last executing test programs:

2m5.373224692s ago: executing program 0 (id=23):
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00')
preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000001400", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc000700801900af1e4ccfb7b3cad800010400", [0x1, 0x2000000000001]}})

2m5.262265396s ago: executing program 0 (id=25):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00') (async)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x4) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
ioprio_get$pid(0x2, 0x0) (async)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) (async)
bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) (async)
sendto$inet(r2, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) (async)
close(r2) (async)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) (async)
r3 = accept4(r1, 0x0, 0x0, 0x80800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6(0xa, 0x1, 0x0)
fsopen(&(0x7f0000000000)='9p\x00', 0x0) (async)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000440), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x8000, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r5}])
write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2000) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc001) (async)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000c80)=<r7=>0x0, &(0x7f0000000cc0)=0x4) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1a) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d00)=@deltclass={0x54, 0x29, 0xce958ef71e6d345b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x8}, {0x1, 0xffe0}, {0xffe2, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7f}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x37, 0x3}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_sfq={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x7d5f4278b46e9978}, 0x4004001) (async)
write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10)

2m5.260562345s ago: executing program 0 (id=26):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0)
ioctl$KVM_X86_SETUP_MCE(r0, 0x7040, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000280))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0x42, 0x4, 0x3a0, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, 0xffffffff, 0x0, 'geneve1\x00', 'veth1_to_bond\x00', {}, {}, 0x84, 0x1}, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x178, 0x1d8, 0x0, {0x122}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010100, [0xff000000, 0x0, 0xff000000, 0xff], @ipv6=@empty, [0xff000000, 0x0, 0xff000000], @ipv4=@local, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], @ipv6=@private0, [0xff000000, 0xffffff00, 0xffffff00, 0xff], 0x9, 0x67ecd4dc, 0x21, 0x4e24, 0x4e20, 0x4e20, 0x4e24, 0x1001, 0x174}, 0x1, 0x2, 0x4e21, 0x4e22, 0x4e23, 0x7}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x1, 0x6, 0x0, 0x2], 0x3, 0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {0x0, [0x0, 0x0, 0x4, 0x0, 0x3]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000640))
bind$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_buf(r4, 0x0, 0x9, &(0x7f00000007c0)=""/159, &(0x7f0000000040)=0x9f)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)
sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x1})

2m5.113603901s ago: executing program 0 (id=27):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYBLOB="b8ee7e3009c907bcb65e13822d5391be684b9a851d837b62847a1283cbad88e50395ba97", @ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r1, @ANYRES64=r1], 0xe4}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000011}, 0x40) (async)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000011}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x20000000000001a1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x90080) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x90080)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
accept(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6", 0x11}], 0x1}], 0x1, 0x0)
recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0xb6b}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000240), 0x0, 0x4040001) (async)
sendmmsg$inet6(r3, &(0x7f0000000240), 0x0, 0x4040001)
setsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0)
chown(0x0, 0x0, 0xee01)
r6 = dup(r3)
syz_clone(0x1011fb80, 0x0, 0x16, 0x0, 0x0, 0x0)
write$char_usb(r6, &(0x7f0000000780)="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", 0x1000)
waitid(0x1, 0x0, 0x0, 0x41000004, &(0x7f0000000040))
read$FUSE(0xffffffffffffffff, &(0x7f00000075c0)={0x2020}, 0x2020)

2m5.11228458s ago: executing program 0 (id=28):
r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='\x00\x00\x00\x00\x00', 0x0) (async)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) (async)
close(r1) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000805}, 0x800)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) (async)
fstat(r3, &(0x7f0000000300)) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0)

2m5.053129467s ago: executing program 0 (id=29):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) (async)
syz_emit_ethernet(0x846, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)

1m52.923615468s ago: executing program 3 (id=155):
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042)
close(0xffffffffffffffff)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r3=>0x0})
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}})
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000)=0x7, 0x4)
write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00000a"], 0x125)

1m52.87345152s ago: executing program 3 (id=156):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB="1100000046a6016698d54064bbb116365beddd0000"])
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000180)={0x20003, 0x0, [0x1, 0xe0e0, 0xffffffff, 0x100000000c, 0x0, 0x101, 0x0, 0x8000]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000203010800000000000000000700001008000100010000006b8f7db4e490d51485526af9c527cd088556ca594c66"], 0x1c}}, 0x0)
r4 = signalfd4(r1, &(0x7f0000000080)={[0xc]}, 0x8, 0x40800)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000004c0)={"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"})
close_range(r1, r4, 0x2)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000030305"], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x44000)

1m52.772835841s ago: executing program 3 (id=157):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r2 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0x0) (async)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, 0x0)
fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x802) (async)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) (async, rerun: 64)
write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) (async, rerun: 64)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000010000400"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000040)) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x23, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff1}, {0xf, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0x4, 0x7, 0x8000}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000080500000a48000000060a010400000000000000000a0000010900010073797a31000000001c0004801800018008000100666962000c00028008000240000000030900020073797a3200000000140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040)

1m51.902827837s ago: executing program 3 (id=161):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000200)={@local, @local, @void, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "c1440a9dd1f2838b"}}}}, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r2=>0x0})
r3 = gettid()
sigaltstack(&(0x7f0000000080)={&(0x7f0000001200)=""/4096, 0x0, 0x1000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_GET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000022, 0x0, 0x1}]})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x2200}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x48}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x20000000)
rt_sigqueueinfo(r3, 0x21, &(0x7f0000000000))
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfd}, 0x18)
gettid()
rt_sigqueueinfo(r3, 0x9, &(0x7f0000000180)={0xa, 0x7fff, 0x74ce})
syz_pidfd_open(r3, 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@mcast1, 0x4e22, 0x8cda, 0x4e20, 0x3, 0xa, 0x20, 0x90, 0x16, r2, r8}, {0xfffffffffffffff8, 0x8, 0x6, 0xb1, 0xbf, 0x87f, 0xc, 0xfffffefffffffffc}, {0x8, 0x6, 0x4, 0xfffffffffffffffc}, 0x7, 0x6e6bbf, 0x0, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d2, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x3502, 0x2, 0x0, 0x7, 0x0, 0x4, 0x2}}, 0xe8)

1m51.763742448s ago: executing program 3 (id=162):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0xf, 0x7fffffff}]})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
ptrace(0x10, r0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000))
r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x5, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000006c0))
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x2000002, 0x25dfdbfc}, 0x18}}, 0x0)

1m51.403151806s ago: executing program 3 (id=165):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={<r2=>0x0, 0x1}) (async)
r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc03064ca, &(0x7f0000000280)={&(0x7f0000000200)=[r2], &(0x7f0000000240)=[0xffffffffffffffb6], 0x11be, 0x1}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64)
close(r4) (async, rerun: 32)
mkdir(&(0x7f0000000040)='./file1\x00', 0x86) (async, rerun: 32)
mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r5 = socket$xdp(0x2c, 0x3, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bind$xdp(r5, &(0x7f0000000580)={0x2c, 0xa, r6, 0x19}, 0x10)
preadv2(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000440)=""/150, 0x96}], 0x3, 0x1, 0x1, 0x2) (async)
chdir(&(0x7f0000000080)='./file1\x00') (async)
lsm_list_modules(&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x40, 0x0) (async)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setpgid(r7, 0x0) (async)
setpgid(0x0, r7) (async)
statfs(&(0x7f0000001140)='./file0\x00', 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) (async)
sysfs$1(0x3, 0x0) (async)
ioctl$DRM_IOCTL_MODE_ADDFB(r9, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xf0f3, 0x2, 0x2, 0x6})

1m51.325807368s ago: executing program 32 (id=165):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={<r2=>0x0, 0x1}) (async)
r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc03064ca, &(0x7f0000000280)={&(0x7f0000000200)=[r2], &(0x7f0000000240)=[0xffffffffffffffb6], 0x11be, 0x1}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64)
close(r4) (async, rerun: 32)
mkdir(&(0x7f0000000040)='./file1\x00', 0x86) (async, rerun: 32)
mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r5 = socket$xdp(0x2c, 0x3, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bind$xdp(r5, &(0x7f0000000580)={0x2c, 0xa, r6, 0x19}, 0x10)
preadv2(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000440)=""/150, 0x96}], 0x3, 0x1, 0x1, 0x2) (async)
chdir(&(0x7f0000000080)='./file1\x00') (async)
lsm_list_modules(&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x40, 0x0) (async)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setpgid(r7, 0x0) (async)
setpgid(0x0, r7) (async)
statfs(&(0x7f0000001140)='./file0\x00', 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) (async)
sysfs$1(0x3, 0x0) (async)
ioctl$DRM_IOCTL_MODE_ADDFB(r9, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xf0f3, 0x2, 0x2, 0x6})

1m49.463383524s ago: executing program 33 (id=29):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) (async)
syz_emit_ethernet(0x846, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)

1m26.630078866s ago: executing program 2 (id=414):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

1m26.629807802s ago: executing program 2 (id=415):
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x7fffffff, 0x181c81)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="38008d001800dd8d2abd700000000000020000000000000600000000060015000400000014001680100008800c0002801a00010000000000"], 0x38}}, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmmsg$sock(r3, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{0x0}, {0x0}], 0x2}}], 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x20004000)
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000))

1m26.574502943s ago: executing program 2 (id=416):
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000100000408000000000000000200000020000000000000000000000903000000000000000000000420"], 0x0, 0x4a}, 0x28)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)

1m26.574118483s ago: executing program 2 (id=417):
r0 = syz_usb_connect(0x3, 0x1f3, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xbb, 0x93, 0x81, 0x40, 0x2100, 0x9e65, 0xf6e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e1, 0x1, 0x7, 0x9, 0x80, 0xd, [{{0x9, 0x4, 0xe0, 0xaa, 0x5, 0xec, 0x32, 0xbf, 0x2, [@hid_hid={0x9, 0x21, 0x62, 0x7, 0x1, {0x22, 0x702}}], [{{0x9, 0x5, 0x2, 0x4, 0x10, 0x1, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xfff}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x2, 0x7, [@generic={0x6e, 0x11, "50662ac98fda402d0773b956ab4510914ac2c59ebe09664c3115e12e67f3bc69f7cd875d7775d69bae06267165907b0dd1d6d075cc8e2ed7a52f94a9564f58c8ea963fc1df856424617d7e3d2f50f959d5bd4408a8497bdd3a32989c56bd3ff92a22deab768f7ed97dfe246f"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8f, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x60, 0x8, 0x0, 0xc6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xe}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x1, 0x2, 0x6, [@generic={0x5b, 0x1, "538eb1df609ed505d8df807939bdd3f41affcf1b41bb44f9e0642e39ca9771f2522ed1144aad7056170a6b20584be5b453cf4b090e6b74261885e9d34ec1becf902d07444be9633d509dfcfb32dfc0a294b67911c8fb5ae847"}, @generic={0xb4, 0x24, "5699795a45b312aed1e59cb415787f6f3cd01a7f0e6f2b05ac0d286a7847a0bb738606ff5eac62d4c48c3ca2d68bb39de3723d83a1ec726f937373c541824d595681dd44aa12066512583ecc8c095bca92d62b501cefe93c5a18bc593b9046a6d6ba67b9ca5e9fd1434d6905476428c0e55f18b002be3dcec1455b0c549aca80bf12e80de6a7e223d828e939b8feb33ba12d0a663b3852b8c7479aa35718f2a4708c3f48f4c6cd12ddc4a905ddfed8f12318"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0xd, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x1000}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x98, 0x1, 0x9, 0x8, 0x20}, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="050f2d000314100408850e42eceeffed106e6b23c480ce1bdc0a1003020c0000056d000a100300040042040700cc7ddd5c05a105d3653b78a5988de45a61fb8021e307f1edd73768cf8b3f182c656c5e81dce2e456729abe4ba3a38658f2c77ec31b200afec16a8308c35e775a3b598fb94498bbb16886f6953c7e1fed73e5250c3708c157ff5bd2f6faf7d087e8e5206fe9e63ac395a5577f0bcb387dee73b33cae3ef699c9a238df75aceb9ee7097a8f6697fd646854d285de00"/211], 0x5, [{0xa, &(0x7f00000002c0)=@string={0xa, 0x3, "3853eef1d8e604e6"}}, {0x7b, &(0x7f0000000300)=@string={0x7b, 0x3, "76d52f4f1cca6829b7132fe8ecddffe3710c3e205dc218c9323950a4cfb39da6b02b99bf722bbe3b51c69951195366cfa8559dd0445220b2d6c3b5e0349de0abfb55697e14adbd2dc5796263f766b08d133f1ccedf1f999abebeff8ec685e7e4713b47d996db6a8ae67631f3a4a07df7d585eb954ff4cc9f2d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x411}}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x8140aecc, &(0x7f0000000140)=@x86={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x9, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8})
syz_usb_control_io$printer(r0, &(0x7f00000005c0)={0x14, &(0x7f00000004c0)={0x0, 0x7, 0x8b, {0x8b, 0x23, "68c1c075e1bd96138fb12668725e99a484c80637974fdb264d580e5838f622bef30f89dd86506cc5b41e3e4700fc1a37dc9bbd296737c50cc1d4a6931a036bdca7bc2aba3f6f3b5e05c89ab2a17187d12e362a79b2279619c37166eccf35ca39757dde6cba58c12a433fe1a2cc3692945a8aeccf4336fa4b9abc8cbfa0f3dc55f7a2266f7eec55e1a0"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000600)={0x40, 0x0, 0x4d, "fe3eb7c7971c596f7d6a7055b9e5afb68c9d8eb0f97d996f48ed683f4bcc99b6e819f52255865ec27ca8686fcae101622aec7333653f7d1277d46b8ec694146fc3cf93693e21185efe0bdbb64a"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xe9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x13, {0x11, "ebdb0420acd8a6a4028f42bd0f5de69870"}}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x5}})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
socketpair(0x2, 0x1, 0x100, &(0x7f0000000440))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$poke(0x4, r4, &(0x7f0000000080), 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

1m25.093712875s ago: executing program 2 (id=422):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f0000000000)=0x4, 0x4)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8948, &(0x7f0000000580)={'bond0\x00', 0x10001})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002d5000/0x3000)=nil, &(0x7f0000ac7000/0x4000)=nil, 0x3000, 0x3})

1m24.789464554s ago: executing program 2 (id=432):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x5, 0xfefc, {0x7, 0x1}, {0xad, 0x2}, @const={0x7, {0x4, 0x67, 0x9, 0x1000}}})
r0 = socket$inet6(0xa, 0x1, 0xd42)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x8}, 0x1c)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
brk(0x400000ffc000)
brk(0x400000ffc020)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000200)=0x6)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00004c000000000000000000001e000000000000000000000000ff0200000000000000000000000000014f194e2000109078c205000100000000"], 0x4a)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8c2b01)
write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8)

1m24.700212525s ago: executing program 34 (id=432):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x5, 0xfefc, {0x7, 0x1}, {0xad, 0x2}, @const={0x7, {0x4, 0x67, 0x9, 0x1000}}})
r0 = socket$inet6(0xa, 0x1, 0xd42)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x8}, 0x1c)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
brk(0x400000ffc000)
brk(0x400000ffc020)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000200)=0x6)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00004c000000000000000000001e000000000000000000000000ff0200000000000000000000000000014f194e2000109078c205000100000000"], 0x4a)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8c2b01)
write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8)

1m21.206731864s ago: executing program 6 (id=455):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e1f, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)="fd", 0x1}, {&(0x7f00000000c0)="4469a4f7315d22f704f383067d977b768ae63d756e6e9fc3eb48b374e12c603b2e677fbd181bb39c", 0x28}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f00000002c0)="072824251815a2413f58e4eb6a599890e1e33805d5fa84437d9c4d72a4b32d11cb73ec88ea24f198098be5959449f2f0cf4d439399166cd4941b8c036530422d719d113cef1112d78617a775ef4ca479a5cc6e11bb743de16e5c366e601164bfa515da1134ba92dcd443ea13", 0x6c}, {&(0x7f0000001740)="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", 0x1000}], 0x5, 0x0, 0x0, 0x804c044}, 0x881)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x3}}, 0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801)
sendmmsg$inet6(r3, &(0x7f0000019880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2604082c)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)
syz_open_dev$vim2m(&(0x7f0000000140), 0x2be7094c, 0x2)

1m21.206372683s ago: executing program 6 (id=456):
r0 = socket$inet6(0xa, 0x2, 0x1000)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r2 = dup3(r0, r0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, '(\xbf*'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '!!\''}, {}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "87bbcd914d9215f70dda37a903424173ec3b816ee18420ff469446c7a8c604435d091ad3cd3f73957ec9161da65bbfc46c8d153ad5f4171ddd5fd6a1aec71ee0d317cc4d2d47db19f6f7f62b0d35165295e35fde4f575307ec9382cabf16c0fe81192e94eaeddbe9da01bf57903e08d54e41abd071529672ba86b664f2972a2d47b05758b85a35d4c52681828d581d543a59adc3e94782a78355563a4e19aeb407806568"}, 0xc2)

1m21.145716114s ago: executing program 6 (id=457):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4030301}, 0xc, &(0x7f0000000280)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0xa919231e8b66db55, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELOBJ={0x1a0, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xcd, 0x8, "61ef2030fb2232f2817a960bdfdf9c15030f814ce3d453baf191f725635974163020b6f561e01480cd57aebf6d82183b32fc2234ca7f192e1fd01151449a8bdba79bad2a1b50dd6120d5a67888ecc3c0ffd7307d5c0adde5b526ddd8a1a580f60367489b247b6509c16e1ca89817c4782a37dd2b5d866536b84a843c7e58993e8ba04ac6d25c9b4ffaab920550373c2c2d3d03a7034d23077b3af8e4facb1903f2be894682712a092edf85a879b60abb8ca7a41214c760ac9703563b13f591588adf2ba055bb3ff3c9"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x9d, 0x8, "bfbf173918121ce268dd99ca7c97f0a1c72ba9fe03e4e14c7e38f89d7b389f6efbe1644af730db19cc38c18f516dd42ad555b1cecb6185f75e2c896b8313015f10803777437e66e5ede4b60e720bfa8d5f3d26e32de07868dfabcfc91f10c37271e269ee0920ad9f4d930e33a38536d4fb4517fb98690912ff23b811fe89013954647db415da753c33c1927529dd61a677b77cdcf980305393"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ID={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x84, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x100, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xd9, 0xd, 0x1, 0x0, "b1af18d469d06ec0992b39c9209645f5c4cc9ac25e5fcf8ac56b369b03fff6fb77ae3445a2ebb8f3f2029b32a44605a8ef38f94608956bbf0ed9a8041f2e53b675626a012054b333307b82b4ea6f5d93b2ef784bb40d754a7c9753386edde0366e9760734aee600548ce26338e101415a3a8ea7599d5e8d30ebce27011d7a8e10b7ca15d12dade717a8e513ad24805f8f6d03fff672a62c57c6286268b6303d61889a85d4d2bdc894949d2b2e1b754e54e50b766022e1b61aab8729b650efc1f3f9c6bc20e56e0045b7839708555fc6c797d87f542"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe61}]}, @NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0xc05, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14}}, 0x460}, 0x1, 0x0, 0x0, 0x4048050}, 0x4000040)
writev(r1, &(0x7f0000001700)=[{&(0x7f0000001140)="508945e783ba47f722b91ba21e5cdd2ddba027601b39e7db431062e379305eb6100f6af13dc07a22b1d87795fedadd7b7b89e4376310721066e341d4b42e88380fd96c745ec5fa1c0b93886f053512efbd93202f27", 0x55}], 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1d}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xe}]}, @NFT_MSG_DELSET={0x114, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8}, @NFTA_SET_EXPRESSIONS={0xbc, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x40}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x10}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_TTL={0x5, 0x2, 0xd}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x75f}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1f}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x140}, @NFTA_SET_EXPRESSIONS={0x4}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1m20.620801065s ago: executing program 6 (id=459):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) (async, rerun: 32)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (rerun: 32)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2, &(0x7f00000004c0)=@raw=[@map_fd], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) (async, rerun: 32)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async, rerun: 32)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async, rerun: 32)
umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) (async, rerun: 32)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0xfdb4, 0x1000000, 0x0})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async)
syz_clone(0x4000, &(0x7f0000000140)="c9a976bb2deac20adf64676ac8da83bb66d2cd1c42c71449cc10b0b1c8907a755fa74996ed44ddb3e9dca74b6c024415e6161ef6e7c85e2c4511424c9589bcc853f5116b58c51f063f9e11a657335b32e674d72c3a5c7522ad008a1d1dcb84f9564e46e5c751fbd47b8b6af161673bc030bc6a03e720b35951d604efd3e40c5b24778fae1fc12899c68042f2e32b7f140bd42d72f906033e028bb5", 0x9b, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000200)="91b68dff44968ba681cb652ce8021a3238c79833b8268e033b6cc79b")
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})

