ba65ae4a474ba54ce6044e744e195bf4e0052dc71586d38089a6ed556d753ee25c9"}, 0x6e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000100)) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept(r2, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000240)={0x264c9c3f, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) eventfd2(0x8, 0x100001) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x6, 0xa}, {0x4, 0x2f1, 0xff80, 0x5bf, 0x987}}}}, 0x17) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_pts(r3, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x200000) syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5e}, "4018e73e5e3d843a39e056dac9f7aa3a8a0b21aae250fddc2a6649cff6996e7fdba58fc7bd53e78e872e0e1e6d1c7e7de11f25c2d34cfa0470a091a514d3367557fe92d536e6c59bc55cb79fa66ea41f5edd8336d7368c699e564a126ef6"}, 0x62) read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000002480)={0x18, 0xfffffffffffffffe, r4, {0x6}}, 0x18) lseek(r1, 0x6, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000002500)={0x2020}, 0x2020) mknod$loop(&(0x7f0000004540)='./file0\x00', 0x4, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000004680)={'caif0\x00', &(0x7f0000004580)=@ethtool_rxnfc={0x29, 0x8, 0xe, {0x6, @esp_ip4_spec={@private=0xa010101, @local, 0x3}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, 0xb0e7, 0x401, [0x8, 0x6]}, @sctp_ip4_spec={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4e23, 0x6}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, 0x4, 0x0, [0x7, 0x4]}, 0x6}, 0x5, [0xf, 0x9, 0x0, 0xffff, 0xfffffffb]}}) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f00000046c0)) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000004700)=0x7) r6 = syz_open_dev$vcsa(&(0x7f0000004740), 0xff, 0x400080) ioctl$SG_SCSI_RESET(r6, 0x2284, 0x0) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000004780)=[{}, {}, {}], &(0x7f00000047c0)=0x18) 1m15.967414359s ago: executing program 3 (id=2449): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbbdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x20, 0x0, 0x0, 0x1, &(0x7f0000000740)="a706688f955236f3cbecd0287f113ec778d783775e48e56d31455cdc64a0617a7710f2c304ed378dc76149eddf44", 0x2, 0x0, 0x0, {0x2}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = syz_usb_connect$printer(0x2, 0x77, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_read(r4, 0x1, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000340)={0x20, 0x5, 0xd1, {0xd1, 0x6, "ac80c7f41743b4b8efcb06ad116210c1de8ee648f6502e02eb52c59811ff56432fd5b29633f706c891780157947199cd088a70cc63be0679ee524cf529622ff9dc4541324616a29689d89893bf9cfad4bde19c7c562a11778a26c34fab143e9b5ff094b99250535ea737d1a5cf1384e906677401fdeea5c55e0205e2122750442cab849a1ac8268f3d8600161175a38d4d5ad88a7444bbcd5c345f4e1ca66d66bfa55678cbaf37fc071985e96f0c0f64993d8b1e2a58815c924f1f606ba9bb80bd2a4193a4e236f74518e75905718a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x20, 0x16, 0xdf, "3c9117afa01913a2d8e9d7b3b43460956d615a42d4d614c412f4cc57567cd7cb20b1740b9ba677b2e567e3ad45b723c77d03efd8bac4547550433eece0299bc79cc9ac508b8c63398705bc0b19a4196db940c84105cea858247d9e4cf6eaa49e198892ebc46973447769d3ef58670da330b4f9b01bda80503448c1c0b3388bcf8299a45229471559b2744ca3dd89e5f0031c89bbed137994efc06afc21aea51a9f7f24895395c022e306f360bde72477c5af4bddb880940957fa9bc33104fd5bf6825ddda901121a58a148e10b26327880abb4743d8fe73924c73ffac697ea"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xab}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x7, 0x5, 0xe, 0x5, 0x6, 0x9, 0x0, 0x200, 0xe99b, 0x4, 0xe7c7}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x3f, &(0x7f00000008c0), 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000040)=0x12) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000040)=0x12) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$can_j1939(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="d80bf5ff30abf0034d5e13ea7dbc3acb9fdca2a2c128df34b8c0c3a642c04aefd2ec6ecf213b51b2cff0d26d", 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1m12.680320196s ago: executing program 3 (id=2453): ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000000)) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) fstat(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000002100)={0x130, 0x0, r0, {0xfffffffffffffffe, 0x7, 0x0, '\x00', {0x20, 0x9, 0x100000001, 0x0, 0xee00, r1, 0x2000, '\x00', 0x100000000, 0x0, 0x80000000, 0x1, {0x5, 0x1}, {0x1, 0x7}, {0xa3, 0x2}, {0x2, 0x40a}, 0x1, 0x8001, 0x5, 0xfa}}}, 0x130) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002240), 0x800, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000002280)=0x8) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000022c0)={0x0, 0x4, 0x1, [0x5, 0xa, 0x8000, 0xff4f, 0x9], [0x5, 0x4, 0x400, 0x1, 0x7, 0x1, 0xa, 0x6, 0xff, 0x1, 0x401, 0x4, 0x6dc1, 0x53a7, 0x5cd, 0x1c00000000000, 0x6, 0x0, 0xefc1, 0xffa, 0x34000000, 0x6, 0x8, 0x5, 0x42, 0x0, 0x7fff, 0x5, 0xd, 0x4, 0x9, 0x8000000000000001, 0x400, 0x401, 0x7fffffff, 0xfffffffffffffff8, 0x2, 0x7fff, 0xf, 0x1, 0x6, 0x8, 0xffffffff00000001, 0xad6e, 0x64, 0x8, 0xfffffffffffffffc, 0x1, 0xfffffffffffff96a, 0xf, 0x800, 0x101, 0xc, 0x80, 0x8, 0x6, 0xfffffffffffffff7, 0x5, 0x2, 0x7, 0xb0af, 0x4, 0x8, 0x8, 0x7f, 0x8, 0x4d7, 0x2, 0x8000000000000001, 0x0, 0x5, 0x4, 0xb, 0x3, 0x8, 0x401, 0x1f, 0x0, 0x3418ccf9, 0x80000001, 0x1, 0x2, 0x10000, 0xfc55, 0x591, 0xad19, 0x8, 0x9, 0x73b, 0x7ff, 0x8, 0x7, 0x0, 0x964b, 0x8, 0x0, 0xffff, 0x400, 0x6, 0xe, 0x1, 0x7000000000000, 0x9, 0x1, 0xf6b, 0x7fffffff, 0x0, 0x9, 0x6, 0x7, 0x3, 0x3, 0xffffffffffffffff, 0x8000000000000000, 0x5, 0x9, 0x8000000000000000, 0x7fff, 0x100000001, 0x8, 0x6]}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000002700), &(0x7f0000002740)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000027c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000002ac0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002800)={0x244, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5dde}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "d91a6140e0ccb4a43ce22f0182d5bffe396485eaa9e80694e81cf49c7c2599ab0a48f5a05edfcadee365184a2826d471e0371a1a5f9772"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffc00}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xece}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x960}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa0000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}]}, 0x244}, 0x1, 0x0, 0x0, 0xc000}, 0x808) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b40), r3) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000002c80)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b80)={0x8c, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1013}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) r7 = syz_open_dev$dri(&(0x7f0000002cc0), 0x996, 0x803) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000002d00)={0x1, 0x0, 0x10000}) r9 = socket$xdp(0x2c, 0x3, 0x0) accept$inet(r7, &(0x7f0000002d40)={0x2, 0x0, @remote}, &(0x7f0000002d80)=0x10) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002dc0)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000002e00)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000002f40)={&(0x7f0000002e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002f00)=[0x0], 0x6, 0x9, 0xa, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000003000)={&(0x7f0000002f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002fc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000003080)={&(0x7f0000003040)=[r12, 0x0, r13], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$TIOCGPTLCK(r14, 0x80045439, &(0x7f00000030c0)) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r14, 0x40106437, &(0x7f0000003100)={r8, 0x7}) (async) ioctl$VIDIOC_G_FMT(r11, 0xc0d05604, &(0x7f0000003140)={0x5, @vbi={0x0, 0xc0d, 0x0, 0x32525942, [0xfff, 0xfffffffe], [0x9, 0x983], 0x13a}}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000003240), &(0x7f0000003280)=0xc) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r14, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003380)={&(0x7f0000003300)={0x48, 0x1404, 0x20, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x40800) (async) sendmsg$AUDIT_USER_AVC(r14, &(0x7f00000034c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x38, 0x453, 0x400, 0x70bd27, 0x25dfdbfb, "16c48c7e18a0ea66ccfe4c4dc0a09f6638bf2903dda8298b4c7b4fd41873f4aad8ad50adc1a07d", ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4804) 1m12.18908448s ago: executing program 3 (id=2456): socket$kcm(0x10, 0x2, 0x0) 1m11.967483631s ago: executing program 3 (id=2457): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) ioperm(0x0, 0xe4d, 0x2) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00"], 0x1c}}, 0x0) (async, rerun: 32) r0 = socket(0x10, 0x803, 0x0) (rerun: 32) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 1m10.944794128s ago: executing program 3 (id=2458): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$lock(r1, 0x407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x4000007, 0x2, 0x2, "28ad0b260baea908965cad36c78d1449ce75114f0ca1ac299c7f52ebac4ef2bc", 0x33524742}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x20, 0x1, 0x0, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x3436324d}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r2, &(0x7f0000000640), 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(r2, 0x1) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000085304000427bd7000fbdbdf251d91ca8196265f408fa43e64fa2943770c18f590af47d6f9b3fd735741e23eb06ec8c29361c286921876faf567a0a1ce3a0711765e5bc4ac9fb30a5c0d22c4411e86e966377203e2ed0000000800000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x4000010) write$sysctl(r1, &(0x7f0000000100)='7\x00', 0x2) 1m8.267550517s ago: executing program 3 (id=2463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128000028008000500ffffffff"], 0x3c}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r8, 0x0, 0x0}, 0x10) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="993e43a68621c19c93f9a5789b2d6e9eab1e7cbddf11304303061cba4d43c329a8a42796d87171d3792ca1e7d7aa342f76dd4fc28aba2036d420dfd14fa73d09e45fb310762e660c996efd06ff70bb81749a6752e22872d8771b512c939a29b96531c92105840a7bc1223c2d9fe465f2ed0f41617690fedb9c9df771b91796ce7c8d64da7fc2f712450a9109f3f2612e050f2af841570fb5f1c668cc9dad303b7cf76664fd6579dd7fc29d46ae613245bbb996775160f42b0cfa391e427cc3c994da6a3044ffd8ae9a19a89755c6bdaece77bb1e4a687db7545e59ffed67f03fc3b22a27c4c2f5fd720737", 0xeb}, {&(0x7f0000000300)="a93a75d3073cceb5f68b21b976817f8d4dfd3fd3835e63e840e131cbd60610fb", 0x20}], 0x2) r9 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {0x0}], 0x2}}], 0x1, 0x2, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000300)=0x10001, 0x4) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000540)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xc6}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8e91}}, {@allow_other}], [{@subj_role={'subj_role', 0x3d, 'bond\x00'}}]}}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000006c0)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000700)={r13, 0x3}) 53.004713626s ago: executing program 36 (id=2463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128000028008000500ffffffff"], 0x3c}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r8, 0x0, 0x0}, 0x10) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="993e43a68621c19c93f9a5789b2d6e9eab1e7cbddf11304303061cba4d43c329a8a42796d87171d3792ca1e7d7aa342f76dd4fc28aba2036d420dfd14fa73d09e45fb310762e660c996efd06ff70bb81749a6752e22872d8771b512c939a29b96531c92105840a7bc1223c2d9fe465f2ed0f41617690fedb9c9df771b91796ce7c8d64da7fc2f712450a9109f3f2612e050f2af841570fb5f1c668cc9dad303b7cf76664fd6579dd7fc29d46ae613245bbb996775160f42b0cfa391e427cc3c994da6a3044ffd8ae9a19a89755c6bdaece77bb1e4a687db7545e59ffed67f03fc3b22a27c4c2f5fd720737", 0xeb}, {&(0x7f0000000300)="a93a75d3073cceb5f68b21b976817f8d4dfd3fd3835e63e840e131cbd60610fb", 0x20}], 0x2) r9 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {0x0}], 0x2}}], 0x1, 0x2, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000300)=0x10001, 0x4) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000540)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xc6}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8e91}}, {@allow_other}], [{@subj_role={'subj_role', 0x3d, 'bond\x00'}}]}}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000006c0)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000700)={r13, 0x3}) 6.742837861s ago: executing program 2 (id=2594): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000005000000200012800b00010065727370616e"], 0x40}}, 0x40080c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.706994637s ago: executing program 2 (id=2599): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000007c0)=[{{&(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x70bd2d, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xc408}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 5.482254699s ago: executing program 2 (id=2601): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) (async) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa045010aaa400d84300450000380000000000019078ac1e0001ac1414aa03049078030000004500169a553b2d62fa5efaf373a5e5b1b3000000000000002f0000ac"], 0x0) (async) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 5.157456667s ago: executing program 2 (id=2603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0xffffffff}]}}, 0x0, 0x26}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffeffff8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffeffff8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc000000190001000000000010000000e0000001000000000000000000000000f8ff14bb0000000000000000000000004e230000ffff00000a0080006c00000096cabd9308cb6d490000932493a070754959f8b60127c04e927f30f26e2329d8cff8c7094b7040e320fb3a0133718e09ee1d8efd82b0a26edd3428c7451644456c5ae9b4f6b74a1ddf353900528aad6acae23c65ce0fe20e68df0411706068ec74d58723f9fd08e06ddb732573765815dc36972a73e75327e670e0d3d8222bb38eb1508d050e66a7361a38cd3a33ddc659a75aa3fb9b2685a71a97762f6db666b0d96d5ad534865afb24", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000260bffffffffffff0000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000044000500ff020000000000000000000000000001000000003c00000000000000fe80000000000000000000000000000020000000000000000700"/180], 0xfc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) (async) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) writev(r7, &(0x7f0000000880)=[{&(0x7f0000000100)}, {&(0x7f00000002c0)="c892f2ec2ad509fa1d4b8a6a65541730fbccbe65f68ab3baf7c970631b07a11a4e98e7c36851c844e95508a981c51854da16f62d0d8459ae0f0e9cb555dab53afb3d4d8898ee5b64103d0906beed8586dfefe71f5158fc55115a2a0f975b2ea06d8c8c46eadb176fed424a4b6ea6db3a2236f99058bba6ef9eaf072bd1216cf344e07d9aeb8c95bd1a62f0124b15492b041281c5c965009bdeaf8605c86e12c261c70e6ea0c2075d30bbeea6c58537", 0xaf}, {&(0x7f0000000380)="5353608a26e85fdfd9881a1ee9fe66c56ee68d460628c02e6c1ae7e300f28de80c257d3e4419b0f55c921316b4d38cd93b5f9d8e4c95e5", 0x37}, {&(0x7f00000003c0)="e70f222438ea2cd479dade79add6cb9e3df2524cf0b7970ed4025d2d6bd7b6fd12142833a92099ccf270470d8734d4b0a334085b15b087f3d71135bee27f964da46be1b7039322bd7b8b37b5ed9e637b70792525b3c9c582e0951c3147076e000cec7bf4825b0661d44f7fe185b21f3276a7585e51dc59fb17b6ae535cb24e21fae56574e0998bab141811e7acfbed70728396f1923f7314655d3c4190e8dd85a0aa2fa8e76b4aaa5966ff491138dd904ed3572427f4a85bbbf069f9e93b595704c8ea91cb1470668212a75f0926d392910f5988eb46", 0xd6}, {0x0}, {&(0x7f00000006c0)="bba95202b8d6a4aaa9f5e49090f75b0e73c2a3cd38917f627c686b0def0653d1ed2cadec1176ad412d8d8a45b4524c464ba3b7ce27c7fcd1d789859e", 0x3c}, {&(0x7f0000000780)="ab97eee44dd916aaca28d91a5eed5baac399ec4e2d1c7866a1e4911df2db179c694e09a18a31e3e4abadff843ff16b78dc29c6d956453a66bab5ecffdbed1ed27cae1d02fe646e6380f792995d80b36dcbe23e408f16fb363f92b3e22a521ed9d4a19388e7ebfa4512da5c5d1e67b3c9037f50b4b7a0011471b4d2f9ef6ba750a41ac56078835fa11415a6431df583896a0c2efa576377cbf29a8ae9af600959c5b5964ed83ca5f6500bed06e7941315934fbbf649f12e667e291f45cadde3cf", 0xfffffd74}], 0x7) shutdown(r7, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000200)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x3, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1ff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x2fa}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x7, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000200)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x3, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1ff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x2fa}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x7, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000440)={{0x4, 0x6000, 0x9, 0xb9, 0x4, 0x3, 0x7f, 0x8, 0x25, 0x4, 0x25, 0x7f}, {0x0, 0xeeee0000, 0xf, 0x9, 0xfc, 0x7, 0x9, 0x5, 0x8, 0x81, 0xff, 0x8}, {0x8000000, 0x10000, 0xc, 0x2, 0xf, 0xeb, 0x49, 0x80, 0x80, 0x7, 0x3, 0x57}, {0x0, 0x1000, 0xa, 0x3, 0x6, 0x6, 0x7, 0x7, 0x6, 0x1, 0x6, 0xe}, {0x4, 0x100003, 0x4, 0xff, 0x27, 0x9, 0xa, 0x8, 0x6, 0x80, 0x4, 0x54}, {0x100000, 0x5000, 0xf, 0x43, 0x3, 0x9, 0x5, 0x3b, 0x81, 0x2, 0x1, 0x1}, {0x5000, 0x80a0000, 0xf, 0x84, 0x7, 0x3b, 0x7f, 0x1a, 0x0, 0x2c, 0x7, 0xff}, {0xeeee8000, 0x2, 0xf, 0x5a, 0x8, 0x7, 0x5, 0x0, 0x7, 0x0, 0x2, 0x3a}, {0xd000, 0x2}, {0xd000, 0xff80}, 0x10000, 0x0, 0x1000, 0x100, 0xe, 0x8800, 0x4000, [0x0, 0x6, 0x6, 0x6]}) 4.372541995s ago: executing program 7 (id=2608): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="c9", 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x48}}, './file1\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x6}, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 3.923057659s ago: executing program 7 (id=2611): r0 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/225, 0xe1}, {0x0}], 0x2) fchmod(r0, 0x184) 3.681622816s ago: executing program 2 (id=2612): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x8, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x400, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000eb080005400000f701080003400000000008000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x4000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.562495051s ago: executing program 7 (id=2613): r0 = syz_io_uring_setup(0xca1, &(0x7f0000000180)={0x0, 0x8de0, 0x10310, 0xfffffffe, 0x4a}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast1, 0x4}, 0x1c) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 3.309937851s ago: executing program 8 (id=2614): io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x3, 0x2, 0x2, 0xe}) (async) r0 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x3, 0x2, 0x2, 0xe}) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000080)={0xb274, 0x15, [{0x9}, {0x4}, {0x2}, {0x4}, {0x7}, {0x5, 0x1}, {0xd}, {0x8, 0x1}, {0xb}, {0x4}, {}, {0x3, 0x1}, {0x6}, {0x1}, {0x1f}, {0x7}, {0xd, 0x1}, {0xa, 0x1}, {0x4, 0x1}, {0x3}, {0x8}]}) r3 = dup(r2) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000140)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000000)={0xf9, 0x3}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)={0x4d, 0x9ad, 0xc, 0xb, 0x6, 0x81}) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)={0x4d, 0x9ad, 0xc, 0xb, 0x6, 0x81}) 3.173430064s ago: executing program 7 (id=2615): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0xe, 0x0, 0xd90, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x709203, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r4, r2, 