last executing test programs:

14m5.179697484s ago: executing program 3 (id=540):
r0 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0xf4c8, 0x400, 0x8000002, 0x110})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd)
r2 = dup(r1)
r3 = io_uring_setup(0x28bc, &(0x7f00000002c0)={0x0, 0x9d31, 0x82, 0x3})
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$vnet(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000026000000080003", @ANYRES32=r8, @ANYBLOB="30002f80"], 0x4c}}, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x2000000, 0x0)
read$FUSE(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket(0xa, 0x3, 0x3a)
r10 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r10, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x1, 0x1, @mcast1, 0x809}, {0xa, 0x0, 0x0, @empty}, 0x2, {[0x0, 0x4, 0xfffffffe, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)

14m4.215380967s ago: executing program 3 (id=544):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x6, [{}, {0x6, 0x6}, {}, {0x1}, {}, {0xf747, 0x6}, {}, {0x4}], 0x0, 0x0, 0x8, 0x0, 0x1}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = dup(0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX])
read$midi(0xffffffffffffffff, &(0x7f0000000000)=""/18, 0x12)
socket(0x6, 0x2, 0x1ff)
socket(0x10, 0x803, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x24a641, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)=0x5d)
pselect6(0x40, &(0x7f00000001c0)={0x4}, 0x0, 0x0, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x80}}, 0x4008000)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000380)=ANY=[@ANYBLOB="010000001a"])
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000180)={'ipvlan0\x00', {0x2, 0x4e21, @broadcast}})
write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5)
sendfile(r5, r6, 0x0, 0x8000002b)

14m2.692223447s ago: executing program 3 (id=550):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
clock_gettime(0x7, &(0x7f0000000000))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/\xf4'}, {0x20, ')$-#*::'}, {0x20, '\x00\x00\x00\x00\x00\x00\x00\x00\xed l\xce'}, {0x20, '--'}, {0x20, '/d\xac\xd4k\x92Tc\\ev/nullb0\x00 \xa1g\xa1\x06<^$\xd1k'}, {0x20, '\xf3VD\xa0s\x93\x94O~s\x91\xc65dRX\x04\x00\x00\x00\xf5\xa4G\x91EC\xad\x80\xc9D,\xe3\xb6q\xbe\xe8M\'+\x930\x93\xb0e\xfe\xa8\xa0\x9c0\xb4b\xdb\xa4X\r\xf5\xc5\x8c\xff\x87I\xac\xaa'}, {0x20, '9\xe6]\r\xc0\x9eN7\x13{D\xe6\xa6\xa5\xa0Y4\xe4\xc4\xa6\x80\x1d\a\x00\x00\x00\x00\x00\x00\x00|\xd2\xbbP\xb2,\xee\xa20d\x18R:\xc71c\x8b\xedp\xe9\xac\xfb\xd2^\xe9\xa0H\xb7T7c\xd3\x13\x90\x9d/3Y\xda\xbb\r%W(M\xff\xcd)\xf1\xb7\xca\xfaSv\xc1\xd1\xc9\x92\x92!\x01\x9d\xaa\xf5,\xf5\x92\xb3\xc1\x85\xf1>\x1f\xd0\x97\xd0\xa2\xde\x7f%-\xb0\x182\t7\xd5\xf3o\x96\r\xb2\xf0]h\xb9\x05\xb6\xe72\xd7\xd5\xbf\x13\xafV\xad\x15.\xdbH\xba\x8f`9!O\x0f\x017P\xb8^\x1c\xc9\xaa\xe3\x13\xc3H\x00\x96\x92\x89\r\xca\x90]fmkc\xb1O\x98!\xfa\x82z\x99G\ry(H+a\x91Z\xbd\xd7\x19\xecF\xe0\xd0\xa4\xb5\xa6\x16\x04\x9e\xf5<\x9eE}\xeb\xe5\xff\xa6\xa8F\x12\x9b4v\x05\xfd\x88a\xb1x\xf3L\xbbo\xa9\xc7\x95\xbcV \xca\xa89\x06\xc3\xfc\'5]\x8a0\x884Y\x92\xe51\x1e\x84}CfT\xc38F\xd2\xdekG\x92\xcaI\xbe\xf9\ri\xa2\xc0\x84=t\x1e>\xd9\x1b5P:\t\xfb\xb0\n\xa2\n\t\xda\x9f\xcb\x92;\x80\x05m9\xfa\xa1\xd3\xd5\xc70\xf8\x99cM\xfa\x9d=\xd0\x8c\xe0\xd3\x81#\xd4&\xb5jm5|\n@\xca\"?HM\xeaG\xe1\xafUO=\xbb\x15\xf42\xa7\xd4~W\xec\x91h\n\xd2\xd6(\x91\xff\xfc\x0f\xbf\f\xdfne\x03\xc7\xaf\xf8=\xa7\xc2C'}]}, 0x1f7)
ioctl$BLKRRPART(r3, 0x125f, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_mreq(r5, 0x29, 0x1a, &(0x7f0000000cc0)={@initdev}, &(0x7f0000000d00)=0x14)
writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)

14m1.418405844s ago: executing program 3 (id=554):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
open(&(0x7f00000002c0)='./file0\x00', 0x1c1042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x0, @time, 0x0, {}, 0x0, 0x1, 0x2})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x5, 0x2, 0x8})
ioctl$TCFLSH(r0, 0x40384708, 0x20000000)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x71, 0x2, 0x8, 0x8, 0x800]}, &(0x7f00000001c0)=0x50)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1810c0, 0x0)
fchown(r3, 0xee01, 0xee01)
mkdir(&(0x7f00000004c0)='./bus\x00', 0xd8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r6)
sendmmsg$unix(r4, &(0x7f0000005740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x18, 0x1, 0x2, {0x0, r6}}}], 0x18, 0xc080}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480c1}}], 0x3, 0x40040)

14m1.348475342s ago: executing program 3 (id=555):
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mount$bpf(0x0, &(0x7f0000000d40)='./bus\x00', &(0x7f0000000d80), 0x44, &(0x7f0000001080)=ANY=[@ANYBLOB='mode=000000000000000002,rootcontext=user_u,\x00\x00\x00\x00\x00\x00'])
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setrlimit(0x5, &(0x7f0000000180)={0x1, 0xffff})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x800}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0)
sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x10}}, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)

14m1.008502889s ago: executing program 3 (id=556):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
ioperm(0x0, 0x7, 0x5)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0xb}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x810, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x1)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r3, 0x89f2, &(0x7f0000000040)="946e38c69967db3ced472d11cab3f0e5d1f50295f9093cf04585d36c4fde2f227a519a1d08dd14550104e50c8eb88e2d150e1947a78d26")
ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000140)=""/109, 0x6d}], 0x1, 0x0, 0x1)
ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

14m0.993150785s ago: executing program 32 (id=556):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
ioperm(0x0, 0x7, 0x5)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0xb}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x810, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x1)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r3, 0x89f2, &(0x7f0000000040)="946e38c69967db3ced472d11cab3f0e5d1f50295f9093cf04585d36c4fde2f227a519a1d08dd14550104e50c8eb88e2d150e1947a78d26")
ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000140)=""/109, 0x6d}], 0x1, 0x0, 0x1)
ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7.349531262s ago: executing program 1 (id=2979):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0xe8, 0x7, 0x2, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x10}}, 0x40044)
socket$key(0xf, 0x3, 0x2)
syz_open_procfs(0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x8000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000280)={0x10004, 0x2, 0x1, 0x1000, &(0x7f0000000000/0x1000)=nil})
socket$inet6(0xa, 0x6, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000000101050a000000000000000000000000080008400000000008001540a20000"], 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
mkdir(0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0)
rename(0x0, &(0x7f0000000280)='./file0\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000000a538ae46463208ff0f"], 0x0)