1m20.278067085s ago: executing program 6 (id=463):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x18}}, 0x0)

1m18.885093335s ago: executing program 6 (id=479):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x5f}}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
fcntl$lock(r3, 0x24, &(0x7f0000000380)={0x2, 0x0, 0x7, 0xffffffffffffffff}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @sliced={0x0, [0xf10f, 0x4, 0x9, 0x1, 0xb, 0x0, 0x200, 0x6, 0x5, 0x2, 0x1, 0x8000, 0x413, 0x6, 0xd, 0xc29, 0x8, 0x0, 0x3, 0xb4b8, 0x9, 0x30c0, 0x1, 0x9, 0x8, 0xb299, 0x800, 0xfff, 0x6, 0x8, 0x1, 0xff7f, 0x1, 0x3, 0x80, 0x9, 0x1, 0x2, 0x8, 0x200, 0x5, 0x9a8, 0x9, 0x8, 0x7, 0x400, 0x9, 0xfd75], 0x7}}) (async)
r4 = socket$kcm(0x10, 0x2, 0x10) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in6=@local, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="2030a3cac834c33e79eea6d436db1db439eb727a8b286e25e54ac845784973f09d0b31a43ac8416c37c7e0e423ccc2d27b3168c9fd2f85dfa3971eadcfce5ea75e70c353a897fe7415cd7f691fec3ec70ba41c91293af53ecf15c5ab4d370cc0fc376b36", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

1m18.833177022s ago: executing program 35 (id=479):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x5f}}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
fcntl$lock(r3, 0x24, &(0x7f0000000380)={0x2, 0x0, 0x7, 0xffffffffffffffff}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @sliced={0x0, [0xf10f, 0x4, 0x9, 0x1, 0xb, 0x0, 0x200, 0x6, 0x5, 0x2, 0x1, 0x8000, 0x413, 0x6, 0xd, 0xc29, 0x8, 0x0, 0x3, 0xb4b8, 0x9, 0x30c0, 0x1, 0x9, 0x8, 0xb299, 0x800, 0xfff, 0x6, 0x8, 0x1, 0xff7f, 0x1, 0x3, 0x80, 0x9, 0x1, 0x2, 0x8, 0x200, 0x5, 0x9a8, 0x9, 0x8, 0x7, 0x400, 0x9, 0xfd75], 0x7}}) (async)
r4 = socket$kcm(0x10, 0x2, 0x10) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in6=@local, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="2030a3cac834c33e79eea6d436db1db439eb727a8b286e25e54ac845784973f09d0b31a43ac8416c37c7e0e423ccc2d27b3168c9fd2f85dfa3971eadcfce5ea75e70c353a897fe7415cd7f691fec3ec70ba41c91293af53ecf15c5ab4d370cc0fc376b36", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

3.424966496s ago: executing program 4 (id=1397):
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x50, &(0x7f0000000340)={[{@favordynmods}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@appraise}, {@obj_user={'obj_user', 0x3d, '@{'}}, {@smackfshat={'smackfshat', 0x3d, '],'}}, {@subj_role={'subj_role', 0x3d, 'dctcp\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'@,]+\xc9./'}}, {@obj_role={'obj_role', 0x3d, 'dctcp\x00'}}, {@euid_eq={'euid', 0x3d, r0}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'dctcp\x00'}}]})
r1 = socket(0x1e, 0x4, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) (async, rerun: 32)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) (rerun: 32)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r3, &(0x7f0000000280)="32780f64398323756224d03ac5cb3838e854cf6fe7e38c09daa0e76828c158699b396cff6b5ef9b454e678333fb7c00be87d5eab09b340b5a265014d86abb6ae50065e67b7cdc5362589f9b4127fe218ba5f79aa58f7446a6ab30cf9b1be46718b1193d8900973a5ea1f22bcf947456685261ebd7416ad7c9a3949ffd1d2fda2dd6f5dae464175b09d0700f1e13ce12b18fb", 0x92, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
shutdown(r3, 0x1)
bind$tipc(r1, 0x0, 0x0)

3.308885897s ago: executing program 4 (id=1398):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="20007400000000000000d0768ca43ab3dc000000", @ANYRES32=0x0, @ANYBLOB="0008000007500500"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x1)
r2 = memfd_create(&(0x7f0000000080)='])%\x00', 0x2) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000}, 0x28) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001"], 0x24}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r2, 0xfffffffffffffe01, 0x9df8, 0x3})

3.30762789s ago: executing program 4 (id=1399):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000c80)={0x17, &(0x7f0000001040)})

3.307189513s ago: executing program 4 (id=1400):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xf}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0x354a0ebf, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'gcm(aes)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = msgget$private(0x0, 0xafb0e20fef6483ff)
msgrcv(r4, 0x0, 0x0, 0x3, 0x1000)
msgsnd(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0xe2, 0x0)
msgctl$IPC_RMID(r4, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r1], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040840)
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a309054b33a12c5b83f18000380140001006261746164765f736c6176655f310000140000001100010000000000000000000000000a"], 0x70}}, 0x4000814)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000040000000000000008000e"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00", @ANYBLOB="4ccef139dc"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

3.199835117s ago: executing program 4 (id=1401):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa0e}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xfffb]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4cb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20040880}, 0x0)

3.199546176s ago: executing program 4 (id=1402):
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x4008630a}], 0x0, 0x0, 0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x502b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x66, 0x30, 0xa, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x1, 0x20, {0x9, 0x21, 0xb62e, 0x8e, 0x1, {0x22, 0x589}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0xea, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7f, 0x3, 0x18}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x8, 0x0, 0x10, 0xfb}, 0x109, &(0x7f0000000100)={0x5, 0xf, 0x109, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "32a2d0916793bea3063cad2f7a59452b"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x3, 0x10, 0x1b7, 0xff}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x5, 0x0, 0x3, [0xff00f0, 0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "52f22a0b03cad91be0ba424bc266a793"}, @generic={0xb9, 0x10, 0x3, "fbf681e120a66a7b60d60a04a6853caba855eff1a7771aeea06908590d34c2bbbc6dafd54a5f01cdd706d20a3f62c7cbaebbfa6163fe13abc07803c55655cadbf87d4cdef14db3a5e022d9a2e35f65ae08b739f8879ed2d39608038b28cac50ca71860272bd59dfe5dedcaecefe868c4e3b48d724b13068e99fb1db610ed48c21dd998e50a61ce2d9bd2e76235bbd569dc3597fb202577ac6afa093f3405f1b5033537fa6200e93e2f07638f95ed7f891443d4f04b8b"}]}, 0x7, [{0x68, &(0x7f0000000b00)=ANY=[@ANYBLOB="6803682b5fd1bf776542968a3eb2a018c1bdb82556b3c05665f7dfc99ddefe5f33d434bb8fc03ecf1c8485e8215b8bfe15ea9364a89d27daf77b4ec3fbcbc319da10f22d2f033f5e3cb7b619b06356bd79da9d3cc74a5428957f6fb802bf5aed31d08cc93f68d2ceab2ec9c0c190"]}, {0x36, &(0x7f00000002c0)=@string={0x36, 0x3, "f649c0417891fcb7c0de705fdc7036288118e1f7c1e0ec7a038da87e2aa50e37b1be58d2d4677b9d75a893cb5c3830a010128ec2"}}, {0x80, &(0x7f0000000300)=@string={0x80, 0x3, "44adf54d26182a7dc98f3b906753890f004d999eb52ac2622ca0e209ebe0059bb14a7ec323fc8aeac97430f1d68071e7f7dbed1a78df98251b43e71ba58808b7cec967bd55a0c70b427100ba54e35752970c8499bab4f4708eb9a949d4523dc124ef04c7a983048870ebd8f9faf1c384b7b54bce4b6c8d035a1a07c5a805"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000400)=@string={0x4, 0x3, "f754"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x415}}]})
syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x7, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0xc0b, 0xfff, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x12, 0x6, 0x7}, @ncm={0x6, 0x24, 0x1a, 0xd, 0x30}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x33, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0xf7}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x0, 0x5, 0x7f, 0x6e, 0xbf, 0xf7}, 0x12e, &(0x7f0000000540)={0x5, 0xf, 0x12e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x9, 0xf0, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x2e, "44576b68ba512c8bf8d523aa7147a318"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x1, 0x6}, @ptm_cap={0x3}, @generic={0x100, 0x10, 0x0, "979bc10ef573691a2e267837f5e9ba6f1ded4d8101944e52df28bbbc47b9fa87aa5a41b0f9fdced8c9e451bde1c100a9e5a3056105ee19ed1f32be9075028af3e0cad2374f8b284a7a457ceaeeb6db8c941b2639117b61c18b0fe6b53a5cd5d651eff9e866a435a1a202e41604fe30a0f10e083d97060aefd1c3052d7bbf6456e80686a53dec4fd6647c0e29f04c0496e9da31bae0f24062907a38d7c96af375854b659adb12b57f7769582aabbb4b6b1335c73fb66dbd5d23c589353d13a9e67e9189ce50bd97bf993bc2ba515db024b289171b00004c6134124ff5c976ccd9bb3751f5bcafd52eb89d6ebe04f00b33c1ecc9f6f694705ba70ee1bdbf"}]}, 0xa, [{0x54, &(0x7f0000000680)=@string={0x54, 0x3, "a8e5e739ce712a8b071edbc048c3cab45dc2c69d8ecf4999fd7516527a90ee635d2914d8ce2c5ba303bc7aa1ab3c933291843b4e1c324396ff1a67b92519f187bc962bde9b6e29d23d99f2143d939335488b"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x404}}, {0x97, &(0x7f0000000740)=@string={0x97, 0x3, "de4a58a1ac53685c4c44174173095016689e92393d64d0dd2b108f7d812e741ca494ba0825b39a746ef96639a5af5d011b290d518c0fd5989b8d8b53a5a070e995a1d3cb24e09d63ce4327ec2e7516d537bcf3b0fda74d3cc618c5c290ef7529d240ba4087ab5389d72efb9ba445d59841a605e6e295b9bf44b32bc124499160930a3d687959a6e6947029706b7cd81cb36b49ef79"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1066}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x9a, &(0x7f0000000980)=@string={0x9a, 0x3, "5ca003ee21c5882706c7fd3a275a5ed2847966a8dfc321ef21e72f2eacfa193a588fe3720904dde3901325db69d3ff2603d87ff3b08bbef4abd854a12bbcf59b5410934d08746752a2f42bcb5935fba6488507015efb6d91fb70a94e8b370c3d99c27ccd713f81d759bfa9f5c0f63ea1b9a62d8adb3b2fa23dccee615cdcb45a50de17787a0a812c0404bcdae44785a12872b4f96149044c"}}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x4008630a}], 0x0, 0x0, 0x0}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x502b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x66, 0x30, 0xa, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x1, 0x20, {0x9, 0x21, 0xb62e, 0x8e, 0x1, {0x22, 0x589}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0xea, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7f, 0x3, 0x18}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x8, 0x0, 0x10, 0xfb}, 0x109, &(0x7f0000000100)={0x5, 0xf, 0x109, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "32a2d0916793bea3063cad2f7a59452b"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x3, 0x10, 0x1b7, 0xff}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x5, 0x0, 0x3, [0xff00f0, 0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "52f22a0b03cad91be0ba424bc266a793"}, @generic={0xb9, 0x10, 0x3, "fbf681e120a66a7b60d60a04a6853caba855eff1a7771aeea06908590d34c2bbbc6dafd54a5f01cdd706d20a3f62c7cbaebbfa6163fe13abc07803c55655cadbf87d4cdef14db3a5e022d9a2e35f65ae08b739f8879ed2d39608038b28cac50ca71860272bd59dfe5dedcaecefe868c4e3b48d724b13068e99fb1db610ed48c21dd998e50a61ce2d9bd2e76235bbd569dc3597fb202577ac6afa093f3405f1b5033537fa6200e93e2f07638f95ed7f891443d4f04b8b"}]}, 0x7, [{0x68, &(0x7f0000000b00)=ANY=[@ANYBLOB="6803682b5fd1bf776542968a3eb2a018c1bdb82556b3c05665f7dfc99ddefe5f33d434bb8fc03ecf1c8485e8215b8bfe15ea9364a89d27daf77b4ec3fbcbc319da10f22d2f033f5e3cb7b619b06356bd79da9d3cc74a5428957f6fb802bf5aed31d08cc93f68d2ceab2ec9c0c190"]}, {0x36, &(0x7f00000002c0)=@string={0x36, 0x3, "f649c0417891fcb7c0de705fdc7036288118e1f7c1e0ec7a038da87e2aa50e37b1be58d2d4677b9d75a893cb5c3830a010128ec2"}}, {0x80, &(0x7f0000000300)=@string={0x80, 0x3, "44adf54d26182a7dc98f3b906753890f004d999eb52ac2622ca0e209ebe0059bb14a7ec323fc8aeac97430f1d68071e7f7dbed1a78df98251b43e71ba58808b7cec967bd55a0c70b427100ba54e35752970c8499bab4f4708eb9a949d4523dc124ef04c7a983048870ebd8f9faf1c384b7b54bce4b6c8d035a1a07c5a805"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000400)=@string={0x4, 0x3, "f754"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x415}}]}) (async)
syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x7, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0xc0b, 0xfff, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x12, 0x6, 0x7}, @ncm={0x6, 0x24, 0x1a, 0xd, 0x30}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x33, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0xf7}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x0, 0x5, 0x7f, 0x6e, 0xbf, 0xf7}, 0x12e, &(0x7f0000000540)={0x5, 0xf, 0x12e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x9, 0xf0, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x2e, "44576b68ba512c8bf8d523aa7147a318"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x1, 0x6}, @ptm_cap={0x3}, @generic={0x100, 0x10, 0x0, "979bc10ef573691a2e267837f5e9ba6f1ded4d8101944e52df28bbbc47b9fa87aa5a41b0f9fdced8c9e451bde1c100a9e5a3056105ee19ed1f32be9075028af3e0cad2374f8b284a7a457ceaeeb6db8c941b2639117b61c18b0fe6b53a5cd5d651eff9e866a435a1a202e41604fe30a0f10e083d97060aefd1c3052d7bbf6456e80686a53dec4fd6647c0e29f04c0496e9da31bae0f24062907a38d7c96af375854b659adb12b57f7769582aabbb4b6b1335c73fb66dbd5d23c589353d13a9e67e9189ce50bd97bf993bc2ba515db024b289171b00004c6134124ff5c976ccd9bb3751f5bcafd52eb89d6ebe04f00b33c1ecc9f6f694705ba70ee1bdbf"}]}, 0xa, [{0x54, &(0x7f0000000680)=@string={0x54, 0x3, "a8e5e739ce712a8b071edbc048c3cab45dc2c69d8ecf4999fd7516527a90ee635d2914d8ce2c5ba303bc7aa1ab3c933291843b4e1c324396ff1a67b92519f187bc962bde9b6e29d23d99f2143d939335488b"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x404}}, {0x97, &(0x7f0000000740)=@string={0x97, 0x3, "de4a58a1ac53685c4c44174173095016689e92393d64d0dd2b108f7d812e741ca494ba0825b39a746ef96639a5af5d011b290d518c0fd5989b8d8b53a5a070e995a1d3cb24e09d63ce4327ec2e7516d537bcf3b0fda74d3cc618c5c290ef7529d240ba4087ab5389d72efb9ba445d59841a605e6e295b9bf44b32bc124499160930a3d687959a6e6947029706b7cd81cb36b49ef79"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1066}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x9a, &(0x7f0000000980)=@string={0x9a, 0x3, "5ca003ee21c5882706c7fd3a275a5ed2847966a8dfc321ef21e72f2eacfa193a588fe3720904dde3901325db69d3ff2603d87ff3b08bbef4abd854a12bbcf59b5410934d08746752a2f42bcb5935fba6488507015efb6d91fb70a94e8b370c3d99c27ccd713f81d759bfa9f5c0f63ea1b9a62d8adb3b2fa23dccee615cdcb45a50de17787a0a812c0404bcdae44785a12872b4f96149044c"}}]}) (async)

2.319439999s ago: executing program 7 (id=1414):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', <r1=>0x0}) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b97340008bbd37a6000028bd70000000000000009b093319594a2094248466f21a505b0ba23d6d7dd1a3", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0}) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={<r7=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20) (async)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f00000001c0)=0x1, 0x4)
write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000580)={0x8, 0x120, 0xfa00, {0x0, {0x1, 0x3, "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", 0xd, 0x1, 0x8, 0x9, 0x6, 0x8, 0x4}, r7}}, 0x128) (async)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async)
ioctl$sock_netdev_private(r5, 0x89f2, &(0x7f0000000000))
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={r3, r4/1000+60000}, 0x10)

2.240165478s ago: executing program 7 (id=1415):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r2 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x100847c0, 0x7f00, 0x1, 0x0, 0x0)

2.239941886s ago: executing program 7 (id=1416):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
close(r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)

2.100131499s ago: executing program 7 (id=1417):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2105099, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x19d, 0x0, 0x0, 0x8, 0x3, 0x4029}}}}}}, 0x0)
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
tee(r2, r5, 0x3, 0x0)
read$FUSE(r4, &(0x7f0000001900)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f00000006c0)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0x22911c0, 0x1, 0x5, 0x4, 0xffffbe9e, 0x0, 0x0, 0x2, 0xe}}, 0x50)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)

799.853075ms ago: executing program 1 (id=1436):
r0 = socket$nl_route(0x10, 0x3, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '\x918s\x89X', 0x20, 0xffd}, 0x2f, 0x0)
r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0)

739.315909ms ago: executing program 1 (id=1437):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0)

738.960242ms ago: executing program 1 (id=1438):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2440, 0x0)
ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000000180)={@lba=0xffff, 0x1, 0x4, &(0x7f0000000040)=""/4})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r4 = socket$netlink(0x10, 0x3, 0x14)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4], 0x20)
r5 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r5}, 0x20)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4040050}, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x1, 0x0, 0xcc7, 0x8, 0x7, 0x8, 0x100, 0x2, 0x1, 0x1db, 0x2, 0x6, 0x101, 0x1, 0x87, 0x5, 0x40000003, 0x2, 0x900002, 0x53, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffffc]})

599.286545ms ago: executing program 1 (id=1442):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r2 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f0000000100))
r6 = epoll_create1(0x80000)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r6, &(0x7f0000000080)={0x20000010}, r0, 0x1, 0x0, 0x1, {0x0, r7}})
io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0)

509.80688ms ago: executing program 1 (id=1443):
r0 = socket$netlink(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x8)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./control\x00', 0x40000000)
rmdir(&(0x7f0000000100)='./control\x00')
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=@setlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5288}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r3, 0x1, 0x2, 0x80, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)

508.662884ms ago: executing program 1 (id=1445):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000021c0)='wg0\x00', 0x4)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000019400)={@dev={0xac, 0x14, 0x14, 0x29}, @multicast1}, 0x8)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800)
setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000080)=0x1, 0x4)

260.124959ms ago: executing program 5 (id=1447):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0)

258.224259ms ago: executing program 5 (id=1448):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x40000, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff1}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0xebed, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)=[{0x3, 0x5, 0xe, 0x7}, {0x1, 0x2, 0xc, 0xb}, {0x2, 0x2, 0x9, 0x4}, {0x0, 0x4, 0xd, 0x6}, {0x5, 0x5, 0x5, 0xc}, {0x30, 0x2, 0x2, 0x5}, {0x3, 0x1, 0xe, 0xa}], 0x10, 0x101}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000000), &(0x7f0000000300)=r2}, 0x20)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00001859c0)={0x1, &(0x7f0000185780)=[{0x4000000, 0x0, 0x0, 0x0, 0x3}]})