0x32, 0x0, @val=@tcx={@void, @value=r2, @void, @void, r3}}, 0x1c) 3.170628259s ago: executing program 6 (id=2616): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x142, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) socket(0x1, 0x2, 0x0) 3.023109437s ago: executing program 8 (id=2617): r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a01000019", @ANYRES32], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0xf1, 0x9c}}]}}]}}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 2.943125139s ago: executing program 6 (id=2618): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0xfffffff7, 0x4) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x66, {"67420f32670f01c28fc970010ac4e245cf5b03c4c15cc68114e90f26acb9800000c00f3235002000000f30b9800000c00f3235000400000f30c42145c6fcd9440fc7ac5cdc000000b805000000b90db440080f01d9"}}, @cpuid={0x2, 0x18, {0x3ff, 0xf9000000}}, @uexit={0x0, 0x18, 0xfffffffffffffff9}, @code={0x1, 0x58, {"c4a33579386dc744240062000000c7442402216d0000ff2c2466470f73d4120fc7594a40af4284910000000066ba4100ecb805000000b9000000000f01c1420f01c58f49a8942f"}}, @cpuid={0x2, 0x18, {0x5, 0xd18}}, @cpuid={0x2, 0x18, {0x0, 0x80000001}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0x0, 0x5c}}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @code={0x1, 0x4c, {"f23e440f30450f01f2c4a1f929b6000000000f20d835200000000f22d866b870008ee8260f20d3c4a2f1295103c442f999fb0f01cb66ba610066ed"}}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x49, {"450f01d10f01cf430f01c966ba4100b0c5eec42228f2c50f32440f90580026440f0095470000000f20c035000000400f22c0c422fdbe6100"}}, @code={0x1, 0x62, {"650fc75800b8010000000f01c10f01c866ba2100b8d875ae24ef8f29a8908ccb008000000f01cac4017e10dcc4e105e4be6f360000460f79d848b809000000000000000f23d80f21f835400000200f23f8"}}, @uexit={0x0, 0x18}], 0x28d}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000800)={"3a74e9e49082be1ab5b3cc3756d6606c0714d1e64e399221f24030f036562042920a2fb21e30ed43b98236bcc8f294f97229991e065c681a5e3158f7a01b576c76f3547fe4b09d0908dd6bb919a258b7655df64b194915f0299ebeb724cf6c84c39692189efccb730bf7745ecc705b8845c68e93e4a2050404f633db3091fbafefbf42d02052d789fdfc0ff894ec6f8737277402a257f5785b2b8cb6389c557569c368748b976d2275b57c97903e7f0ce8daa1e3a6ec4bfd772fea93a6aae46ef7a3158c46afecb57eb365b779944579e95e7c67d70efb8367340cc0a0b59e44ad8602999a0c966c3fbe4fb85f0570eb4d5b8d6cb6be4e3669fc5f1dac8400c992a6d41dc105c949bbfab36807aa6abf9b186f8279566fcd197a0c253ddd1a2718016dbfdab3b70678b37a6876c2bfe63e9eb2766f4c20dfdc1f83fd87d1790448c47b57e16aebcd9cc4cdbf381b38dc7c85c35fff9df68b1a7457fb55922cc80aa407396b7f8ebc3ed3f42d1938cd588de8c797733c63dc3a2d357b7a30dbd2ea398d760a549a26788cc3d283969f5394cd0755727df1f5e128ae208c214af9ff1e84de35831e5a0b1545131bda15a699e0d80072a778e02b751a5054704494661908bcbc34223edd20e675651c52a00d151a89a1b37cd0306f2cd785dd1c465d4a1d92cc0ca000c050ee2878394c19979671ad52b2d6acb5283525366433194d8a96b81820001305e42f04212b90d0bbebbb56e8dcd68e455df96fb278747c2b6d1c28b6ffca039bea2c6a5feb74ad63ef969d4a3ab226569d70e582537f718df033adc969b1f1e0bd0076e14399a4ee3457e124af14331ae241128ae7ac7251666a54e1beb7ab3fe6acadd2b5fe33dcdc8b5573fea180fd6ec42b843a7b6062bd9ae5c761801c5e70e9fd6e0f294efc845893d2736ef857d08463eddb031546e84ceb060f87fad34de1c7c2e5d9af57f5699e284b7447f9cacd69e3875ed83c2cf976fc3d1b83d89fd3e6c0aff8895bf4acec5ec139273410fb160660cc415f50e63bdc783c79cc4067c1c3f564546ed24dc0e9c184fb2c4c0727c5cdafb6dc000afd45bfd44c6231bfc664b5711cf4ee6d3ca5631e7743f078d6ae05998774d1770206d4915442ab147204f8f25edba8d4f336b2823138a8aacc1ffe302233668931a9e0a7f2e4a656d0eaf23ecccc1a5de96c18a01bee40daacfbe20d2c4bc35118e7eef9cf2ece4b49bdf4a6478bc1e8e4aa518bd1264b0ce98becdc17344a9b66082b05193477d73aee4321bafe15340931e7405c3be26d71cee714711378dc3afdbe400abd2590bc7f25b87f9b0a484c89fc9ba26f2a49375aeeade3545e2fd51eb608b31bedf7e6a2b0e0ecc003c36cb3601a55b10d1b4d169c82e2c2e86ab741f8e7b2b3f8e27fada6b3600e67a558b8cd6e1ea17a60f4e30eee64"}) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0xc, 0x20010, r3, 0x82000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000c00)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x4, 0xa719}, &(0x7f0000000cc0)=0x90) ioctl$CDROM_SELECT_SPEED(r3, 0x5322, 0x7797ab29) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000e00)={0x0, 0x2ab, &(0x7f0000000d00)="bc52b66bd5ff9a3f07cbe7e6a0bb515bb7a55d598d6db4aeab31c3fe73e3d9211a3c594fb568", &(0x7f0000000d40)="6a5a00ea12f25bedfe381aa42c9809e6065f2a0a40a8da881bd81bec582289bfe0b4a2d4bf370522df197c201d1043aa5ae88acd337c78c59b0a8a5d3fea7f661b7b3d2aaff13f82375bcf5ab1bbfa495b53ac6840c8426b834222d9bcbe4559dc91d9ceb94f155bdedb44a960b2b075902bfdbbc041789f956243c32e31a5cbe2e909ecabefd60c943f6c3ebf4105f783ca3792f2fb70022a30468fb475ad22f6b9246285", 0x26, 0xa5}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000f40)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x13, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x488}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r3}, @ldst={0x2, 0x2, 0x5, 0x2, 0x9, 0x18, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f00)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x21, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000fc0)={0x4, 0xd, 0x0, 0xc82a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001000)=[r3, r3], 0x0, 0x10, 0x3ff}, 0x94) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001100), 0x521800, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000001140)={0x0, r1, 0x1}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000001180)=0x3008, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f00000011c0)=0x4) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000001200)) sendmmsg(r3, &(0x7f0000001540)=[{{&(0x7f0000001240)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000012c0)="a5c850cc9aa966585991e49b7e249c43bafee7a5f0c1e0e48cacdee13077ff6b220e4866360a277f1d28ccb36dcd7fd1bcce21dc00da62a2097722bb42e7791f349010d953a87574f082401bddd7fe4c2eaaf4b4", 0x54}, {&(0x7f0000001340)="fe74566852433f8beec6a7ad9e2d98078e1b175d64bcb11d51de6b5245d0a7f5331060f3592b866fc7dc904b1dcfe69a05cdf8cd9cc4c912da4eda8e904540b8ca", 0x41}], 0x2, &(0x7f0000001400)=[{0xb0, 0x10d, 0x0, "ceec69abc04a45c3cc437c212e84f8d013c472c532ad47b87c9471c32b3455b12215754ad4c7fb0858b45824cf54b24508324952e62fdbbc2f523111d86893a734ad1135802c3bb09e234a005eb46ca0d8e2272fffda8d20cce338b103347bdc6575979c17120798de4434a330fcdc4fa058d4568314584d81b25076db98f233f40b273be8023efd122a0d50e3a82cbeb7cc97b267d4bf33255e8b3540b2"}, {0x10, 0x1, 0xffffffff}, {0x48, 0x18a, 0x8, "236c0eefdff5933be27bb2e5e6486e38472f20050057a8d870668ae4bb3916f8604933588a65258e27721425d732b736d7a3"}], 0x108}}], 0x1, 0x40040) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001580), 0x410000, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000015c0), 0x222802, 0x0) sendmsg$nl_route(r11, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)=@ipv4_getnexthop={0x2c, 0x6a, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4008090) write$UHID_INPUT(r10, &(0x7f0000001700)={0x8, {"f4ebae5de46875ff5d5dd4f0a602382f87f7cd40d954097fe737a5fafb3690a0ea981282b51d7d61949e457b57561600bbbbffa47e995316ed0904fd41e201320b7b7addac9ffd208f1794da4432dd0d9a0218f45441b409b683054d875e915dabb526c0300fffa50d5ff63c4f1720660e429ae68455b703b944271057f50184c0c990d019c226fe5205fab633b5936f442dacf763677210c5ff1ff8d9ca594801ffbfcf0cc8f4b1eb25c4f9ab4be0926549713130daf957c7fe7f3d5e3d3118431caf2b85b5a9efb683a1a8755f5cb104c6f65169f228d76781f8a892819a458cdc9b16623b2a22518326a40f23b55f6cc0475fdb41491e57431490e9b72e996ee344ea2010276b2498a614ff165f3a425a6046f9fb7b7c973ba20893d6ff157f2850a2975d6862cd68e9f571d7ce82d3dea339bd9d1fbb5fa6c952cb3aff42bf73889757e66d134913688f3381946b128fec29e6ccec064fb66dca78ca547d824af8d17fae8ca8f4b29896ed666745e2828c620e1ba331c87a6de61c44ab5c4989f580ccccc3ef4be9642d10ae9edaf52654758c53d91f5e9c39524098da2297b642d2ce951ea9e76892c907743410fb6bc77c8a714a65e180c73ded7a519511346f622c8276eda06c022f6f3a08c798b4421926fd98e70ddc6b3a6cfe088491035cc000afa54da885cc32bc9ac9ce3ee3d85b954f4c5cd26a5547c534ea31e53445610eed457b5a1880233d092a378427a4c7e5c80e2e785b4ada3c5b6a041b1e797ea7d65ba4c0e8a9544d261ed27f4c38a59cddf2bd363f6735423d9c5a1c21846456a144c4aca58e22cdf8090ba4826499e534e93ad626617bbaf2e68957c1edd1925bcb496424a713cdb1fadc75508ad226882e73df99ad94cc7d0652ddf405417f8c7d37d00df5c53d32446718492e731920e2b1f94fe7a50f12e1aa566f0401158a736937f3767d851ea67525afaa9613839ed42dedb61a2798d1e0c6212cf88c891657c4d8bd16550de15fd7ac1bf4b8e4863032c87d592571bec89129855bdb4dfcebed07929fefff6d4cb23dfabf2773bf6b4dc87ea6fd15e3cbcdfdb2e4248a00388296640193a5c64f7a5665753b08440c79da56de606f216e5434532a7d8eb8c5b21a03bf3a980d6fca116fe270d0adc326b8903bd5e86babae1b629be0c7ff43405de47659f89c081a638060a5a0bf9b08c13677dafc9178eee86d85aa0da00dd37d3a61921a2d28e3b707e7cd0dd86285072c3aeaccc67905c5f2222f8febfbdcc98f1e6c9a00da31802ec2de9e48dcde9960c1ff3d7504daa0e1855a87342cc462df1a27a37df33a4398ebcd0191c31fa4beee47da9b28bf1d802945a02b9387c583a3808fddb36352843a142fbbded132bfda5b016a2be9cd2de8c07bd4d11996f58e08c34cb4efe69e12aeb56c5a87265ad238ca210503f410c955461da6d3df91851a3226de36957a3d566eefe2b849d3527be43ad784eab992f7b1f5e5787c0ac5196936ba23964d79271676c5a21d546fbd421d9e7227d27092161e5648f2eb4dd59eb6aa8e8776f8ea2d23d1ae95a4a9ab4329813c60c58f4dea1b1ab488e47380053416a092b0524db93b19681d5876bdfc1e48475c36aebd28b2994a2e5b7a61089f45c63d6b8fff214c213b44fed25c08f51dfbb5e584642263f4816cbc2eb9094819863f39c7ba43c20a5326de990c0d2dd4b427142b46994af6e8c7b88ca041b711784aefa6b273140b2d35594f2086e1bba8689403c691678becc6f7fd0ca068827417414609a32ccd21003c04a0e96ea223f3e7b39c221ea34efda3e0f0de3f46b4ad8b244cf31b4a948afab91deb13ed00628e06c66cc5b3ba7660295f5c4412849fdf71767ee227adf6d52f37d831c8e3a8f229c6240263cd34bc446f2b8fcfdc6de6f9e352816c1ec699e862b96a84a8416c9a82ea65a6671397374f7192a4d8a2d5009792f795f50b6745e2a273884bf3bc2ee1057fed336bdc920fca6be859b63fa67f6bebd851db693062ccb44e6129d84c56ff658c7e1fbb57caf8100f807c168b2524be6bb6b8e4962a4b813702f3c4e4d45a5195888d8770b33a36108cbb0fe1391ffccffd1401a25866bbbcd76b6c1f359d6ff1d5bc54c5ea2161123cd62b72a20e6d45254d88f73a82a44322569d9bce3dd0f130001a63a81edda8e5bcdeb5b42ee63e480cecebbb8c06ff6435d7d0c47887a20f172d7a49fb9f7640849da236824b97e57950bc2bc9872ee0b1889fed4a4ffbbea284ddf3838c20af81baa1de337f89892707f40e913092c4ec373b3f01f9554bb04cb31b8997a01a227ec20972cc1ef03b65121c8a49178f9134cdb28d777011ffd081ae195d971e996de44557cb210b87db9ad52c69de102b27d1bc9dc134cb3d283fcf197642d6d722c3797ad1132223c9669bf47a4d6f450b6376413e72f49b2c659b5e6222cab346129d1073bab2e104446dd1827d6dc26acc0aebb846fe598f62abf8ac81f942fa6c4082bfaa35d48fb0cedf3e5cc8215b8f950503efb2e27b4100839c2b835b1d57df904823170e9a2771d5f391d0fae7254efe24ce0500988c2c729e7f4954db8944d884b4d769664e012ab648ded48763339d0e375edd765d5c944cfc4621f891431a1871fcfba725c76125af14973557c4fcd7cd872d08f8d34ed8e5404f11832f5a4b8ddf4669699f2e779803a929452fcf2587945065c56f619dcdb76e02aa4b94b52466e72e0859e0e2414011c2340847ba9856c8cb4ac565fc454cf6250b233d09e0fb64268bf8399e1f834272a5adde203826b95b18d72e9952ef4546a3f56dd6337d5ce10e080fe6ad1587e228171cfda7258f74140ed8badc34ad69e937f6c30a226889f22f5f460dabd28e506ba50f3dc9f02c59a8deefbfd9deac80b35371b9a79778a58d82ba9f1f4840f1b23025d1b19e7e4e61a8e67f4ddfdc20444ace21e306a3f1f3e72e75eab5731127b3c959702b2f516f623df21f09472a72a1e33484e6d4b1df01d86e52e3bcc6cf130b4871175f4f43a40a0b6cf24ce985aa3b1fda7418c385d94d3c1a1720d5fcb6fd5ba40dc1b2653fa4b71ca04b5fc77a660b01e40d908ef78f7d7f3f0eeff59b9073c7ebc5228be60191c2fab2a16788d144bf5dbddadbf6f8c0328332650c1c9355914718411590dab94102057c177afd10748bcc78a3204528e42312f8306ddde8334edd902865a60546826b277fe23d092f0129494077b7cb085c7e2587f92b8f474ba7590ca6a21de5cd9507ca3cb931619256c74e232c5f05e44222c1f2c66555d3fc1403f0a48552665add0126ead8b2b5e2eb20e4265342b8abe60cfd91cd7a72694fe9a06928b7e422b493e65efe2effdcfd30aebf06137a99dc2f759096160028d4357c2d5bca703a9b57173723560c3fd1243636da0553189be8a97840207200453523599791f6a064ae806ad5c50b5cc2dd1b88828ca4047ffdd6b2c5e878426a24dbf4d59e77d151090d0c8c6f6e108c84b0961529f752769e3e555971c7569028b4db3810430762c058a9729cfab1b86f8c28dd626a47354b3d029161d9503cd940eefc97e7ce5e8de59243cf615636700ba6e61609b6746f3a7b94d1fb4cefae3cbd03c12d67a26391da26f36ed7a093abc52660587243e6ea75dfebbcab2ef5e7761ba44b87388f982643c236e20423ea9dba0c358e72faffcd106726caf1c4dbc05b00aba2e3ddd008b435046499af30ae15fb46348d5aa22427ef5a5985dc206d98e5c0fa4c30a02f382d8ea5b657ef1b4ca30a62edcb7ce8e8c1d55aa07a0bb684b9e1745de5b7cb5b46c464f42d6499434c0407c71877d9db01f45ccc251b0da78cd3ce7620e00a37abbc29226bfc4947b95b3ea06515567ea4cebe53318ebb020875e1d721d95e2fcd8a8bdc6a76f0f55030190319bdb34e7f5dad17f71343457daeca0fb0b24803766e6adf3369bd6e3ca5d6c4f91d595a2e9584e11d719d69e1c9ab1efc417f3bf28fd528e5a6fdef87f49273bff6e76b6e0bafec316e64072865d48abee3fae96bb8354e4f3a105a3fb743b8a56c8059929fc60b6acaefe43c785d0e553809fc1190700a697ca6c8b77fd12add085f50ffdc5e713f524d93e3914dffc913d485ba4521a8a8087f727d27e2bc3ef606840b2aa2a9a6fc746eb2fee86313b6549b9ea4c17a85a05ef83c65c7815b778446ceb0144d94968d50286eb89bae767607dbddf28d7ae521212125b0feecb0772037d4915e9e985814b7f3f695b89c38ac8ae3a0e38a6869c0562011c98199197fa2cecfc0ffc30d81ecf095c78384937859dc208b327f96cfe9822dc7e66277317bb8d88fba273f5ce60df6e0d106aac8c83f220892b386c661333f495c529af1034820fedcc1df0e338f5753cb6969836620c31f785a4bc771709b20c7c0755bc3bbf40e8e3d37a7410e15d19d38b050bbe9d6361611b006eef3eccc48d0ccdaf75d801e47278068f61f2235bbb82f52bed77df21c0478adeb56d534e93ff3c0426674178f1f2424bd045f72546539c9bbee2fc69344b681a34070e263e0c6bcc16896865645fc5fa3df49a551632bb94a3349c37e43ac88965dfc133ed29e66623562ceade77e06e11c72e09f1ce8a4afdd8ae94eb9e5fc1e19e1c212a085fa82e5841aee40ec23a1ca7ef7804cf5604306c2fc2599075a86f4b8ad3f5d5f946db6a846a7402723a3b8f84da8f09923eea5db448c046ef8b724ae5cf628854e97879353974db58f3c420b6123bb82677b8e248a74cdb72f3f4c9270107fb8e9e11437bb33bc9fc9753b804bd20fc3ecca2d9b27784cac734c18d20feef692dfe53fcbf3a8b47b92cf9911e90dc80bbe6acd8566c54417085c8993e22ca3249e5e6dc3ae60810ba113c0e09318e4285e7877b4c352a07a63dc01bc05dfd5becc6881f999908328f3f9004fc51b6cddd84d32730002fc0eb4df740927adb0b32b96a9a48915ccd68f1ae45cc626135758ab83dd0bd72d59fb2ec4d9b1d6a6a0f4cf528630e5c32898fa067df478673b239f436009bb4d392989694cd96e0492c41157545793b2e92fc93f8f6724b6653b716043222bc961494953b6e5fe1f11d1f77f0479dce41826ecaeba66f82ed41031376a1dbc000e0baf4d0c8dfa3c3a24354a4e244e814fa320d41416f4a4f811c501a06a3bc98c894ba30266ae4a413fa5a2bc564fb8a8928043f9a41699bf5b1e08485da62f7adcc60fe26e3ca7b90e078acb6127a4524a97b4dc5f4b95278bbe228d3c09ac487d11afe0a7538d40eb1a6c8543018947bc72f2d25a3d8f2679b53fb810ab418916e6e5cc9895e747d435cd50ba27826404d301a9c5e0dd037102139bc18e8e7ac2e5ef1946051ad399be209b6d2afb5116008d362d16106f5be3fe181a759b44cbd86ae9e1d43f23fd8c36c9b64eb7addc08d30e9d3c9abeddf75b1bd29a3f3b808dc552ce39c21cc771d42ff009aacf4365bb335501e7c4c0ae82685233c2e03740cd70cc067d2956f5b551595ea923b0d62d448cdaf09d7e2af84673be56dbd597d9825374543866c76e4747aa62ed304144f0ab57486e2fe480e6485abeb160b72fa0efcc9be756e2b25cdfab5cbeb61fd2700629be0f349c2c143f2eded491972924edde037e089ff6dec0f9a875beb992fab3b717790a19b594fe8fadfc94d44401c151cf6f0cb9813360c426d358b0f8cfda60a0a6b2a2bb3316ff3e8ac18e67e4d568047b62dfc6c2fb429a2f8d83c582312a2e784c1073e3ed0ea45f2d", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0x1e, 0xd, &(0x7f0000002740)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x4}], &(0x7f00000027c0)='syzkaller\x00', 0x401, 0x0, 0x0, 0x40f00, 0x10, '\x00', r6, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000002800)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000002840)={0x4, 0xc, 0x5, 0x3}, 0x10, 0x0, r8, 0x6, &(0x7f0000002880)=[r8, r10, r11, r11], &(0x7f00000028c0)=[{0x2, 0x1, 0xc, 0xc}, {0x1, 0x3, 0x10, 0x5}, {0x5, 0x5, 0x8, 0x6}, {0x2, 0x2, 0x10}, {0x2, 0x1, 0x3}, {0x5, 0x2, 0x5, 0x4}], 0x10, 0x4}, 0x94) 2.919493058s ago: executing program 7 (id=2619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000380)) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c00000000001190780800001ce0000001000017c1000890781a492edf837f8290765926ea16a71626fe1bd61d94b6e6be08681a7bba9ef45de680fc77aa28c4302e687cfbf45817b7a309458313de4c214f461c641e00ab0d463ccb1ddebe359ef3964a65bc1ae8e283de4ebf0c87bf00"/140], 0x0) (async) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x36) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0xf1ffffff, 0x0, 0x1}}}}]}, 0x78}}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14000000000092f94413582b00", '\x00', "4e67cb72f328ac2f"}, 0x28) (async) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) 2.750013934s ago: executing program 6 (id=2620): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0x1, 0x70bd26, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x6, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffffa249, 0x18e}}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x6, 0x4, 0x0, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x2) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r9) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000002000000d33c8b3506000100c5676252f448490aac1414aa"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x114, r7, 0x0, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x58, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40080}, 0x850) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f00000002c0)={r11, 0x20a9ad}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r11, 0x1}, 0x8) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="3a3f5d2129ffc724bcebbf31c6bdac74", 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000500)={r11, 0x26, "656685c5a968104b62ad0f2049646d2c0b636dc27bc58a46d86d05e7c61a70d94c42056c0c87"}, &(0x7f0000000540)=0x2e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x9, &(0x7f0000000040)=[{0x2, 0x9, 0xff, 0x6}, {0x5, 0xff, 0x2, 0x8000}, {0xa, 0x81, 0x23, 0x7ff}, {0xa, 0x7, 0x80, 0x1}, {0x9, 0x3, 0xf8, 0x3}, {0xff, 0x3, 0x81, 0x1000}, {0x0, 0x3, 0x9, 0x401}, {0xf67, 0x0, 0x3, 0x8001}, {0x3, 0x81, 0xf8, 0x9}]}) close_range(r0, r0, 0x0) 2.646204952s ago: executing program 2 (id=2621): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000002180)=0xb, 0x4) bind$can_raw(r0, &(0x7f00000021c0), 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x84, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000280)=0xb0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0xffffff79, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x2040) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="89edee2c78daddb4b473fec988cafbe863ca", 0x12}], 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.510334796s ago: executing program 7 (id=2622): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x4e21, 0x0, 'lblc\x00', 0x0, 0x0, 0xffffeffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x9, 0x10103) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000180)={0x1, 0x1c, [0x0, 0x2d, 0x7, 0x9, 0x2f, 0x3, 0x1]}) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_inq_rsp_tx_power={{0x5}, {0x7f, 0x81}}}}, 0x8) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r8 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r8, &(0x7f0000000000)="3f03fe7fd877140006001e0089e9", 0xe, 0x40800, &(0x7f0000000080)={0xc9, 0x86dd, r9, 0x1, 0xfc}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r10 = syz_open_dev$mouse(&(0x7f00000001c0), 0x100000000, 0x400040) sendmsg$nl_route_sched(r10, &(0x7f0000001040)={0x0, 0xfdf0, &(0x7f0000001000)={&(0x7f0000001bc0)=@newtfilter={0x34, 0x2c, 0x20, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xffff}, {0x0, 