7.341352354s ago: executing program 2 (id=2980):
r0 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
timer_create(0x2, &(0x7f0000000140)={0x0, 0x17, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000540)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000580)={{}, {0x0, 0x989680}}, &(0x7f00000005c0))
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x164f42)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080)

7.205826455s ago: executing program 0 (id=2981):
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = creat(&(0x7f0000000340)='./bus\x00', 0x98)
inotify_rm_watch(r2, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r3 = syz_io_uring_setup(0x3678, &(0x7f0000000080)={0x0, 0x1ffffd, 0x10100, 0x40000000, 0x1d3}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2e0, 0xe80, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6)
io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c)

6.569907879s ago: executing program 1 (id=2982):
r0 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
timer_create(0x2, &(0x7f0000000140)={0x0, 0x17, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000540)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000580)={{}, {0x0, 0x989680}}, &(0x7f00000005c0))
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x164f42)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080)

6.520569896s ago: executing program 0 (id=2984):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
socket$inet_sctp(0x2, 0x1, 0x84)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r4, &(0x7f00000007c0)=""/160, 0xa0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r7=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000480)=0x2)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x2, 0x21, 0x1, 0x200, &(0x7f00000003c0)="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"})
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

6.311000739s ago: executing program 2 (id=2985):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = socket$kcm(0x25, 0x5, 0x0)
close(r1)
r2 = dup(r0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[])
timerfd_create(0x1, 0x80800)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x729083, 0x0)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r6, 0x9)
ioctl$sock_TIOCINQ(r6, 0x541b, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=<r8=>0x0)
ioprio_set$pid(0x2, r8, 0x4007)
pipe(&(0x7f0000000140))
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
pread64(r7, &(0x7f0000000040)=""/172, 0xac, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x6d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010003000000ffe3664c37c46073000010000500"], 0x24, 0x1)
chdir(&(0x7f0000001180)='./bus\x00')
rmdir(&(0x7f00000001c0)='./file0\x00')
mkdir(0x0, 0x112)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c090000000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

5.602438317s ago: executing program 0 (id=2986):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000019140)='net/ip6_tables_matches\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000190c0)=@base={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
r6 = socket(0x10, 0x3, 0x0)
r7 = openat$cdrom(0xffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$CDROMCLOSETRAY(r7, 0x5319)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r8)
r9 = socket(0x10, 0x803, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000019180), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xf0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0)
setresgid(0xee00, r8, 0x0)
setgroups(0x2, &(0x7f0000000080)=[r8, 0xee00])
rmdir(&(0x7f0000019080)='./file0\x00')
read$FUSE(r2, &(0x7f0000001300)={0x2020}, 0x2020)
socket$netlink(0x10, 0x3, 0x8000000004)

5.582057807s ago: executing program 1 (id=2994):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r0, 0x1e571e7c5836dfbf}, 0x14}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x6, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x10, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
kcmp(r2, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
getpeername(r9, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}}, 0x0)

5.021912625s ago: executing program 2 (id=2987):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
times(&(0x7f00000001c0))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="140000002700133300000000000000"], 0x14}], 0x1}, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
close(r4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffdff, 0x0, [{0x4, 0x2}, {0x19, 0x5, 0x0, '\x00', 0x6}, {}, {0x0, 0x0, 0x7f, '\x00', 0xfe}, {0xfc}, {0x0, 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0xb}, {}, {0x4}, {}, {0x0, 0x4c}, {}, {}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x0, 0x10, '\x00', 0x3}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x6}]}})

5.021553385s ago: executing program 4 (id=2988):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x0, [0x2, 0x0, 0x0, 0x7ff, 0x1951, 0x51d5, 0x7ff, 0x60f4, 0x100, 0x7, 0x8, 0x404, 0x1006, 0x8, 0xfffa, 0x0, 0x1, 0x7, 0x4, 0x71, 0x6, 0x1, 0x7, 0x7fff, 0xfffa, 0x5, 0x5, 0x8000, 0x40, 0xfd7d, 0x80, 0x3b, 0x401, 0xe, 0x7, 0xa, 0xfb, 0x5, 0x7, 0x0, 0x1, 0x9, 0x6, 0x7, 0x10, 0x0, 0x2, 0x5], 0x80000000}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000240)=ANY=[], 0x48)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000007, 0x2172, r0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x3a, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