258.102641ms ago: executing program 7 (id=1449):
r0 = socket$inet(0x2, 0x3, 0x7)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x7)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

209.916793ms ago: executing program 5 (id=1450):
setfsgid(0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)='devtmpfs\x00', 0x22020, &(0x7f0000000180)='\x00')

208.873397ms ago: executing program 7 (id=1451):
syz_emit_ethernet(0x236, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0xc, 0x6, "2eaaac", 0x1fc, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[@routing={0xc, 0x6, 0x1, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x2b, 0x26, '\x00', [@pad1, @generic={0xf7, 0x8c, "23bf547ac33e9611f5764a88c30380ddb8855a45dd906922e235dcb0cd835c2579caf2e1d0f48a65e15ad8c6a5ac9b8c11bec4d1c6643efd9ee54f7e52c39d50b9c03a9c41bacecb09a4f3fce7d9f5f4f1418a56b48c3d7d1466a594da553d73fbee02f11d5095f999c3b2e89dc20c84a4e7daef33dd6ea218aa06c39ed9a77317981f3f85e9793ab6d1fcb8"}, @pad1, @pad1, @calipso={0x7, 0x58, {0x3, 0x14, 0x44, 0xf2, [0x44e2e3e, 0x9, 0x10000000000000, 0x66cd2c47, 0x8070, 0x3fb5bcc, 0x4, 0x266, 0x2, 0x26]}}, @enc_lim={0x4, 0x1, 0xd}, @calipso={0x7, 0x38, {0x3, 0xc, 0xf, 0x6, [0x4, 0x8, 0x2, 0x5, 0x2, 0x9]}}, @pad1]}, @fragment={0x5e, 0x0, 0xff, 0x1, 0x0, 0x2, 0x64}, @fragment={0x84, 0x0, 0x7, 0x1, 0x0, 0x5, 0x68}, @routing={0x33, 0xa, 0x1, 0x0, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @empty, @mcast2]}], {{0x4e24, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0x4, 0x1, "7a28dd", 0x1, '\tR)'}, "4e5b27ae28fc2ee3b460129e"}}}}}}, &(0x7f0000000240)={0x0, 0x1, [0x7b, 0x82f, 0x3f7, 0x7c4]}) (async)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000280)={0x9, 0x5, 0x2, 0x8, 0x2}) (async, rerun: 32)
r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32)
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000300)=0x28)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0)
ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000380)=""/4096)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000001380)) (async, rerun: 32)
ioctl$TCGETA(r2, 0x5405, &(0x7f00000013c0)) (async, rerun: 32)
syz_genetlink_get_family_id$wireguard(&(0x7f0000001400), r2) (async)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000001440)={0x2b, @rand_addr=0x64010102, 0x4e23, 0x4, 'dh\x00', 0x2, 0xc5e9, 0x75}, 0x2c)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000001880)={0x0, 0x1, 0x11, 0x20, 0x1dc, &(0x7f0000001480)="cc515868d55bcd6d0936351da2193eb83a68ed4f1ba8c668e8da55f3e160c61f87e155bf31bd29d81642e929350abe3085e02d914859ba4ca2687cb8dbf9af6ea57ec8dd527002519477de1f9f37ea5577a478f110c7953bfd3eb06aa2806551be6aea2c30f82cc653312ce793c87c185646a98c1fb27e3c30789434e7dc80a94242b9c13720720280bed8fe098a84886a22622c9c2f34816d1fb6038428680c93c430bc417185aae912e80a0bcf5f1a6556c18bd13cf7a3efb50d158783a26a6d54e335284421057330764eec93786544781f4e78ecb39d6b7a930bba2dc0662e5d8470ce40ed18630f5beff3c4bc7d50359b95bf2407aec01a283c2a33e68ffd6ef75c22d1b7f98f70fde10962f30d127d8532379ed52190c2ea406dfd0df919021fd442ae3a7a2256dbf36def99cca336921d526e8299bf5af6f98851bb05442779712480d3e22979ec09eb1c29bf0d3f881a07cc7d51adbc26061bce1b9fb689430c52d31b963cb3ac1441bf162956e9a10f925627d2ed70e392beea5f2a6879ecea9c659147df41e0764b36427a88a65a73f38bfc60f6a3f1db0e63eab6cb7be5480e9b8834b41faa33c0ebd8d215a5a119d100a9ad48ff91e6895b91dcd25d98121d93c64d8e9a59d48c955b1bc88126e5ba60d265a4730ec5565a2c3a2242b1ec8e6ea09973b69b47b3f0a1f766da82db29cb461880ae76ce1a44e25e61e3bb9faa3929e78419c27e13c52f651dc46913613a4931db48c40d465f441aebe7c4ca017db0d839b6fc7b0343b247910b34f89e6c1d7cfd5f22010bb2efb4a31c6fa9c740840dae5339381ba6323d12bc080f559d07cc5dcaedc14fdf99f51066a75d75d53a8687e2dac8205a865508a4d95fb5183b037191a68e7507df9d0baca8d2cdbc2e3d14d699199d7d1ae40a960a344356b133af5cfabb70fba4e8f85184ade4f5dc91d7d4c29112f9b8615b446df510a4d7857364894db3253d963d00d1d212fec6fcdf75e725af0674e7227ceab7c59ccff6c523cf41b00d3f9e5e81435d062c6253247c71184fdbe3975c856f4e1bc3ef0db829ba1f6f1bfc35bb9797c44dae752f2b68b9819e7a5f48b4226f8ddba1dd189c922e4a02b6309db900fa9157833fbd615197b1a1bfc589930b353db7b51a1c52ccc2b7a8c4aae0a4157b02398c84808c584f16c6c82f3fe93eb12fcdceee4528d78f646b01362fab0a192be10c97963c5bacf72342ecab729598dffc4bf7ca49712247c52e53a05728781b0def935e5a4c85147d0ed383d49ecafb414f55ee980bd0226b58835e0c84072fb41739dbad9c66e5d899bab127806b8c7a61468a4efddbde602d986eeb9e51bfc82b3a13392079cb0dc94f937fde10642839d0b46dc207a60f0e30dc610e67861d57e3af38a69a1b77f388c844b9f536e9038c58f616577f7b3991af"})
setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000018c0)=@hopopts={0x87, 0xc, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x68, 0x9, [0x0, 0x9, 0x8, 0x2, 0x9, 0x4, 0xb]}}, @enc_lim={0x4, 0x1, 0x80}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x29}}]}, 0x70) (async)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001940)={r2, 0x47e7, {0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x6, 0xf, 0x1e, "c99d95951b14945ccdbce396a69a5db5c4718fcb18cfdee161b4e8ce6c28c6fb38e683a012c4fe06d7042faba4dfaeeed2ec675a4028b1dd205777e58a06dba4", "3b726c43aaddce8a930c32620a161bdb8019c966d92cc695642db9a86a78349bedf47f38dd21c0296b09b6b1109f48de2b12ac2fc3678cf33a3316e3fd495117", "04fa29ef99b48f833717c91ffc317a623eece1547e0d60a18966c8f064566c3b", [0xe7, 0x4]}})
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0)
poll(&(0x7f0000001ac0)=[{r2, 0x2}, {0xffffffffffffffff, 0x2001}, {r1, 0x12}, {r1, 0x4}, {r1, 0x4200}, {r4, 0x4}, {r2, 0x202}], 0x7, 0x9)
r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001b00), 0x169083, 0x0)
ioctl$DVD_READ_STRUCT(r5, 0x5390, &(0x7f0000001b40)=@disckey={0x2, 0x1, "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"}) (async)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000002380)) (async)
write$ppp(r2, &(0x7f00000023c0)="7a6c1dd23a38e4984c9bd001b45a471f36cedbb1dad5def3ad0f4917438428ec985c358a19699e9d17f12488936014d38a0c25f5f6230e0207b669b89c5220933eeb3001bff15661933410ee0300a3c368c71842ae3ad6b24851738014a9e8ad82b25624e2711c", 0x67) (async)
setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002440)={{0xa, 0x4e20, 0x8, @mcast2, 0x80}, {0xa, 0x4e22, 0x5b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x629}, 0x66, {[0xa738, 0x4, 0x6000000, 0x3, 0x0, 0x36, 0x4, 0x4]}}, 0x5c) (async)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000024c0), &(0x7f0000002500)=0x4) (async)
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000002540)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000002580)=0x28) (async)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000025c0)) (async, rerun: 32)
r6 = syz_open_dev$vbi(&(0x7f0000002600), 0x1, 0x2) (rerun: 32)
ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f0000002740)={0x2, &(0x7f0000002700)=[{0x9, 0x26, &(0x7f0000002640)="6cf49d78fbda003c52fa4557884decfa1fb1468e48b304b44e1f395067eb14536e6227e6a37f"}, {0x3, 0x59, &(0x7f0000002680)="87207513b27ac3275bea5a54e9116d8710f0d92d42b51e0c27967eca7f0509e820e30ab52b454a38563257b2f4ebb1522b04060b5fe645da5b63b98644e048d1ecbb8872b3bff0039cc4be54037965b91688c0b1001ba9adf2", 0x1}]})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002800)={r2, 0x58, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000002880)={0x0, @isdn={0x22, 0x1, 0x0, 0x8d, 0x9}, @can={0x1d, r7}, @hci={0x1f, 0xffffffffffffffff, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002840)='wg0\x00', 0x9, 0x0, 0x6}) (async)
io_cancel(0x0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x1, 0x2, r2, &(0x7f0000002940)="c338227c110737467988593a79a3da86e5dbcdfdcc5302f4dca1b8596560c04781c5f6ba767c52857b93c0040e5f4d4b", 0x30, 0x0, 0x0, 0x1, r2}, &(0x7f00000029c0))

208.628466ms ago: executing program 5 (id=1452):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
read$fb(r2, &(0x7f0000000340)=""/166, 0xa6)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r2, 0x0)
readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7)
r3 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0)

49.931685ms ago: executing program 5 (id=1453):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x40000, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00001859c0)={0x1, &(0x7f0000185780)=[{0x4000000, 0x0, 0x0, 0x92ffffff, 0x3}]})

0s ago: executing program 5 (id=1454):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x9, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x205, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000060000000405"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140))
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@bridge_getvlan={0x28, 0x72, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4ac68137c02d2bf1}, 0x805)
read(r3, &(0x7f0000000280)=""/96, 0x60)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r8, 0x4068aea3, &(0x7f0000000200)={0x80, 0x0, 0x3})
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x3, 0x1}, 0x6)

kernel console output (not intermixed with test programs):