0x5}, {0x5, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r2) syz_open_dev$evdev(&(0x7f0000000280), 0x4, 0x20000) (async) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r11, 0xa5456c2fe1cd7aeb, 0x70bd29, 0x35dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 2.054368474s ago: executing program 8 (id=2623): r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x8, 0x4) 1.545482799s ago: executing program 6 (id=2624): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x503200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0xc0a85322, &(0x7f0000000100)={{0x0, 0xfa}}) (async) tkill(0x0, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) (async, rerun: 64) write$sysctl(r3, &(0x7f00000002c0)='0\x00', 0x2) (rerun: 64) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) (async) readv(r0, &(0x7f0000001540)=[{&(0x7f0000004580)=""/4107, 0x100b}], 0x1) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (rerun: 32) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000140)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c744240200800000ff2c24f30f516797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4c}], 0x1, 0x24, 0x0, 0x5d) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 32) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x700, 0x7800, 0xffffffc0, 0x7, {{0x17, 0x4, 0x1, 0x0, 0x5c, 0x68, 0x0, 0x0, 0x29, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0xb, 0xf7, [@rand_addr=0x64010101, @multicast1]}, @end, @generic={0x7, 0x4, "8567"}, @noop, @generic={0x7, 0xb, "da8ba1774f20e5ba37"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0xe, [@loopback, @loopback, @remote, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}, @multicast2, @broadcast, @loopback, @loopback]}]}}}}}) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) ptrace$getsig(0x4202, r9, 0x5, &(0x7f00000002c0)) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETDEVNETNS(r10, 0x54e3, 0x0) 1.268915998s ago: executing program 8 (id=2625): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b80)="1a816649d5bf265d732360c99fc72bbf", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x4004041) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000001c0)=0x2) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_group_source_req(r2, 0x29, 0x1f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1}, 0x2}], 0x1, 0x10100, 0x0) 1.1542844s ago: executing program 6 (id=2626): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@verity_off}]}) 815.848884ms ago: executing program 6 (id=2627): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a000000000000611180"], 0x0}, 0x94) r0 = socket(0x15, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockname$packet(r0, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x5) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000280)={0x3d15, 0x200000, 0x4, 0xfffffffb, 0x7, "05005a00166100"}) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xd0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x4008032, 0xffffffffffffffff, 0x97224000) mlockall(0x1) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"]) 243.461746ms ago: executing program 8 (id=2628): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102384, 0x18ff0, 0x1000000000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f0000000440)=""/4096, &(0x7f0000000240)="b8c5380a869b579f07d9eda016e1b496e6365119a9d0550f0f2339e2aafe085d19829838d9502392ded1d1865e06bddea6296349e1ce9777871fb0493bc74a94f4d6c662e19f8ef33220eceb77f3d217f608908d7f357cf5c9aba1dbf035ba2d0556", &(0x7f0000001440)="62d4be6322af7004899456d42c915e222dc08dbaa034c196471136919ebd37ddcca14c75d71d08c5497ae94463b44829fda0c8ad1b99f0c249661ca27ed8cc937dddcff6ddc95414b9d1aa17cafd8fccd42f5073a9f0c5040fbc14b05f734b8b51ce83d50ed0d9eed1414ad4ed61472eb86e8a9b454b2b71f9e0614eb30a7fc2077bd41cf38a8af3a9fa356760c9aaca2187b2a83678f6", 0x7, r3}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d0000000000b549dc45f3d1dceaaa3b0813f33f2a"], 0x74}}, 0x20000014) (rerun: 64) 0s ago: executing program 8 (id=2629): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) ioctl$TIOCNOTTY(r1, 0x5422) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) creat(&(0x7f0000000280)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r6}}]}}) creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) write$FUSE_GETXATTR(r4, &(0x7f0000000200)={0x18, 0xffffffffffffffda, r9, {0xb}}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1a, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x2, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r10, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) kernel console output (not intermixed with test programs): mber 2 using dummy_hcd [ 239.301781][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.374517][ T34] usb 12-1: Using ep0 maxpacket: 32 [ 239.497041][ T34] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 239.500463][ T34] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 239.518954][ T34] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 239.532876][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.558589][ T34] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 239.563914][ T34] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 239.604169][ T34] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 239.642624][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.665994][ T34] usb 12-1: config 0 descriptor?? [ 239.685696][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.844916][ T5944] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 239.943640][ T34] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 239.979259][ T5349] pmem0: [POWERTEC] [ 240.020573][ T34] usb 12-1: USB disconnect, device number 2 [ 240.069268][ T34] usblp0: removed [ 240.158929][T14235] netlink: 'syz.3.2389': attribute type 13 has an invalid length. [ 240.168821][T14235] macvtap0: entered promiscuous mode [ 240.281502][T14235] macvtap0: refused to change device tx_queue_len [ 240.376647][T14235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14235 comm=syz.3.2389 [ 240.454426][ T34] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 240.524407][T14242] siw: device registration error -23 [ 240.607456][ T5349] Dev loop2: unable to read RDB block 7 [ 240.643576][ T34] usb 12-1: Using ep0 maxpacket: 32 [ 240.663353][ T5349] loop2: AHDI p1 p2 p3 [ 240.667399][ T5349] loop2: partition table partially beyond EOD, truncated [ 240.699634][ T34] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 240.720458][ T5349] loop2: p1 start 209 is beyond EOD, truncated [ 240.734990][ T34] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 240.751309][ T5349] loop2: p3 start 335544320 is beyond EOD, truncated [ 240.752118][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.757961][ T34] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 240.758019][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.758039][ T34] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 240.758061][ T34] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 240.758100][ T34] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 240.758120][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.764524][ T34] usb 12-1: config 0 descriptor?? [ 240.848653][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.017678][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.044905][ T2010] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 241.048608][ T40] kauditd_printk_skb: 655 callbacks suppressed [ 241.048629][ T40] audit: type=1400 audit(1750974637.432:7107): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 241.079957][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.147339][ T40] audit: type=1400 audit(1750974637.462:7108): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 241.167397][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.200567][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.207154][ T40] audit: type=1400 audit(1750974637.462:7109): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 241.228132][ T34] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 241.274055][ T40] audit: type=1400 audit(1750974637.462:7110): avc: denied { recv } for pid=5338 comm="klogd" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 241.349289][ T40] audit: type=1400 audit(1750974637.462:7111): avc: denied { recv } for pid=5338 comm="klogd" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 241.367235][ T40] audit: type=1400 audit(1750974637.472:7112): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 241.382507][ T40] audit: type=1400 audit(1750974637.472:7113): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 241.394208][ T40] audit: type=1400 audit(1750974637.482:7114): avc: denied { ioctl } for pid=14212 comm="syz.7.2382" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.412895][ T40] audit: type=1400 audit(1750974637.552:7115): avc: denied { ioctl } for pid=14245 comm="syz.2.2391" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.453008][ T40] audit: type=1400 audit(1750974637.552:7116): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 241.473387][ T34] usb 12-1: USB disconnect, device number 3 [ 241.482357][ T34] usblp0: removed [ 241.501473][ T2010] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.518287][ T2010] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 241.530545][ T2010] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.541815][ T2010] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 241.574213][ T2010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.626574][ T2010] hub 7-1:1.0: bad descriptor, ignoring hub [ 241.630875][ T2010] hub 7-1:1.0: probe with driver hub failed with error -5 [ 241.724956][ T2010] cdc_wdm 7-1:1.0: skipping garbage [ 241.743087][ T2010] cdc_wdm 7-1:1.0: skipping garbage [ 241.748800][ T2010] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 241.974826][ T2010] usb 7-1: USB disconnect, device number 37 [ 242.314498][ T6029] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 242.539764][ T6029] usb 7-1: Using ep0 maxpacket: 8 [ 242.650682][ T6029] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.690066][ T6029] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.694428][ T6029] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.701090][ T6029] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 242.713584][ T6029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.757606][ T6029] hub 7-1:1.0: bad descriptor, ignoring hub [ 242.777335][ T6029] hub 7-1:1.0: probe with driver hub failed with error -5 [ 242.802381][ T6029] cdc_wdm 7-1:1.0: skipping garbage [ 242.817964][ T6029] cdc_wdm 7-1:1.0: skipping garbage [ 242.820151][ T6029] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 242.966784][ T6029] usb 7-1: USB disconnect, device number 38 [ 243.273021][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2401'. [ 243.316966][T14277] IPVS: Error joining to the multicast group [ 243.623020][T14277] bridge2: entered promiscuous mode [ 243.680734][T14277] bridge2: entered allmulticast mode [ 244.079402][T14295] ieee802154 phy1 wpan1: encryption failed: -22 [ 244.658192][T14316] /dev/nvram: Can't lookup blockdev [ 245.285393][ T2010] usb 12-1: new low-speed USB device number 4 using dummy_hcd [ 245.424217][ T2010] usb 12-1: device descriptor read/64, error -71 [ 245.710565][ T2010] usb 12-1: new low-speed USB device number 5 using dummy_hcd [ 245.915032][ T2010] usb 12-1: device descriptor read/64, error -71 [ 246.056039][ T40] kauditd_printk_skb: 551 callbacks suppressed [ 246.056053][ T40] audit: type=1400 audit(1750974642.492:7668): avc: denied { ioctl } for pid=14326 comm="syz.7.2412" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.147675][ T2010] usb usb12-port1: attempt power cycle [ 246.197190][ T40] audit: type=1400 audit(1750974642.492:7669): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 246.229297][ T40] audit: type=1400 audit(1750974642.492:7670): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 246.243332][ T40] audit: type=1400 audit(1750974642.492:7671): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 246.257412][ T40] audit: type=1400 audit(1750974642.572:7672): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 246.292183][ T40] audit: type=1400 audit(1750974642.572:7673): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 246.344607][ T40] audit: type=1400 audit(1750974642.572:7674): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 246.367795][ T40] audit: type=1400 audit(1750974642.572:7675): avc: denied { read write } for pid=12945 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.391013][ T40] audit: type=1400 audit(1750974642.572:7676): avc: denied { read write open } for pid=12945 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.410307][ T40] audit: type=1400 audit(1750974642.572:7677): avc: denied { ioctl } for pid=12945 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.526472][ T2010] usb 12-1: new low-speed USB device number 6 using dummy_hcd [ 246.567621][ T2010] usb 12-1: device descriptor read/8, error -71 [ 246.773641][ C2] vkms_vblank_simulate: vblank timer overrun [ 246.846828][ T2010] usb 12-1: new low-speed USB device number 7 using dummy_hcd [ 246.908216][ T2010] usb 12-1: device descriptor read/8, error -71 [ 246.958152][ T53] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 247.015524][ T2010] usb usb12-port1: unable to enumerate USB device [ 247.149792][ T53] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.162870][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.185190][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.212331][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.240378][ T53] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.251478][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.344510][ T53] usb 7-1: config 0 descriptor?? [ 247.381811][ C2] vkms_vblank_simulate: vblank timer overrun [ 247.766240][T14359] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 247.957638][ C2] vkms_vblank_simulate: vblank timer overrun [ 248.089990][ T53] usbhid 7-1:0.0: can't add hid device: -71 [ 248.093865][ T53] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 248.121329][ T53] usb 7-1: USB disconnect, device number 39 [ 248.525635][ C2] vkms_vblank_simulate: vblank timer overrun [ 248.763485][T14376] fuse: Bad value for 'fd' [ 248.792406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 248.809081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 248.834389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 250.013612][ C2] vkms_vblank_simulate: vblank timer overrun [ 250.221883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 250.226118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 250.852973][T14408] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2433'. [ 250.997220][ T6156] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 251.067645][ T40] kauditd_printk_skb: 495 callbacks suppressed [ 251.067666][ T40] audit: type=1400 audit(1750974647.472:8173): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 251.107635][ T40] audit: type=1400 audit(1750974647.472:8174): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 251.133197][ T40] audit: type=1400 audit(1750974647.492:8175): avc: denied { read write } for pid=13892 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.163303][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.169914][ T40] audit: type=1400 audit(1750974647.492:8176): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 251.200746][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.207580][ T40] audit: type=1400 audit(1750974647.492:8177): avc: denied { read write open } for pid=13892 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.242201][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.249922][ T40] audit: type=1400 audit(1750974647.492:8178): avc: denied { ioctl } for pid=13892 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.280304][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.298767][ T40] audit: type=1400 audit(1750974647.502:8179): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 251.326202][ T40] audit: type=1400 audit(1750974647.502:8180): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 251.413812][ T6156] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.419250][ T6156] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.431750][ T6156] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 251.446655][ T6156] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.464385][ T40] audit: type=1400 audit(1750974647.522:8181): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 251.474748][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.497293][ T40] audit: type=1400 audit(1750974647.542:8182): avc: denied { ioctl } for pid=14402 comm="syz.2.2431" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.523816][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.538296][ T6156] usb 7-1: config 0 descriptor?? [ 251.610395][T14412] geneve2: entered promiscuous mode [ 251.612368][T14412] geneve2: entered allmulticast mode [ 251.922118][T14419] syz.7.2437: attempt to access beyond end of device [ 251.922118][T14419] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 251.929451][T14419] syz.7.2437: attempt to access beyond end of device [ 251.929451][T14419] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 251.934727][T14419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 251.939956][T14419] syz.7.2437: attempt to access beyond end of device [ 251.939956][T14419] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 251.952142][T14419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 251.959874][T14419] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 251.967487][T14419] UDF-fs: Scanning with blocksize 512 failed [ 251.970957][T14419] syz.7.2437: attempt to access beyond end of device [ 251.970957][T14419] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 251.976804][T14420] x_tables: duplicate underflow at hook 1 [ 251.979029][T14419] syz.7.2437: attempt to access beyond end of device [ 251.979029][T14419] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 251.985328][T14419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 251.989561][T14419] syz.7.2437: attempt to access beyond end of device [ 251.989561][T14419] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 251.998629][T14419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 252.002662][T14419] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 252.007759][T14419] UDF-fs: Scanning with blocksize 1024 failed [ 252.036859][T14419] syz.7.2437: attempt to access beyond end of device [ 252.036859][T14419] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 252.044519][T14419] syz.7.2437: attempt to access beyond end of device [ 252.044519][T14419] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 252.074798][T14419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 252.078408][T14419] syz.7.2437: attempt to access beyond end of device [ 252.078408][T14419] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 252.090570][T14419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 252.093783][T14419] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 252.109148][T14419] UDF-fs: Scanning with blocksize 2048 failed [ 252.112229][T14419] syz.7.2437: attempt to access beyond end of device [ 252.112229][T14419] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 252.117418][T14419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 252.120944][T14419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 252.125075][T14419] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 252.129386][T14419] UDF-fs: Scanning with blocksize 4096 failed [ 252.131662][T14419] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 252.358846][ T9] usb 7-1: USB disconnect, device number 40 [ 253.030931][T14435] cgroup: subsys name conflicts with all [ 253.041181][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.062598][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.115018][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.126763][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.131521][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.147782][T14433] lo speed is unknown, defaulting to 1000 [ 253.604893][ T9] IPVS: starting estimator thread 0... [ 253.608224][T14443] netlink: 'syz.3.2444': attribute type 10 has an invalid length. [ 253.642954][T14443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2444'. [ 253.724281][T14442] IPVS: using max 26 ests per chain, 62400 per kthread [ 253.768970][T14434] lo speed is unknown, defaulting to 1000 [ 253.820127][T14440] bridge_slave_1: left allmulticast mode [ 253.876636][T14440] bridge_slave_1: left promiscuous mode [ 253.879877][T14440] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.927111][T14440] bridge_slave_0: left allmulticast mode [ 253.953325][T14440] bridge_slave_0: left promiscuous mode [ 253.979631][T14440] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.697579][ C2] vkms_vblank_simulate: vblank timer overrun [ 254.755824][T14453] vlan2: entered promiscuous mode [ 254.758777][T14453] bridge0: entered promiscuous mode [ 254.780509][T14453] vlan2: entered allmulticast mode [ 254.789694][T14453] bridge0: entered allmulticast mode [ 255.261625][T14434] chnl_net:caif_netlink_parms(): no params data found [ 255.294971][ T5944] Bluetooth: hci3: command tx timeout [ 255.393550][ C2] vkms_vblank_simulate: vblank timer overrun [ 255.480155][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.764665][ C2] vkms_vblank_simulate: vblank timer overrun [ 256.197577][ T40] kauditd_printk_skb: 356 callbacks suppressed [ 256.197591][ T40] audit: type=1400 audit(1750974652.632:8539): avc: denied { block_suspend } for pid=14466 comm="syz.6.2450" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.209547][ C2] vkms_vblank_simulate: vblank timer overrun [ 256.281916][ C2] vkms_vblank_simulate: vblank timer overrun [ 256.526399][ T40] audit: type=1400 audit(1750974652.952:8540): avc: denied { create } for pid=14466 comm="syz.6.