3.059305327s ago: executing program 4 (id=2989):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0x84, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x2000, 0x0, {0x0, @in6={{0xa, 0x4e22, 0xa, @remote, 0x1}}, 0xc0000000, 0x0, 0x2}}, &(0x7f0000000280)=0xb0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x808000, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000b80)={{}, "3c345c371d4ddb64f4ad841607896def7b08a876eb4e461a84e3db443bd1005d85a99fa96ca1f00c3d99fc9e4041d680ffc62e61837ca8e1cc9ec0a3280cf2f0c70956025c0660c65ec9d138966a429da6f2f8f2cb978892909e8bcda11f9c6b9b14d8d0d34b9143833090d97002b25f6b7fbfb365efe7a70e8504524bf7ba9a6d049eb9c6828b2c29bd09c860a928b04c2ebbccf8b3183f0707baa10490b1a9d2ce4f8d2d842e2add8cd9be0e8a226b5cf5f44d4953c7ae8a8829ed1eca4fcd01d8b7204a33df5f31174e3d600ef97579c93dc70f6d44edfa66bea506944dcf0f96760778fe3eb43b3c3b5eea61a8782c9d0545fab3c9f45a71941b11abede60d9e753082e7fd95c021386c3353a0098c890ee800d54fc20c07429a495cf256f58a6cd3ac1cf8576374b7d6b2683dd7df8aa4be3042da8254a6c59d4a570d4bd8d4c292ce3faf744b500206b199a71d6c608601762933c567af5862a004d63dc72dab3d72fd98a3a3b2e4cf12c8967c14ac3bbf150f1430f434ae75acf23f0ccd7801e5c5a83fa75b1fd6ee1bfedc37ee08d61066b362a0bafc6070f5abbd2f10776a7f488d3047816b922260869360de0a81eb565a22dab97933edef4703d9d808d18f0548a250d688a49dd5ed72be1ca6835f57bd81319458497c168cbec78d392ea7ce661f8e62033db448590bf43a821ab18ab5073c39bbbcc54e26098efdb63ea3c7a8c4bdcaa42d9fc82c367196a72dc9bfba16f48ba38f8cad170ec88eef7a11c958fcf3763f70266c8ab410732840f65dffdc4c656d1864a0cb5aa47f1de3541e14b480fc3511529fabf8269883b82b3308f1f363c5e892e9e562e352c898a34f528e2772ebc660eb0ef351466fa3978bb9171d867ef61fa113261b26b355a861061c51c9f0d2efb682723ed3fcda85626e8a0b461cc3fffb0deea441450b3317c779c1698b34f6db3848642108693617d11fc0e50c383442fcf12f75b7db5437e79da50a4a52a4efa1a76f5997bb367fecefb1d6dbdaf0949087e0c2ba5f4ae2e2e9abef9e20a9263e3c0bf64806265be6a626961ca54244f903ddc3890f4835b9dfe4c9137acb4f70926684f20387f68f574f46f4914b6918f9384a4dc878fc9e19470bdae1f09aa78c8892cbb68a7f0d45f75935e576baba59c3a7e92fb8f59bb41889a1cc03c5484386428462dd08e8090ff2905122fd8c9106c40db33b12309eb1149c321ce589eeee6d60b198799e159a2eb5860fbcde65e9dbb2424fb383117a923e55a887deeb06a5ca7186eb3c8870f88f8d1c46c4ce4b13958ea8c411e2d55c48227498a22b5a04c747825c4a8ce071c2eed5fbb1750f91cd46dc33b074c372c9dc4afcd87905dbb077f0644c1891d9b9bfff962eae74e75a7d80dfbe944ad0acc9f6ee71c876e999cac6fe4483a4a84f0e1554e46e4c8260c84eb48b2d2791283f05c8d85ae1e8457566a25793985dfc006912524a6a6e558108d099df2ed7ea916739dcd615decead1f357ecfae9f5456f77c596f1ac2c07285f19e9ca7fb96e92ed0c5af9346c29aba6dfdd7eed446661a2aced7403c80272a86cca5d4b31f30194f34fe28adf1d673f529242954a429e033f4517cdde8727af176918bda9edbf29970eed8121ba99f4f8fd076e8aaa2f673e2836a23891f909aa0bc84a509e22cc83eea66ceccc1c1b1b504469b45db0b59fa857d239d6b96d4eb71ffcc3722dae4ee03bb7f3564d1964bcdfb4268e87e5e22f39fb93159d8f6809ee282aca87682096d8170c1dfdfef69cada6694acc404dd1509bcf5cde18d7806ec2fdd45ea4d9d489055ec96e01fd44b1334c95d8101b908cf98c399ad4d40fd9ee2b0a0f00bbac1a3022a8c00f5bf4bb609b2db26f8c1bd99d03e198f021f2abf4cbffe7d36b9646563c8e7ce6b97c432c4a0d82e28d4a3731d560bd0734ce1a0024e11b58bbc355b3340081eb9dd1cebc8456b9a32486d4875756ad3120f7130033594c487c07ce3489472f188376debc0c01595adf33496c142d49e3b04a85918b4ae673eb769c5ef86662778a3afae15f72ce0b95a45af748207d3f24f6719e2cd61c19548e9f3ded436e435e985a0b45247dfb849d8de6ec2851855a7c55f399811705d4a28996a2bb744147ef096720fc8ee3a50548116fe6aa3f1d13f2723890844672f381ad103772a2c195978ae1eb2419cc3adda5e9cc9ca909497bddc1114595a7abfe38010b4fdf966d2d657a1af371fb92ea9fe7faa6bbf890a1b63d3a8c997c037a7339a0417d485c3d20e5bd55362a406e7c62c179b5999bf565b03a5a10783b68bb893bcae2707e43f9d03b82408d526a3b1b448d8b8990bf4d659ada476085e4b1623959f52e2be11855a2d111df7db3ea4bb19648f24df6982aaeee65b5c877b585cfc419b12f37c9f7ecfd83616f8a54517b1edf41e7763ce45117c15b782f2a14bf5fdfd1678bcbd0cad95b6e7c5c6db504f275bc7745f3f8f45e14fa722eafa1762d4a8261eae0adb8e8553e0b44c2289bb51e4d10396a0543c912d25b6234dd8c01b59f517da6cff95623fedad5cb73d994b159d1925afd1f897309f7f2d10c36d5f155e8fda26c58f727c4e1a7914d9e8aa7d97485482001731408d3a9e6add5f99d5896471b00f98ada7adcaf39c007c9190db72f3af544623f0ab345cd35d0d3770a4acf31fb885a75b0f524f4f51400aee25a5c7ef3ef3c3dfc97928cd3db53e98035015a6b17fa56634a22e8a2fb398be7ca10bd083d863ca825d3f078c8985fb5457a3095bd917bafecfa5d1642c708e7db3f5cab1335a956b722be64e366aca100940a83adf43c482fff8680b1e080c6e477cf252d0355633cb0d5a4e41d75fc8b235205425f2d4843de42dcfb69dd9507f3662b942cd3cbca5a4d289b034f5937f188dcd34f5eb72d42aa655acb26bc10efaa7cec12aab28e08b31ee21cf349a3ecd77f7b0b1e1087eedf095dbc307dbbdc8723736ecbca5e784a4cb1efc296e2dba644bee5281950e519dd481506b14b088fab853ffdcdfc89cf6132ba9abe95320126295e3e79e8693f89c279dcc076189053312df211af3d35f034f3a70c0fbfc689f75137d0d7278a878a974c8a21fb3e94f7b17669ddbd5c98f47881d824eaf66a6d63a07d069236b1f28e21ebaaab3a6affce09a708a87388e12547773bc51f982d63b2fbb0f23df2f27ee04d604df9955df564c23ce161bfdaa70eacb7fccd61f63ee2c32716fc874b2d0fb3e3235e00e3b804e5bff96402a1151b0cccd1fb5319178e33462ebbb8476a5526df64e5e9f4949ac6d6575769c52a9c9e47dcc065564771270eebcdb80167c96a9fa7d5dbdd8005803f37905526a84e92689c8a401bc89cd71f10a0d5f1d02ce2c04ce0ea0dc1c7738b85c2a5ef0db4682ee1c87901b92ec893b80d9905e4046c40f03f20af9c58266cb965665fc3cfc5be2874f95a68e2d3b9307ac47aecdd1b8147efc80d0b5a0b7acdd5508127efd2c13cfc282fc22c5319178d64621d8638f75fe03adcac7e53c2c3d8078579886cbaec96b2b5657f0edc0d9d9799800791d3aac8fed46b505a9e4dc61956dbff154ecab9019fb458bee515846cf9669ed8bd6504faf822e708a7179fc51f9ae2552e13c90b926f57f1e00d1fa6c9a9fcf64c297d1e98c26e4565f483af1ef41b55bad9f893ee30eccac65ce8095a45f1810606f1ed68abaaadd7d490b1c57754549df1ad283afac8496e82048bbf043d4695cec81e6cef8457216c494be9412964e45929b4395c78f4c635eb1d6105b9d557c96eb48bbc6bbcd156c6efb6093db849287faa2bcdbce0054bc2b31290317ba2455bf8582633315c038d3ca44d73bff7378caebd2524aaf0949b2d7597d93adb40e881681d9018dcd888b01efccc2b7b088609890b1666ccf25d9a816249fe855b4fd7e0b7872e4c01fdd29b309c1751aa34b0500c3c378218c550b0935611007d5fb0b3162e367c41ae78e57b3eb3b3a3df726e98affdaaddd9924331769cf0588eb8d9ac0660aa6395f0cc112138bb6bc1aa825bce2f37a3f7761e0f317ba3b47f568942f319ac381cb2b068e2a98dc378f82c4b7ed1c4c46bdbded52b3777ebf290d03fe08842c284a590ca110a289121e135fb22da75ed2480a63e67f8d9ca431e48d4235f5c2d9fb037fda3f1a2282eb4fbfcd36a98af0ec8478f63cd502ef44d3a214dfc17a590e95b61329a182c9567b0e4fd5251fce98f1cd12043fcd8219a608498b030b33a7a3b3a0ff81ca3c9ea3a96e633c0ea719ea413691d1bba3925a5e13183202258bd6e413808270a449a40d38b406ec6c678bf685c2d6f317231cbba17b6f567795678a076275e0ca57f72df79374df9a600966bb43613a3eeac1eecfc72c182e56f1bcbae3179971b442e58bad26e380b3f80d3a2f4e3846a9615e2a65c6cfdbd4e420d1480466cb61f0ad201e82f209506294f31900e82ce612b135415f964897b76b12a595b30f795002831c09552695e5f9dc06d3395afbaa3a44098df098c4374c19412d2c25e214f259ee9ac3426e9f6297eaa08a4159760a6aaab4f3950c43f9be3f1bf0d472f37f27aac7e2c214ffd98b7c868d04af257454c1eceab38c2c0463604ad168c5af6e9896ee62bc09b8fe50f57c18b5845969643c78a97ca3797d1cba2358b5454e352c136cee2e57b4d9fccda4d72f2acb08404d743ebf37ab633185354fbe03f66f055084b9084feee51db4178368e0d9d12f8561fc6b9c50d52872f4e99ad67b73543b9751f2d66d155ca338cb97f0bfba576f6d45c1a96601ceaf4af1844baa2421a3875325e7de1a82e250d961d793529187e39dda97a815802f543de053d09db010ef3c306dcbced4e2ab1e9f9c1310698dc242b53356f70d68bc8f540320661c3783cc67f9a42b64d47c74228e774423f4b11b8f6e742d8d2fc7d71ac41e2ef786f7fab152fa96ad36bedb1ae176f188abd6f02d1c21a0e92d0599ab170fd8a1fc20be32bef01283f1fdee034d53f1a38d58c85dc089923e6b17ff04054427a00dc66895011b70baf2bd139d88e86315ed8dc5fdc40dc7039d506d2dab391ade666d42d6b105be677152b768650b3ffa095cb860ab038ee59f7f53220b8948346b93081655de8666f92e977cf5348e8b873ebddcc8bb8095de13dd143bfdf86e5e5bdaac4d9fecc4a4a36115a0064b9f91f9fee98d71e57df8c21a3159058ae605677efee3fd6359e2699228a241a064dc281e93212986b2ec7b1dd2e1819fbe8f7142f5ae4091275ba00238b5614bcce3075fa14c1a7573683a48d5133c9763a6e6bb6cf10368478d18f4be2c755370561c409268be0c3b42eacd546be4fa0e9101fd851216fda7bc676094555153e12eecb8826a0a0a54b11d23d11740ade03e509b37fc23217ddef659587a0faed155015b75d9fadab0d6e391869108100edcd050dafc9d99448a2b541d531f8ddcca5020cf03b5681fb243bb7d17d4a4d5e96b19c219aa548461b735d87c75ed84ad140fac8fd2fb418a52e3ddcb2a60a2f8756c1591a2b84e3ab54207e0443e46e39c1b1258b0d171f9f361640b100c9c244a014ed7728f9a947c2afa0a2a340f4702d21a4fb926d64ecc0369a31596dbfc2e1af400378529ebb8120d929cd90e2cd533ec5cb00e41714d244de3d983ee53372c467f679c58c3419c206865cd1f4644c152140784979ccbf9478fc9266460934dad5e3793efe760896a687c4d88d1d4b730dc0a2365634cbb64"})
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\xa4y\x9e>\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\x8dr\xd5\xcd\xf2P\r\x0e\"\x03\xa9\xab\xfa#\x01\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\x1a\x80=\xa72)\xd2\x00'/276, &(0x7f0000000000)='/\x00\x9b\x1d\x00\x96', 0x0)
tkill(r2, 0xb)
listen(0xffffffffffffffff, 0x0)
r4 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
pipe(0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @none}, 0x8)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
socket$pptp(0x18, 0x1, 0x2)