]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  126.571314][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'.
[  126.703491][ T5987] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  126.707630][ T5987] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  126.711090][ T5987] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  126.717177][ T5987] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  126.720598][ T5987] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  126.723541][ T5987] usb 12-1: SerialNumber: syz
[  126.737062][ T9294] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  126.741942][ T5987] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -22
[  126.763116][ T9323] Unsupported ieee802154 address type: 0
[  126.872897][ T9331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9331 comm=syz.4.855
[  126.883929][ T9338] loop4: detected capacity change from 0 to 7
[  126.886393][ T9338]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  126.888313][ T9338] loop4: p1 start 1600481121 is beyond EOD, truncated
[  126.890505][ T9338] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  126.894037][ T9338] loop4: p3 start 172124960 is beyond EOD, truncated
[  126.896090][ T9338] loop4: p4 start 172124960 is beyond EOD, truncated
[  126.898149][ T9338] loop4: p5 start 172124960 is beyond EOD, truncated
[  126.900156][ T9338] loop4: p6 start 1181570570 is beyond EOD, truncated
[  126.902196][ T9338] loop4: p7 start 169894753 is beyond EOD, truncated
[  126.922602][ T9089] udevd[9089]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  126.939363][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.861'.
[  126.951544][ T5987] usb 12-1: USB disconnect, device number 4
[  126.999543][   T40] audit: type=1400 audit(1753607884.011:1925): avc:  denied  { bind } for  pid=9358 comm="syz.5.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  127.010368][   T40] audit: type=1326 audit(1753607884.021:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9358 comm="syz.5.863" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cc558e9a9 code=0x0
[  127.056670][ T6618] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  127.059132][ T6618] ath9k_htc: Failed to initialize the device
[  127.062780][ T6802] usb 6-1: ath9k_htc: USB layer deinitialized
[  127.136669][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  127.356977][ T6802] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  127.487017][ T6802] usb 6-1: device descriptor read/64, error -71
[  127.738103][ T6802] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  127.866225][ T9376] loop4: detected capacity change from 0 to 7
[  127.870522][ T9089]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  127.873320][ T9089] loop4: p1 start 1600481121 is beyond EOD, truncated
[  127.875830][ T9089] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  127.879516][ T6802] usb 6-1: device descriptor read/64, error -71
[  127.880258][ T9089] loop4: p3 start 172124960 is beyond EOD, truncated
[  127.884605][ T9089] loop4: p4 start 172124960 is beyond EOD, truncated
[  127.886696][ T9089] loop4: p5 start 172124960 is beyond EOD, truncated
[  127.888960][ T9089] loop4: p6 start 1181570570 is beyond EOD, truncated
[  127.891035][ T9089] loop4: p7 start 169894753 is beyond EOD, truncated
[  127.895450][ T9376]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  127.899050][ T9376] loop4: p1 start 1600481121 is beyond EOD, truncated
[  127.901869][ T9376] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  127.906197][ T9376] loop4: p3 start 172124960 is beyond EOD, truncated
[  127.909549][ T9376] loop4: p4 start 172124960 is beyond EOD, truncated
[  127.911810][ T9376] loop4: p5 start 172124960 is beyond EOD, truncated
[  127.914680][ T9376] loop4: p6 start 1181570570 is beyond EOD, truncated
[  127.918020][ T9376] loop4: p7 start 169894753 is beyond EOD, truncated
[  127.935632][ T9378] netlink: 'syz.7.870': attribute type 2 has an invalid length.
[  127.938368][ T9089] udevd[9089]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  127.944970][ T9378] netlink: 'syz.7.870': attribute type 1 has an invalid length.
[  127.947329][ T9378] netlink: 'syz.7.870': attribute type 2 has an invalid length.
[  127.947357][ T9089] udevd[9089]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  127.979137][ T9383] netlink: 'syz.7.870': attribute type 2 has an invalid length.
[  127.990195][ T6802] usb usb6-port1: attempt power cycle
[  128.075576][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'.
[  128.103778][ T9401] netlink: 272 bytes leftover after parsing attributes in process `syz.7.877'.
[  128.128933][ T9406] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  128.138880][ T9406] CIFS mount error: No usable UNC path provided in device string!
[  128.138880][ T9406] 
[  128.142153][ T9406] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  128.150612][ T9408] loop4: detected capacity change from 0 to 7
[  128.154012][ T9408]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  128.154746][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.7.880'.
[  128.156123][ T9408] loop4: p1 start 1600481121 is beyond EOD, truncated
[  128.161038][ T9408] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  128.164514][ T9408] loop4: p3 start 172124960 is beyond EOD, truncated
[  128.165745][ T9410] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  128.166740][ T9408] loop4: p4 start 172124960 is beyond EOD, truncated
[  128.171154][ T9410] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  128.172189][ T9408] loop4: p5 start 172124960 is beyond EOD, 
[  128.175018][ T9410] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  128.176973][ T9408] truncated
[  128.179744][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  128.179868][ T9410] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  128.180945][ T9408] loop4: p6 start 1181570570 is beyond EOD, 
[  128.183814][ T9410] geneve2: entered promiscuous mode
[  128.185698][ T9408] truncated
[  128.185705][ T9408] loop4: p7 start 169894753 is beyond EOD, 
[  128.187648][ T9410] geneve2: entered allmulticast mode
[  128.194417][ T9408] truncated
[  128.194553][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.7.880'.
[  128.214436][ T9089] udevd[9089]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  128.235733][ T9416] tty tty29: ldisc open failed (-12), clearing slot 28
[  128.366193][ T6802] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  128.389205][ T6802] usb 6-1: device descriptor read/8, error -71
[  128.478309][ T5987] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  128.638415][ T5987] usb 12-1: Using ep0 maxpacket: 8
[  128.638527][ T6802] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  128.644340][ T5987] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  128.648275][ T5987] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  128.651910][ T5987] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  128.655897][ T5987] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  128.659197][ T6802] usb 6-1: device descriptor read/8, error -71
[  128.660566][ T5987] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  128.666380][ T5987] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  128.671296][ T5987] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  128.674727][ T5987] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  128.680230][ T5987] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  128.684210][ T5987] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  128.691159][ T5987] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  128.693575][ T5987] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  128.699507][ T5987] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  128.703468][ T5987] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  128.707198][ T5987] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  128.716435][ T5987] usb 12-1: string descriptor 0 read error: -22
[  128.719435][ T5987] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  128.722313][ T5987] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.732403][ T5987] adutux 12-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  128.768852][ T6802] usb usb6-port1: unable to enumerate USB device
[  129.038071][ T5987] usb 12-1: USB disconnect, device number 5
[  129.219070][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  129.426460][ T9439] netlink: 132 bytes leftover after parsing attributes in process `syz.4.887'.
[  129.435449][ T9439] dns_resolver: Unsupported server list version (0)
[  129.712489][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'.
[  129.743748][ T9447] loop4: detected capacity change from 0 to 7
[  129.746558][ T9089]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  129.748432][ T9089] loop4: p1 start 1600481121 is beyond EOD, truncated
[  129.750788][ T9089] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  129.753750][ T9089] loop4: p3 start 172124960 is beyond EOD, truncated
[  129.755831][ T9089] loop4: p4 start 172124960 is beyond EOD, truncated
[  129.757913][ T9089] loop4: p5 start 172124960 is beyond EOD, truncated
[  129.760245][ T9089] loop4: p6 start 1181570570 is beyond EOD, truncated
[  129.762356][ T9089] loop4: p7 start 169894753 is beyond EOD, truncated
[  129.766265][ T9447]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  129.768778][ T9447] loop4: p1 start 1600481121 is beyond EOD, truncated
[  129.771501][ T9447] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  129.774743][ T9447] loop4: p3 start 172124960 is beyond EOD, truncated
[  129.777616][ T9447] loop4: p4 start 172124960 is beyond EOD, truncated
[  129.780403][ T9447] loop4: p5 start 172124960 is beyond EOD, truncated
[  129.782989][ T9447] loop4: p6 start 1181570570 is beyond EOD, truncated
[  129.785661][ T9447] loop4: p7 start 169894753 is beyond EOD, truncated
[  129.803131][ T9089] udevd[9089]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  129.814980][ T9449] netlink: 256 bytes leftover after parsing attributes in process `syz.4.891'.
[  130.201723][ T9473] loop4: detected capacity change from 0 to 7
[  130.204136][ T9473]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  130.206060][ T9473] loop4: p1 start 1600481121 is beyond EOD, truncated
[  130.208556][ T9473] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  130.214449][ T9473] loop4: p3 start 172124960 is beyond EOD, truncated
[  130.217171][ T9473] loop4: p4 start 172124960 is beyond EOD, truncated
[  130.219297][ T9473] loop4: p5 start 172124960 is beyond EOD, truncated
[  130.221462][ T9473] loop4: p6 start 1181570570 is beyond EOD, truncated
[  130.223546][ T9473] loop4: p7 start 169894753 is beyond EOD, truncated
[  130.260172][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  130.342483][ T9486] "syz.7.902" (9486) uses obsolete ecb(arc4) skcipher
[  130.820770][   T40] kauditd_printk_skb: 36 callbacks suppressed
[  130.820782][   T40] audit: type=1400 audit(1753607887.826:1963): avc:  denied  { accept } for  pid=9490 comm="syz.7.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  130.849880][   T40] audit: type=1400 audit(1753607887.856:1964): avc:  denied  { watch_reads } for  pid=9492 comm="syz.7.905" path="/82" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  130.857172][ T9493] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  131.089399][ T9518] vxfs: WRONG superblock magic 00000000 at 1
[  131.093253][ T9518] vxfs: WRONG superblock magic 00000000 at 8
[  131.095250][ T9518] vxfs: can't find superblock.
[  131.156719][ T9530] xt_hashlimit: size too large, truncated to 1048576
[  131.206447][ T9536] __nla_validate_parse: 2 callbacks suppressed
[  131.206463][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.7.917'.
[  131.212605][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.916'.
[  131.233507][ T9538] netlink: 32 bytes leftover after parsing attributes in process `syz.4.918'.
[  131.311016][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  131.429626][   T40] audit: type=1400 audit(1753607888.436:1965): avc:  denied  { write } for  pid=9563 comm="syz.7.925" laddr=::ffff:172.20.20.10 lport=47316 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  131.445246][   T40] audit: type=1400 audit(1753607888.456:1966): avc:  denied  { read } for  pid=9563 comm="syz.7.925" laddr=::ffff:172.20.20.10 lport=47316 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  131.640444][ T9595] tipc: Started in network mode
[  131.644358][ T9595] tipc: Node identity d6b0ee4b812a, cluster identity 4711
[  131.649325][ T9595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.657758][ T9594] tipc: Disabling bearer <eth:syzkaller0>
[  131.697722][ T9600] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  131.761002][ T5987] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  131.801031][ T6618] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  131.913233][ T5987] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.916754][ T5987] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.919910][ T5987] usb 12-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  131.923445][ T5987] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.928390][ T5987] usb 12-1: config 0 descriptor??
[  131.963492][ T6618] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  131.967004][ T6618] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  131.969815][ T6618] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.974592][ T9575] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  131.979491][ T6618] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  132.101149][ T6354] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  132.134654][ T5987] usbhid 12-1:0.0: can't add hid device: -71
[  132.136688][ T5987] usbhid 12-1:0.0: probe with driver usbhid failed with error -71
[  132.141148][ T5987] usb 12-1: USB disconnect, device number 6
[  132.180361][ T9572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.184924][ T9572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.196956][ T6618] usb 6-1: USB disconnect, device number 19
[  132.283189][ T6354] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.286663][ T6354] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.289984][ T6354] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  132.293530][ T6354] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.298552][ T6354] usb 9-1: config 0 descriptor??
[  132.351051][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  132.396749][   T40] audit: type=1400 audit(1753607889.406:1967): avc:  denied  { ioctl } for  pid=9641 comm="syz.1.937" path="socket:[30641]" dev="sockfs" ino=30641 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  132.542388][ T9642] /dev/sr0: Can't open blockdev
[  132.551148][ T6354] usbhid 9-1:0.0: can't add hid device: -71
[  132.553077][ T6354] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  132.561464][ T6354] usb 9-1: USB disconnect, device number 14
[  132.583787][   T40] audit: type=1400 audit(1753607889.596:1968): avc:  denied  { getopt } for  pid=9646 comm="syz.4.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  132.646004][ T9651] bio_check_eod: 2 callbacks suppressed
[  132.646016][ T9651] syz.5.939: attempt to access beyond end of device
[  132.646016][ T9651] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0
[  132.651976][ T9651] EXT4-fs (nbd5): unable to read superblock
[  132.683065][ T9655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.732689][   T40] audit: type=1400 audit(1753607889.746:1969): avc:  denied  { connect } for  pid=9656 comm="syz.5.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  132.937061][ T6354] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  132.966906][ T9672] orangefs_devreq_open: device cannot be opened in blocking mode
[  132.969550][   T40] audit: type=1400 audit(1753607889.976:1970): avc:  denied  { read } for  pid=9668 comm="syz.1.947" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  132.989467][ T9674] pim6reg9: entered allmulticast mode
[  132.992329][   T40] audit: type=1400 audit(1753607889.976:1971): avc:  denied  { open } for  pid=9668 comm="syz.1.947" path="/280/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  133.049038][ T9676] loop4: detected capacity change from 0 to 7
[  133.051076][ T6051] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  133.054780][ T9229]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  133.057126][ T9229] loop4: p1 start 1600481121 is beyond EOD, truncated
[  133.059768][ T9229] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  133.067763][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.071010][ T6354] usb 9-1: device descriptor read/64, error -71
[  133.071854][ T9229] loop4: p3 start 172124960 is beyond EOD, truncated
[  133.076267][ T9229] loop4: p4 start 172124960 is beyond EOD, truncated
[  133.078873][ T9229] loop4: p5 start 172124960 is beyond EOD, truncated
[  133.083130][ T9229] loop4: p6 start 1181570570 is beyond EOD, truncated
[  133.085866][ T9229] loop4: p7 start 169894753 is beyond EOD, truncated
[  133.095208][ T9676]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  133.098047][ T9676] loop4: p1 start 1600481121 is beyond EOD, truncated
[  133.101807][ T9676] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  133.106367][ T9676] loop4: p3 start 172124960 is beyond EOD, truncated
[  133.109426][ T9676] loop4: p4 start 172124960 is beyond EOD, truncated
[  133.112903][ T9676] loop4: p5 start 172124960 is beyond EOD, truncated
[  133.120949][ T9676] loop4: p6 start 1181570570 is beyond EOD, truncated
[  133.123749][ T9676] loop4: p7 start 169894753 is beyond EOD, truncated
[  133.159905][ T9229] udevd[9229]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  133.176321][ T9089] udevd[9089]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  133.210929][ T6051] usb 10-1: Using ep0 maxpacket: 8
[  133.213730][ T6051] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  133.216287][ T6051] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  133.219291][ T6051] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  133.223730][ T6051] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  133.226888][ T6051] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  133.230971][ T6051] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  133.233614][ T6051] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.311068][ T6354] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  133.341237][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.962'.
[  133.344236][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.7.962'.
[  133.345314][   T40] audit: type=1400 audit(1753607890.356:1972): avc:  denied  { mounton } for  pid=9708 comm="syz.1.961" path="/285/file0" dev="9p" ino=35913860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  133.390927][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  133.440504][ T6051] usb 10-1: usb_control_msg returned -32
[  133.440970][ T6354] usb 9-1: device descriptor read/64, error -71
[  133.442467][ T6051] usbtmc 10-1:16.0: can't read capabilities
[  133.551509][ T6354] usb usb9-port1: attempt power cycle
[  133.639051][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz.7.968'.
[  133.645777][ T9727] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  133.768476][ T9738] netlink: 120 bytes leftover after parsing attributes in process `syz.7.970'.
[  133.776140][ T9738] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  133.778574][ T9738] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  133.794940][ T9739] usbtmc 10-1:16.0: INITIATE_CLEAR returned 0
[  133.890903][ T6354] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  133.911382][ T6354] usb 9-1: device descriptor read/8, error -71
[  133.996641][ T6802] usb 10-1: USB disconnect, device number 18
[  134.102552][ T9222] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.106900][ T9222] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  134.151060][ T6354] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  134.173560][ T6354] usb 9-1: device descriptor read/8, error -71
[  134.181221][ T9222] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.185415][ T9222] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  134.213436][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  134.219271][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  134.222310][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  134.225321][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  134.228090][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  134.263381][ T9222] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.266633][ T9222] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  134.281190][ T6354] usb usb9-port1: unable to enumerate USB device
[  134.369850][ T9222] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.373940][ T9222] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  134.383178][ T9741] chnl_net:caif_netlink_parms(): no params data found
[  134.420969][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  134.454353][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.456578][ T9741] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.458873][ T9741] bridge_slave_0: entered allmulticast mode
[  134.461674][ T9741] bridge_slave_0: entered promiscuous mode
[  134.464734][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.467032][ T9741] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.469365][ T9741] bridge_slave_1: entered allmulticast mode
[  134.472574][ T9741] bridge_slave_1: entered promiscuous mode
[  134.531522][ T9741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.536035][ T9741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.561138][ T9752] nftables ruleset with unbound set
[  134.591129][ T9741] team0: Port device team_slave_0 added
[  134.593334][ T9222] team0: left allmulticast mode
[  134.594874][ T9222] team_slave_0: left allmulticast mode
[  134.598074][ T9222] team_slave_1: left allmulticast mode
[  134.599997][ T9222] bridge0: port 3(team0) entered disabled state
[  134.600005][ T9755] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  134.604178][ T9755] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  134.608653][ T9755] vhci_hcd vhci_hcd.0: Device attached
[  134.616875][ T9222] bridge_slave_1: left allmulticast mode
[  134.618665][ T9222] bridge_slave_1: left promiscuous mode
[  134.620538][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.625258][ T9222] bridge_slave_0: left allmulticast mode
[  134.627172][ T9222] bridge_slave_0: left promiscuous mode
[  134.628996][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.674069][ T9756] vhci_hcd: unknown pdu 2
[  134.679552][ T9223] vhci_hcd: stop threads
[  134.682279][ T9223] vhci_hcd: release socket
[  134.686641][ T9223] vhci_hcd: disconnect device
[  134.763951][ T9222] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  134.922669][ T9222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.926963][ T9222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.930650][ T9222] bond0 (unregistering): Released all slaves
[  134.938996][ T9741] team0: Port device team_slave_1 added
[  134.981035][ T9741] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.983232][ T9741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.991197][ T9741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.995353][ T9741] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.997536][ T9741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.005550][ T9741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.059762][ T9741] hsr_slave_0: entered promiscuous mode
[  135.063840][ T9741] hsr_slave_1: entered promiscuous mode
[  135.066269][ T9741] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.068550][ T9741] Cannot create hsr debugfs directory
[  135.245616][ T9222] hsr_slave_0: left promiscuous mode
[  135.248799][ T9222] hsr_slave_1: left promiscuous mode
[  135.251740][ T9222] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.254853][ T9222] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.258641][ T9222] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.261908][ T9222] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.297232][ T9222] veth1_macvtap: left promiscuous mode
[  135.299547][ T9222] veth0_macvtap: left promiscuous mode
[  135.302012][ T9222] veth1_vlan: left promiscuous mode
[  135.304093][ T9222] veth0_vlan: left promiscuous mode
[  135.358015][ T9222] pim6reg9 (unregistering): left allmulticast mode
[  135.460992][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  135.942868][ T9222] team_slave_1 (unregistering): left promiscuous mode
[  135.946860][ T9222] team0 (unregistering): Port device team_slave_1 removed
[  136.009241][ T9222] team_slave_0 (unregistering): left promiscuous mode
[  136.013244][ T9222] team0 (unregistering): Port device team_slave_0 removed
[  136.263005][ T5952] Bluetooth: hci0: command tx timeout
[  136.500951][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  136.850154][ T9741] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  136.861512][ T9741] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  136.865373][ T9741] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  136.869217][ T9741] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  136.921624][ T9741] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.931365][ T9741] 8021q: adding VLAN 0 to HW filter on device team0
[  136.938463][ T9223] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.941387][ T9223] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.948874][ T9213] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.951271][ T9213] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.066769][ T9741] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.193791][ T9741] veth0_vlan: entered promiscuous mode
[  137.198701][ T9741] veth1_vlan: entered promiscuous mode
[  137.215555][ T9741] veth0_macvtap: entered promiscuous mode
[  137.219901][ T9741] veth1_macvtap: entered promiscuous mode
[  137.228379][ T9741] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.235280][ T9741] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.240727][ T9741] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.244385][ T9741] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.247622][ T9741] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.250464][ T9741] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.302348][ T9220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.304778][ T9220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.326578][ T9224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.329900][ T9224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.550929][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  138.341021][ T5952] Bluetooth: hci0: command tx timeout
[  138.591038][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  139.621046][    C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  140.421750][ T5952] Bluetooth: hci0: command tx timeout
[  140.661056][    C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  141.700935][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  142.511117][ T5952] Bluetooth: hci0: command tx timeout
[  142.740996][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  143.780957][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  144.820936][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  145.861236][    C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  146.052977][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  146.052988][   T40] audit: type=1400 audit(1753607903.066:1974): avc:  denied  { map } for  pid=9791 comm="syz.5.979" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  146.062516][   T40] audit: type=1400 audit(1753607903.066:1975): avc:  denied  { execute } for  pid=9791 comm="syz.5.979" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  146.070700][   T40] audit: type=1400 audit(1753607903.066:1976): avc:  denied  { connect } for  pid=9792 comm="syz.1.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  146.095410][ T9797] netlink: 12 bytes leftover after parsing attributes in process `syz.7.981'.
[  146.127615][   T40] audit: type=1400 audit(1753607903.136:1977): avc:  denied  { getopt } for  pid=9792 comm="syz.1.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  146.127776][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'.
[  146.201368][ T9213] tipc: Subscription rejected, illegal request
[  146.205848][ T9807] loop4: detected capacity change from 0 to 7
[  146.208614][ T9801]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  146.212337][ T9801] loop4: p1 start 1600481121 is beyond EOD, truncated
[  146.215142][ T9801] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  146.219488][ T9801] loop4: p3 start 172124960 is beyond EOD, truncated
[  146.222619][ T9801] loop4: p4 start 172124960 is beyond EOD, truncated
[  146.224861][ T9801] loop4: p5 start 172124960 is beyond EOD, truncated
[  146.227032][ T9801] loop4: p6 start 1181570570 is beyond EOD, truncated
[  146.229196][ T9801] loop4: p7 start 169894753 is beyond EOD, truncated
[  146.234510][ T9807]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  146.236947][ T9807] loop4: p1 start 1600481121 is beyond EOD, truncated
[  146.239144][ T9807] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  146.242709][ T9807] loop4: p3 start 172124960 is beyond EOD, truncated
[  146.244857][ T9807] loop4: p4 start 172124960 is beyond EOD, truncated
[  146.246990][ T9807] loop4: p5 start 172124960 is beyond EOD, truncated
[  146.249076][ T9807] loop4: p6 start 1181570570 is beyond EOD, truncated
[  146.252503][ T9807] loop4: p7 start 169894753 is beyond EOD, truncated
[  146.273274][ T9801] udevd[9801]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  146.292826][ T9801] udevd[9801]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  146.338149][ T9827] overlay: Unknown parameter 'dont_measure'