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.596603][ T40] audit: type=1400 audit(1750974652.952:8541): avc: denied { write } for pid=14466 comm="syz.6.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.621874][ C2] vkms_vblank_simulate: vblank timer overrun [ 256.636411][ T40] audit: type=1400 audit(1750974652.952:8542): avc: denied { read } for pid=14466 comm="syz.6.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.647339][ C2] vkms_vblank_simulate: vblank timer overrun [ 256.680493][ T40] audit: type=1400 audit(1750974652.952:8543): avc: denied { read } for pid=14466 comm="syz.6.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.719978][ T40] audit: type=1400 audit(1750974652.992:8544): avc: denied { create } for pid=14466 comm="syz.6.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 256.730828][ C2] vkms_vblank_simulate: vblank timer overrun [ 256.738230][ T40] audit: type=1400 audit(1750974652.992:8545): avc: denied { setopt } for pid=14466 comm="syz.6.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 256.738288][ T40] audit: type=1400 audit(1750974652.992:8546): avc: denied { bind } for pid=14466 comm="syz.6.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 256.738331][ T40] audit: type=1400 audit(1750974652.992:8547): avc: denied { name_bind } for pid=14466 comm="syz.6.2450" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 256.738378][ T40] audit: type=1400 audit(1750974652.992:8548): avc: denied { node_bind } for pid=14466 comm="syz.6.2450" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 256.827668][ C2] vkms_vblank_simulate: vblank timer overrun [ 256.994823][ C2] vkms_vblank_simulate: vblank timer overrun [ 257.121185][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 257.127748][ T12] bridge0 (unregistering): left allmulticast mode [ 257.267239][ T12] bond0 (unregistering): Released all slaves [ 257.281061][ T12] bond1 (unregistering): Released all slaves [ 257.295743][ T12] bond2 (unregistering): Released all slaves [ 257.309694][ T12] bond3 (unregistering): Released all slaves [ 257.328531][ T12] bond4 (unregistering): Released all slaves [ 257.381043][ T5944] Bluetooth: hci3: command tx timeout [ 257.560386][ T12] bond5 (unregistering): Released all slaves [ 257.593151][ T12] bond6 (unregistering): Released all slaves [ 257.638448][ T12] bond7 (unregistering): Released all slaves [ 257.872471][ T12] : left promiscuous mode [ 257.947072][T14434] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.959013][T14434] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.987095][T14434] bridge_slave_0: entered allmulticast mode [ 257.992404][T14434] bridge_slave_0: entered promiscuous mode [ 258.047868][T14434] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.054331][T14434] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.057822][T14434] bridge_slave_1: entered allmulticast mode [ 258.062566][T14434] bridge_slave_1: entered promiscuous mode [ 258.125636][ T12] tipc: Left network mode [ 258.321073][ T12] IPVS: stopping backup sync thread 11454 ... [ 258.371630][T14434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.507532][T14434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.045239][T14434] team0: Port device team_slave_0 added [ 259.052439][T14434] team0: Port device team_slave_1 added [ 259.215429][ T5944] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 259.414405][ T6156] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 259.443263][T14497] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2457'. [ 259.503161][ T5944] Bluetooth: hci3: command tx timeout [ 259.661227][ T6156] usb 12-1: Using ep0 maxpacket: 8 [ 259.701088][ T6156] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 259.754491][ T6156] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.777553][ T6156] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.800420][ T6156] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.808561][ T6156] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.821778][ T6156] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.864350][ T6156] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.181012][ T6156] usb 12-1: GET_CAPABILITIES returned 0 [ 260.185611][ T6156] usbtmc 12-1:16.0: can't read capabilities [ 260.408604][ T9] usb 12-1: USB disconnect, device number 8 [ 260.435494][T14434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.444261][T14434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.474434][T14434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.491672][T14434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.514736][T14434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.543468][T14434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.213678][ T40] kauditd_printk_skb: 158 callbacks suppressed [ 261.213698][ T40] audit: type=1400 audit(1750974657.622:8707): avc: denied { read } for pid=14524 comm="syz.6.2459" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 261.247694][ T40] audit: type=1400 audit(1750974657.622:8708): avc: denied { read open } for pid=14524 comm="syz.6.2459" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 261.304192][ T40] audit: type=1400 audit(1750974657.642:8709): avc: denied { create } for pid=14524 comm="syz.6.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 261.317574][ T40] audit: type=1400 audit(1750974657.682:8710): avc: denied { bind } for pid=14524 comm="syz.6.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 261.377855][ T40] audit: type=1400 audit(1750974657.682:8711): avc: denied { module_request } for pid=14524 comm="syz.6.2459" kmod="crypto-gcm_base(ctr(aes-aesni),ghash-generic)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 261.430137][ T40] audit: type=1400 audit(1750974657.712:8712): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 261.452082][ T40] audit: type=1400 audit(1750974657.722:8713): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 261.478554][ T40] audit: type=1400 audit(1750974657.742:8714): avc: denied { read write } for pid=13892 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.505175][ T40] audit: type=1400 audit(1750974657.742:8715): avc: denied { read write open } for pid=13892 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.528545][ T40] audit: type=1400 audit(1750974657.742:8716): avc: denied { ioctl } for pid=13892 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.555032][ T5944] Bluetooth: hci3: command tx timeout [ 261.909703][ T6000] usb 12-1: new low-speed USB device number 9 using dummy_hcd [ 262.147740][ T6000] usb 12-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config [ 262.153133][ T6000] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.171088][ T6000] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 8 [ 262.175844][ T6000] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 262.182865][ T6000] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.213235][T14529] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 262.234624][ T6000] hub 12-1:1.0: bad descriptor, ignoring hub [ 262.237975][ T6000] hub 12-1:1.0: probe with driver hub failed with error -5 [ 262.241572][ T6000] cdc_wdm 12-1:1.0: skipping garbage [ 262.243815][ T6000] cdc_wdm 12-1:1.0: skipping garbage [ 262.288277][ T6000] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 262.291597][ T6000] cdc_wdm 12-1:1.0: Unknown control protocol [ 262.574468][ T34] usb 12-1: USB disconnect, device number 9 [ 262.606813][T14434] hsr_slave_0: entered promiscuous mode [ 262.611711][T14434] hsr_slave_1: entered promiscuous mode [ 262.625466][T14434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.630218][T14434] Cannot create hsr debugfs directory [ 263.104222][ T34] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 263.341906][ T34] usb 12-1: Using ep0 maxpacket: 16 [ 263.463985][ T34] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 263.474381][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.480940][ T34] usb 12-1: Product: syz [ 263.483176][ T34] usb 12-1: Manufacturer: syz [ 263.529738][ T34] usb 12-1: SerialNumber: syz [ 263.537991][ T34] usb 12-1: config 0 descriptor?? [ 263.788021][ T6156] usb 12-1: USB disconnect, device number 10 [ 264.159505][T14544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2463'. [ 264.580864][T14547] program syz.7.2464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.969618][ C2] vkms_vblank_simulate: vblank timer overrun [ 265.059610][ C2] vkms_vblank_simulate: vblank timer overrun [ 265.132109][ C2] vkms_vblank_simulate: vblank timer overrun [ 265.172587][ T12] pim6reg (unregistering): left allmulticast mode [ 265.209773][ C2] vkms_vblank_simulate: vblank timer overrun [ 265.875357][ C2] vkms_vblank_simulate: vblank timer overrun [ 266.769809][ C2] vkms_vblank_simulate: vblank timer overrun [ 267.081487][ C2] vkms_vblank_simulate: vblank timer overrun [ 267.740243][ C2] vkms_vblank_simulate: vblank timer overrun [ 268.249817][ C2] vkms_vblank_simulate: vblank timer overrun [ 269.364527][ C2] vkms_vblank_simulate: vblank timer overrun [ 269.769520][ C2] vkms_vblank_simulate: vblank timer overrun [ 271.840475][T14501] syz.3.2457 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 271.875530][T14501] CPU: 2 UID: 0 PID: 14501 Comm: syz.3.2457 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 271.875555][T14501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 271.875564][T14501] Call Trace: [ 271.875570][T14501] [ 271.875577][T14501] dump_stack_lvl+0x16c/0x1f0 [ 271.875636][T14501] dump_header+0x101/0x930 [ 271.875662][T14501] oom_kill_process+0x270/0xa60 [ 271.875686][T14501] out_of_memory+0x350/0x1700 [ 271.875713][T14501] ? __pfx_out_of_memory+0x10/0x10 [ 271.875740][T14501] mem_cgroup_out_of_memory+0x118/0x130 [ 271.875762][T14501] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 271.875789][T14501] ? do_raw_spin_unlock+0x172/0x230 [ 271.875818][T14501] try_charge_memcg+0x72b/0xd50 [ 271.875843][T14501] ? __pfx_try_charge_memcg+0x10/0x10 [ 271.875867][T14501] ? find_held_lock+0x1/0x80 [ 271.875885][T14501] ? rcu_read_unlock+0x17/0x60 [ 271.875913][T14501] charge_memcg+0x8a/0x230 [ 271.875933][T14501] __mem_cgroup_charge+0x2b/0x1e0 [ 271.875961][T14501] shmem_alloc_and_add_folio+0x514/0xc20 [ 271.875985][T14501] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 271.876006][T14501] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 271.876029][T14501] shmem_get_folio_gfp+0x67f/0x1600 [ 271.876056][T14501] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 271.876082][T14501] shmem_write_begin+0x160/0x300 [ 271.876102][T14501] ? __pfx_shmem_write_begin+0x10/0x10 [ 271.876121][T14501] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 271.876152][T14501] generic_perform_write+0x3cd/0x930 [ 271.876177][T14501] ? __pfx_generic_perform_write+0x10/0x10 [ 271.876196][T14501] ? inode_needs_update_time.part.0+0x191/0x270 [ 271.876229][T14501] shmem_file_write_iter+0x10e/0x140 [ 271.876256][T14501] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 271.876277][T14501] __kernel_write_iter+0x31a/0xa90 [ 271.876301][T14501] ? __pfx___kernel_write_iter+0x10/0x10 [ 271.876320][T14501] ? cgroup_freezing+0x14b/0x3d0 [ 271.876343][T14501] ? cgroup_freezing+0x155/0x3d0 [ 271.876362][T14501] dump_user_range+0x41f/0xb60 [ 271.876393][T14501] ? __pfx_dump_user_range+0x10/0x10 [ 271.876415][T14501] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 271.876449][T14501] ? __pfx_writenote+0x10/0x10 [ 271.876477][T14501] elf_core_dump+0x288a/0x3a90 [ 271.876508][T14501] ? __pfx_elf_core_dump+0x10/0x10 [ 271.876526][T14501] ? kasan_save_stack+0x42/0x60 [ 271.876545][T14501] ? kasan_save_stack+0x33/0x60 [ 271.876563][T14501] ? kasan_save_track+0x14/0x30 [ 271.876580][T14501] ? __kasan_kmalloc+0xaa/0xb0 [ 271.876598][T14501] ? do_coredump+0x1c9a/0x4f10 [ 271.876615][T14501] ? get_signal+0x22e3/0x26d0 [ 271.876631][T14501] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 271.876652][T14501] ? 0xffffffffff600000 [ 271.876701][T14501] ? do_coredump+0x399f/0x4f10 [ 271.876716][T14501] do_coredump+0x399f/0x4f10 [ 271.876744][T14501] ? __pfx_do_coredump+0x10/0x10 [ 271.876763][T14501] ? find_held_lock+0x2b/0x80 [ 271.876783][T14501] ? is_bpf_text_address+0x8a/0x1a0 [ 271.876808][T14501] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 271.876829][T14501] ? is_bpf_text_address+0x94/0x1a0 [ 271.876848][T14501] ? kernel_text_address+0x8d/0x100 [ 271.876865][T14501] ? __kernel_text_address+0xd/0x40 [ 271.876880][T14501] ? unwind_get_return_address+0x59/0xa0 [ 271.876921][T14501] ? stack_depot_save_flags+0x28/0xa40 [ 271.876941][T14501] ? __lock_acquire+0xb8a/0x1c90 [ 271.876964][T14501] ? kasan_save_stack+0x42/0x60 [ 271.876982][T14501] ? kasan_save_stack+0x33/0x60 [ 271.876999][T14501] ? kasan_save_track+0x14/0x30 [ 271.877015][T14501] ? kasan_save_free_info+0x3b/0x60 [ 271.877029][T14501] ? __kasan_slab_free+0x51/0x70 [ 271.877046][T14501] ? kmem_cache_free+0x2d1/0x4d0 [ 271.877063][T14501] ? __sigqueue_free+0xba/0x2a0 [ 271.877085][T14501] ? get_signal+0xcba/0x26d0 [ 271.877102][T14501] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 271.877163][T14501] ? proc_coredump_connector+0x2d1/0x4f0 [ 271.877183][T14501] ? __pfx_proc_coredump_connector+0x10/0x10 [ 271.877208][T14501] ? rcu_is_watching+0x12/0xc0 [ 271.877233][T14501] get_signal+0x22e3/0x26d0 [ 271.877259][T14501] ? force_sig_fault+0xc4/0x100 [ 271.877306][T14501] ? __pfx_get_signal+0x10/0x10 [ 271.877335][T14501] arch_do_signal_or_restart+0x8f/0x7d0 [ 271.877352][T14501] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 271.877371][T14501] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 271.877400][T14501] irqentry_exit_to_user_mode+0x12a/0x270 [ 271.877423][T14501] asm_exc_page_fault+0x26/0x30 [ 271.877437][T14501] RIP: 0033:0x7f0d4178e929 [ 271.877456][T14501] Code: Unable to access opcode bytes at 0x7f0d4178e8ff. [ 271.877462][T14501] RSP: 002b:00007f0d4267efe8 EFLAGS: 00010246 [ 271.877475][T14501] RAX: 0000000000000000 RBX: 00007f0d419b5fa0 RCX: 00007f0d4178e929 [ 271.877484][T14501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.877492][T14501] RBP: 00007f0d41810b39 R08: 0000000000000000 R09: 0000000000000000 [ 271.877500][T14501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.877509][T14501] R13: 0000000000000000 R14: 00007f0d419b5fa0 R15: 00007ffe7cb92bc8 [ 271.877528][T14501] [ 271.877534][T14501] memory: usage 307200kB, limit 307200kB, failcnt 12190 [ 272.413948][T14501] memory+swap: usage 429724kB, limit 9007199254740988kB, failcnt 0 [ 272.421084][T14501] kmem: usage 5548kB, limit 9007199254740988kB, failcnt 0 [ 272.429797][T14501] Memory cgroup stats for /syz3: [ 272.429985][T14501] cache 308682752 [ 272.433694][T14501] rss 200704 [ 272.452981][T14501] rss_huge 0 [ 272.458819][T14501] shmem 274698240 [ 272.460411][T14501] mapped_file 0 [ 272.461936][T14501] dirty 0 [ 272.463183][T14501] writeback 0 [ 272.466709][T14501] workingset_refault_anon 56 [ 272.469062][T14501] workingset_refault_file 135 [ 272.471456][T14501] swap 125464576 [ 272.472995][T14501] swapcached 4096 [ 272.489758][T14501] pgpgin 341054 [ 272.491122][T14501] pgpgout 265641 [ 272.492516][T14501] pgfault 169602 [ 272.494066][T14501] pgmajfault 61 [ 272.508416][T14501] inactive_anon 68173824 [ 272.510246][T14501] active_anon 206733312 [ 272.512086][T14501] inactive_file 8192 [ 272.529689][T14501] active_file 0 [ 272.531199][T14501] unevictable 33976320 [ 272.543721][T14501] hierarchical_memory_limit 314572800 [ 272.546378][T14501] hierarchical_memsw_limit 9223372036854771712 [ 272.565377][T14501] total_cache 308682752 [ 272.567183][T14501] total_rss 200704 [ 272.575252][T14501] total_rss_huge 0 [ 272.576892][T14501] total_shmem 274698240 [ 272.583643][T14501] total_mapped_file 0 [ 272.588259][T14501] total_dirty 0 [ 272.589745][T14501] total_writeback 0 [ 272.591436][T14501] total_workingset_refault_anon 56 [ 272.598797][T14501] total_workingset_refault_file 135 [ 272.601224][T14501] total_swap 125464576 [ 272.612091][T14501] total_swapcached 4096 [ 272.624606][T14501] total_pgpgin 341054 [ 272.626443][T14501] total_pgpgout 265641 [ 272.628245][T14501] total_pgfault 169602 [ 272.630116][T14501] total_pgmajfault 61 [ 272.632096][T14501] total_inactive_anon 68173824 [ 272.660094][T14501] total_active_anon 206733312 [ 272.662300][T14501] total_inactive_file 8192 [ 272.667349][T14501] total_active_file 0 [ 272.669170][T14501] total_unevictable 33976320 [ 272.680903][T14501] anon_cost 0 [ 272.682401][T14501] file_cost 0 [ 272.683893][T14501] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2457,pid=14506,uid=0 [ 272.706481][T14501] Memory cgroup out of memory: Killed process 14506 (syz.3.2457) total-vm:45304kB, anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 272.864639][T14521] syz.3.2457 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 272.891779][T14521] CPU: 1 UID: 0 PID: 14521 Comm: syz.3.2457 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 272.891818][T14521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 272.891833][T14521] Call Trace: [ 272.891840][T14521] [ 272.891848][T14521] dump_stack_lvl+0x16c/0x1f0 [ 272.891887][T14521] dump_header+0x101/0x930 [ 272.891921][T14521] oom_kill_process+0x270/0xa60 [ 272.891956][T14521] out_of_memory+0x350/0x1700 [ 272.891994][T14521] ? __pfx_out_of_memory+0x10/0x10 [ 272.892033][T14521] mem_cgroup_out_of_memory+0x118/0x130 [ 272.892058][T14521] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 272.892091][T14521] ? do_raw_spin_unlock+0x172/0x230 [ 272.892122][T14521] try_charge_memcg+0x72b/0xd50 [ 272.892160][T14521] ? __pfx_try_charge_memcg+0x10/0x10 [ 272.892192][T14521] ? __pfx_find_held_lock+0x10/0x10 [ 272.892220][T14521] ? rcu_read_unlock+0x17/0x60 [ 272.892262][T14521] charge_memcg+0x8a/0x230 [ 272.892294][T14521] __mem_cgroup_charge+0x2b/0x1e0 [ 272.892330][T14521] shmem_alloc_and_add_folio+0x514/0xc20 [ 272.892367][T14521] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 272.892398][T14521] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 272.892433][T14521] shmem_get_folio_gfp+0x67f/0x1600 [ 272.892469][T14521] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 272.892499][T14521] ? __pte_offset_map_lock+0x174/0x310 [ 272.892537][T14521] shmem_write_begin+0x160/0x300 [ 272.892565][T14521] ? find_held_lock+0x2b/0x80 [ 272.892590][T14521] ? __pfx_shmem_write_begin+0x10/0x10 [ 272.892619][T14521] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 272.892641][T14521] ? __pfx_timestamp_truncate+0x10/0x10 [ 272.892679][T14521] generic_perform_write+0x3cd/0x930 [ 272.892718][T14521] ? __pfx_generic_perform_write+0x10/0x10 [ 272.892748][T14521] ? inode_needs_update_time.part.0+0x191/0x270 [ 272.892791][T14521] shmem_file_write_iter+0x10e/0x140 [ 272.892831][T14521] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 272.892861][T14521] __kernel_write_iter+0x31a/0xa90 [ 272.892892][T14521] ? __pfx___kernel_write_iter+0x10/0x10 [ 272.892920][T14521] ? cgroup_freezing+0x14b/0x3d0 [ 272.892949][T14521] ? cgroup_freezing+0x155/0x3d0 [ 272.892978][T14521] dump_user_range+0x41f/0xb60 [ 272.893014][T14521] ? __pfx_dump_user_range+0x10/0x10 [ 272.893043][T14521] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 272.893082][T14521] ? __pfx_writenote+0x10/0x10 [ 272.893120][T14521] elf_core_dump+0x288a/0x3a90 [ 272.893165][T14521] ? __pfx_elf_core_dump+0x10/0x10 [ 272.893192][T14521] ? kasan_save_stack+0x42/0x60 [ 272.893218][T14521] ? kasan_save_stack+0x33/0x60 [ 272.893243][T14521] ? kasan_save_track+0x14/0x30 [ 272.893301][T14521] ? __kasan_kmalloc+0xaa/0xb0 [ 272.893329][T14521] ? do_coredump+0x1c9a/0x4f10 [ 272.893352][T14521] ? get_signal+0x22e3/0x26d0 [ 272.893377][T14521] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 272.893411][T14521] ? 