3.057299909s ago: executing program 0 (id=2998):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0xb0}}, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
socket$nl_route(0x10, 0x3, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x4004480c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x690a, &(0x7f0000000340), &(0x7f0000000140), 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r4, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="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", 0x4e0}], 0x1}}, {{0x0, 0x0, &(0x7f0000007440)=[{&(0x7f0000001500)="adf5bd04f01eccec95c1c5ca7fba623735df51cf89844d9bad7429917e03ad4b4cc6ae623ad8c0924b316f0e6d195479b75186ca55315366ef5d0b491b1811e932fb16a15906cab57fa112718bef35405bee39435abc9aa27f44c0fb7d15e1d8dd4b7a59deae296177fe9316e72cbc89f7e7e7c83d3ffae7d847a21894888b3de40826e54e7a0fc7b552c388637004dc3ea210d2c6dfc6283f690afa5b85b25939464a350dcdf1c38d97854aba19593fc884caec78d9c0", 0xb7}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="6be87034983df7d6abe2c2e287503e9fe67324bd3e88", 0x16}], 0x1}}], 0x3, 0x400c804)
getdents(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x30}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x0, @empty}}, 0xfffffffc, 0x3, 0x989, 0x0, 0x84, 0x8000}, 0x9c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0445624, &(0x7f0000000140)={0x80f0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128"})
socket(0x28, 0x5, 0x0)

3.056006894s ago: executing program 1 (id=2990):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x4533, 0x4, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180), 0x0)
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r4 = inotify_init()
syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4})
inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000000280), 0x0, 0x2)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$cont(0x18, r8, 0x380, 0x10000000003976)
mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
modify_ldt$write(0x1, &(0x7f00000000c0), 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x80000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {}, 0x2c, {[{@posixacl}, {@cache_none}]}})
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f041})
syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_io_uring_submit(r5, r10, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffc98)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

3.054097985s ago: executing program 2 (id=2991):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x3, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000840)=[@request_death], 0x0, 0x0, 0x0})
eventfd(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000140)={0x0, 0x6})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc)
syz_clone3(0x0, 0x0)
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000100)=0x5, 0x100)
r7 = fcntl$dupfd(r6, 0x0, r1)
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000200)=0x8001100)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd9", 0x17, 0xffffffffffffffff)
openat$thread_pidfd(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="785c20000000ecfffffffffbff2802d1c076d5ff00040000000000"], 0x48)
openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/kernel/uevent_helper', 0x400101, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x2, &(0x7f0000000340))
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0), 0x69)

2.630412541s ago: executing program 4 (id=2992):
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x0)
io_setup(0x30, &(0x7f0000000600)=<r1=>0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x20008058)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x1}])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = fcntl$dupfd(r0, 0x406, r3)
io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f0000000040)="608f7f", 0x3, 0x7f, 0x0, 0xe9e3181f775ffe6c, r7}, &(0x7f00000003c0))
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYRES64], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
r11 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r11)
ioctl$LOOP_CTL_ADD(r9, 0x4c80, r11)
listen(r8, 0x0)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a8210081000a000004a9fc4cad13ebb20004f7c08da260c3515c2cfed779a095ebe7495465ed000036c1fd39da0d4c7f57db4f57ab1aabe4c5081a83604424bff7ba828d2eaddddf60f7ec496c7ded161dcdc0991dd1fd8c00596cf055c52a60d08a8a"], 0x0)