[  146.353061][   T40] audit: type=1400 audit(1753607903.366:1978): avc:  denied  { unmount } for  pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  146.411245][ T6354] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  146.539104][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'.
[  146.561110][ T6354] usb 12-1: Using ep0 maxpacket: 8
[  146.574485][ T6354] usb 12-1: config index 0 descriptor too short (expected 301, got 45)
[  146.577126][ T6354] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  146.580809][ T6354] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  146.588615][ T6354] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  146.591774][ T6354] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  146.595946][ T6354] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  146.598649][ T6354] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.616693][ T9851] loop4: detected capacity change from 0 to 7
[  146.619227][ T9855] netlink: 'syz.5.998': attribute type 1 has an invalid length.
[  146.620278][ T9851]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  146.625280][ T9851] loop4: p1 start 1600481121 is beyond EOD, truncated
[  146.625385][ T9857] tmpfs: Unknown parameter 'grpquota_inoC?‡¾ª«dde_hardlim
'
[  146.627519][ T9851] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  146.634334][ T9851] loop4: p3 start 172124960 is beyond EOD, truncated
[  146.637041][ T9851] loop4: p4 start 172124960 is beyond EOD, truncated
[  146.638535][ T9855] 8021q: adding VLAN 0 to HW filter on device bond2
[  146.639248][ T9851] loop4: p5 start 172124960 is beyond EOD, truncated
[  146.645198][ T9851] loop4: p6 start 1181570570 is beyond EOD, truncated
[  146.647347][ T9851] loop4: p7 start 169894753 is beyond EOD, truncated
[  146.652540][ T9855] 8021q: adding VLAN 0 to HW filter on device bond2
[  146.655292][ T9855] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  146.659226][ T9855] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  146.700363][ T9856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9856 comm=syz.5.998
[  146.728563][   T40] audit: type=1400 audit(1753607903.736:1979): avc:  denied  { execute } for  pid=9859 comm="syz.4.999" path="/212/file0/cpu.stat" dev="9p" ino=35914003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  146.728699][ T9860] random: crng reseeded on system resumption
[  146.743254][ T9859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.762850][ T9866] netlink: 'syz.5.1000': attribute type 5 has an invalid length.
[  146.767421][   T40] audit: type=1400 audit(1753607903.776:1980): avc:  denied  { mounton } for  pid=9865 comm="syz.5.1000" path="/bus" dev="ramfs" ino=29632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  146.774659][ T9866] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  146.776992][ T9866] overlayfs: failed to set xattr on upper
[  146.778827][ T9866] overlayfs: ...falling back to redirect_dir=nofollow.
[  146.783384][ T9866] overlayfs: ...falling back to index=off.
[  146.785239][ T9866] overlayfs: ...falling back to uuid=null.
[  146.789597][ T9866] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  146.792748][ T9866] overlayfs: failed to set xattr on upper
[  146.794631][ T9866] overlayfs: ...falling back to redirect_dir=nofollow.
[  146.796767][ T9866] overlayfs: ...falling back to index=off.
[  146.798596][ T9866] overlayfs: ...falling back to uuid=null.
[  146.810195][ T6354] usb 12-1: usb_control_msg returned -32
[  146.812781][ T6354] usbtmc 12-1:16.0: can't read capabilities
[  146.900891][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  147.145076][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1005'.
[  147.163419][ T9883] usbtmc 12-1:16.0: INITIATE_CLEAR returned 0
[  147.175844][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1006'.
[  147.178691][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1006'.
[  147.248966][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1006'.
[  147.253035][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1006'.
[  147.366870][ T6802] usb 12-1: USB disconnect, device number 7
[  147.408403][   T40] audit: type=1400 audit(1753607904.416:1981): avc:  denied  { mounton } for  pid=9892 comm="syz.5.1009" path="/210/file0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1
[  147.665493][ T9919] loop4: detected capacity change from 0 to 7
[  147.668867][ T9876]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  147.671263][ T9876] loop4: p1 start 1600481121 is beyond EOD, truncated
[  147.673405][ T9876] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  147.676408][ T9876] loop4: p3 start 172124960 is beyond EOD, truncated
[  147.678514][ T9876] loop4: p4 start 172124960 is beyond EOD, truncated
[  147.680661][ T9876] loop4: p5 start 172124960 is beyond EOD, truncated
[  147.683979][ T9876] loop4: p6 start 1181570570 is beyond EOD, truncated
[  147.686118][ T9876] loop4: p7 start 169894753 is beyond EOD, truncated
[  147.690506][ T9919]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  147.692698][ T9919] loop4: p1 start 1600481121 is beyond EOD, truncated
[  147.694839][ T9919] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  147.697960][ T9919] loop4: p3 start 172124960 is beyond EOD, truncated
[  147.700635][ T9919] loop4: p4 start 172124960 is beyond EOD, truncated
[  147.702840][ T9919] loop4: p5 start 172124960 is beyond EOD, truncated
[  147.704904][ T9919] loop4: p6 start 1181570570 is beyond EOD, truncated
[  147.707015][ T9919] loop4: p7 start 169894753 is beyond EOD, truncated
[  147.731180][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  147.742899][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  147.908853][   T40] audit: type=1400 audit(1753607904.916:1982): avc:  denied  { map } for  pid=9943 comm="syz.7.1025" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  147.941113][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  148.290104][ T9961] loop4: detected capacity change from 0 to 7
[  148.293051][ T9876] Dev loop4: unable to read RDB block 7
[  148.295177][ T9876]  loop4: AHDI p1 p2
[  148.296428][ T9876] loop4: partition table partially beyond EOD, truncated
[  148.298982][ T9876] loop4: p1 size 4227858431 extends beyond EOD, truncated
[  148.312180][ T9961] Dev loop4: unable to read RDB block 7
[  148.314026][ T9961]  loop4: AHDI p1 p2
[  148.315309][ T9961] loop4: partition table partially beyond EOD, truncated
[  148.318275][ T9961] loop4: p1 size 4227858431 extends beyond EOD, truncated
[  148.335297][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  148.345922][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  148.405757][   T40] audit: type=1400 audit(1753607905.416:1983): avc:  denied  { read } for  pid=9965 comm="syz.7.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  148.720929][ T6618] usb 12-1: new high-speed USB device number 8 using dummy_hcd
[  148.841093][ T6354] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  148.880912][ T6618] usb 12-1: Using ep0 maxpacket: 8
[  148.884069][ T6618] usb 12-1: config index 0 descriptor too short (expected 301, got 45)
[  148.886707][ T6618] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  148.889650][ T6618] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  148.893842][ T6618] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  148.897878][ T6618] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  148.903599][ T6618] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  148.907199][ T6618] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.951214][   T29] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  148.962674][ T9992] loop4: detected capacity change from 0 to 7
[  148.965118][ T9992]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  148.966990][ T9992] loop4: p1 start 1600481121 is beyond EOD, truncated
[  148.969089][ T9992] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  148.972668][ T9992] loop4: p3 start 172124960 is beyond EOD, truncated
[  148.975160][ T9992] loop4: p4 start 172124960 is beyond EOD, truncated
[  148.977862][ T9992] loop4: p5 start 172124960 is beyond EOD, truncated
[  148.980561][ T9992] loop4: p6 start 1181570570 is beyond EOD, truncated
[  148.980903][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  148.985826][ T9992] loop4: p7 start 169894753 is beyond EOD, truncated
[  149.000938][ T6354] usb 9-1: Using ep0 maxpacket: 8
[  149.005449][ T6354] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  149.007998][ T6354] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  149.011415][ T6354] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  149.014856][ T6354] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  149.018869][ T6354] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.023564][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  149.024366][ T6354] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  149.029074][ T9994] netlink: 'syz.5.1042': attribute type 9 has an invalid length.
[  149.031039][ T6354] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.034116][ T9994] netlink: 212012 bytes leftover after parsing attributes in process `syz.5.1042'.
[  149.048241][ T9994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1042'.
[  149.121392][   T29] usb 6-1: Using ep0 maxpacket: 8
[  149.121400][ T6618] usb 12-1: usb_control_msg returned -32
[  149.121423][ T6618] usbtmc 12-1:16.0: can't read capabilities
[  149.126535][   T29] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  149.141073][   T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  149.145087][   T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  149.149099][   T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  149.153777][   T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.158100][   T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  149.161496][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.242490][ T6354] usb 9-1: usb_control_msg returned -32
[  149.244978][ T6354] usbtmc 9-1:16.0: can't read capabilities
[  149.367887][   T29] usb 6-1: usb_control_msg returned -32
[  149.369676][   T29] usbtmc 6-1:16.0: can't read capabilities
[  149.474329][T10012] usbtmc 12-1:16.0: INITIATE_CLEAR returned 0
[  149.484258][T10013] loop4: detected capacity change from 0 to 7
[  149.487173][ T9876]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  149.489677][ T9876] loop4: p1 start 1600481121 is beyond EOD, truncated
[  149.492042][ T9876] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  149.496698][ T9876] loop4: p3 start 172124960 is beyond EOD, truncated
[  149.499141][ T9876] loop4: p4 start 172124960 is beyond EOD, truncated
[  149.501697][ T9876] loop4: p5 start 172124960 is beyond EOD, truncated
[  149.503826][ T9876] loop4: p6 start 1181570570 is beyond EOD, truncated
[  149.506000][ T9876] loop4: p7 start 169894753 is beyond EOD, truncated
[  149.513282][T10013]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  149.516004][T10013] loop4: p1 start 1600481121 is beyond EOD, truncated
[  149.518679][T10013] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  149.522561][T10013] loop4: p3 start 172124960 is beyond EOD, truncated
[  149.525238][T10013] loop4: p4 start 172124960 is beyond EOD, truncated
[  149.527898][T10013] loop4: p5 start 172124960 is beyond EOD, truncated
[  149.530503][T10013] loop4: p6 start 1181570570 is beyond EOD, truncated
[  149.533331][T10013] loop4: p7 start 169894753 is beyond EOD, truncated
[  149.558620][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  149.575548][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  149.593806][T10016] FAULT_INJECTION: forcing a failure.
[  149.593806][T10016] name failslab, interval 1, probability 0, space 0, times 1
[  149.597630][T10016] CPU: 0 UID: 0 PID: 10016 Comm: syz.4.1034 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  149.597643][T10016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  149.597651][T10016] Call Trace:
[  149.597655][T10016]  <TASK>
[  149.597659][T10016]  dump_stack_lvl+0x16c/0x1f0
[  149.597697][T10016]  should_fail_ex+0x512/0x640
[  149.597719][T10016]  ? fs_reclaim_acquire+0xae/0x150
[  149.597733][T10016]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  149.597745][T10016]  should_failslab+0xc2/0x120
[  149.597755][T10016]  __kmalloc_noprof+0xd2/0x510
[  149.597775][T10016]  tomoyo_realpath_from_path+0xc2/0x6e0
[  149.597787][T10016]  ? tomoyo_profile+0x47/0x60
[  149.597800][T10016]  tomoyo_path_number_perm+0x245/0x580
[  149.597815][T10016]  ? tomoyo_path_number_perm+0x237/0x580
[  149.597831][T10016]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  149.597847][T10016]  ? find_held_lock+0x2b/0x80
[  149.597873][T10016]  ? find_held_lock+0x2b/0x80
[  149.597885][T10016]  ? hook_file_ioctl_common+0x145/0x410
[  149.597901][T10016]  ? __fget_files+0x20e/0x3c0
[  149.597913][T10016]  security_file_ioctl+0x9b/0x240
[  149.597925][T10016]  __x64_sys_ioctl+0xb7/0x210
[  149.597940][T10016]  do_syscall_64+0xcd/0x4c0
[  149.597952][T10016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.597963][T10016] RIP: 0033:0x7f9410b8e9a9
[  149.597972][T10016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.597982][T10016] RSP: 002b:00007f941195d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  149.597992][T10016] RAX: ffffffffffffffda RBX: 00007f9410db6080 RCX: 00007f9410b8e9a9
[  149.597998][T10016] RDX: 0000000000000000 RSI: 0000000000005b02 RDI: 0000000000000004
[  149.598005][T10016] RBP: 00007f941195d090 R08: 0000000000000000 R09: 0000000000000000
[  149.598011][T10016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.598017][T10016] R13: 0000000000000000 R14: 00007f9410db6080 R15: 00007ffedebddb08
[  149.598030][T10016]  </TASK>
[  149.598034][T10016] ERROR: Out of memory at tomoyo_realpath_from_path.
[  149.676129][   T29] usb 12-1: USB disconnect, device number 8
[  149.678491][T10016] usbtmc 12-1:16.0: usb_control_msg returned -19
[  149.786016][T10027] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  149.789314][T10027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.020964][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  150.067306][T10035] loop4: detected capacity change from 0 to 7
[  150.070226][ T9876]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  150.074048][ T9876] loop4: p1 start 1600481121 is beyond EOD, truncated
[  150.076310][ T9876] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  150.079512][ T9876] loop4: p3 start 172124960 is beyond EOD, truncated
[  150.096774][ T9876] loop4: p4 start 172124960 is beyond EOD, truncated
[  150.099246][ T9876] loop4: p5 start 172124960 is beyond EOD, truncated
[  150.101777][ T9876] loop4: p6 start 1181570570 is beyond EOD, truncated
[  150.107977][ T9876] loop4: p7 start 169894753 is beyond EOD, truncated
[  150.113571][T10035]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  150.115851][T10035] loop4: p1 start 1600481121 is beyond EOD, truncated
[  150.118026][T10035] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  150.121656][T10035] loop4: p3 start 172124960 is beyond EOD, truncated
[  150.124657][T10035] loop4: p4 start 172124960 is beyond EOD, truncated
[  150.127556][T10035] loop4: p5 start 172124960 is beyond EOD, truncated
[  150.130389][T10035] loop4: p6 start 1181570570 is beyond EOD, truncated
[  150.133339][T10035] loop4: p7 start 169894753 is beyond EOD, truncated
[  150.174822][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  150.386436][T10057] bridge0: entered allmulticast mode
[  150.394058][T10057] pim6reg: entered allmulticast mode
[  150.463221][ T5987] hid-generic 0005:0009:0009.0005: unknown main item tag 0x0
[  150.470170][ T5987] hid-generic 0005:0009:0009.0005: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa
[  150.548266][T10065] loop4: detected capacity change from 0 to 7
[  150.551245][T10065]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  150.553529][T10065] loop4: p1 start 1600481121 is beyond EOD, truncated
[  150.555756][T10065] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  150.558821][T10065] loop4: p3 start 172124960 is beyond EOD, truncated
[  150.561064][T10065] loop4: p4 start 172124960 is beyond EOD, truncated
[  150.563191][T10065] loop4: p5 start 172124960 is beyond EOD, truncated
[  150.565340][T10065] loop4: p6 start 1181570570 is beyond EOD, truncated
[  150.567515][T10065] loop4: p7 start 169894753 is beyond EOD, truncated
[  150.929720][T10076] ipvlan3: entered promiscuous mode
[  150.933877][T10076] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  150.937156][T10076] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  151.070908][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  151.607932][ T5987] usb 9-1: USB disconnect, device number 19
[  151.693469][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  151.693481][   T40] audit: type=1400 audit(1753607908.706:1989): avc:  denied  { read } for  pid=10093 comm="syz.4.1078" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  151.703331][   T40] audit: type=1400 audit(1753607908.706:1990): avc:  denied  { open } for  pid=10093 comm="syz.4.1078" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  151.712569][   T40] audit: type=1400 audit(1753607908.706:1991): avc:  denied  { ioctl } for  pid=10093 comm="syz.4.1078" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  151.725611][ T6354] usb 6-1: USB disconnect, device number 20
[  151.758808][T10099] binder: 10098:10099 ioctl 5402 200000000180 returned -22
[  151.762391][T10099] binder: 10098:10099 ioctl c05064a7 2000000002c0 returned -22
[  151.765012][T10099] binder: 10098:10099 ioctl c06864a1 200000000680 returned -22
[  151.773341][T10099] binder: 10098:10099 ioctl c01464a6 200000000700 returned -22
[  151.775928][T10099] binder: 10098:10099 ioctl c02064b9 200000000800 returned -22
[  151.778379][T10099] binder: 10098:10099 ioctl c04064a0 200000000940 returned -22
[  151.780710][T10099] binder: 10098:10099 ioctl c06864a1 2000000009c0 returned -22
[  151.783306][T10099] binder: 10098:10099 ioctl c05064a7 200000000b80 returned -22
[  151.786706][T10099] binder: 10098:10099 ioctl c05064a7 200000000f80 returned -22
[  151.789173][T10099] binder: 10098:10099 ioctl c05064a7 200000001180 returned -22
[  151.792008][T10099] binder: 10098:10099 ioctl c05064a7 2000000015c0 returned -22
[  151.794798][T10099] binder: 10098:10099 ioctl c03864bc 2000000016c0 returned -22
[  152.110975][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  152.211016][ T6354] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  152.226770][T10129] loop2: detected capacity change from 0 to 524287999
[  152.365742][T10141] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  152.370889][ T6354] usb 9-1: Using ep0 maxpacket: 8
[  152.378836][ T6354] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  152.381998][ T6354] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  152.385018][ T6354] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  152.388035][ T6354] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  152.391147][ T6354] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  152.395099][ T6354] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  152.397888][ T6354] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.524743][T10144] __nla_validate_parse: 3 callbacks suppressed
[  152.524757][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1094'.
[  152.524773][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1094'.
[  152.604197][ T6354] usb 9-1: usb_control_msg returned -32
[  152.606049][ T6354] usbtmc 9-1:16.0: can't read capabilities
[  152.747758][T10158] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1099'.
[  152.816495][   T40] audit: type=1400 audit(1753607909.826:1992): avc:  denied  { accept } for  pid=10164 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  152.960357][T10171] FAULT_INJECTION: forcing a failure.
[  152.960357][T10171] name failslab, interval 1, probability 0, space 0, times 0
[  152.965942][T10171] CPU: 1 UID: 0 PID: 10171 Comm: syz.4.1085 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  152.965970][T10171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  152.965981][T10171] Call Trace:
[  152.965986][T10171]  <TASK>
[  152.965992][T10171]  dump_stack_lvl+0x16c/0x1f0
[  152.966024][T10171]  should_fail_ex+0x512/0x640
[  152.966049][T10171]  ? fs_reclaim_acquire+0xae/0x150
[  152.966071][T10171]  ? tomoyo_encode2+0x100/0x3e0
[  152.966085][T10171]  should_failslab+0xc2/0x120
[  152.966101][T10171]  __kmalloc_noprof+0xd2/0x510
[  152.966125][T10171]  ? d_absolute_path+0x136/0x1a0
[  152.966150][T10171]  tomoyo_encode2+0x100/0x3e0
[  152.966168][T10171]  tomoyo_encode+0x29/0x50
[  152.966182][T10171]  tomoyo_realpath_from_path+0x18f/0x6e0
[  152.966205][T10171]  tomoyo_path_number_perm+0x245/0x580
[  152.966228][T10171]  ? tomoyo_path_number_perm+0x237/0x580
[  152.966253][T10171]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  152.966278][T10171]  ? find_held_lock+0x2b/0x80
[  152.966320][T10171]  ? find_held_lock+0x2b/0x80
[  152.966339][T10171]  ? hook_file_ioctl_common+0x145/0x410
[  152.966363][T10171]  ? __fget_files+0x20e/0x3c0
[  152.966382][T10171]  security_file_ioctl+0x9b/0x240
[  152.966399][T10171]  __x64_sys_ioctl+0xb7/0x210
[  152.966422][T10171]  do_syscall_64+0xcd/0x4c0
[  152.966439][T10171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.966455][T10171] RIP: 0033:0x7f9410b8e9a9
[  152.966468][T10171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.966485][T10171] RSP: 002b:00007f941195d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  152.966503][T10171] RAX: ffffffffffffffda RBX: 00007f9410db6080 RCX: 00007f9410b8e9a9
[  152.966514][T10171] RDX: 0000000000000000 RSI: 0000000000005b02 RDI: 0000000000000004
[  152.966525][T10171] RBP: 00007f941195d090 R08: 0000000000000000 R09: 0000000000000000
[  152.966534][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.966543][T10171] R13: 0000000000000000 R14: 00007f9410db6080 R15: 00007ffedebddb08
[  152.966568][T10171]  </TASK>
[  152.966585][T10171] ERROR: Out of memory at tomoyo_realpath_from_path.
[  153.051726][T10171] usbtmc 9-1:16.0: INITIATE_CLEAR returned 0
[  153.145457][T10173] xt_hashlimit: size too large, truncated to 1048576
[  153.151023][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  153.288825][ T6618] usb 9-1: USB disconnect, device number 20
[  153.382777][T10182] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=108 sclass=netlink_xfrm_socket pid=10182 comm=syz.7.1106
[  153.442397][T10187] netlink: 'syz.7.1106': attribute type 2 has an invalid length.
[  153.445078][T10187] netlink: 'syz.7.1106': attribute type 1 has an invalid length.
[  153.447617][T10187] netlink: 'syz.7.1106': attribute type 1 has an invalid length.
[  153.457860][   T40] audit: type=1400 audit(1753607910.466:1993): avc:  denied  { relabelfrom } for  pid=10185 comm="syz.1.1108" name="NETLINK" dev="sockfs" ino=35431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  153.469095][   T40] audit: type=1400 audit(1753607910.466:1994): avc:  denied  { read write } for  pid=10181 comm="syz.7.1106" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  153.476545][   T40] audit: type=1400 audit(1753607910.466:1995): avc:  denied  { relabelto } for  pid=10185 comm="syz.1.1108" name="NETLINK" dev="sockfs" ino=35431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[  153.484467][   T40] audit: type=1400 audit(1753607910.466:1996): avc:  denied  { open } for  pid=10181 comm="syz.7.1106" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  153.704453][    C3] vcan0: j1939_tp_rxtimer: 0xffff88804bd4b800: rx timeout, send abort
[  153.713516][   T40] audit: type=1400 audit(1753607910.726:1997): avc:  denied  { read } for  pid=5346 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  153.720210][   T40] audit: type=1400 audit(1753607910.726:1998): avc:  denied  { search } for  pid=5346 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  154.061836][T10224] overlayfs: missing 'workdir'
[  154.093232][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1118'.
[  154.181004][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  154.204879][    C3] vcan0: j1939_tp_rxtimer: 0xffff88804bd4a800: rx timeout, send abort
[  154.207869][    C3] vcan0: j1939_tp_rxtimer: 0xffff88804bd4b800: abort rx timeout. Force session deactivation
[  154.283324][T10234] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1123'.
[  154.320943][ T6014] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  154.472141][ T6014] usb 6-1: Using ep0 maxpacket: 8
[  154.475284][ T6014] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  154.477820][ T6014] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  154.480927][ T6014] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  154.483914][ T6014] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  154.487027][ T6014] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  154.492146][ T6014] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  154.494959][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.585276][T10281] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1138'.
[  154.617779][ T5952] Bluetooth: hci2: unexpected subevent 0x06 length: 9 < 10
[  154.660982][   T24] usb 12-1: new high-speed USB device number 9 using dummy_hcd
[  154.703600][ T6014] usb 6-1: usb_control_msg returned -32
[  154.705454][ T6014] usbtmc 6-1:16.0: can't read capabilities
[  154.707411][    C3] vcan0: j1939_tp_rxtimer: 0xffff88804bd4a800: abort rx timeout. Force session deactivation
[  154.776317][T10308] nfs4: Unknown parameter 'gEëä&ÆÀ¤ÞÐst6È.†ª)ª¨n;IN´ØÐ'
[  154.798792][T10308] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÊÖ�$ó8„‰% Ä‚L
[  154.811786][   T24] usb 12-1: too many configurations: 246, using maximum allowed: 8
[  154.820443][   T24] usb 12-1: config index 0 descriptor too short (expected 9, got 0)
[  154.823291][   T24] usb 12-1: can't read configurations, error -22
[  154.950932][   T24] usb 12-1: new high-speed USB device number 10 using dummy_hcd
[  155.052556][T10316] FAULT_INJECTION: forcing a failure.
[  155.052556][T10316] name failslab, interval 1, probability 0, space 0, times 0
[  155.057766][T10316] CPU: 3 UID: 0 PID: 10316 Comm: syz.1.1120 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  155.057789][T10316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  155.057799][T10316] Call Trace:
[  155.057805][T10316]  <TASK>
[  155.057812][T10316]  dump_stack_lvl+0x16c/0x1f0
[  155.057844][T10316]  should_fail_ex+0x512/0x640
[  155.057877][T10316]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  155.057904][T10316]  should_failslab+0xc2/0x120
[  155.057922][T10316]  __kmalloc_cache_noprof+0x6a/0x3e0
[  155.057943][T10316]  ? do_vfs_ioctl+0x523/0x1a60
[  155.057966][T10316]  ? usbtmc_ioctl+0x1069/0x2900
[  155.057995][T10316]  usbtmc_ioctl+0x1069/0x2900
[  155.058023][T10316]  ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540
[  155.058042][T10316]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[  155.058060][T10316]  ? __pfx_usbtmc_ioctl+0x10/0x10
[  155.058084][T10316]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  155.058110][T10316]  ? hook_file_ioctl_common+0x145/0x410
[  155.058137][T10316]  ? selinux_file_ioctl+0x180/0x270
[  155.058152][T10316]  ? selinux_file_ioctl+0xb4/0x270
[  155.058170][T10316]  ? __pfx_usbtmc_ioctl+0x10/0x10
[  155.058197][T10316]  __x64_sys_ioctl+0x18e/0x210
[  155.058220][T10316]  do_syscall_64+0xcd/0x4c0
[  155.058240][T10316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.058257][T10316] RIP: 0033:0x7f203438e9a9
[  155.058271][T10316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.058288][T10316] RSP: 002b:00007f20352ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  155.058305][T10316] RAX: ffffffffffffffda RBX: 00007f20345b6080 RCX: 00007f203438e9a9
[  155.058317][T10316] RDX: 0000000000000000 RSI: 0000000000005b02 RDI: 0000000000000004
[  155.058327][T10316] RBP: 00007f20352ad090 R08: 0000000000000000 R09: 0000000000000000
[  155.058338][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.058348][T10316] R13: 0000000000000000 R14: 00007f20345b6080 R15: 00007ffc2facb148
[  155.058372][T10316]  </TASK>
[  155.121462][   T24] usb 12-1: too many configurations: 246, using maximum allowed: 8
[  155.127482][T10318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1151'.
[  155.130807][   T24] usb 12-1: config index 0 descriptor too short (expected 9, got 0)
[  155.135992][   T24] usb 12-1: can't read configurations, error -22
[  155.136259][T10318] mmap: syz.4.1151 (10318) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  155.138824][   T24] usb usb12-port1: attempt power cycle
[  155.205432][T10325] SELinux:  Context system_u:object_r:dhcpd_state_t:s0 is not valid (left unmapped).
[  155.230959][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  155.295429][T10335] batadv_slave_1: entered promiscuous mode
[  155.297631][T10335] batadv_slave_1: left promiscuous mode
[  155.299626][T10335] futex_wake_op: syz.4.1153 tries to shift op by -1; fix this program
[  155.319963][T10337] netlink: 'syz.5.1158': attribute type 1 has an invalid length.
[  155.323784][T10337] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1158'.
[  155.349680][T10337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1158'.
[  155.490969][   T24] usb 12-1: new high-speed USB device number 11 using dummy_hcd
[  155.512694][   T24] usb 12-1: too many configurations: 246, using maximum allowed: 8
[  155.516423][   T24] usb 12-1: config index 0 descriptor too short (expected 9, got 0)
[  155.519077][   T24] usb 12-1: can't read configurations, error -22
[  155.661466][   T24] usb 12-1: new high-speed USB device number 12 using dummy_hcd
[  155.691736][   T24] usb 12-1: too many configurations: 246, using maximum allowed: 8
[  155.696090][   T24] usb 12-1: config index 0 descriptor too short (expected 9, got 0)