0xffffffffff600000 [ 272.893489][T14521] ? do_coredump+0x399f/0x4f10 [ 272.893509][T14521] do_coredump+0x399f/0x4f10 [ 272.893541][T14521] ? __pfx_do_coredump+0x10/0x10 [ 272.893563][T14521] ? find_held_lock+0x2b/0x80 [ 272.893587][T14521] ? is_bpf_text_address+0x8a/0x1a0 [ 272.893612][T14521] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 272.893638][T14521] ? is_bpf_text_address+0x94/0x1a0 [ 272.893659][T14521] ? kernel_text_address+0x8d/0x100 [ 272.893679][T14521] ? __kernel_text_address+0xd/0x40 [ 272.893698][T14521] ? unwind_get_return_address+0x59/0xa0 [ 272.893745][T14521] ? stack_depot_save_flags+0x28/0xa40 [ 272.893772][T14521] ? __lock_acquire+0xb8a/0x1c90 [ 272.893803][T14521] ? kasan_save_stack+0x42/0x60 [ 272.893829][T14521] ? kasan_save_stack+0x33/0x60 [ 272.893849][T14521] ? kasan_save_track+0x14/0x30 [ 272.893873][T14521] ? kasan_save_free_info+0x3b/0x60 [ 272.893891][T14521] ? __kasan_slab_free+0x51/0x70 [ 272.893913][T14521] ? kmem_cache_free+0x2d1/0x4d0 [ 272.893934][T14521] ? __sigqueue_free+0xba/0x2a0 [ 272.893959][T14521] ? get_signal+0xcba/0x26d0 [ 272.893978][T14521] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 272.894040][T14521] ? proc_coredump_connector+0x2d1/0x4f0 [ 272.894059][T14521] ? __pfx_proc_coredump_connector+0x10/0x10 [ 272.894101][T14521] ? rcu_is_watching+0x12/0xc0 [ 272.894129][T14521] get_signal+0x22e3/0x26d0 [ 272.894156][T14521] ? force_sig_fault+0xc4/0x100 [ 272.894177][T14521] ? __pfx_get_signal+0x10/0x10 [ 272.894204][T14521] arch_do_signal_or_restart+0x8f/0x7d0 [ 272.894224][T14521] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 272.894246][T14521] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 272.894286][T14521] irqentry_exit_to_user_mode+0x12a/0x270 [ 272.894315][T14521] asm_exc_page_fault+0x26/0x30 [ 272.894333][T14521] RIP: 0033:0x7f0d4178e929 [ 272.894354][T14521] Code: Unable to access opcode bytes at 0x7f0d4178e8ff. [ 272.894362][T14521] RSP: 002b:00007f0d4267efe8 EFLAGS: 00010246 [ 272.894376][T14521] RAX: 0000000000000000 RBX: 00007f0d419b5fa0 RCX: 00007f0d4178e929 [ 272.894483][T14521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.894494][T14521] RBP: 00007f0d41810b39 R08: 0000000000000000 R09: 0000000000000000 [ 272.894506][T14521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.894516][T14521] R13: 0000000000000000 R14: 00007f0d419b5fa0 R15: 00007ffe7cb92bc8 [ 272.894544][T14521] [ 273.434662][T14521] memory: usage 299764kB, limit 307200kB, failcnt 12687 [ 273.438180][T14521] memory+swap: usage 418200kB, limit 9007199254740988kB, failcnt 0 [ 273.441534][T14521] kmem: usage 5428kB, limit 9007199254740988kB, failcnt 0 [ 273.455334][T14521] Memory cgroup stats for /syz3: [ 273.459504][T14521] cache 296968192 [ 273.462887][T14521] rss 106496 [ 273.465231][T14521] rss_huge 0 [ 273.467031][T14521] shmem 262987776 [ 273.469255][T14521] mapped_file 0 [ 273.471285][T14521] dirty 0 [ 273.475215][T14521] writeback 0 [ 273.554665][T14521] workingset_refault_anon 56 [ 273.557189][T14521] workingset_refault_file 135 [ 273.562384][T14521] swap 122298368 [ 273.579303][T14521] swapcached 8192 [ 273.581332][T14521] pgpgin 342317 [ 273.582881][T14521] pgpgout 269767 [ 273.710412][T14506] syz.3.2457 (14506) used greatest stack depth: 19048 bytes left [ 273.738849][T14521] pgfault 169680 [ 273.748346][T14521] pgmajfault 61 [ 273.750130][T14521] inactive_anon 36921344 [ 273.752197][T14521] active_anon 226111488 [ 273.759890][T14521] inactive_file 0 [ 273.761529][T14521] active_file 4096 [ 273.763352][T14521] unevictable 33976320 [ 273.792614][T14521] hierarchical_memory_limit 314572800 [ 273.797204][T14521] hierarchical_memsw_limit 9223372036854771712 [ 273.800176][T14521] total_cache 296968192 [ 273.802235][T14521] total_rss 106496 [ 273.808749][T14521] total_rss_huge 0 [ 273.811368][T14521] total_shmem 262987776 [ 273.814010][T14521] total_mapped_file 0 [ 273.822262][T14521] total_dirty 0 [ 273.825701][T14521] total_writeback 0 [ 273.827307][T14521] total_workingset_refault_anon 56 [ 273.829442][T14521] total_workingset_refault_file 135 [ 273.831476][T14521] total_swap 122298368 [ 273.833203][T14521] total_swapcached 8192 [ 273.904241][T14521] total_pgpgin 342317 [ 273.944160][T14521] total_pgpgout 269767 [ 273.974631][T14521] total_pgfault 169680 [ 273.976670][T14521] total_pgmajfault 61 [ 273.979652][T14521] total_inactive_anon 36921344 [ 273.983221][T14521] total_active_anon 226111488 [ 274.002060][T14521] total_inactive_file 0 [ 274.009950][T14521] total_active_file 4096 [ 274.011570][T14521] total_unevictable 33976320 [ 274.013603][T14521] anon_cost 0 [ 274.030696][T14521] file_cost 0 [ 274.033005][T14521] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2457,pid=14505,uid=0 [ 274.077848][T14521] Memory cgroup out of memory: Killed process 14505 (syz.3.2457) total-vm:45304kB, anon-rss:0kB, file-rss:32640kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 275.204246][T14503] syz.3.2457 (14503) used greatest stack depth: 19016 bytes left [ 275.493649][T14501] syz.3.2457 (14501) used greatest stack depth: 18712 bytes left [ 278.103698][T14555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.112356][T14555] batadv_slave_0: entered promiscuous mode [ 278.243518][ T40] kauditd_printk_skb: 244 callbacks suppressed [ 278.243533][ T40] audit: type=1400 audit(1750974674.672:8961): avc: denied { read write } for pid=12945 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.288353][ T40] audit: type=1400 audit(1750974674.722:8962): avc: denied { read write open } for pid=12945 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.334279][ T40] audit: type=1400 audit(1750974674.732:8963): avc: denied { read write } for pid=13892 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.400821][ T40] audit: type=1400 audit(1750974674.732:8964): avc: denied { read write open } for pid=13892 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.431498][ T40] audit: type=1400 audit(1750974674.732:8965): avc: denied { ioctl } for pid=13892 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.458744][ T40] audit: type=1400 audit(1750974674.742:8966): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.509873][ T40] audit: type=1400 audit(1750974674.742:8967): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.532434][ T40] audit: type=1400 audit(1750974674.772:8968): avc: denied { recv } for pid=14434 comm="syz-executor" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.573981][ T40] audit: type=1400 audit(1750974674.782:8969): avc: denied { execute } for pid=14565 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 278.618778][ T40] audit: type=1400 audit(1750974674.802:8970): avc: denied { execute_no_trans } for pid=14565 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 278.751088][T14569] sp0: Synchronizing with TNC [ 278.774607][T14569] netlink: 'syz.7.2470': attribute type 1 has an invalid length. [ 278.778416][T14569] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2470'. [ 279.060419][T14434] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.093284][T14434] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.222045][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.260270][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.289844][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.295453][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.332846][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.662686][T14434] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.677777][T14434] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.749521][ T6000] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 279.940653][ T6000] usb 11-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config [ 279.950553][ T6000] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 279.960157][ T6000] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 8 [ 279.981687][T14434] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.984299][ T6000] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 279.999388][T14434] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.003538][ T6000] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.161695][T14580] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 280.166115][T14577] lo speed is unknown, defaulting to 1000 [ 280.206876][ T6000] hub 11-1:1.0: bad descriptor, ignoring hub [ 280.209278][ T6000] hub 11-1:1.0: probe with driver hub failed with error -5 [ 280.212281][ T6000] cdc_wdm 11-1:1.0: skipping garbage [ 280.226263][ T6000] cdc_wdm 11-1:1.0: skipping garbage [ 280.243346][ T6000] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 280.247412][ T6000] cdc_wdm 11-1:1.0: Unknown control protocol [ 280.252667][T14586] binder: 14585:14586 ioctl c018620c 200000000300 returned -22 [ 280.400794][T14434] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.414175][T14434] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.015644][T14434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 281.042397][T14577] chnl_net:caif_netlink_parms(): no params data found [ 281.099286][T14580] cdc_wdm 11-1:1.0: Error autopm - -16 [ 281.111533][ T2010] usb 11-1: USB disconnect, device number 5 [ 281.216490][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.271880][T14434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 281.291053][T14434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 281.304257][ T2010] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 281.397980][ T63] Bluetooth: hci0: command tx timeout [ 281.507334][ T2010] usb 11-1: Using ep0 maxpacket: 16 [ 281.579131][ T2010] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 281.600945][ T2010] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.604337][ T2010] usb 11-1: Product: syz [ 281.607455][ T2010] usb 11-1: Manufacturer: syz [ 281.609459][ T2010] usb 11-1: SerialNumber: syz [ 281.621107][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.635366][T14434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 281.646170][ T2010] usb 11-1: config 0 descriptor?? [ 281.900038][ T34] usb 11-1: USB disconnect, device number 6 [ 282.008122][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.193937][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.631014][T14577] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.646092][T14577] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.652808][T14577] bridge_slave_0: entered allmulticast mode [ 282.661867][T14577] bridge_slave_0: entered promiscuous mode [ 282.674022][T14577] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.678779][T14577] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.682036][T14577] bridge_slave_1: entered allmulticast mode [ 282.689884][T14577] bridge_slave_1: entered promiscuous mode [ 282.927321][T14577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.128032][T14577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.280272][ T40] kauditd_printk_skb: 289 callbacks suppressed [ 283.280288][ T40] audit: type=1400 audit(1750974679.712:9260): avc: denied { map_create } for pid=14624 comm="syz.7.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 283.341515][ T40] audit: type=1400 audit(1750974679.752:9261): avc: denied { prog_load } for pid=14624 comm="syz.7.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 283.363447][ T40] audit: type=1400 audit(1750974679.752:9262): avc: denied { bpf } for pid=14624 comm="syz.7.2478" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.430192][ T40] audit: type=1400 audit(1750974679.752:9263): avc: denied { create } for pid=14624 comm="syz.7.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 283.443405][ T40] audit: type=1400 audit(1750974679.752:9264): avc: denied { ioctl } for pid=14624 comm="syz.7.2478" path="socket:[62820]" dev="sockfs" ino=62820 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 283.473912][ T63] Bluetooth: hci0: command tx timeout [ 283.480923][ T40] audit: type=1400 audit(1750974679.752:9265): avc: denied { module_request } for pid=14624 comm="syz.7.2478" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 283.504370][ T40] audit: type=1400 audit(1750974679.922:9266): avc: denied { prog_load } for pid=14624 comm="syz.7.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 283.529264][ T40] audit: type=1400 audit(1750974679.922:9267): avc: denied { bpf } for pid=14624 comm="syz.7.2478" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.574425][ T40] audit: type=1400 audit(1750974679.922:9268): avc: denied { create } for pid=14624 comm="syz.7.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 283.613441][ T40] audit: type=1400 audit(1750974679.922:9269): avc: denied { bind } for pid=14624 comm="syz.7.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 283.767727][T14577] team0: Port device team_slave_0 added [ 283.985619][ T12] team0: left allmulticast mode [ 283.987994][ T12] team_slave_0: left allmulticast mode [ 283.990791][ T12] team_slave_1: left allmulticast mode [ 283.993332][ T12] bridge0: port 3(team0) entered disabled state [ 284.126213][ T12] bridge_slave_1: left allmulticast mode [ 284.128548][ T12] bridge_slave_1: left promiscuous mode [ 284.130936][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.209415][ T12] bridge_slave_0: left allmulticast mode [ 284.213253][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.957834][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 285.511623][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.527366][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.536745][ T63] Bluetooth: hci0: command tx timeout [ 285.558977][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 285.589247][ T12] bond0 (unregistering): Released all slaves [ 285.610491][T14577] team0: Port device team_slave_1 added [ 285.937323][ C2] vkms_vblank_simulate: vblank timer overrun [ 286.080101][T14577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.098251][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.100477][ C2] vkms_vblank_simulate: vblank timer overrun [ 286.138089][ C2] vkms_vblank_simulate: vblank timer overrun [ 286.185893][T14577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.337275][ C2] vkms_vblank_simulate: vblank timer overrun [ 286.370191][T14577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.372736][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.391995][T14577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.555467][ C2] vkms_vblank_simulate: vblank timer overrun [ 286.817625][ C2] vkms_vblank_simulate: vblank timer overrun [ 286.865268][ C2] vkms_vblank_simulate: vblank timer overrun [ 286.942050][T14577] hsr_slave_0: entered promiscuous mode [ 286.944785][T14577] hsr_slave_1: entered promiscuous mode [ 286.968443][T14577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.971452][T14577] Cannot create hsr debugfs directory [ 287.033391][ C2] vkms_vblank_simulate: vblank timer overrun [ 287.166838][ C2] vkms_vblank_simulate: vblank timer overrun [ 287.238046][ C2] vkms_vblank_simulate: vblank timer overrun [ 287.512404][ T12] hsr_slave_0: left promiscuous mode [ 287.518329][ T12] hsr_slave_1: left promiscuous mode [ 287.521242][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.524060][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.545636][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.548992][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.619015][ T63] Bluetooth: hci0: command tx timeout [ 287.702896][ T12] veth1_macvtap: left promiscuous mode [ 287.706543][ T12] veth0_macvtap: left promiscuous mode [ 287.710123][ T12] veth1_vlan: left promiscuous mode [ 287.721918][ T12] veth0_vlan: left promiscuous mode [ 288.085634][ C2] vkms_vblank_simulate: vblank timer overrun [ 288.295209][ T40] kauditd_printk_skb: 219 callbacks suppressed [ 288.295228][ T40] audit: type=1400 audit(1750974684.732:9489): avc: denied { setopt } for pid=14669 comm="syz.6.