2.192763893s ago: executing program 1 (id=2993):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet(0x2, 0x2, 0xffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000340)="07000000010000", 0x7)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32315241, 0x3831354f, [0x0, 0x80], [0x0, 0x80]}})
sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYBLOB="13b336bb7000ffdbc1251f95000085e44aa0374b693c5acbd488427d987d675d76d394d1000bded79e6933e1a3f5435cb51ee8a2d5125305573547850520b65f8405fdc3e06b4b4e9274f4bcc5538a5146bd1357dccdea905d3877ac752169efdf9fa27e4088e127e74c22d5d581daaa9f7079c97c983b176f67a21d4fcc53f8c17dd77701b3c6cbec03659d5055b3694f4a792160d4c1af99438bb5dc0676554a2ea0f0bbcfcbc9eb5cbb", @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x200c880d}, 0x800)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000880)=ANY=[@ANYRES16=r3, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r8 = io_uring_setup(0x3ead, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x40000})
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
recvmmsg(r2, &(0x7f00000066c0), 0x0, 0x0, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r9, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f00000004c0)=0x80)
syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0), 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan3\x00'})
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x20000010)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

2.175066607s ago: executing program 0 (id=2995):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x3, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000840)=[@request_death], 0x0, 0x0, 0x0})
eventfd(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000140)={0x0, 0x6})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc)
syz_clone3(0x0, 0x0)
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000100)=0x5, 0x100)
r7 = fcntl$dupfd(r6, 0x0, r1)
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000200)=0x8001100)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100), 0x0, 0xffffffffffffffff)
openat$thread_pidfd(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="785c20000000ecfffffffffbff2802d1c076d5ff0004000000000000"], 0x48)
openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/kernel/uevent_helper', 0x400101, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x2, &(0x7f0000000340))
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0), 0x69)

2.145609411s ago: executing program 2 (id=2996):
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = creat(&(0x7f0000000340)='./bus\x00', 0x98)
inotify_rm_watch(r2, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r3 = syz_io_uring_setup(0x3678, &(0x7f0000000080)={0x0, 0x1ffffd, 0x10100, 0x40000000, 0x1d3}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2e0, 0xe80, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)
ioctl$TUNSETLINK(r7, 0x400454cd, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6)
io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c)

1.69257866s ago: executing program 4 (id=2997):
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = creat(&(0x7f0000000340)='./bus\x00', 0x98)
inotify_rm_watch(r2, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r3 = syz_io_uring_setup(0x3678, &(0x7f0000000080)={0x0, 0x1ffffd, 0x10100, 0x40000000, 0x1d3}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2e0, 0xe80, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)
ioctl$TUNSETLINK(r7, 0x400454cd, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6)
io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c)

1.558415725s ago: executing program 2 (id=2999):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x0, [0x2, 0x0, 0x0, 0x7ff, 0x1951, 0x51d5, 0x7ff, 0x60f4, 0x100, 0x7, 0x8, 0x404, 0x1006, 0x8, 0xfffa, 0x0, 0x1, 0x7, 0x4, 0x71, 0x6, 0x1, 0x7, 0x7fff, 0xfffa, 0x5, 0x5, 0x8000, 0x40, 0xfd7d, 0x80, 0x3b, 0x401, 0xe, 0x7, 0xa, 0xfb, 0x5, 0x7, 0x0, 0x1, 0x9, 0x6, 0x7, 0x10, 0x0, 0x2, 0x5], 0x80000000}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000240)=ANY=[], 0x48)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000007, 0x2172, r0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x3a, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

1.230334556s ago: executing program 0 (id=3000):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, &(0x7f0000000080)=<r5=>0x0, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x28, 0x0, @fd_index=0x3})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x25dfdbfb, {0x1c, 0x0, 0x0, r7, 0x0, 0x2, 0x7}, [@NDA_PROBES={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040), 0x4)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r10, 0x1, 0x0, 0x0, {{}, {}, {0x9, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a000000"], 0x24}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x15}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.050275916s ago: executing program 1 (id=3001):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000776605a6c7a684f8e9ed2c63f006ee2949d7b6bc045793ce679f6dd6dbac26d9c378ac83397c69a82c2627b576a59cf0d85297c7ddacf2789998e29a61deee1aba942dc1cbb37faa24dcb4746d22cd2bb0ed6711bc1e92d6b2ecab97aa27c2c125b21b41780d1f9a5ce2db3517fdf22f68dfc5f17769b2d41d205ccba1ad5b38", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x80000, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0xffffffffffffffff]}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r7 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}})
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000380))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r11, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000ffe0005002d"], 0x44}}, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2)
socket$nl_netfilter(0x10, 0x3, 0xc)

938.331821ms ago: executing program 4 (id=3002):
r0 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
timer_create(0x2, &(0x7f0000000140)={0x0, 0x17, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000540)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000580)={{}, {0x0, 0x989680}}, &(0x7f00000005c0))
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x164f42)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080)

0s ago: executing program 4 (id=3003):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x3}, 0xfffffffffffffcc1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
cachestat(r3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setresuid(0xee01, 0x0, 0x0)
keyctl$session_to_parent(0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r4, 0xab00, r5)
r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r4, 0xab00, r4)
ioctl$NBD_SET_FLAGS(r7, 0xab0a, 0x1000001000104)
ioctl$NBD_SET_SOCK(r7, 0xab00, r5)
ioctl$NBD_DO_IT(r4, 0xab03)
ioctl$NBD_CLEAR_SOCK(r7, 0xab04)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2, 0x0, 0x67e}, 0x18)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0xd4181)
r9 = dup(r8)
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x1a5601)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)='2', 0x1}], 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