[  155.698717][   T24] usb 12-1: can't read configurations, error -22
[  155.701161][   T24] usb usb12-port1: unable to enumerate USB device
[  155.837045][T10347] loop4: detected capacity change from 0 to 7
[  155.839965][ T9876]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  155.842843][ T9876] loop4: p1 start 1600481121 is beyond EOD, truncated
[  155.844975][ T9876] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  155.848298][ T9876] loop4: p3 start 172124960 is beyond EOD, truncated
[  155.850428][ T9876] loop4: p4 start 172124960 is beyond EOD, truncated
[  155.853687][ T9876] loop4: p5 start 172124960 is beyond EOD, truncated
[  155.855894][ T9876] loop4: p6 start 1181570570 is beyond EOD, truncated
[  155.858008][ T9876] loop4: p7 start 169894753 is beyond EOD, truncated
[  155.862748][T10347]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  155.864856][T10347] loop4: p1 start 1600481121 is beyond EOD, truncated
[  155.866978][T10347] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  155.869898][T10347] loop4: p3 start 172124960 is beyond EOD, truncated
[  155.872397][T10347] loop4: p4 start 172124960 is beyond EOD, truncated
[  155.875362][T10347] loop4: p5 start 172124960 is beyond EOD, truncated
[  155.877575][T10347] loop4: p6 start 1181570570 is beyond EOD, truncated
[  155.879773][T10347] loop4: p7 start 169894753 is beyond EOD, truncated
[  155.898293][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  155.909381][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  156.006064][T10357] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1167'.
[  156.127727][T10359] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  156.132288][T10359] x_tables: ip6_tables: TCPOPTSTRIP.0 target: invalid size 32 (kernel) != (user) 22
[  156.205916][T10370] dlm: no locking on control device
[  156.240866][T10372] loop4: detected capacity change from 0 to 7
[  156.243648][T10372]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  156.245627][T10372] loop4: p1 start 1600481121 is beyond EOD, truncated
[  156.247962][T10372] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  156.251250][T10372] loop4: p3 start 172124960 is beyond EOD, truncated
[  156.253868][T10372] loop4: p4 start 172124960 is beyond EOD, truncated
[  156.256042][T10372] loop4: p5 start 172124960 is beyond EOD, truncated
[  156.258195][T10372] loop4: p6 start 1181570570 is beyond EOD, truncated
[  156.260358][T10372] loop4: p7 start 169894753 is beyond EOD, truncated
[  156.270900][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  156.283140][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  156.561004][  T835] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  156.710974][  T835] usb 9-1: Using ep0 maxpacket: 8
[  156.715162][  T835] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  156.718534][  T835] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  156.722811][  T835] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  156.726775][  T835] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  156.730777][  T835] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.736225][  T835] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  156.740079][  T835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.953037][  T835] usb 9-1: GET_CAPABILITIES returned 0
[  156.954811][  T835] usbtmc 9-1:16.0: can't read capabilities
[  157.099908][  T835] usb 6-1: USB disconnect, device number 21
[  157.172929][T10386] /dev/sr0: Can't open blockdev
[  157.233184][T10393] loop4: detected capacity change from 0 to 7
[  157.236491][ T9876]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  157.238992][ T9876] loop4: p1 start 1600481121 is beyond EOD, truncated
[  157.242575][ T9876] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  157.246343][ T9876] loop4: p3 start 172124960 is beyond EOD, truncated
[  157.248996][ T9876] loop4: p4 start 172124960 is beyond EOD, truncated
[  157.251410][ T9876] loop4: p5 start 172124960 is beyond EOD, truncated
[  157.253500][ T9876] loop4: p6 start 1181570570 is beyond EOD, truncated
[  157.255633][ T9876] loop4: p7 start 169894753 is beyond EOD, truncated
[  157.260069][T10393]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  157.262499][T10393] loop4: p1 start 1600481121 is beyond EOD, truncated
[  157.265284][T10393] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  157.268224][T10393] loop4: p3 start 172124960 is beyond EOD, truncated
[  157.270426][T10393] loop4: p4 start 172124960 is beyond EOD, truncated
[  157.272939][T10393] loop4: p5 start 172124960 is beyond EOD, truncated
[  157.275144][T10393] loop4: p6 start 1181570570 is beyond EOD, truncated
[  157.277282][T10393] loop4: p7 start 169894753 is beyond EOD, truncated
[  157.293930][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  157.300917][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  157.305035][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  157.461031][  T835] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  157.570448][T10414] netlink: 'syz.5.1189': attribute type 1 has an invalid length.
[  157.592448][T10414] 8021q: adding VLAN 0 to HW filter on device bond3
[  157.599235][T10414] vlan3: entered allmulticast mode
[  157.601659][T10414] bond3: (slave vlan3): Opening slave failed
[  157.633025][  T835] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  157.636320][  T835] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  157.639463][  T835] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.646093][  T835] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  157.648903][  T835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.651481][  T835] usb 6-1: Product: syz
[  157.652813][  T835] usb 6-1: Manufacturer: syz
[  157.653625][T10419] loop4: detected capacity change from 0 to 7
[  157.654469][  T835] usb 6-1: SerialNumber: syz
[  157.656752][T10419] Dev loop4: unable to read RDB block 7
[  157.659480][T10419]  loop4: AHDI p1 p2
[  157.660338][  T835] hub 6-1:1.0: bad descriptor, ignoring hub
[  157.660778][T10419] loop4: partition table partially beyond EOD, truncated
[  157.663455][  T835] hub 6-1:1.0: probe with driver hub failed with error -5
[  157.664986][T10419] loop4: p1 size 4227858431 extends beyond EOD, truncated
[  157.696422][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  157.862710][  T835] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  157.867853][T10427] netlink: 'syz.5.1193': attribute type 32 has an invalid length.
[  157.870406][T10427] __nla_validate_parse: 2 callbacks suppressed
[  157.870414][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1193'.
[  157.875408][T10427] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  157.888690][T10427] netlink: 'syz.5.1193': attribute type 32 has an invalid length.
[  157.891253][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1193'.
[  157.894246][T10427] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  158.054202][   T40] kauditd_printk_skb: 15 callbacks suppressed
[  158.054213][   T40] audit: type=1400 audit(1753607915.066:2014): avc:  denied  { watch_reads } for  pid=10440 comm="syz.5.1198" path="/310/file0" dev="tmpfs" ino=1652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  158.070970][   T40] audit: type=1400 audit(1753607915.076:2015): avc:  denied  { setopt } for  pid=10440 comm="syz.5.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  158.211782][T10451] netlink: 'syz.5.1201': attribute type 4 has an invalid length.
[  158.316840][   T40] audit: type=1400 audit(1753607915.326:2016): avc:  denied  { write } for  pid=10387 comm="syz.1.1179" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  158.340917][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  158.630995][   T29] usb 10-1: new low-speed USB device number 19 using dummy_hcd
[  158.770911][   T29] usb 10-1: device descriptor read/64, error -71
[  158.771018][T10442] usb 6-1: reset high-speed USB device number 22 using dummy_hcd
[  158.993824][   T40] audit: type=1400 audit(1753607916.006:2017): avc:  denied  { ioctl } for  pid=10464 comm="syz.7.1204" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  159.010946][   T29] usb 10-1: new low-speed USB device number 20 using dummy_hcd
[  159.141243][   T29] usb 10-1: device descriptor read/64, error -71
[  159.178108][T10475] x_tables: duplicate underflow at hook 2
[  159.239580][T10479] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1211'.
[  159.251208][   T29] usb usb10-port1: attempt power cycle
[  159.297737][  T835] usb 9-1: USB disconnect, device number 21
[  159.380908][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  159.591491][   T29] usb 10-1: new low-speed USB device number 21 using dummy_hcd
[  159.614046][   T29] usb 10-1: device descriptor read/8, error -71
[  159.741585][   T24] usb 12-1: new low-speed USB device number 13 using dummy_hcd
[  159.772176][   T40] audit: type=1400 audit(1753607916.786:2018): avc:  denied  { setopt } for  pid=10492 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  159.799573][T10495] comedi comedi3: bad chanlist[0]=0x00000848 chan=2120 range length=4
[  159.850912][   T29] usb 10-1: new low-speed USB device number 22 using dummy_hcd
[  159.871434][   T29] usb 10-1: device descriptor read/8, error -71
[  159.903091][   T24] usb 12-1: config 0 has an invalid interface number: 55 but max is 0
[  159.905591][   T24] usb 12-1: config 0 has no interface number 0
[  159.907603][   T24] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  159.911217][   T24] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  159.914562][   T24] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  159.918125][   T24] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  159.921642][   T24] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  159.924951][   T24] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  159.929187][   T24] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  159.932244][   T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.936935][   T24] usb 12-1: config 0 descriptor??
[  159.939309][T10489] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  159.941736][T10489] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  160.000961][   T29] usb usb10-port1: unable to enumerate USB device
[  160.403061][   T40] audit: type=1400 audit(1753607917.416:2019): avc:  denied  { read } for  pid=10488 comm="syz.7.1215" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  160.410112][   T40] audit: type=1400 audit(1753607917.416:2020): avc:  denied  { open } for  pid=10488 comm="syz.7.1215" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  160.417813][   T40] audit: type=1400 audit(1753607917.416:2021): avc:  denied  { connect } for  pid=10488 comm="syz.7.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  160.430907][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  160.807079][T10507] lo: entered promiscuous mode
[  160.809145][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'.
[  160.812346][T10507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.980906][T10516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=362 sclass=netlink_route_socket pid=10516 comm=syz.4.1224
[  161.460873][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  161.592127][T10529] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  161.601012][T10529] netlink: zone id is out of range
[  161.602839][T10529] netlink: zone id is out of range
[  161.604942][T10529] netlink: zone id is out of range
[  161.607098][T10529] netlink: zone id is out of range
[  161.609198][T10529] netlink: zone id is out of range
[  161.611668][T10529] netlink: zone id is out of range
[  161.613547][T10529] netlink: zone id is out of range
[  161.615122][T10529] netlink: zone id is out of range
[  161.616697][T10529] netlink: zone id is out of range
[  161.642066][   T40] audit: type=1400 audit(1753607918.656:2022): avc:  denied  { map } for  pid=10528 comm="syz.4.1229" path="socket:[37251]" dev="sockfs" ino=37251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  161.760499][T10534] FAULT_INJECTION: forcing a failure.
[  161.760499][T10534] name failslab, interval 1, probability 0, space 0, times 0
[  161.764261][T10534] CPU: 2 UID: 0 PID: 10534 Comm: syz.5.1238 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  161.764275][T10534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  161.764282][T10534] Call Trace:
[  161.764286][T10534]  <TASK>
[  161.764290][T10534]  dump_stack_lvl+0x16c/0x1f0
[  161.764340][T10534]  should_fail_ex+0x512/0x640
[  161.764362][T10534]  ? __kmalloc_noprof+0xbf/0x510
[  161.764380][T10534]  ? do_insnlist_ioctl+0x15f/0x6b0
[  161.764394][T10534]  should_failslab+0xc2/0x120
[  161.764404][T10534]  __kmalloc_noprof+0xd2/0x510
[  161.764423][T10534]  do_insnlist_ioctl+0x15f/0x6b0
[  161.764440][T10534]  comedi_unlocked_ioctl+0x645/0x2f00
[  161.764458][T10534]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  161.764471][T10534]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  161.764488][T10534]  ? do_vfs_ioctl+0x523/0x1a60
[  161.764503][T10534]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  161.764520][T10534]  ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540
[  161.764532][T10534]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[  161.764543][T10534]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  161.764558][T10534]  ? hook_file_ioctl_common+0x145/0x410
[  161.764575][T10534]  ? selinux_file_ioctl+0x180/0x270
[  161.764584][T10534]  ? selinux_file_ioctl+0xb4/0x270
[  161.764611][T10534]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  161.764628][T10534]  __x64_sys_ioctl+0x18e/0x210
[  161.764643][T10534]  do_syscall_64+0xcd/0x4c0
[  161.764654][T10534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.764665][T10534] RIP: 0033:0x7f6cc558e9a9
[  161.764674][T10534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.764696][T10534] RSP: 002b:00007f6cc63ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  161.764706][T10534] RAX: ffffffffffffffda RBX: 00007f6cc57b5fa0 RCX: 00007f6cc558e9a9
[  161.764713][T10534] RDX: 00002000001859c0 RSI: 000000008010640b RDI: 0000000000000003
[  161.764719][T10534] RBP: 00007f6cc63ac090 R08: 0000000000000000 R09: 0000000000000000
[  161.764725][T10534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.764731][T10534] R13: 0000000000000000 R14: 00007f6cc57b5fa0 R15: 00007ffe62d33b38
[  161.764745][T10534]  </TASK>
[  161.851332][T10537] loop4: detected capacity change from 0 to 7
[  161.854556][T10537] Dev loop4: unable to read RDB block 7
[  161.856847][T10537]  loop4: AHDI p1 p2
[  161.858537][T10537] loop4: partition table partially beyond EOD, truncated
[  161.862255][T10537] loop4: p1 size 4227858431 extends beyond EOD, truncated
[  161.885116][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  162.850810][   T40] audit: type=1400 audit(1753607919.856:2023): avc:  denied  { write } for  pid=10559 comm="syz.4.1240" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  163.092533][T10560] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  163.821995][T10577] loop4: detected capacity change from 0 to 7
[  163.825043][ T9876]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  163.827005][ T9876] loop4: p1 start 1600481121 is beyond EOD, truncated
[  163.829111][ T9876] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  163.832541][ T9876] loop4: p3 start 172124960 is beyond EOD, truncated
[  163.835105][ T9876] loop4: p4 start 172124960 is beyond EOD, truncated
[  163.837196][ T9876] loop4: p5 start 172124960 is beyond EOD, truncated
[  163.839237][ T9876] loop4: p6 start 1181570570 is beyond EOD, truncated
[  163.843607][ T9876] loop4: p7 start 169894753 is beyond EOD, truncated
[  163.850556][T10577]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  163.853003][T10577] loop4: p1 start 1600481121 is beyond EOD, truncated
[  163.855149][T10577] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  163.858398][T10577] loop4: p3 start 172124960 is beyond EOD, truncated
[  163.860421][T10577] loop4: p4 start 172124960 is beyond EOD, truncated
[  163.863075][T10577] loop4: p5 start 172124960 is beyond EOD, truncated
[  163.865813][T10577] loop4: p6 start 1181570570 is beyond EOD, truncated
[  163.868091][T10577] loop4: p7 start 169894753 is beyond EOD, truncated
[  163.892729][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  163.903634][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  163.942179][T10442] usb 6-1: device descriptor read/64, error -110
[  164.142232][   T40] audit: type=1400 audit(1753607921.156:2024): avc:  denied  { map } for  pid=10586 comm="syz.5.1250" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  164.181002][T10442] usb 6-1: reset high-speed USB device number 22 using dummy_hcd
[  164.332725][T10442] usb 6-1: device descriptor read/64, error -32
[  164.444304][T10601] loop4: detected capacity change from 0 to 7
[  164.447452][T10601]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  164.449499][T10601] loop4: p1 start 1600481121 is beyond EOD, truncated
[  164.451931][T10601] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  164.454890][T10601] loop4: p3 start 172124960 is beyond EOD, truncated
[  164.456966][T10601] loop4: p4 start 172124960 is beyond EOD, truncated
[  164.458976][T10601] loop4: p5 start 172124960 is beyond EOD, truncated
[  164.461234][T10601] loop4: p6 start 1181570570 is beyond EOD, truncated
[  164.463289][T10601] loop4: p7 start 169894753 is beyond EOD, truncated
[  164.484131][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  164.545287][T10604] delete_channel: no stack
[  164.570956][T10442] usb 6-1: reset high-speed USB device number 22 using dummy_hcd
[  164.591418][T10442] usb 6-1: device descriptor read/8, error -32
[  164.653980][   T40] audit: type=1400 audit(1753607921.666:2025): avc:  denied  { setattr } for  pid=10614 comm="syz.5.1259" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  164.831164][T10442] usb 6-1: reset high-speed USB device number 22 using dummy_hcd
[  164.851723][T10442] usb 6-1: device descriptor read/8, error -32
[  164.887467][T10622] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1260'.
[  164.964146][T10442] raw-gadget.0 gadget.1: failed to queue suspend event
[  164.978221][ T6618] usb 6-1: USB disconnect, device number 22
[  164.993251][T10442] raw-gadget.0 gadget.1: failed to queue disconnect event
[  165.022808][ T6618] usblp0: removed
[  165.157499][   T24] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  165.181696][   T24] usb 12-1: USB disconnect, device number 13
[  165.183906][    C2] ldusb 12-1:0.55: usb_submit_urb failed (-19)
[  165.190614][   T24] ldusb 12-1:0.55: LD USB Device #0 now disconnected
[  165.249180][T10630] loop4: detected capacity change from 0 to 7
[  165.255746][ T9876]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  165.257932][ T9876] loop4: p1 start 1600481121 is beyond EOD, truncated
[  165.259997][ T9876] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  165.263160][ T9876] loop4: p3 start 172124960 is beyond EOD, truncated
[  165.265205][ T9876] loop4: p4 start 172124960 is beyond EOD, truncated
[  165.267253][ T9876] loop4: p5 start 172124960 is beyond EOD, truncated
[  165.269255][ T9876] loop4: p6 start 1181570570 is beyond EOD, truncated
[  165.273893][ T9876] loop4: p7 start 169894753 is beyond EOD, truncated
[  165.281769][T10630]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  165.284327][T10630] loop4: p1 start 1600481121 is beyond EOD, truncated
[  165.287195][T10630] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  165.291890][T10630] loop4: p3 start 172124960 is beyond EOD, truncated
[  165.294498][T10630] loop4: p4 start 172124960 is beyond EOD, truncated
[  165.297367][T10630] loop4: p5 start 172124960 is beyond EOD, truncated
[  165.300142][T10630] loop4: p6 start 1181570570 is beyond EOD, truncated
[  165.303190][T10630] loop4: p7 start 169894753 is beyond EOD, truncated
[  165.331786][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  165.353441][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  165.628287][T10627] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  165.793482][ T5952] Bluetooth: hci1: command 0x0406 tx timeout
[  165.879971][T10664] loop4: detected capacity change from 0 to 7
[  165.883471][T10664]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  165.887397][T10664] loop4: p1 start 1600481121 is beyond EOD, truncated
[  165.890252][T10664] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  165.894759][T10664] loop4: p3 start 172124960 is beyond EOD, truncated
[  165.897518][T10664] loop4: p4 start 172124960 is beyond EOD, truncated
[  165.900322][T10664] loop4: p5 start 172124960 is beyond EOD, truncated
[  165.903448][T10664] loop4: p6 start 1181570570 is beyond EOD, truncated
[  165.906914][T10664] loop4: p7 start 169894753 is beyond EOD, truncated
[  165.924129][T10667] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 4, id = 0
[  165.934529][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  166.029897][   T40] audit: type=1400 audit(1753607923.036:2026): avc:  denied  { map } for  pid=10675 comm="syz.4.1279" path="socket:[38387]" dev="sockfs" ino=38387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  166.059709][T10680] input: syz1 as /devices/virtual/input/input15
[  166.080774][T10680] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16
[  166.163940][T10686] bond0: (slave bridge0): Releasing backup interface
[  166.179858][   T40] audit: type=1400 audit(1753607923.186:2027): avc:  denied  { read } for  pid=10691 comm="syz.5.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  166.185133][T10686] team0: Port device bond0 removed
[  166.190758][T10694] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=32797 sclass=netlink_xfrm_socket pid=10694 comm=syz.4.1283
[  166.191752][T10686] bridge_slave_0: left allmulticast mode
[  166.197683][T10686] bridge_slave_0: left promiscuous mode
[  166.199550][T10686] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.203979][T10686] bridge_slave_1: left allmulticast mode
[  166.205744][T10686] bridge_slave_1: left promiscuous mode
[  166.207951][T10686] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.219766][T10686] bond0: (slave bond_slave_0): Releasing backup interface
[  166.227800][T10686] bond0: (slave bond_slave_1): Releasing backup interface
[  166.245077][T10686] team0: Port device team_slave_0 removed
[  166.254719][T10686] team0: Port device team_slave_1 removed
[  166.257103][T10686] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.259388][T10686] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.264039][T10686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.267119][T10686] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.272338][T10699] loop6: detected capacity change from 0 to 524287999
[  166.369958][   T40] audit: type=1400 audit(1753607923.376:2028): avc:  denied  { mounton } for  pid=10702 comm="syz.7.1287" path="/51/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  166.369994][T10703] fuse: Bad value for 'fd'
[  166.389534][   T40] audit: type=1400 audit(1753607923.396:2029): avc:  denied  { remount } for  pid=10702 comm="syz.7.1287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  166.403391][T10712] tipc: New replicast peer: 255.255.255.255
[  166.406380][T10712] tipc: Enabled bearer <udp:syz2>, priority 10
[  166.411309][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1289'.
[  166.414475][T10712] tipc: Disabling bearer <udp:syz2>
[  166.432085][T10712] Process accounting resumed
[  166.436802][T10714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10714 comm=syz.7.1290
[  166.452852][   T40] audit: type=1400 audit(1753607923.466:2030): avc:  denied  { getattr } for  pid=10715 comm="syz.5.1291" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  166.479290][T10724] netlink: 'syz.5.1293': attribute type 2 has an invalid length.
[  166.482832][T10724] net_ratelimit: 650 callbacks suppressed
[  166.482841][T10724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  166.660957][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  166.954574][   T40] audit: type=1400 audit(1753607923.966:2031): avc:  denied  { ioctl } for  pid=10743 comm="syz.1.1299" path="/329/file0/file0" dev="fuse" ino=18446744073709551612 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  167.138047][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'.
[  167.251083][ T6802] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  167.285571][T10760] loop4: detected capacity change from 0 to 7
[  167.288411][T10760]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  167.290458][T10760] loop4: p1 start 1600481121 is beyond EOD, truncated
[  167.293323][T10760] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  167.297166][T10760] loop4: p3 start 172124960 is beyond EOD, truncated
[  167.299408][T10760] loop4: p4 start 172124960 is beyond EOD, truncated
[  167.301663][T10760] loop4: p5 start 172124960 is beyond EOD, truncated
[  167.303803][T10760] loop4: p6 start 1181570570 is beyond EOD, truncated
[  167.306632][T10760] loop4: p7 start 169894753 is beyond EOD, truncated
[  167.347402][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  167.402344][ T6802] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  167.406003][ T6802] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  167.409217][ T6802] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  167.413591][ T6802] usb 6-1: config 0 interface 0 has no altsetting 0
[  167.416707][ T6802] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  167.419911][ T6802] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  167.423903][ T6802] usb 6-1: config 0 interface 0 has no altsetting 0
[  167.427199][ T6802] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  167.430204][ T6802] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  167.434708][ T6802] usb 6-1: config 0 interface 0 has no altsetting 0
[  167.438161][ T6802] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  167.441731][ T6802] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  167.445201][ T6802] usb 6-1: config 0 interface 0 has no altsetting 0
[  167.448197][ T6802] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  167.452178][ T6802] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  167.455969][ T6802] usb 6-1: config 0 interface 0 has no altsetting 0
[  167.459446][ T6802] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  167.462596][ T6802] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  167.466222][ T6802] usb 6-1: config 0 interface 0 has no altsetting 0
[  167.471190][ T6802] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  167.474370][ T6802] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  167.478089][ T6802] usb 6-1: config 0 interface 0 has no altsetting 0
[  167.482851][T10764] /dev/sr0: Can't open blockdev
[  167.488434][ T6802] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  167.491759][ T6802] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  167.496791][ T6802] usb 6-1: config 0 interface 0 has no altsetting 0
[  167.501748][ T6802] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  167.505324][ T6802] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  167.510902][ T6802] usb 6-1: Product: syz
[  167.512218][ T6802] usb 6-1: Manufacturer: syz
[  167.513651][ T6802] usb 6-1: SerialNumber: syz
[  167.520585][ T6802] usb 6-1: config 0 descriptor??
[  167.528892][ T6802] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  167.664713][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1312'.
[  167.700975][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  167.728722][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1315'.
[  167.775181][T10790] loop4: detected capacity change from 0 to 7
[  167.779200][T10790]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  167.781242][T10790] loop4: p1 start 1600481121 is beyond EOD, truncated
[  167.783503][T10790] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  167.786681][T10790] loop4: p3 start 172124960 is beyond EOD, truncated
[  167.788802][T10790] loop4: p4 start 172124960 is beyond EOD, truncated
[  167.791154][T10790] loop4: p5 start 172124960 is beyond EOD, truncated
[  167.793553][T10790] loop4: p6 start 1181570570 is beyond EOD, truncated
[  167.795621][T10790] loop4: p7 start 169894753 is beyond EOD, truncated
[  167.825748][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  168.066761][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1324'.
[  168.197013][T10835] macvlan2: entered promiscuous mode
[  168.198805][T10835] macvlan2: entered allmulticast mode
[  168.202633][T10835] bond0: (slave macvlan2): Opening slave failed
[  168.236769][   T40] audit: type=1400 audit(1753607925.246:2032): avc:  denied  { append } for  pid=10838 comm="syz.5.1330" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  168.267777][   T40] audit: type=1400 audit(1753607925.276:2033): avc:  denied  { write } for  pid=10840 comm="syz.5.1331" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  168.347791][T10846] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  168.351004][T10848] overlayfs: statfs failed on './file0'
[  168.353829][T10846] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  168.359427][T10846] overlayfs: statfs failed on './file0'
[  168.740889][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  169.780947][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  169.781112][    C3] usb 6-1: yurex_control_callback - control failed: -2
[  169.788204][    T9] usb 6-1: USB disconnect, device number 24
[  169.794068][    T9] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  170.233997][T10856] ALSA: mixer_oss: invalid index 100000
[  170.253533][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1336'.
[  170.265505][T10862] comedi comedi1: fl512: a I/O base address must be specified
[  170.273859][   T40] kauditd_printk_skb: 2 callbacks suppressed