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 288.306941][ T838] IPVS: starting estimator thread 0... [ 288.354420][ C2] vkms_vblank_simulate: vblank timer overrun [ 288.459475][T14673] IPVS: using max 29 ests per chain, 69600 per kthread [ 288.476331][T14666] Falling back ldisc for ptm0. [ 288.859770][ C2] vkms_vblank_simulate: vblank timer overrun [ 288.930847][ C2] vkms_vblank_simulate: vblank timer overrun [ 289.236553][ C2] vkms_vblank_simulate: vblank timer overrun [ 289.401878][ C2] vkms_vblank_simulate: vblank timer overrun [ 289.617537][ C2] vkms_vblank_simulate: vblank timer overrun [ 289.904133][ C2] vkms_vblank_simulate: vblank timer overrun [ 289.933235][ C2] vkms_vblank_simulate: vblank timer overrun [ 290.185269][ C2] vkms_vblank_simulate: vblank timer overrun [ 291.918246][ T12] team_slave_1 (unregistering): left promiscuous mode [ 291.930098][ T12] team0 (unregistering): Port device team_slave_1 removed [ 292.279236][ T12] team_slave_0 (unregistering): left promiscuous mode [ 292.294542][ T12] team0 (unregistering): Port device team_slave_0 removed [ 295.758263][T14434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.774530][ T40] audit: type=1400 audit(1750974692.182:9490): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 295.797020][ T40] audit: type=1400 audit(1750974692.192:9491): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 295.910587][ T40] audit: type=1400 audit(1750974692.202:9492): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 295.948306][ T40] audit: type=1400 audit(1750974692.202:9493): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 295.964773][ T40] audit: type=1400 audit(1750974692.212:9494): avc: denied { read write } for pid=13892 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 295.978530][ T40] audit: type=1400 audit(1750974692.252:9495): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 295.997772][ T40] audit: type=1400 audit(1750974692.252:9496): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 296.011876][ T40] audit: type=1400 audit(1750974692.252:9497): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 296.029236][ T40] audit: type=1400 audit(1750974692.262:9498): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 296.049653][ T40] audit: type=1400 audit(1750974692.272:9499): avc: denied { read write open } for pid=13892 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.512660][T14434] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.625615][T14678] netlink: 'syz.7.2486': attribute type 3 has an invalid length. [ 296.772939][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.776261][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.806324][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.814664][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.323751][T14577] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 297.356000][T14577] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 297.545571][T14577] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 297.623752][T14577] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 298.008049][ T12] IPVS: stop unused estimator thread 0... [ 298.282906][T14701] bio_check_eod: 2 callbacks suppressed [ 298.282923][T14701] syz.7.2490: attempt to access beyond end of device [ 298.282923][T14701] sr0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 298.457116][T14701] syz.7.2490: attempt to access beyond end of device [ 298.457116][T14701] sr0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 298.463588][T14701] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 298.468140][T14701] syz.7.2490: attempt to access beyond end of device [ 298.468140][T14701] sr0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 298.494264][T14701] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 298.498946][T14701] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 298.502189][T14701] UDF-fs: Scanning with blocksize 2048 failed [ 298.505507][T14701] syz.7.2490: attempt to access beyond end of device [ 298.505507][T14701] sr0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 298.558668][T14577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.701854][T14701] syz.7.2490: attempt to access beyond end of device [ 298.701854][T14701] sr0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 298.712415][T14701] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 298.733712][T14701] syz.7.2490: attempt to access beyond end of device [ 298.733712][T14701] sr0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 298.780179][T14701] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 298.809786][T14577] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.826653][T14701] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 298.829703][T14701] UDF-fs: Scanning with blocksize 4096 failed [ 298.839310][T14701] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1) [ 298.875738][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.878689][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.947392][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.952670][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.273318][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 299.619643][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 299.839201][T14434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.134834][T14434] veth0_vlan: entered promiscuous mode [ 300.168239][T14434] veth1_vlan: entered promiscuous mode [ 300.312395][T14434] veth0_macvtap: entered promiscuous mode [ 300.343184][T14434] veth1_macvtap: entered promiscuous mode [ 300.637846][T14434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.680250][T14577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.701536][T14434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.852844][ T40] kauditd_printk_skb: 236 callbacks suppressed [ 300.852860][ T40] audit: type=1400 audit(1750974697.282:9736): avc: denied { read write } for pid=13892 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.888744][T14434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.968386][T14434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.987960][T14434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.992056][T14434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.013356][ T40] audit: type=1400 audit(1750974697.282:9737): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 301.061163][ T40] audit: type=1400 audit(1750974697.282:9738): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 301.091174][ T40] audit: type=1400 audit(1750974697.282:9739): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 301.118044][ T40] audit: type=1400 audit(1750974697.282:9740): avc: denied { sys_module } for pid=14577 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 301.167526][ T40] audit: type=1400 audit(1750974697.282:9741): avc: denied { module_request } for pid=14577 comm="syz-executor" kmod="netdevsim8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 301.189457][ T40] audit: type=1400 audit(1750974697.342:9742): avc: denied { read write open } for pid=13892 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.341442][ T40] audit: type=1400 audit(1750974697.342:9743): avc: denied { ioctl } for pid=13892 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.369466][ T40] audit: type=1400 audit(1750974697.372:9744): avc: denied { recv } for pid=14434 comm="syz-executor" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 301.381422][ T40] audit: type=1400 audit(1750974697.372:9745): avc: denied { recv } for pid=14434 comm="syz-executor" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 301.533838][T14721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=150 sclass=netlink_route_socket pid=14721 comm=syz.7.2493 [ 301.556190][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.561513][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.641949][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2493'. [ 301.749871][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.757705][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.781272][T14721] xt_ecn: cannot match TCP bits for non-tcp packets [ 301.797730][T14721] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2493'. [ 302.325677][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 302.330982][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 302.364306][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 302.417946][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 302.607898][T14577] veth0_vlan: entered promiscuous mode [ 302.643834][T14577] veth1_vlan: entered promiscuous mode [ 302.725353][T14740] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2498'. [ 302.815587][T14577] veth0_macvtap: entered promiscuous mode [ 302.893196][T14577] veth1_macvtap: entered promiscuous mode [ 302.970405][T14742] netlink: 'syz.2.2497': attribute type 7 has an invalid length. [ 303.032322][T14577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.095701][T14577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.100750][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2500'. [ 303.113166][T14577] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.146524][T14577] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.150953][T14577] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.161121][T14577] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.816269][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.834308][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.888681][T14758] overlayfs: overlapping lowerdir path [ 304.105445][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.125142][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.886592][ T40] kauditd_printk_skb: 513 callbacks suppressed [ 305.886609][ T40] audit: type=1400 audit(1750974702.312:10259): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 305.936937][ T40] audit: type=1400 audit(1750974702.312:10260): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 305.961436][ T40] audit: type=1400 audit(1750974702.322:10261): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 305.984843][ T40] audit: type=1400 audit(1750974702.322:10262): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 306.002034][ T40] audit: type=1400 audit(1750974702.332:10263): avc: denied { read write } for pid=14803 comm="syz.6.2511" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.052236][ T40] audit: type=1400 audit(1750974702.332:10264): avc: denied { read write open } for pid=14803 comm="syz.6.2511" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.125481][ T40] audit: type=1400 audit(1750974702.332:10265): avc: denied { ioctl } for pid=14803 comm="syz.6.2511" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.137718][ T40] audit: type=1400 audit(1750974702.332:10266): avc: denied { ioctl } for pid=14803 comm="syz.6.2511" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.182221][ T40] audit: type=1400 audit(1750974702.332:10267): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 306.211779][ T40] audit: type=1400 audit(1750974702.352:10268): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 306.233214][ T34] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 306.431624][ T34] usb 11-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 306.458473][ T34] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 306.494229][ T34] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.512243][ T34] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 306.522383][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.571070][ T34] hub 11-1:1.0: bad descriptor, ignoring hub [ 306.603858][ T34] hub 11-1:1.0: probe with driver hub failed with error -5 [ 306.609878][ T34] cdc_wdm 11-1:1.0: skipping garbage [ 306.613648][ T34] cdc_wdm 11-1:1.0: skipping garbage [ 306.639604][ T34] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 306.788638][ T53] kernel read not supported for file /video7 (pid: 53 comm: kworker/1:1) [ 306.815873][T14828] vivid-000: ================= START STATUS ================= [ 306.842535][T14828] vivid-000: Test Pattern: 75% Colorbar [ 306.858110][ T6000] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 306.885458][T14828] vivid-000: Fill Percentage of Frame: 100 [ 306.890290][T14828] vivid-000: Horizontal Movement: Move Right Fast [ 306.892913][T14828] vivid-000: Vertical Movement: Move Down Slow [ 306.920108][T14828] vivid-000: OSD Text Mode: All [ 306.922381][T14828] vivid-000: Show Border: true [ 306.933716][T14828] vivid-000: Show Square: false [ 306.959308][T14828] vivid-000: Sensor Flipped Horizontally: false [ 306.962062][T14828] vivid-000: Sensor Flipped Vertically: true [ 306.989529][T14828] vivid-000: Insert SAV Code in Image: false [ 306.993661][T14828] vivid-000: Insert EAV Code in Image: true [ 306.996506][ T34] usb 11-1: USB disconnect, device number 7 [ 307.002521][T14828] vivid-000: Insert Video Guard Band: false [ 307.007823][T14828] vivid-000: Reduced Framerate: false [ 307.011717][T14828] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 307.017009][T14828] vivid-000: S-Video 000-0 Is Connected To: None [ 307.025522][T14828] vivid-000: Enable Capture Cropping: true grabbed [ 307.028656][T14828] vivid-000: Enable Capture Composing: true grabbed [ 307.032181][T14828] vivid-000: Enable Capture Scaler: true grabbed [ 307.043640][T14828] vivid-000: Timestamp Source: Start of Exposure [ 307.064943][T14828] vivid-000: Colorspace: Rec. 709 [ 307.067839][T14828] vivid-000: Transfer Function: None [ 307.084699][ T6000] usb 12-1: Using ep0 maxpacket: 16 [ 307.088874][T14828] vivid-000: Y'CbCr Encoding: Default [ 307.096467][T14828] vivid-000: HSV Encoding: Hue 0-179 [ 307.099547][ T6000] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.105475][T14828] vivid-000: Quantization: Default [ 307.105538][T14828] vivid-000: Apply Alpha To Red Only: true [ 307.105561][T14828] vivid-000: Standard Aspect Ratio: 4x3 [ 307.105584][T14828] vivid-000: DV Timings Signal Mode: Current DV Timings [ 307.105608][T14828] vivid-000: DV Timings: 720x480p59 inactive [ 307.105638][T14828] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 307.105660][T14828] vivid-000: Maximum EDID Blocks: 1 [ 307.105683][T14828] vivid-000: Limited RGB Range (16-235): true [ 307.105705][T14828] vivid-000: Rx RGB Quantization Range: Automatic [ 307.105725][T14828] vivid-000: Power Present: 0x00000001 [ 307.105796][T14828] tpg source WxH: 1280x720 (Y'CbCr) [ 307.105821][T14828] tpg field: 1 [ 307.105829][T14828] tpg crop: (0,0)/64x64 [ 307.105885][T14828] tpg compose: (0,0)/16x16 [ 307.105899][T14828] tpg colorspace: 5 [ 307.105907][T14828] tpg transfer function: 5/5 [ 307.105916][T14828] tpg Y'CbCr encoding: 0/1 [ 307.105927][T14828] tpg quantization: 0/2 [ 307.105935][T14828] tpg RGB range: 0/1 [ 307.105946][T14828] vivid-000: ================== END STATUS ================== [ 307.118160][T14823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.125503][ T6000] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 307.248185][ T6000] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 307.329567][ T6000] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.331035][ T34] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 307.372998][ T6000] usb 12-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 307.384689][ T6000] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.387711][ T6000] usb 12-1: Product: syz [ 307.389587][ T6000] usb 12-1: Manufacturer: syz [ 307.391825][ T6000] usb 12-1: SerialNumber: syz [ 307.404583][ T6000] usb 12-1: config 0 descriptor?? [ 307.534019][T14838] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.2518'. [ 307.537953][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 307.540358][ T6000] rc_core: IR keymap rc-xbox-dvd not found [ 307.543610][ T6000] Registered IR keymap rc-empty [ 307.548438][ T6000] rc rc0: syz syz as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 307.555946][ T6000] input: syz syz as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input35 [ 307.600288][ T34] usb 11-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 307.606919][ T34] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 307.652741][ T34] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.658477][ T34] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 307.662653][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.717844][ T34] hub 11-1:1.0: bad descriptor, ignoring hub [ 307.729931][T14807] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5 sclass=netlink_xfrm_socket pid=14807 comm=syz.7.2512 [ 307.744317][ T34] hub 11-1:1.0: probe with driver hub failed with error -5 [ 307.747498][ T34] cdc_wdm 11-1:1.0: skipping garbage [ 307.749433][ T34] cdc_wdm 11-1:1.0: skipping garbage [ 307.751501][ T34] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 307.780519][T14840] xt_hashlimit: size too large, truncated to 1048576 [ 307.980302][T14845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.986926][T14845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.057808][ T34] usb 11-1: USB disconnect, device number 8 [ 308.258478][ T6001] usb 12-1: USB disconnect, device number 11 [ 308.279347][ T2010] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 308.528296][ T2010] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.565019][ T2010] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.659320][ T2010] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.676031][ T2010] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.681175][ T2010] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.698721][ T2010] usb 13-1: config 0 descriptor?? [ 308.985475][ T2010] usbhid 13-1:0.0: can't add hid device: -71 [ 308.988097][ T2010] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 308.993483][ T2010] usb 13-1: USB disconnect, device number 2 [ 309.455338][T14871] Bluetooth: MGMT ver 1.23 [ 309.494354][ T6029] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 309.644737][T14877] netlink: 'syz.6.2528': attribute type 1 has an invalid length. [ 309.645225][ T6029] usb 7-1: Using ep0 maxpacket: 8 [ 309.676453][ T6029] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.684476][ T6029] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.687745][T14877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.690537][ T6029] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.690571][ T6029] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.690693][ T6029] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 309.690754][ T6029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.825741][T14877] veth5: entered promiscuous mode [ 309.847455][T14877] bond2: (slave veth5): Enslaving as an active interface with a down link [ 309.908370][T14879] vlan2: entered allmulticast mode [ 309.910643][T14879] bond2: entered allmulticast mode [ 309.957558][T14879] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 309.965871][ T6029] usb 7-1: GET_CAPABILITIES returned 0 [ 310.035673][ T6029] usbtmc 7-1:16.0: can't read capabilities [ 310.602699][ T24] usb 7-1: USB disconnect, device number 41 [ 310.795663][ T2010] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 310.806156][ T6029] usb 12-1: new low-speed USB device number 12 using dummy_hcd [ 310.947181][ T40] kauditd_printk_skb: 595 callbacks suppressed [ 310.947197][ T40] audit: type=1400 audit(1750974707.382:10864): avc: denied { ioctl } for pid=14886 comm="syz.6.2530" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.985872][ T6029] usb 12-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config [ 310.985899][ T6029] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 310.985938][ T6029] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 8 [ 310.985973][ T6029] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 310.985990][ T6029] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.036509][T14889] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 311.037634][ T40] audit: type=1400 audit(1750974707.392:10865): avc: denied { ioctl } for pid=14886 comm="syz.6.2530" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.062454][ T6029] hub 12-1:1.0: bad descriptor, ignoring hub [ 311.075662][T14893] veth0_to_bridge: entered promiscuous mode [ 311.095954][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.116320][ T40] audit: type=1400 audit(1750974707.412:10866): avc: denied { ioctl } for pid=14888 comm="syz.7.2531" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.118266][ T2010] usb 11-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 311.118295][ T2010] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 311.118342][ T2010] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.118382][ T2010] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 311.118405][ T2010] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.129469][ T6029] hub 12-1:1.0: probe with driver hub failed with error -5 [ 311.156165][ T2010] hub 11-1:1.0: bad descriptor, ignoring hub [ 311.167917][ T40] audit: type=1400 audit(1750974707.412:10867): avc: denied { ioctl } for pid=14888 comm="syz.7.2531" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.174543][ T6029] cdc_wdm 12-1:1.0: skipping garbage [ 311.174565][ T6029] cdc_wdm 12-1:1.0: skipping garbage [ 311.179388][ T2010] hub 11-1:1.0: probe with driver hub failed with error -5 [ 311.182268][ T6029] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 311.182289][ T6029] cdc_wdm 12-1:1.0: Unknown control protocol [ 311.204819][ T40] audit: type=1400 audit(1750974707.412:10868): avc: denied { ioctl } for pid=14888 comm="syz.7.2531" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.207705][ T2010] cdc_wdm 11-1:1.0: skipping garbage [ 311.235248][ T40] audit: type=1400 audit(1750974707.412:10869): avc: denied { ioctl } for pid=14888 comm="syz.7.2531" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.281154][ T2010] cdc_wdm 11-1:1.0: skipping garbage [ 311.302927][ T40] audit: type=1400 audit(1750974707.422:10870): avc: denied { ioctl } for pid=14888 comm="syz.7.2531" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.302969][ T40] audit: type=1400 audit(1750974707.432:10871): avc: denied { ioctl } for pid=14888 comm="syz.7.2531" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.303001][ T40] audit: type=1400 audit(1750974707.442:10872): avc: denied { ioctl } for pid=14888 comm="syz.7.2531" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.303032][ T40] audit: type=1400 audit(1750974707.442:10873): avc: denied { ioctl } for pid=14888 comm="syz.7.2531" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.420152][T14889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.427785][ T2010] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 311.466395][T14889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.515061][ T2010] usb 11-1: USB disconnect, device number 9 [ 311.570455][T14893] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2533'. [ 311.575412][T14893] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2533'. [ 311.585614][T14893] gretap0: entered promiscuous mode [ 311.613276][T14893] gretap0: left promiscuous mode [ 311.620428][ T6029] usb 12-1: USB disconnect, device number 12 [ 311.955061][ T2010] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 312.121203][ T2010] usb 11-1: Using ep0 maxpacket: 8 [ 312.187048][ T2010] usb 11-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 312.193723][ T2010] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.217503][ T2010] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.233650][ T2010] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 312.258272][ T2010] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.298248][ T2010] hub 11-1:1.0: bad descriptor, ignoring hub [ 312.316146][ T2010] hub 11-1:1.0: probe with driver hub failed with error -5 [ 312.320752][ T2010] cdc_wdm 11-1:1.0: skipping garbage [ 312.330668][ T2010] cdc_wdm 11-1:1.0: skipping garbage [ 312.332701][ T2010] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 312.338376][T14906] macvlan0: entered promiscuous mode [ 312.376468][T14906] macvlan0: entered allmulticast mode [ 312.379665][T14906] veth1_vlan: entered allmulticast mode [ 312.565585][ T6001] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 312.627159][ T839] usb 11-1: USB disconnect, device number 10 [ 312.723002][T14912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14912 comm=syz.2.2540 [ 312.724347][ T6001] usb 13-1: Using ep0 maxpacket: 32 [ 312.776425][ T6001] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 312.779038][T14912] xt_hashlimit: size too large, truncated to 1048576 [ 312.789733][ T6001] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 312.794288][ T838] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 312.807792][ T6001] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 312.807823][ T6001] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 312.807847][ T6001] usb 13-1: config 0 interface 0 has no altsetting 0 [ 312.885293][ T6001] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 312.891798][ T6001] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 312.900650][ T6001] usb 13-1: Product: syz [ 312.919880][ T6001] usb 13-1: Manufacturer: syz [ 312.922996][ T6001] usb 13-1: SerialNumber: syz [ 312.945693][ T6001] usb 13-1: config 0 descriptor?? [ 312.949349][ T838] usb 12-1: device descriptor read/64, error -71 [ 313.012406][ T6001] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 313.033690][ T6001] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 313.249321][ T838] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 313.376683][T14916] geneve2: entered promiscuous mode [ 313.382090][T14916] geneve2: entered allmulticast mode [ 313.414524][ T838] usb 12-1: device descriptor read/64, error -71 [ 313.524704][ T838] usb usb12-port1: attempt power cycle [ 313.942081][ T838] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 314.035077][ T838] usb 12-1: device descriptor read/8, error -71 [ 314.285541][ T838] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 314.311224][ T838] usb 12-1: device descriptor read/8, error -71 [ 314.435676][ T838] usb usb12-port1: unable to enumerate USB device [ 315.247277][ T838] usb 11-1: new low-speed USB device number 11 using dummy_hcd [ 315.256696][ T29] usb 13-1: USB disconnect, device number 3 [ 315.279350][ T29] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 315.530539][ T838] usb 11-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config [ 315.610689][ T838] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 315.632690][ T838] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 8 [ 315.639185][ T838] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 315.645295][ T838] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.661305][T14937] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 315.669575][ T838] hub 11-1:1.0: bad descriptor, ignoring hub [ 315.684066][T14941] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 315.703573][T14941] SELinux: failed to load policy [ 315.704206][ T838] hub 11-1:1.0: probe with driver hub failed with error -5 [ 315.711402][ T838] cdc_wdm 11-1:1.0: skipping garbage [ 315.716733][ T838] cdc_wdm 11-1:1.0: skipping garbage [ 315.724412][ T838] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 315.728240][ T838] cdc_wdm 11-1:1.0: Unknown control protocol [ 315.829708][T14944] lo speed is unknown, defaulting to 1000 [ 315.904298][T14948] netlink: 328 bytes leftover after parsing attributes in process `syz.2.2550'. [ 315.963515][ T40] kauditd_printk_skb: 500 callbacks suppressed [ 315.963533][ T40] audit: type=1400 audit(1750974712.392:11374): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 315.990654][ T838] usb 11-1: USB disconnect, device number 11 [ 315.992095][ T40] audit: type=1400 audit(1750974712.422:11375): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 316.065399][ T6001] usb 12-1: new low-speed USB device number 17 using dummy_hcd [ 316.083281][ T40] audit: type=1400 audit(1750974712.442:11376): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 316.141316][ T40] audit: type=1400 audit(1750974712.442:11377): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 316.175841][ T40] audit: type=1400 audit(1750974712.442:11378): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 316.199988][ T40] audit: type=1400 audit(1750974712.442:11379): avc: denied { read write } for pid=14434 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.233948][ T40] audit: type=1400 audit(1750974712.442:11380): avc: denied { read write open } for pid=14434 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.251591][ T40] audit: type=1400 audit(1750974712.442:11381): avc: denied { ioctl } for pid=14434 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.294452][ T40] audit: type=1400 audit(1750974712.482:11382): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 316.324190][ T40] audit: type=1400 audit(1750974712.512:11383): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 316.342670][ T6001] usb 12-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 316.361482][ T838] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 316.364183][ T6001] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 316.404953][ T6001] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 316.441174][ T6001] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 316.469417][ T6001] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.491681][ T6001] hub 12-1:1.0: bad descriptor, ignoring hub [ 316.494924][ T6001] hub 12-1:1.0: probe with driver hub failed with error -5 [ 316.498594][ T6001] cdc_wdm 12-1:1.0: skipping garbage [ 316.500838][ T6001] cdc_wdm 12-1:1.0: skipping garbage [ 316.503166][ T6001] cdc_wdm 12-1:1.0: probe with driver cdc_wdm failed with error -22 [ 316.541146][ T838] usb 11-1: Using ep0 maxpacket: 8 [ 316.628522][ T838] usb 11-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config [ 316.633927][ T838] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 316.663810][ T838] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 316.681164][ T838] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 316.704534][ T838] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 316.709151][ T838] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.747341][T14937] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 316.792304][ T838] hub 11-1:1.0: bad descriptor, ignoring hub [ 316.815827][ T838] hub 11-1:1.0: probe with driver hub failed with error -5 [ 316.820032][ T838] cdc_wdm 11-1:1.0: skipping garbage [ 316.822288][ T838] cdc_wdm 11-1:1.0: skipping garbage [ 316.852963][ T838] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 316.874536][ T2010] usb 12-1: USB disconnect, device number 17 [ 316.878488][ T838] cdc_wdm 11-1:1.0: Unknown control protocol [ 316.918125][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.124683][ T839] usb 11-1: USB disconnect, device number 12 [ 317.206139][ T2010] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 317.368289][ T2010] usb 12-1: Using ep0 maxpacket: 8 [ 317.458640][ T2010] usb 12-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 317.462977][ T2010] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.492854][ C2] vkms_vblank_simulate: vblank timer overrun [ 317.549753][ T2010] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.566254][ T2010] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 317.577353][ T2010] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.617641][ T2010] hub 12-1:1.0: bad descriptor, ignoring hub [ 317.620749][ T2010] hub 12-1:1.0: probe with driver hub failed with error -5 [ 317.625342][ T2010] cdc_wdm 12-1:1.0: skipping garbage [ 317.636165][ T2010] cdc_wdm 12-1:1.0: skipping garbage [ 317.638337][ T2010] cdc_wdm 12-1:1.0: probe with driver cdc_wdm failed with error -22 [ 317.724182][ C2] vkms_vblank_simulate: vblank timer overrun [ 317.746522][ T6029] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 317.924676][ T2010] usb 12-1: USB disconnect, device number 18 [ 317.988548][ C2] vkms_vblank_simulate: vblank timer overrun [ 317.997206][T14971] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2558'. [ 318.007353][ T6029] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.031095][ T6029] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 318.047269][ T6029] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 318.066094][ T6029] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 318.094500][ T6029] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 318.108059][ T6029] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 318.122152][ T6029] usb 7-1: Manufacturer: syz [ 318.134952][ T6029] usb 7-1: config 0 descriptor?? [ 318.424618][ C2] vkms_vblank_simulate: vblank timer overrun [ 318.690605][ T6029] rc_core: IR keymap rc-hauppauge not found [ 318.695039][ T6029] Registered IR keymap rc-empty [ 318.698467][ T6029] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 318.724377][ T6029] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 318.765147][ T6029] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 318.785707][ T6029] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input36 [ 318.929941][ T6029] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 318.958975][ T6029] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 318.985574][ T6029] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.021381][ T6029] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.069872][ T6029] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.076972][ C2] vkms_vblank_simulate: vblank timer overrun [ 319.109208][ T6029] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.144019][ T6029] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.206362][ T6029] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.227431][ C2] vkms_vblank_simulate: vblank timer overrun [ 319.255513][ C2] vkms_vblank_simulate: vblank timer overrun [ 319.258765][ T6029] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.314224][ T6029] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.324981][ C2] vkms_vblank_simulate: vblank timer overrun [ 319.344732][ T6029] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 319.348397][ T6029] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 319.422512][ T6029] usb 7-1: USB disconnect, device number 42 [ 319.655439][T14991] hsr0: entered promiscuous mode [ 319.676596][T14991] macsec1: entered allmulticast mode [ 319.676618][T14991] hsr0: entered allmulticast mode [ 319.676630][T14991] hsr_slave_0: entered allmulticast mode [ 319.676643][T14991] hsr_slave_1: entered allmulticast mode [ 319.874929][ C2] vkms_vblank_simulate: vblank timer overrun [ 320.195417][T15009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15009 comm=syz.2.2570 [ 320.211478][T15008] netlink: 'syz.8.2568': attribute type 4 has an invalid length. [ 320.224493][ T839] usb 11-1: new low-speed USB device number 13 using dummy_hcd [ 320.224523][T15010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52351 sclass=netlink_route_socket pid=15010 comm=syz.2.2570 [ 320.412554][ T839] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.464417][ T839] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 320.469254][ T839] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.492274][ T839] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 320.534434][ T839] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.582012][ T839] hub 11-1:1.0: bad descriptor, ignoring hub [ 320.614230][ C2] vkms_vblank_simulate: vblank timer overrun [ 320.633941][ T839] hub 11-1:1.0: probe with driver hub failed with error -5 [ 320.640725][ T839] cdc_wdm 11-1:1.0: skipping garbage [ 320.642970][ T839] cdc_wdm 11-1:1.0: skipping garbage [ 320.656308][ T839] cdc_wdm 11-1:1.0: skipping garbage [ 320.661347][ T839] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 320.957371][ T1497] usb 11-1: USB disconnect, device number 13 [ 320.986724][ T40] kauditd_printk_skb: 588 callbacks suppressed [ 320.986740][ T40] audit: type=1400 audit(1750974717.422:11972): avc: denied { prog_load } for pid=15019 comm="syz.2.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 320.999284][ T40] audit: type=1400 audit(1750974717.432:11973): avc: denied { bpf } for pid=15019 comm="syz.2.2573" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.022164][ T40] audit: type=1400 audit(1750974717.432:11974): avc: denied { perfmon } for pid=15019 comm="syz.2.2573" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.039215][ T40] audit: type=1400 audit(1750974717.442:11975): avc: denied { create } for pid=15021 comm="syz.8.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 321.075886][ T40] audit: type=1400 audit(1750974717.452:11976): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 321.100996][ C2] vkms_vblank_simulate: vblank timer overrun [ 321.106626][ T40] audit: type=1400 audit(1750974717.452:11977): avc: denied { prog_load } for pid=15019 comm="syz.2.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 321.129574][ C2] vkms_vblank_simulate: vblank timer overrun [ 321.170155][ T40] audit: type=1400 audit(1750974717.462:11978): avc: denied { bpf } for pid=15019 comm="syz.2.2573" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.193876][ T40] audit: type=1400 audit(1750974717.462:11979): avc: denied { perfmon } for pid=15019 comm="syz.2.2573" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.213124][ T40] audit: type=1400 audit(1750974717.462:11980): avc: denied { perfmon } for pid=15019 comm="syz.2.2573" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.223484][ T40] audit: type=1400 audit(1750974717.462:11981): avc: denied { perfmon } for pid=15019 comm="syz.2.2573" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.314279][ T1497] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 321.497311][ T1497] usb 11-1: Using ep0 maxpacket: 8 [ 321.510246][ T1497] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.528559][ T1497] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 321.571575][ T1497] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.590686][ T1497] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 321.612742][ T1497] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.651999][ T1497] hub 11-1:1.0: bad descriptor, ignoring hub [ 321.671211][ T1497] hub 11-1:1.0: probe with driver hub failed with error -5 [ 321.675785][ T1497] cdc_wdm 11-1:1.0: skipping garbage [ 321.682542][ T1497] cdc_wdm 11-1:1.0: skipping garbage [ 321.690732][ T1497] cdc_wdm 11-1:1.0: skipping garbage [ 321.697012][ T1497] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 321.987733][ T839] usb 11-1: USB disconnect, device number 14 [ 322.675743][T15039] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2579'. [ 323.028732][T15043] netlink: 'syz.7.2581': attribute type 15 has an invalid length. [ 323.528263][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2584'. [ 323.558352][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2584'. [ 324.347250][ T2010] usb 12-1: new low-speed USB device number 19 using dummy_hcd [ 324.706310][ T2010] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.741945][ T2010] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 324.767628][ T2010] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.789220][ T2010] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 324.809072][ T2010] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.832292][ T2010] hub 12-1:1.0: bad descriptor, ignoring hub [ 324.843474][ T2010] hub 12-1:1.0: probe with driver hub failed with error -5 [ 324.873319][ T2010] cdc_wdm 12-1:1.0: skipping garbage [ 324.877464][ T2010] cdc_wdm 12-1:1.0: skipping garbage [ 324.881093][ T2010] cdc_wdm 12-1:1.0: skipping garbage [ 324.885087][ T2010] cdc_wdm 12-1:1.0: probe with driver cdc_wdm failed with error -22 [ 325.284999][ T2010] usb 12-1: USB disconnect, device number 19 [ 325.640277][ T6001] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 325.676912][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.749865][T15098] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.754788][T15098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.873449][ T6001] usb 12-1: Using ep0 maxpacket: 8 [ 325.901182][ T6001] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.910457][ T6001] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 325.924080][ T6001] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.932020][ T6001] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 325.940445][ T6001] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.965008][ T6001] hub 12-1:1.0: bad descriptor, ignoring hub [ 325.969356][ T6001] hub 12-1:1.0: probe with driver hub failed with error -5 [ 325.973283][ T6001] cdc_wdm 12-1:1.0: skipping garbage [ 326.008863][ T6001] cdc_wdm 12-1:1.0: skipping garbage [ 326.024256][ T40] kauditd_printk_skb: 640 callbacks suppressed [ 326.024275][ T40] audit: type=1400 audit(1750974722.452:12622): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 326.037573][ T6001] cdc_wdm 12-1:1.0: skipping garbage [ 326.064070][ T6001] cdc_wdm 12-1:1.0: probe with driver cdc_wdm failed with error -22 [ 326.080708][ T40] audit: type=1400 audit(1750974722.512:12623): avc: denied { create } for pid=15109 comm="syz.8.