958][    C2] buffer_io_error: 24 callbacks suppressed
[  904.891966][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  904.895930][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  904.898307][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  904.900810][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  904.903216][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  904.905716][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  904.908095][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  904.911867][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  904.919747][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  904.926194][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  904.928585][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  904.930834][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  904.933134][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  904.935377][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  904.938147][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  904.940229][T19829] ldm_validate_partition_table(): Disk read failed.
[  904.942829][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  904.945283][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  904.948078][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  904.950485][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  904.952924][T19829] Dev loop6: unable to read RDB block 0
[  904.955500][T19829]  loop6: unable to read partition table
[  904.957412][T19829] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  905.410800][T19835] syzkaller0: tun_chr_ioctl cmd 1074025677
[  905.412841][T19835] syzkaller0: linktype set to 0
[  906.353066][T19849] syzkaller0: tun_chr_ioctl cmd 1074025677
[  906.354782][T19849] syzkaller0: linktype set to 0
[  907.555534][T17308] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  907.725712][T17308] usb 9-1: Using ep0 maxpacket: 8
[  907.769367][T17308] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  907.778075][T17308] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  907.858066][T17308] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  907.875066][T17308] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  907.917132][T17308] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  907.927542][T17308] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  907.937826][T17308] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.440364][T19875] syzkaller0: tun_chr_ioctl cmd 1074025677
[  908.449615][T19875] syzkaller0: linktype set to 0
[  908.450809][T17308] usb 9-1: GET_CAPABILITIES returned 0
[  908.452389][T17308] usbtmc 9-1:16.0: can't read capabilities
[  908.589119][T19879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2561'.
[  908.592266][T19879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2561'.
[  908.868598][ T1328] usb 9-1: USB disconnect, device number 4
[  908.974325][T19882] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  908.977224][T19882] overlayfs: maximum fs stacking depth exceeded
[  908.990068][T19882] xt_limit: Overflow, try lower: 0/0
[  909.235726][T15345] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  909.405887][T15345] usb 6-1: Using ep0 maxpacket: 8
[  909.408789][T15345] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  909.410934][T15345] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  909.413764][T15345] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  909.416572][T15345] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  909.419216][T15345] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  909.422690][T15345] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  909.425033][T15345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  909.461620][T19897] syzkaller0: tun_chr_ioctl cmd 1074025677
[  909.463381][T19897] syzkaller0: linktype set to 0
[  909.599344][T19902] syzkaller0: tun_chr_ioctl cmd 1074025677
[  909.601758][T19902] syzkaller0: linktype set to 0
[  909.677890][T19903] loop6: detected capacity change from 0 to 524287999
[  909.685485][T19903] ldm_validate_partition_table(): Disk read failed.
[  909.689345][T19903] Dev loop6: unable to read RDB block 0
[  909.693063][T19903]  loop6: unable to read partition table
[  909.695693][T19903] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  909.742965][T15345] usb 6-1: GET_CAPABILITIES returned 0
[  909.744502][T15345] usbtmc 6-1:16.0: can't read capabilities
[  910.249955][T19906] syzkaller0: tun_chr_ioctl cmd 1074025677
[  910.252232][T19906] syzkaller0: linktype set to 0
[  910.363573][T17308] usb 6-1: USB disconnect, device number 17
[  911.910783][T19939] syzkaller0: tun_chr_ioctl cmd 1074025677
[  911.912486][T19939] syzkaller0: linktype set to 0
[  912.517203][T19946] syzkaller0: tun_chr_ioctl cmd 1074025677
[  912.518910][T19946] syzkaller0: linktype set to 0
[  912.604498][T19949] syzkaller0: tun_chr_ioctl cmd 1074025677
[  912.607177][T19949] syzkaller0: linktype set to 0
[  912.866081][T19952] syzkaller0: tun_chr_ioctl cmd 1074025677
[  912.867766][T19952] syzkaller0: linktype set to 0
[  913.753616][T19973] loop6: detected capacity change from 0 to 524287999
[  913.756030][    C0] blk_print_req_error: 24 callbacks suppressed
[  913.756039][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  913.759847][    C0] buffer_io_error: 24 callbacks suppressed
[  913.759853][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  913.763857][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  913.766158][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  913.768589][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  913.770842][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  913.772991][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  913.775243][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  913.777606][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  913.779928][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  913.782034][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  913.784301][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  913.786789][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  913.789061][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  913.791132][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  913.793508][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  913.795498][T19973] ldm_validate_partition_table(): Disk read failed.
[  913.798642][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  913.801043][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  913.803274][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  913.805716][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  913.808176][T19973] Dev loop6: unable to read RDB block 0
[  913.810927][T19973]  loop6: unable to read partition table
[  913.812702][T19973] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  914.020799][T19977] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  914.022528][T19977] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  914.024625][T19977] vhci_hcd vhci_hcd.0: Device attached
[  914.176575][ T5353] ldm_validate_partition_table(): Disk read failed.
[  914.179397][ T5353] Dev loop6: unable to read RDB block 0
[  914.182170][ T5353]  loop6: unable to read partition table
[  914.329263][T19989] syzkaller0: tun_chr_ioctl cmd 1074025677
[  914.331405][T19989] syzkaller0: linktype set to 0
[  914.626885][  T832] vhci_hcd: vhci_device speed not set
[  914.695607][   T64] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  914.821634][  T832] usb 37-1: new full-speed USB device number 8 using vhci_hcd
[  914.895461][   T64] usb 6-1: Using ep0 maxpacket: 8
[  914.906314][   T64] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  914.908456][   T64] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  914.910881][   T64] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  914.913485][   T64] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  914.916179][   T64] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  914.919332][   T64] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  914.921594][   T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.982583][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'.
[  915.133234][   T64] usb 6-1: GET_CAPABILITIES returned 0
[  915.134717][   T64] usbtmc 6-1:16.0: can't read capabilities
[  915.266565][T19980] vhci_hcd: connection reset by peer
[  915.268253][ T1208] vhci_hcd: stop threads
[  915.269489][ T1208] vhci_hcd: release socket
[  915.270634][ T1208] vhci_hcd: disconnect device
[  915.337507][T17308] usb 6-1: USB disconnect, device number 18
[  915.360800][T20005] syzkaller0: tun_chr_ioctl cmd 1074025677
[  915.362872][T20005] syzkaller0: linktype set to 0
[  915.486738][T20008] syzkaller0: tun_chr_ioctl cmd 1074025677
[  915.488522][T20008] syzkaller0: linktype set to 0
[  915.796076][T20014] syzkaller0: tun_chr_ioctl cmd 1074025677
[  915.797771][T20014] syzkaller0: linktype set to 0
[  916.779577][T20033] syzkaller0: tun_chr_ioctl cmd 1074025677
[  916.781511][T20033] syzkaller0: linktype set to 0
[  916.989761][T20036] syzkaller0: tun_chr_ioctl cmd 1074025677
[  916.991508][T20036] syzkaller0: linktype set to 0
[  917.233633][T20041] syzkaller0: tun_chr_ioctl cmd 1074025677
[  917.235768][T20041] syzkaller0: linktype set to 0
[  918.125543][T20055] syzkaller0: tun_chr_ioctl cmd 1074025677
[  918.127437][T20055] syzkaller0: linktype set to 0
[  918.554695][T20062] syzkaller0: tun_chr_ioctl cmd 1074025677
[  918.556533][T20062] syzkaller0: linktype set to 0
[  918.826237][   T64] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  918.912891][T20065] ������ speed is unknown, defaulting to 1000
[  918.956507][T20065] ������ speed is unknown, defaulting to 1000
[  918.958487][T20065] ������ speed is unknown, defaulting to 1000
[  918.975531][   T64] usb 5-1: Using ep0 maxpacket: 8
[  918.981997][   T64] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  918.984157][   T64] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  918.986948][   T64] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  918.989497][   T64] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  918.995700][   T64] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  918.999031][   T64] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  919.001384][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.226967][   T64] usb 5-1: GET_CAPABILITIES returned 0
[  919.228948][   T64] usbtmc 5-1:16.0: can't read capabilities
[  919.645746][T17308] usb 5-1: USB disconnect, device number 11
[  919.845542][   T64] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  919.995476][   T64] usb 6-1: Using ep0 maxpacket: 8