[  170.273870][   T40] audit: type=1400 audit(1753607927.286:2036): avc:  denied  { mount } for  pid=10861 comm="syz.4.1337" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  170.285702][T10866] fuse: Unknown parameter ''
[  170.287298][   T40] audit: type=1400 audit(1753607927.286:2037): avc:  denied  { remount } for  pid=10861 comm="syz.4.1337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  170.300730][   T40] audit: type=1400 audit(1753607927.306:2038): avc:  denied  { unmount } for  pid=6587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  170.313580][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1341'.
[  170.333892][T10866] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached
[  170.359420][   T40] audit: type=1400 audit(1753607927.366:2039): avc:  denied  { ioctl } for  pid=10879 comm="syz.7.1344" path="/dev/ptyr3" dev="devtmpfs" ino=146 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  170.370330][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1344'.
[  170.470776][T10877] block nbd4: shutting down sockets
[  170.584495][T10904] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.605097][   T40] audit: type=1400 audit(1753607927.616:2040): avc:  denied  { write } for  pid=10901 comm="syz.1.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  170.606891][T10906] netlink: 'syz.1.1353': attribute type 13 has an invalid length.
[  170.613359][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1353'.
[  170.682069][T10904] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.745417][T10904] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.812836][T10904] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.830908][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  170.887979][T10904] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.896170][T10904] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.904656][T10904] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.911334][T10904] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.013233][T10927] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  171.016527][T10927] overlayfs: missing 'lowerdir'
[  171.165663][   T40] audit: type=1400 audit(1753607928.176:2041): avc:  denied  { mount } for  pid=10935 comm="syz.1.1365" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  171.168857][T10934] loop4: detected capacity change from 0 to 7
[  171.178437][T10934]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  171.182962][T10934] loop4: p1 start 1600481121 is beyond EOD, truncated
[  171.185820][T10934] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  171.187454][   T40] audit: type=1400 audit(1753607928.196:2042): avc:  denied  { unmount } for  pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  171.196295][T10934] loop4: p3 start 172124960 is beyond EOD, truncated
[  171.198968][T10934] loop4: p4 start 172124960 is beyond EOD, truncated
[  171.202678][T10934] loop4: p5 start 172124960 is beyond EOD, truncated
[  171.204861][T10934] loop4: p6 start 1181570570 is beyond EOD, truncated
[  171.207555][T10934] loop4: p7 start 169894753 is beyond EOD, truncated
[  171.244741][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  171.423074][T10949] nbd0: detected capacity change from 0 to 127
[  171.426986][T10958] cgroup: name respecified
[  171.429042][ T5952] block nbd0: Receive control failed (result -32)
[  171.430957][ T9876] block nbd0: Send control failed (result -32)
[  171.439314][ T9876] block nbd0: Request send failed, requeueing
[  171.453920][ T1204] block nbd0: Dead connection, failed to find a fallback
[  171.457034][ T1204] block nbd0: shutting down sockets
[  171.459498][ T1204] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.461515][ T9876] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.464366][ T1204] Buffer I/O error on dev nbd0, logical block 0, async page read
[  171.466510][ T9876] Buffer I/O error on dev nbd0, logical block 1, async page read
[  171.474476][ T9876] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.477329][ T9876] Buffer I/O error on dev nbd0, logical block 2, async page read
[  171.479834][ T9876] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.484879][ T9876] Buffer I/O error on dev nbd0, logical block 3, async page read
[  171.487382][ T9876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.490999][ T9876] Buffer I/O error on dev nbd0, logical block 0, async page read
[  171.493920][ T9876] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.496876][ T9876] Buffer I/O error on dev nbd0, logical block 1, async page read
[  171.499385][ T9876] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.502590][ T9876] Buffer I/O error on dev nbd0, logical block 2, async page read
[  171.505072][ T9876] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.507285][T10965] loop4: detected capacity change from 0 to 7
[  171.508359][ T9876] Buffer I/O error on dev nbd0, logical block 3, async page read
[  171.512447][T10965]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  171.513261][ T9876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.515214][T10965] loop4: p1 start 1600481121 is beyond EOD, 
[  171.517855][ T9876] Buffer I/O error on dev nbd0, logical block 0, async page read
[  171.517868][T10965] truncated
[  171.519777][ T9876] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.524087][T10965] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  171.528422][ T9876] Buffer I/O error on dev nbd0, logical block 1, async page read
[  171.532669][T10965] loop4: p3 start 172124960 is beyond EOD, truncated
[  171.533837][ T9876] ldm_validate_partition_table(): Disk read failed.
[  171.535420][T10965] loop4: p4 start 172124960 is beyond EOD, truncated
[  171.539105][ T9876] Dev nbd0: unable to read RDB block 0
[  171.540254][T10965] loop4: p5 start 172124960 is beyond EOD, truncated
[  171.545078][T10965] loop4: p6 start 1181570570 is beyond EOD, truncated
[  171.545567][T10971] netlink: 'syz.1.1380': attribute type 11 has an invalid length.
[  171.547819][T10965] loop4: p7 start 169894753 is beyond EOD, truncated
[  171.552388][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'.
[  171.556768][ T9876]  nbd0: unable to read partition table
[  171.569539][ T9876] ldm_validate_partition_table(): Disk read failed.
[  171.578381][T10096] udevd[10096]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  171.579600][ T9876] Dev nbd0: unable to read RDB block 0
[  171.585722][ T9876]  nbd0: unable to read partition table
[  171.595358][T10973] loop2: detected capacity change from 0 to 7
[  171.601259][T10096] Dev loop2: unable to read RDB block 7
[  171.603179][T10096]  loop2: unable to read partition table
[  171.605180][T10096] loop2: partition table beyond EOD, truncated
[  171.612588][T10971] netlink: 'syz.1.1380': attribute type 11 has an invalid length.
[  171.615140][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'.
[  171.621060][T10973] Dev loop2: unable to read RDB block 7
[  171.623597][T10973]  loop2: unable to read partition table
[  171.626046][T10973] loop2: partition table beyond EOD, truncated
[  171.628670][T10973] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  171.639944][T10973] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1381'.
[  171.643705][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1381'.
[  171.647304][T10973] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1381'.
[  171.650866][T10973] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1381'.
[  171.692605][T10975] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  171.736532][   T40] audit: type=1400 audit(1753607928.746:2043): avc:  denied  { write } for  pid=10980 comm="syz.4.1385" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  171.861171][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  171.869683][ T5952] Bluetooth: hci0: unexpected Set CIG Parameters response data
[  171.870541][T10997] loop4: detected capacity change from 0 to 7
[  171.877545][ T9876]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  171.879576][ T9876] loop4: p1 start 1600481121 is beyond EOD, truncated
[  171.883905][ T9876] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  171.887093][ T9876] loop4: p3 start 172124960 is beyond EOD, truncated
[  171.889504][ T9876] loop4: p4 start 172124960 is beyond EOD, truncated
[  171.891943][ T9876] loop4: p5 start 172124960 is beyond EOD, truncated
[  171.894229][ T9876] loop4: p6 start 1181570570 is beyond EOD, truncated
[  171.896464][ T9876] loop4: p7 start 169894753 is beyond EOD, truncated
[  171.902048][T10997]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  171.904201][T10997] loop4: p1 start 1600481121 is beyond EOD, truncated
[  171.906403][T10997] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  171.909743][T10997] loop4: p3 start 172124960 is beyond EOD, truncated
[  171.912469][T10997] loop4: p4 start 172124960 is beyond EOD, truncated
[  171.914616][T10997] loop4: p5 start 172124960 is beyond EOD, truncated
[  171.917109][T10997] loop4: p6 start 1181570570 is beyond EOD, truncated
[  171.919232][T10997] loop4: p7 start 169894753 is beyond EOD, truncated
[  171.943172][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  171.969378][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  172.011233][ T6051] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  172.062943][T11016] input: syz0 as /devices/virtual/input/input17
[  172.079103][ T9876] udevd[9876]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  172.151106][ T6051] usb 10-1: device descriptor read/64, error -71
[  172.411052][ T6051] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  172.542234][ T6051] usb 10-1: device descriptor read/64, error -71
[  172.576488][T11057] loop4: detected capacity change from 0 to 7
[  172.579750][ T9876]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  172.582036][ T9876] loop4: p1 start 1600481121 is beyond EOD, truncated
[  172.584589][ T9876] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  172.591424][ T9876] loop4: p3 start 172124960 is beyond EOD, truncated
[  172.594183][ T9876] loop4: p4 start 172124960 is beyond EOD, truncated
[  172.596703][ T9876] loop4: p5 start 172124960 is beyond EOD, truncated
[  172.599180][ T9876] loop4: p6 start 1181570570 is beyond EOD, truncated
[  172.602028][ T9876] loop4: p7 start 169894753 is beyond EOD, truncated
[  172.607019][T11057]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  172.609179][T11057] loop4: p1 start 1600481121 is beyond EOD, truncated
[  172.611575][T11057] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  172.614905][T11057] loop4: p3 start 172124960 is beyond EOD, truncated
[  172.617073][T11057] loop4: p4 start 172124960 is beyond EOD, truncated
[  172.619275][T11057] loop4: p5 start 172124960 is beyond EOD, truncated
[  172.621510][T11057] loop4: p6 start 1181570570 is beyond EOD, truncated
[  172.623836][T11057] loop4: p7 start 169894753 is beyond EOD, truncated
[  172.651288][ T6051] usb usb10-port1: attempt power cycle
[  172.655214][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  172.671578][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  172.910992][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  173.001096][ T6051] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  173.021702][ T6051] usb 10-1: device descriptor read/8, error -71
[  173.124364][T11083] loop4: detected capacity change from 0 to 7
[  173.128273][ T9876]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  173.130558][ T9876] loop4: p1 start 1600481121 is beyond EOD, truncated
[  173.132717][ T9876] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  173.136043][ T9876] loop4: p3 start 172124960 is beyond EOD, truncated
[  173.138054][ T9876] loop4: p4 start 172124960 is beyond EOD, truncated
[  173.140207][ T9876] loop4: p5 start 172124960 is beyond EOD, truncated
[  173.143210][ T9876] loop4: p6 start 1181570570 is beyond EOD, truncated
[  173.145642][ T9876] loop4: p7 start 169894753 is beyond EOD, truncated
[  173.150321][T11083]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  173.154110][T11083] loop4: p1 start 1600481121 is beyond EOD, truncated
[  173.157102][T11083] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  173.161512][T11083] loop4: p3 start 172124960 is beyond EOD, truncated
[  173.164372][T11083] loop4: p4 start 172124960 is beyond EOD, truncated
[  173.167168][T11083] loop4: p5 start 172124960 is beyond EOD, truncated
[  173.169953][T11083] loop4: p6 start 1181570570 is beyond EOD, truncated
[  173.175919][T11083] loop4: p7 start 169894753 is beyond EOD, truncated
[  173.200777][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  173.228728][   T40] audit: type=1400 audit(1753607930.236:2044): avc:  denied  { write } for  pid=11084 comm="syz.7.1413" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  173.238579][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  173.261035][ T6051] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  173.282030][ T6051] usb 10-1: device descriptor read/8, error -71
[  173.340555][T11094] tipc: Started in network mode
[  173.343540][T11094] tipc: Node identity 66496fdeb897, cluster identity 4711
[  173.345869][T11094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.358948][T11096] tipc: Disabling bearer <eth:syzkaller0>
[  173.391104][ T6051] usb usb10-port1: unable to enumerate USB device
[  173.681141][ T6618] usb 12-1: new high-speed USB device number 14 using dummy_hcd
[  173.709184][T11107] loop4: detected capacity change from 0 to 7
[  173.712995][ T9876]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  173.715791][ T9876] loop4: p1 start 1600481121 is beyond EOD, truncated
[  173.718703][ T9876] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  173.723557][ T9876] loop4: p3 start 172124960 is beyond EOD, truncated
[  173.726386][ T9876] loop4: p4 start 172124960 is beyond EOD, truncated
[  173.729538][ T9876] loop4: p5 start 172124960 is beyond EOD, truncated
[  173.732437][ T9876] loop4: p6 start 1181570570 is beyond EOD, truncated
[  173.735359][ T9876] loop4: p7 start 169894753 is beyond EOD, truncated
[  173.742584][T11107]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  173.744616][T11107] loop4: p1 start 1600481121 is beyond EOD, truncated
[  173.747240][T11107] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  173.750792][T11107] loop4: p3 start 172124960 is beyond EOD, truncated
[  173.753512][T11107] loop4: p4 start 172124960 is beyond EOD, truncated
[  173.755785][T11107] loop4: p5 start 172124960 is beyond EOD, truncated
[  173.758499][T11107] loop4: p6 start 1181570570 is beyond EOD, truncated
[  173.761547][T11107] loop4: p7 start 169894753 is beyond EOD, truncated
[  173.786723][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  173.798665][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  173.853364][ T6618] usb 12-1: Using ep0 maxpacket: 8
[  173.861892][ T6618] usb 12-1: config index 0 descriptor too short (expected 301, got 45)
[  173.865257][ T6618] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  173.868384][ T6618] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  173.872198][ T6618] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  173.875301][ T6618] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  173.879390][ T6618] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  173.879404][ T6618] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.912607][   T40] audit: type=1400 audit(1753607930.926:2045): avc:  denied  { write } for  pid=11112 comm="syz.1.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  173.940900][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  173.943988][ T5952] Bluetooth: hci0: command tx timeout
[  174.087367][ T6618] usb 12-1: usb_control_msg returned -32
[  174.089315][ T6618] usbtmc 12-1:16.0: can't read capabilities
[  174.141692][T11129] sp0: Synchronizing with TNC
[  174.148853][T11129] binder: 11128:11129 ioctl 8008330e 2000000000c0 returned -22
[  174.154209][T11128] [U] è
[  174.273043][T11131] loop4: detected capacity change from 0 to 7
[  174.275842][ T9876]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  174.278301][ T9876] loop4: p1 start 1600481121 is beyond EOD, truncated
[  174.280410][ T9876] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  174.283556][ T9876] loop4: p3 start 172124960 is beyond EOD, truncated
[  174.285614][ T9876] loop4: p4 start 172124960 is beyond EOD, truncated
[  174.287628][ T9876] loop4: p5 start 172124960 is beyond EOD, truncated
[  174.289658][ T9876] loop4: p6 start 1181570570 is beyond EOD, truncated
[  174.292107][ T9876] loop4: p7 start 169894753 is beyond EOD, truncated
[  174.296696][T11131]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7
[  174.299169][T11131] loop4: p1 start 1600481121 is beyond EOD, truncated
[  174.303504][T11131] loop4: p2 size 1836253184 extends beyond EOD, truncated
[  174.308133][T11131] loop4: p3 start 172124960 is beyond EOD, truncated
[  174.310783][T11131] loop4: p4 start 172124960 is beyond EOD, truncated
[  174.313693][T11131] loop4: p5 start 172124960 is beyond EOD, truncated
[  174.316335][T11131] loop4: p6 start 1181570570 is beyond EOD, truncated
[  174.318968][T11131] loop4: p7 start 169894753 is beyond EOD, truncated
[  174.358386][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  174.377851][ T9876] udevd[9876]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  174.442116][T11135] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  174.444739][T11135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.547413][T11138] usbtmc 12-1:16.0: INITIATE_CLEAR returned 0
[  174.601327][T11143] misc userio: Invalid payload size
[  174.748907][T11171] trusted_key: encrypted_key: key trusted:‘8s‰X not found
[  174.749272][ T6618] usb 12-1: USB disconnect, device number 14
[  174.892172][T11177] cdrom: dropping to single frame dma
[  174.982044][T11185] FAULT_INJECTION: forcing a failure.
[  174.982044][T11185] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  174.987707][T11185] CPU: 3 UID: 0 PID: 11185 Comm: syz.5.1441 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  174.987730][T11185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  174.987741][T11185] Call Trace:
[  174.987747][T11185]  <TASK>
[  174.987754][T11185]  dump_stack_lvl+0x16c/0x1f0
[  174.987809][T11185]  should_fail_ex+0x512/0x640
[  174.987847][T11185]  should_fail_alloc_page+0xe7/0x130
[  174.987866][T11185]  prepare_alloc_pages+0x3c2/0x610
[  174.987894][T11185]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  174.987936][T11185]  ? __lock_acquire+0x622/0x1c90
[  174.987961][T11185]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  174.988000][T11185]  ? __lock_acquire+0x622/0x1c90
[  174.988024][T11185]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  174.988049][T11185]  ? policy_nodemask+0xea/0x4e0
[  174.988070][T11185]  alloc_pages_mpol+0x1fb/0x550
[  174.988090][T11185]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  174.988115][T11185]  folio_alloc_mpol_noprof+0x36/0x2f0
[  174.988138][T11185]  vma_alloc_folio_noprof+0xed/0x1e0
[  174.988154][T11185]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  174.988165][T11185]  ? find_held_lock+0x2b/0x80
[  174.988179][T11185]  ? __handle_mm_fault+0x1092/0x5490
[  174.988196][T11185]  __handle_mm_fault+0x2f21/0x5490
[  174.988214][T11185]  ? __pfx___handle_mm_fault+0x10/0x10
[  174.988228][T11185]  ? __pfx_mt_find+0x10/0x10
[  174.988247][T11185]  ? find_vma+0xbf/0x140
[  174.988257][T11185]  ? __pfx_find_vma+0x10/0x10
[  174.988270][T11185]  handle_mm_fault+0x589/0xd10
[  174.988284][T11185]  ? __pkru_allows_pkey+0x51/0xb0
[  174.988302][T11185]  do_user_addr_fault+0x7a6/0x1370
[  174.988319][T11185]  ? rcu_is_watching+0x12/0xc0
[  174.988335][T11185]  exc_page_fault+0x5c/0xb0
[  174.988351][T11185]  asm_exc_page_fault+0x26/0x30
[  174.988363][T11185] RIP: 0010:_copy_to_iter+0x37e/0x16f0
[  174.988374][T11185] Code: fc 4d 85 f6 0f 85 52 ff ff ff e8 3d 71 e2 fc 4c 8b 74 24 18 89 de 4c 89 f7 e8 ae cc 47 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 f6 <f3> a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 22 ff ff ff
[  174.988384][T11185] RSP: 0018:ffffc900036bf968 EFLAGS: 00050246
[  174.988394][T11185] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 0000000000000005
[  174.988400][T11185] RDX: ffffed10061c7401 RSI: ffff888030e3a000 RDI: 0000200000001800
[  174.988407][T11185] RBP: 0000200000001800 R08: 0000000000000000 R09: ffffed10061c7400
[  174.988413][T11185] R10: ffff888030e3a004 R11: 0000000000000001 R12: ffff88806332e820
[  174.988420][T11185] R13: 0000200000001805 R14: ffff888030e3a000 R15: 00007ffffffff000
[  174.988434][T11185]  ? _copy_to_iter+0x372/0x16f0
[  174.988445][T11185]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  174.988457][T11185]  ? kernfs_root+0xf8/0x2a0
[  174.988467][T11185]  ? __pfx__copy_to_iter+0x10/0x10
[  174.988507][T11185]  ? kernfs_seq_stop+0xcd/0x120
[  174.988523][T11185]  ? kernfs_put_active+0x86/0xe0
[  174.988537][T11185]  seq_read_iter+0xcf8/0x12c0
[  174.988558][T11185]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[  174.988572][T11185]  kernfs_fop_read_iter+0x40f/0x5a0
[  174.988586][T11185]  ? rw_verify_area+0xcf/0x680
[  174.988600][T11185]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[  174.988614][T11185]  __io_read+0x354/0x14a0
[  174.988632][T11185]  io_read+0x1e/0x70
[  174.988645][T11185]  __io_issue_sqe+0xe8/0x7c0
[  174.988658][T11185]  io_issue_sqe+0x86/0xe50
[  174.988673][T11185]  io_submit_sqes+0x92d/0x2580
[  174.988695][T11185]  __do_sys_io_uring_enter+0xd6a/0x1630
[  174.988712][T11185]  ? __fget_files+0x20e/0x3c0
[  174.988721][T11185]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  174.988738][T11185]  ? fput+0x70/0xf0
[  174.988749][T11185]  ? ksys_write+0x1ac/0x250
[  174.988763][T11185]  ? __pfx_ksys_write+0x10/0x10
[  174.988783][T11185]  do_syscall_64+0xcd/0x4c0
[  174.988794][T11185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.988804][T11185] RIP: 0033:0x7f6cc558e9a9
[  174.988813][T11185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.988823][T11185] RSP: 002b:00007f6cc63ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  174.988832][T11185] RAX: ffffffffffffffda RBX: 00007f6cc57b5fa0 RCX: 00007f6cc558e9a9
[  174.988839][T11185] RDX: 0000000000000000 RSI: 00000000100847c0 RDI: 0000000000000005
[  174.988845][T11185] RBP: 00007f6cc63ac090 R08: 0000000000000000 R09: 0000000000000000
[  174.988851][T11185] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  174.988857][T11185] R13: 0000000000000000 R14: 00007f6cc57b5fa0 R15: 00007ffe62d33b38
[  174.988870][T11185]  </TASK>
[  174.990909][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  175.904302][T11197] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  175.906840][T11197] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  175.943297][   T63] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  175.946709][   T63] Bluetooth: hci0: Injecting HCI hardware error event
[  175.950053][   T63] Bluetooth: hci0: hardware error 0x00
[  175.965714][   T63] ------------[ cut here ]------------
[  175.968048][   T63] refcount_t: underflow; use-after-free.
[  175.970550][   T63] WARNING: CPU: 3 PID: 63 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210
[  175.974371][   T63] Modules linked in:
[  175.976085][   T63] CPU: 3 UID: 0 PID: 63 Comm: kworker/u33:0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  175.982056][   T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  175.986016][   T63] Workqueue: hci0 hci_error_reset
[  175.987929][   T63] RIP: 0010:refcount_warn_saturate+0x14a/0x210
[  175.990268][   T63] Code: ff 89 de e8 38 f2 e0 fc 84 db 0f 85 66 ff ff ff e8 4b f7 e0 fc c6 05 76 aa b6 0b 01 90 48 c7 c7 a0 1f 15 8c e8 d7 fe 9f fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 28 f7 e0 fc 0f b6 1d 51 aa b6 0b 31
[  175.997388][   T63] RSP: 0018:ffffc90000b0f908 EFLAGS: 00010282
[  175.999667][   T63] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8
[  176.002796][   T63] RDX: ffff888022390000 RSI: ffffffff817af1b5 RDI: 0000000000000001
[  176.005777][   T63] RBP: ffff88802b8eac78 R08: 0000000000000001 R09: 0000000000000000
[  176.008691][   T63] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888048789400
[  176.011765][   T63] R13: ffff88802b8eac78 R14: ffffffff8609d0d0 R15: ffffffff908c3d20
[  176.014698][   T63] FS:  0000000000000000(0000) GS:ffff8880d6a20000(0000) knlGS:0000000000000000
[  176.017988][   T63] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  176.020508][   T63] CR2: 0000200000000208 CR3: 000000005111d000 CR4: 0000000000352ef0
[  176.020922][    C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  176.023638][   T63] DR0: 0000000000004e53 DR1: 0000000000000000 DR2: 0000000000000000
[  176.029139][   T63] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  176.032169][   T63] Call Trace:
[  176.033443][   T63]  <TASK>
[  176.034556][   T63]  klist_put+0x11b/0x1b0
[  176.036156][   T63]  klist_remove+0x13f/0x2e0
[  176.037889][   T63]  ? __pfx_klist_remove+0x10/0x10
[  176.039787][   T63]  ? get_device_parent+0x1ed/0x4e0
[  176.041791][   T63]  device_move+0x12d/0x10d0
[  176.043513][   T63]  hci_conn_del_sysfs+0x81/0x180
[  176.045422][   T63]  hci_conn_del+0x566/0xdc0
[  176.047152][   T63]  hci_conn_hash_flush+0x186/0x260
[  176.049087][   T63]  hci_dev_close_sync+0x602/0x11d0
[  176.051100][   T63]  ? __pfx_bt_err+0x10/0x10
[  176.052854][   T63]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  176.054900][   T63]  hci_dev_do_close+0x2e/0x90
[  176.056647][   T63]  hci_error_reset+0xbf/0x320
[  176.058373][   T63]  process_one_work+0x9cf/0x1b70
[  176.060220][   T63]  ? __pfx_hci_rx_work+0x10/0x10
[  176.062181][   T63]  ? __pfx_process_one_work+0x10/0x10
[  176.064199][   T63]  ? assign_work+0x1a0/0x250
[  176.065956][   T63]  worker_thread+0x6c8/0xf10
[  176.067712][   T63]  ? __pfx_worker_thread+0x10/0x10
[  176.069644][   T63]  kthread+0x3c5/0x780
[  176.071462][   T63]  ? __pfx_kthread+0x10/0x10
[  176.073226][   T63]  ? rcu_is_watching+0x12/0xc0
[  176.075048][   T63]  ? __pfx_kthread+0x10/0x10
[  176.076941][   T63]  ret_from_fork+0x5d4/0x6f0
[  176.078812][   T63]  ? __pfx_kthread+0x10/0x10
[  176.080599][   T63]  ret_from_fork_asm+0x1a/0x30
[  176.082517][   T63]  </TASK>
[  176.083698][   T63] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  176.086398][   T63] CPU: 3 UID: 0 PID: 63 Comm: kworker/u33:0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  176.090150][   T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  176.094162][   T63] Workqueue: hci0 hci_error_reset
[  176.096068][   T63] Call Trace:
[  176.097335][   T63]  <TASK>
[  176.098451][   T63]  dump_stack_lvl+0x3d/0x1f0
[  176.100179][   T63]  panic+0x71c/0x800
[  176.101650][   T63]  ? __pfx_panic+0x10/0x10
[  176.103323][   T63]  ? show_trace_log_lvl+0x29b/0x3e0
[  176.105263][   T63]  ? check_panic_on_warn+0x1f/0xb0
[  176.107185][   T63]  ? refcount_warn_saturate+0x14a/0x210
[  176.109279][   T63]  check_panic_on_warn+0xab/0xb0
[  176.111133][   T63]  __warn+0xf6/0x3c0
[  176.112595][   T63]  ? refcount_warn_saturate+0x14a/0x210
[  176.114616][   T63]  report_bug+0x3c3/0x580
[  176.116241][   T63]  ? refcount_warn_saturate+0x14a/0x210
[  176.118357][   T63]  handle_bug+0x184/0x210
[  176.120042][   T63]  exc_invalid_op+0x17/0x50
[  176.121789][   T63]  asm_exc_invalid_op+0x1a/0x20
[  176.123656][   T63] RIP: 0010:refcount_warn_saturate+0x14a/0x210
[  176.125699][   T63] Code: ff 89 de e8 38 f2 e0 fc 84 db 0f 85 66 ff ff ff e8 4b f7 e0 fc c6 05 76 aa b6 0b 01 90 48 c7 c7 a0 1f 15 8c e8 d7 fe 9f fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 28 f7 e0 fc 0f b6 1d 51 aa b6 0b 31
[  176.131117][   T63] RSP: 0018:ffffc90000b0f908 EFLAGS: 00010282
[  176.132848][   T63] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8
[  176.135232][   T63] RDX: ffff888022390000 RSI: ffffffff817af1b5 RDI: 0000000000000001
[  176.137515][   T63] RBP: ffff88802b8eac78 R08: 0000000000000001 R09: 0000000000000000
[  176.139763][   T63] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888048789400
[  176.142024][   T63] R13: ffff88802b8eac78 R14: ffffffff8609d0d0 R15: ffffffff908c3d20
[  176.143963][   T63]  ? __pfx_klist_children_put+0x10/0x10
[  176.145599][   T63]  ? __warn_printk+0x198/0x350
[  176.146958][   T63]  ? __warn_printk+0x1a5/0x350
[  176.148339][   T63]  ? refcount_warn_saturate+0x149/0x210
[  176.150078][   T63]  klist_put+0x11b/0x1b0
[  176.151318][   T63]  klist_remove+0x13f/0x2e0
[  176.152619][   T63]  ? __pfx_klist_remove+0x10/0x10
[  176.154021][   T63]  ? get_device_parent+0x1ed/0x4e0
[  176.155514][   T63]  device_move+0x12d/0x10d0
[  176.156832][   T63]  hci_conn_del_sysfs+0x81/0x180
[  176.158243][   T63]  hci_conn_del+0x566/0xdc0
[  176.159535][   T63]  hci_conn_hash_flush+0x186/0x260
[  176.161033][   T63]  hci_dev_close_sync+0x602/0x11d0
[  176.162510][   T63]  ? __pfx_bt_err+0x10/0x10
[  176.163806][   T63]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  176.165559][   T63]  hci_dev_do_close+0x2e/0x90
[  176.166911][   T63]  hci_error_reset+0xbf/0x320
[  176.168274][   T63]  process_one_work+0x9cf/0x1b70
[  176.169657][   T63]  ? __pfx_hci_rx_work+0x10/0x10
[  176.171031][   T63]  ? __pfx_process_one_work+0x10/0x10
[  176.172517][   T63]  ? assign_work+0x1a0/0x250
[  176.173838][   T63]  worker_thread+0x6c8/0xf10
[  176.175165][   T63]  ? __pfx_worker_thread+0x10/0x10
[  176.176676][   T63]  kthread+0x3c5/0x780
[  176.177936][   T63]  ? __pfx_kthread+0x10/0x10
[  176.179255][   T63]  ? rcu_is_watching+0x12/0xc0
[  176.180829][   T63]  ? __pfx_kthread+0x10/0x10
[  176.182555][   T63]  ret_from_fork+0x5d4/0x6f0
[  176.184219][   T63]  ? __pfx_kthread+0x10/0x10
[  176.185890][   T63]  ret_from_fork_asm+0x1a/0x30
[  176.187585][   T63]  </TASK>
[  176.189414][   T63] Kernel Offset: disabled
[  176.190917][   T63] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:40:45  Registers:
info registers vcpu 0