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 326.126512][ T40] audit: type=1400 audit(1750974722.512:12624): avc: denied { create } for pid=15109 comm="syz.8.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.163772][ T40] audit: type=1400 audit(1750974722.512:12625): avc: denied { ioctl } for pid=15109 comm="syz.8.2602" path="socket:[65378]" dev="sockfs" ino=65378 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.210077][ T40] audit: type=1400 audit(1750974722.522:12626): avc: denied { module_request } for pid=15109 comm="syz.8.2602" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 326.246356][ T40] audit: type=1400 audit(1750974722.522:12627): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 326.282158][ T40] audit: type=1400 audit(1750974722.522:12628): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 326.326043][ T6001] usb 12-1: USB disconnect, device number 20 [ 326.329369][ T40] audit: type=1400 audit(1750974722.522:12629): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 326.358965][ T40] audit: type=1400 audit(1750974722.542:12630): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 326.465765][ T40] audit: type=1400 audit(1750974722.552:12631): avc: denied { read write } for pid=14434 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.664841][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.692950][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.758875][T15119] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2603'. [ 326.768893][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.892973][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.000933][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.080980][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.484158][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.576895][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.744852][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.912913][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.309119][T15147] input: syz1 as /devices/virtual/input/input37 [ 328.642899][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.920418][T15173] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2620'. [ 328.960528][T15175] tipc: Started in network mode [ 328.967231][T15175] tipc: Node identity c617e8f2aa67, cluster identity 4711 [ 328.970630][T15175] tipc: Enabled bearer , priority 0 [ 329.034192][ T1497] IPVS: starting estimator thread 0... [ 329.049427][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.058835][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 329.137281][T15178] IPVS: using max 25 ests per chain, 60000 per kthread [ 329.153407][T15175] syzkaller0: entered promiscuous mode [ 329.156963][T15175] syzkaller0: entered allmulticast mode [ 329.179400][T15175] tipc: Resetting bearer [ 329.419028][T15174] tipc: Resetting bearer [ 329.576332][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.704950][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.744539][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.992911][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.029989][ T1497] tipc: Node number set to 1819338994 [ 330.321882][T15200] overlayfs: missing 'lowerdir' [ 331.034534][ T40] kauditd_printk_skb: 478 callbacks suppressed [ 331.034552][ T40] audit: type=1400 audit(1750974727.472:13110): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 331.066693][ T40] audit: type=1400 audit(1750974727.472:13111): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 331.117092][ T40] audit: type=1400 audit(1750974727.502:13112): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 331.172836][ T40] audit: type=1400 audit(1750974727.532:13113): avc: denied { recv } for pid=15201 comm="syz.6.2627" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 331.198085][ T40] audit: type=1400 audit(1750974727.532:13114): avc: denied { recv } for pid=15201 comm="syz.6.2627" saddr=10.0.2.2 src=49376 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 331.241220][ T40] audit: type=1400 audit(1750974727.532:13115): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 331.254214][ T40] audit: type=1400 audit(1750974727.532:13116): avc: denied { recv } for pid=5850 comm="sshd-session" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 331.267906][ T40] audit: type=1400 audit(1750974727.552:13117): avc: denied { create } for pid=15203 comm="syz.8.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.294633][ T40] audit: type=1400 audit(1750974727.552:13118): avc: denied { create } for pid=15203 comm="syz.8.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.310014][ T40] audit: type=1400 audit(1750974727.742:13119): avc: denied { recv } for pid=5851 comm="syz-executor" saddr=127.0.0.1 src=47856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 331.662144][T15211] 9p: Unknown uid 00000000004294967295 [ 331.665599][T15211] 9pnet: Tag 65535 still in use [ 331.673962][ C3] ------------[ cut here ]------------ [ 331.677999][ C3] refcount_t: underflow; use-after-free. [ 331.682098][ C3] WARNING: CPU: 3 PID: 13 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 331.705063][ C3] Modules linked in: [ 331.708153][ C3] CPU: 3 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 331.720673][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 331.729919][ C3] Workqueue: events_unbound toggle_allocation_gate [ 331.733129][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 331.763021][ C3] Code: ff 89 de e8 b8 d0 df fc 84 db 0f 85 66 ff ff ff e8 cb d5 df fc c6 05 e0 2d b4 0b 01 90 48 c7 c7 60 27 15 8c e8 f7 95 9e fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 a8 d5 df fc 0f b6 1d bb 2d b4 0b 31 [ 331.800853][ C3] RSP: 0018:ffffc900006f8d90 EFLAGS: 00010082 [ 331.803118][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae248 [ 331.806590][ C3] RDX: ffff88801dad8000 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 331.810871][ C3] RBP: ffff888037113ba8 R08: 0000000000000001 R09: 0000000000000000 [ 331.816530][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888037113ba8 [ 331.821214][ C3] R13: ffff8880553d4000 R14: 0000000000000015 R15: 1ffff1102003c80c [ 331.826181][ C3] FS: 0000000000000000(0000) GS:ffff8880d6a52000(0000) knlGS:0000000000000000 [ 331.831433][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.837553][ C3] CR2: 00007fe882380f98 CR3: 000000000e382000 CR4: 0000000000352ef0 [ 331.868447][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.884054][ C3] DR3: 00000000ffff000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 331.887084][ C3] Call Trace: [ 331.888449][ C3] [ 331.889729][ C3] p9_req_put+0x1ec/0x250 [ 331.895380][ C3] req_done+0x1dc/0x2e0 [ 331.899555][ C3] ? __pfx_req_done+0x10/0x10 [ 331.901745][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 331.914594][ C3] ? __pfx_req_done+0x10/0x10 [ 331.916856][ C3] vring_interrupt+0x31e/0x400 [ 331.919041][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 331.921367][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 331.931735][ C3] handle_irq_event+0xab/0x1e0 [ 331.938205][ C3] handle_edge_irq+0x28e/0xab0 [ 331.945319][ C3] __common_interrupt+0xdf/0x250 [ 331.948916][ C3] common_interrupt+0xba/0xe0 [ 331.954579][ C3] [ 331.956311][ C3] [ 331.958939][ C3] asm_common_interrupt+0x26/0x40 [ 331.967007][ C3] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 331.970921][ C3] Code: 00 00 5b e9 12 29 20 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 98 bf 10 12 <65> 8b 05 a9 bf 10 12 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 [ 331.997427][ C3] RSP: 0018:ffffc90000107898 EFLAGS: 00000202 [ 332.000896][ C3] RAX: 0000000000000000 RBX: ffff88806a6420a0 RCX: ffffffff81b001cd [ 332.024974][ C3] RDX: ffff88801dad8000 RSI: ffffffff81b001a9 RDI: 0000000000000005 [ 332.030049][ C3] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 332.034394][ C3] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 332.040692][ C3] R13: 0000000000000003 R14: ffffed100d4c8415 R15: ffff88806a73b580 [ 332.053487][ C3] ? smp_call_function_many_cond+0xd9d/0x1510 [ 332.058007][ C3] ? smp_call_function_many_cond+0xd79/0x1510 [ 332.066165][ C3] smp_call_function_many_cond+0xd79/0x1510 [ 332.070554][ C3] ? __pfx_do_sync_core+0x10/0x10 [ 332.074900][ C3] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 332.080558][ C3] ? __pfx_do_sync_core+0x10/0x10 [ 332.084333][ C3] ? __pfx___text_poke+0x10/0x10 [ 332.088076][ C3] ? __pfx_do_sync_core+0x10/0x10 [ 332.090929][ C3] on_each_cpu_cond_mask+0x40/0x90 [ 332.093556][ C3] smp_text_poke_batch_finish+0x7b5/0xdb0 [ 332.097948][ C3] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 332.102202][ C3] ? arch_jump_label_transform_queue+0xc0/0x120 [ 332.106201][ C3] arch_jump_label_transform_apply+0x1c/0x30 [ 332.125605][ C3] jump_label_update+0x376/0x550 [ 332.129522][ C3] static_key_enable_cpuslocked+0x1b7/0x270 [ 332.138301][ C3] static_key_enable+0x1a/0x20 [ 332.144716][ C3] toggle_allocation_gate+0xfa/0x280 [ 332.155331][ C3] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 332.158724][ C3] ? rcu_is_watching+0x12/0xc0 [ 332.164088][ C3] process_one_work+0x9cc/0x1b70 [ 332.174585][ C3] ? __pfx_process_one_work+0x10/0x10 [ 332.177685][ C3] ? assign_work+0x1a0/0x250 [ 332.179837][ C3] worker_thread+0x6c8/0xf10 [ 332.187590][ C3] ? __pfx_worker_thread+0x10/0x10 [ 332.190746][ C3] kthread+0x3c2/0x780 [ 332.205209][ C3] ? __pfx_kthread+0x10/0x10 [ 332.208267][ C3] ? rcu_is_watching+0x12/0xc0 [ 332.211459][ C3] ? __pfx_kthread+0x10/0x10 [ 332.213962][ C3] ret_from_fork+0x5d4/0x6f0 [ 332.217418][ C3] ? __pfx_kthread+0x10/0x10 [ 332.226207][ C3] ret_from_fork_asm+0x1a/0x30 [ 332.228403][ C3] [ 332.229597][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 332.232514][ C3] CPU: 3 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 332.247447][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.265297][ C3] Workqueue: events_unbound toggle_allocation_gate [ 332.270612][ C3] Call Trace: [ 332.275257][ C3] [ 332.285292][ C3] dump_stack_lvl+0x3d/0x1f0 [ 332.288469][ C3] panic+0x71c/0x800 [ 332.290994][ C3] ? __pfx_panic+0x10/0x10 [ 332.294740][ C3] ? show_trace_log_lvl+0x29b/0x3e0 [ 332.303058][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 332.317634][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 332.320090][ C3] check_panic_on_warn+0xab/0xb0 [ 332.322170][ C3] __warn+0xf6/0x3c0 [ 332.337994][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 332.339887][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 332.342189][ C3] report_bug+0x3c3/0x580 [ 332.344511][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 332.347806][ C3] handle_bug+0x184/0x210 [ 332.350037][ C3] exc_invalid_op+0x17/0x50 [ 332.351843][ C3] asm_exc_invalid_op+0x1a/0x20 [ 332.358530][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 332.366967][ C3] Code: ff 89 de e8 b8 d0 df fc 84 db 0f 85 66 ff ff ff e8 cb d5 df fc c6 05 e0 2d b4 0b 01 90 48 c7 c7 60 27 15 8c e8 f7 95 9e fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 a8 d5 df fc 0f b6 1d bb 2d b4 0b 31 [ 332.389743][ C3] RSP: 0018:ffffc900006f8d90 EFLAGS: 00010082 [ 332.396771][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae248 [ 332.408672][ C3] RDX: ffff88801dad8000 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 332.415357][ C3] RBP: ffff888037113ba8 R08: 0000000000000001 R09: 0000000000000000 [ 332.423123][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888037113ba8 [ 332.429715][ C3] R13: ffff8880553d4000 R14: 0000000000000015 R15: 1ffff1102003c80c [ 332.439710][ C3] ? __warn_printk+0x198/0x350 [ 332.443216][ C3] ? __warn_printk+0x1a5/0x350 [ 332.446987][ C3] p9_req_put+0x1ec/0x250 [ 332.450561][ C3] req_done+0x1dc/0x2e0 [ 332.454803][ C3] ? __pfx_req_done+0x10/0x10 [ 332.459486][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 332.463104][ C3] ? __pfx_req_done+0x10/0x10 [ 332.470677][ C3] vring_interrupt+0x31e/0x400 [ 332.474207][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 332.481215][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 332.485347][ C3] handle_irq_event+0xab/0x1e0 [ 332.489439][ C3] handle_edge_irq+0x28e/0xab0 [ 332.493082][ C3] __common_interrupt+0xdf/0x250 [ 332.497598][ C3] common_interrupt+0xba/0xe0 [ 332.502535][ C3] [ 332.508175][ C3] [ 332.510109][ C3] asm_common_interrupt+0x26/0x40 [ 332.516100][ C3] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 332.521534][ C3] Code: 00 00 5b e9 12 29 20 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 98 bf 10 12 <65> 8b 05 a9 bf 10 12 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 [ 332.540979][ C3] RSP: 0018:ffffc90000107898 EFLAGS: 00000202 [ 332.547107][ C3] RAX: 0000000000000000 RBX: ffff88806a6420a0 RCX: ffffffff81b001cd [ 332.553080][ C3] RDX: ffff88801dad8000 RSI: ffffffff81b001a9 RDI: 0000000000000005 [ 332.567413][ C3] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 332.573250][ C3] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 332.578806][ C3] R13: 0000000000000003 R14: ffffed100d4c8415 R15: ffff88806a73b580 [ 332.583633][ C3] ? smp_call_function_many_cond+0xd9d/0x1510 [ 332.597325][ C3] ? smp_call_function_many_cond+0xd79/0x1510 [ 332.601955][ C3] smp_call_function_many_cond+0xd79/0x1510 [ 332.607406][ C3] ? __pfx_do_sync_core+0x10/0x10 [ 332.612144][ C3] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 332.616952][ C3] ? __pfx_do_sync_core+0x10/0x10 [ 332.620467][ C3] ? __pfx___text_poke+0x10/0x10 [ 332.627329][ C3] ? __pfx_do_sync_core+0x10/0x10 [ 332.632584][ C3] on_each_cpu_cond_mask+0x40/0x90 [ 332.637021][ C3] smp_text_poke_batch_finish+0x7b5/0xdb0 [ 332.643999][ C3] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 332.650724][ C3] ? arch_jump_label_transform_queue+0xc0/0x120 [ 332.663017][ C3] arch_jump_label_transform_apply+0x1c/0x30 [ 332.668516][ C3] jump_label_update+0x376/0x550 [ 332.672822][ C3] static_key_enable_cpuslocked+0x1b7/0x270 [ 332.676951][ C3] static_key_enable+0x1a/0x20 [ 332.679878][ C3] toggle_allocation_gate+0xfa/0x280 [ 332.683405][ C3] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 332.687784][ C3] ? rcu_is_watching+0x12/0xc0 [ 332.690709][ C3] process_one_work+0x9cc/0x1b70 [ 332.693293][ C3] ? __pfx_process_one_work+0x10/0x10 [ 332.696148][ C3] ? assign_work+0x1a0/0x250 [ 332.698621][ C3] worker_thread+0x6c8/0xf10 [ 332.701031][ C3] ? __pfx_worker_thread+0x10/0x10 [ 332.703822][ C3] kthread+0x3c2/0x780 [ 332.706676][ C3] ? __pfx_kthread+0x10/0x10 [ 332.709685][ C3] ? rcu_is_watching+0x12/0xc0 [ 332.712757][ C3] ? __pfx_kthread+0x10/0x10 [ 332.715748][ C3] ret_from_fork+0x5d4/0x6f0 [ 332.719020][ C3] ? __pfx_kthread+0x10/0x10 [ 332.722264][ C3] ret_from_fork_asm+0x1a/0x30 [ 332.725576][ C3] [ 332.728752][ C3] Kernel Offset: disabled [ 332.731348][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:52:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000269db5 RBX=0000000000000000 RCX=ffffffff8b808c59 RDX=0000000000000000 RSI=ffffffff8de19fc6 RDI=ffffffff8c157ba0 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a81250 R15=0000000000000000 RIP=ffffffff8b8077bf RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff8880d6752000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6176fd7f98 CR3=0000000058222000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe01356830 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6176211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6176211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6176211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6176211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6176211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6176211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000101 RBX=0000000000000010 RCX=ffffffff856a4ad3 RDX=ffff888058a70000 RSI=ffffffff856a552d RDI=ffff88802811cff0 RBP=0000000000000000 RSP=ffffc900006a0530 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000000ffd01 R13=0000000000000001 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bc209a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6176ff8f98 CR3=0000000039bc0000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000009b DR2=00040000ffffffff DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd33b8300 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff56a811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff56a811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff56a811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff56a811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff56a811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff56a811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000080000 RBX=0000000000000001 RCX=ffffc9002812a000 RDX=0000000000080000 RSI=ffffffff81b01652 RDI=0000000000000005 RBP=ffffc9000462f938 RSP=ffffc9000462f7e0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920008c5f04 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81b01654 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 00007f6176fd86c0 000fffff 00000000 GS =0000 ffff8880d6952000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3677b5 CR3=0000000028d77000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000f DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebe913560 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bb115 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc900006f8738 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b0882e0 R15=ffffffff855bb0b0 RIP=ffffffff855bb13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe882380f98 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000ffff000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881784488 00007fe881784480 00007fe881784478 00007fe881784450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8822ed100 00007fe881784440 00007fe881784458 00007fe8817844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe881784498 00007fe881784490 00007fe881784488 00007fe881784480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000