[  919.998273][   T64] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  920.001029][   T64] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  920.004665][   T64] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  920.008181][   T64] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  920.012438][   T64] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  920.016392][   T64] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  920.018738][   T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.033142][  T832] vhci_hcd: vhci_device speed not set
[  920.226373][   T64] usb 6-1: GET_CAPABILITIES returned 0
[  920.227891][   T64] usbtmc 6-1:16.0: can't read capabilities
[  920.276184][T20087] syzkaller0: tun_chr_ioctl cmd 1074025677
[  920.278265][T20087] syzkaller0: linktype set to 0
[  920.430604][   T64] usb 6-1: USB disconnect, device number 19
[  920.700439][T20092] usb usb4: usbfs: process 20092 (syz.0.2611) did not claim interface 0 before use
[  921.195546][T17308] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  921.351156][T20103] loop6: detected capacity change from 0 to 524287999
[  921.353330][    C2] blk_print_req_error: 26 callbacks suppressed
[  921.353340][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.357786][    C2] buffer_io_error: 25 callbacks suppressed
[  921.357800][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  921.364599][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.367805][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  921.373695][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.376522][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  921.383756][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.387047][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  921.390514][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.393839][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  921.400536][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.403788][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  921.415543][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.418896][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  921.422461][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.425886][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  921.429313][T20103] ldm_validate_partition_table(): Disk read failed.
[  921.432446][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.435776][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  921.445451][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.447783][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  921.451028][T20103] Dev loop6: unable to read RDB block 0
[  921.461369][T20103]  loop6: unable to read partition table
[  921.463430][T20103] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  921.747032][T17308] usb 9-1: Using ep0 maxpacket: 8
[  922.195594][T15345] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  922.199431][T17308] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  922.201694][T17308] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  922.204251][T17308] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  922.208654][T17308] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  922.225596][T17308] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  922.251889][T17308] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  922.255153][T17308] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.395910][T15345] usb 6-1: Using ep0 maxpacket: 8
[  922.398418][T15345] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  922.401625][T15345] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  922.404761][T15345] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  922.408493][T15345] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  922.412115][T15345] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  922.416909][T15345] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  922.420249][T15345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.565461][  T832] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  922.593553][T17308] usb 9-1: GET_CAPABILITIES returned 0
[  922.594997][T17308] usbtmc 9-1:16.0: can't read capabilities
[  922.638112][T15345] usb 6-1: GET_CAPABILITIES returned 0
[  922.639546][T15345] usbtmc 6-1:16.0: can't read capabilities
[  922.680057][T20123] syzkaller0: tun_chr_ioctl cmd 1074025677
[  922.681667][T20123] syzkaller0: linktype set to 0
[  922.745458][  T832] usb 5-1: Using ep0 maxpacket: 8
[  922.748134][  T832] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  922.750207][  T832] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  922.752645][  T832] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  922.755113][  T832] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  922.757796][  T832] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  922.761020][  T832] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  922.763257][  T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.795744][   T35] usb 9-1: USB disconnect, device number 5
[  922.838905][   T64] usb 6-1: USB disconnect, device number 20
[  922.975226][  T832] usb 5-1: GET_CAPABILITIES returned 0
[  922.976667][  T832] usbtmc 5-1:16.0: can't read capabilities
[  923.260531][   T57] usb 5-1: USB disconnect, device number 12
[  923.668403][T20136] syzkaller0: tun_chr_ioctl cmd 1074025677
[  923.670228][T20136] syzkaller0: linktype set to 0
[  923.757452][T20139] syzkaller0: tun_chr_ioctl cmd 1074025677
[  923.759907][T20139] syzkaller0: linktype set to 0
[  923.932007][T20142] syzkaller0: tun_chr_ioctl cmd 1074025677
[  923.934393][T20142] syzkaller0: linktype set to 0
[  924.271281][T20154] loop6: detected capacity change from 0 to 524287999
[  924.297115][T20154] ldm_validate_partition_table(): Disk read failed.
[  924.300668][T20154] Dev loop6: unable to read RDB block 0
[  924.304384][T20154]  loop6: unable to read partition table
[  924.306396][T20154] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  924.630742][T20160] syzkaller0: tun_chr_ioctl cmd 1074025677
[  924.633043][T20160] syzkaller0: linktype set to 0
[  925.086882][T20166] syzkaller0: tun_chr_ioctl cmd 1074025677
[  925.088628][T20166] syzkaller0: linktype set to 0
[  925.801527][  T832] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  925.945484][  T832] usb 6-1: Using ep0 maxpacket: 8
[  925.947921][  T832] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  925.950053][  T832] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  925.952537][  T832] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  925.955050][  T832] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  925.957794][  T832] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  925.961146][  T832] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  925.963442][  T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.185291][T20187] syzkaller0: tun_chr_ioctl cmd 1074025677
[  926.187585][T20187] syzkaller0: linktype set to 0
[  926.636210][  T832] usb 6-1: GET_CAPABILITIES returned 0
[  926.637673][  T832] usbtmc 6-1:16.0: can't read capabilities
[  926.897509][T15345] usb 6-1: USB disconnect, device number 21
[  927.325449][  T832] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  927.475474][  T832] usb 5-1: device descriptor read/64, error -71
[  927.547655][T20195] syzkaller0: tun_chr_ioctl cmd 1074025677
[  927.549392][T20195] syzkaller0: linktype set to 0
[  927.725451][  T832] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  927.865617][  T832] usb 5-1: device descriptor read/64, error -71
[  927.913755][T20198] syzkaller0: tun_chr_ioctl cmd 1074025677
[  927.915547][T20198] syzkaller0: linktype set to 0
[  927.976774][  T832] usb usb5-port1: attempt power cycle
[  928.092728][T20201] syzkaller0: tun_chr_ioctl cmd 1074025677
[  928.094578][T20201] syzkaller0: linktype set to 0
[  928.355470][  T832] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  928.386017][  T832] usb 5-1: device descriptor read/8, error -71
[  928.645537][  T832] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  928.657629][T20209] syzkaller0: tun_chr_ioctl cmd 1074025677
[  928.659386][T20209] syzkaller0: linktype set to 0
[  928.665916][  T832] usb 5-1: device descriptor read/8, error -71
[  928.775815][  T832] usb usb5-port1: unable to enumerate USB device
[  929.024274][T20212] syzkaller0: tun_chr_ioctl cmd 1074025677
[  929.026392][T20212] syzkaller0: linktype set to 0
[  929.939504][T20231] syzkaller0: tun_chr_ioctl cmd 1074025677
[  929.941300][T20231] syzkaller0: linktype set to 0
[  930.269045][T20236] syzkaller0: tun_chr_ioctl cmd 1074025677
[  930.270844][T20236] syzkaller0: linktype set to 0
[  930.442737][T20242] syzkaller0: tun_chr_ioctl cmd 1074025677
[  930.444583][T20242] syzkaller0: linktype set to 0
[  930.856822][ T1412] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  930.861187][ T1412] ieee802154 phy1 wpan1: encryption failed: -22
[  931.347257][T20251] overlayfs: failed to clone lowerpath
[  931.414278][T20260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2649'.
[  931.540074][T20260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2649'.
[  932.019578][T17308] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  932.185562][T17308] usb 6-1: Using ep0 maxpacket: 8
[  932.194222][T20280] syzkaller0: tun_chr_ioctl cmd 1074025677
[  932.194963][T17308] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  932.196542][T20280] syzkaller0: linktype set to 0
[  932.323249][T17308] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  932.325487][   T64] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  932.335460][T17308] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  932.338760][T17308] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  932.341466][T17308] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  932.344822][T17308] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  932.370008][T17308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.475488][   T64] usb 9-1: Using ep0 maxpacket: 8
[  932.497685][   T64] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  932.499792][   T64] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  932.502284][   T64] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  932.504561][   T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.617561][T17308] usb 6-1: GET_CAPABILITIES returned 0
[  932.619008][T17308] usbtmc 6-1:16.0: can't read capabilities
[  932.721575][   T57] usb 9-1: USB disconnect, device number 6
[  932.938304][   T64] usb 6-1: USB disconnect, device number 22
[  933.324163][T20288] syzkaller0: tun_chr_ioctl cmd 1074025677
[  933.325991][T20288] syzkaller0: linktype set to 0
[  933.597852][T20294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2657'.
[  933.675577][T20296] overlayfs: failed to clone lowerpath
[  933.979247][T20306] syzkaller0: tun_chr_ioctl cmd 1074025677
[  933.980973][T20306] syzkaller0: linktype set to 0
[  934.110476][T20310] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  934.117395][T20310] xt_TPROXY: Can be used only with -p tcp or -p udp
[  934.622394][T20322] syzkaller0: tun_chr_ioctl cmd 1074025677
[  934.624995][T20322] syzkaller0: linktype set to 0
[  935.065528][ T1328] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  935.465503][ T1328] usb 5-1: Using ep0 maxpacket: 8