CPU#0
RAX=00000000001c321f RBX=0000000000000000 RCX=ffffffff8b868c99 RDX=0000000000000000
RSI=ffffffff8de2ff1e RDI=ffffffff8c1573e0 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08
R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001
R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a94050 R15=0000000000000000
RIP=ffffffff8b8677ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6720000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c385fcf CR3=0000000052511000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000014cbef RBX=0000000000000001 RCX=ffffffff8b868c99 RDX=0000000000000000
RSI=ffffffff8de2ff1e RDI=ffffffff8c1573e0 RBP=ffffed1003bd6488 RSP=ffffc90000177df8
R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001
R12=0000000000000001 R13=ffff88801deb2440 R14=ffffffff90a94050 R15=0000000000000000
RIP=ffffffff8b8677ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6820000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000000044 CR3=000000002466e000 CR4=00352ef0
DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000020001 Opmask01=0000000000000001 Opmask02=0000000002000000 Opmask03=0000000000000000
Opmask04=00000000fdffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed7e56c8b 00007ffed7e56c8b
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed7e57190 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed7e57190 0000003000000018
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303836392e353731 20205b3e343c002d 2d2d2d2d2d2d2d2d 2d2d2d5d20657200
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032363324353731 2020513434360027 2727272727272727 2727275720657200
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65722038323a632e 746e756f63666572 2f62696c20746120 3336203a44495020
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203130203938 2034362038642037 6620666620666620 6666203861203163
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632038342033 6320313020333720 6666206666203066 203130206433203e
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020383020343220 6334206238206334 2038632039382064
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420326320393820 6434206163203938 2038342036642039 3820383420376620
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f63732037383d 6f6e692022736670 6d74766564223d76 6564202272736d22
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000001 RBX=00000000000000f2 RCX=ffffffff8498dc04 RDX=ffffed10041c0bda
RSI=0000000000000008 RDI=ffff888020e05ec8 RBP=dffffc0000000000 RSP=ffffc90006e27be8
R8 =0000000000000000 R9 =ffffed10041c0bd9 R10=ffff888020e05ecf R11=0000000000000001
R12=ffffc90006e27cb0 R13=ffff888020e05eb0 R14=00000000000000f2 R15=0000000000000000
RIP=ffffffff8b897360 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556750a500 ffffffff 00c00000
GS =0000 ffff8880d6920000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000000000 CR3=000000004ac2f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedebdcda0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9410c11d42
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9410c11d4f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9410c11d49
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9410c11d5d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9410c11de3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9410c11ec1
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff855a56e5 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc90000b0f270
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=000000000000003a R14=ffffffff9b0b9e20 R15=ffffffff855a5680
RIP=ffffffff855a570f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6a20000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000000208 CR3=000000005111d000 CR4=00352ef0
DR0=0000000000004e53 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe62d33ec0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cc5611d42
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cc5611d4f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cc5611d49
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cc5611d5d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cc5611de3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cc5611ec1
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000