[  935.816829][T17308] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  935.824397][ T1328] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  935.855994][ T1328] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  935.876075][ T1328] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  935.886397][ T1328] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  935.915539][ T1328] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  935.933818][ T1328] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  935.936513][ T1328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.212114][ T1328] usb 5-1: GET_CAPABILITIES returned 0
[  936.215837][T17308] usb 9-1: Using ep0 maxpacket: 8
[  936.215901][ T1328] usbtmc 5-1:16.0: can't read capabilities
[  936.226173][T20345] overlayfs: failed to clone lowerpath
[  936.488016][T17308] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  936.490372][T17308] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  936.493395][T17308] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  936.495588][ T1328] usb 5-1: USB disconnect, device number 17
[  936.725464][T17308] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.952221][T17308] usb 9-1: USB disconnect, device number 7
[  937.248910][T20360] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2669'.
[  937.295810][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'.
[  937.740386][T20374] loop6: detected capacity change from 0 to 524287999
[  937.787461][    C0] blk_print_req_error: 24 callbacks suppressed
[  937.787475][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  937.791477][    C0] buffer_io_error: 24 callbacks suppressed
[  937.791484][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  937.796505][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  937.799017][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  937.801586][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  937.804733][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  937.808103][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  937.811203][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  937.823783][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  937.826793][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  937.831880][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  937.834409][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  937.841206][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  937.844188][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  937.847918][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  937.850297][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  937.852372][T20374] ldm_validate_partition_table(): Disk read failed.
[  937.854734][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  937.857895][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  937.865448][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  937.868125][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  937.870759][T20374] Dev loop6: unable to read RDB block 0
[  937.873523][T20374]  loop6: unable to read partition table
[  937.875435][T20374] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  938.022384][T20382] syzkaller0: tun_chr_ioctl cmd 1074025677
[  938.024157][T20382] syzkaller0: linktype set to 0
[  938.469554][T20391] overlayfs: failed to clone lowerpath
[  938.539397][T20399] syzkaller0: tun_chr_ioctl cmd 1074025677
[  938.543297][T20399] syzkaller0: linktype set to 0
[  938.562207][T20400] syzkaller0: tun_chr_ioctl cmd 1074025677
[  938.567566][T20400] syzkaller0: linktype set to 0
[  939.065763][T17308] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  939.336293][T17308] usb 9-1: Using ep0 maxpacket: 8
[  939.841537][T17308] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  939.844936][T17308] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  939.848540][T17308] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  939.851901][T17308] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  939.856168][T17308] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  939.860901][T17308] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  939.863969][T17308] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.083068][T17308] usb 9-1: GET_CAPABILITIES returned 0
[  940.085249][T17308] usbtmc 9-1:16.0: can't read capabilities
[  940.145870][T15345] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  940.176978][T20426] erofs (device erofs): cannot find valid erofs superblock
[  940.290432][   T57] usb 9-1: USB disconnect, device number 8
[  940.295777][T15345] usb 6-1: Using ep0 maxpacket: 8
[  940.299545][T15345] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  940.301958][T15345] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  940.306569][T15345] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  940.309544][T15345] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  940.312031][T15345] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  940.316248][T15345] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  940.319046][T15345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.551849][T15345] usb 6-1: GET_CAPABILITIES returned 0
[  940.554205][T15345] usbtmc 6-1:16.0: can't read capabilities
[  940.753287][   T57] usb 6-1: USB disconnect, device number 23
[  940.945278][T20432] syzkaller0: tun_chr_ioctl cmd 1074025677
[  940.947833][T20432] syzkaller0: linktype set to 0
[  941.814411][T20457] syzkaller0: tun_chr_ioctl cmd 1074025677
[  941.817262][T20457] syzkaller0: linktype set to 0
[  941.835895][T15345] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  941.875834][ T5994] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  941.985494][T15345] usb 6-1: Using ep0 maxpacket: 8
[  941.989571][T15345] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  941.992737][T15345] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  941.996879][T15345] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  941.999702][T15345] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  942.002909][T15345] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  942.007679][T15345] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  942.010523][T15345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.025732][ T5994] usb 5-1: Using ep0 maxpacket: 8
[  942.028356][ T5994] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  942.030518][ T5994] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  942.033033][ T5994] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  942.036430][ T5994] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  942.039076][ T5994] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  942.042737][ T5994] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  942.045188][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.254183][T20460] syzkaller0: tun_chr_ioctl cmd 1074025677
[  942.256011][T20460] syzkaller0: linktype set to 0
[  942.265182][ T5994] usb 5-1: GET_CAPABILITIES returned 0
[  942.267338][ T5994] usbtmc 5-1:16.0: can't read capabilities
[  942.269342][T15345] usb 6-1: GET_CAPABILITIES returned 0
[  942.270764][T15345] usbtmc 6-1:16.0: can't read capabilities
[  942.462380][   T39] audit: type=1800 audit(1734350542.658:750): pid=20466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2691" name="bus" dev="9p" ino=36574864 res=0 errno=0
[  942.468721][   T35] usb 6-1: USB disconnect, device number 24
[  942.474157][T17308] usb 5-1: USB disconnect, device number 18
[  942.982069][T20475] syzkaller0: tun_chr_ioctl cmd 1074025677
[  942.994392][T20475] syzkaller0: linktype set to 0
[  943.423871][T20486] syzkaller0: tun_chr_ioctl cmd 1074025677
[  943.426128][T20486] syzkaller0: linktype set to 0
[  943.903179][T20498] syzkaller0: tun_chr_ioctl cmd 1074025677
[  943.906000][T20498] syzkaller0: linktype set to 0
[  944.205500][  T832] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  944.366370][  T832] usb 9-1: Using ep0 maxpacket: 8
[  944.370338][  T832] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  944.374755][  T832] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  944.377870][  T832] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  944.383556][  T832] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  944.389405][  T832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.394385][T20506] syzkaller0: tun_chr_ioctl cmd 1074025677
[  944.396501][T20506] syzkaller0: linktype set to 0
[  944.403529][  T832] usbtmc 9-1:16.0: bulk endpoints not found
[  944.581664][T17308] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  944.613449][   T57] usb 9-1: USB disconnect, device number 9
[  944.755544][T17308] usb 6-1: Using ep0 maxpacket: 8
[  944.759341][T17308] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  944.761488][T17308] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  944.764527][T17308] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  944.767313][T17308] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  944.769867][T17308] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  944.773217][T17308] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  944.775985][T17308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.931144][T20511] loop6: detected capacity change from 0 to 524287999
[  944.946167][    C3] blk_print_req_error: 7 callbacks suppressed
[  944.946177][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  944.946194][    C3] buffer_io_error: 7 callbacks suppressed
[  944.946199][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  944.946422][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  944.946437][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  944.946589][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  944.946612][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  944.946730][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  944.946752][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  944.946884][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  944.946898][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  944.948145][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  944.948161][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  944.948307][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  944.948321][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  944.948419][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  944.948433][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  944.948462][T20511] ldm_validate_partition_table(): Disk read failed.
[  944.948664][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  944.948678][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  944.948810][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  944.948824][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  944.949145][T20511] Dev loop6: unable to read RDB block 0
[  944.949894][T20511]  loop6: unable to read partition table
[  944.950170][T20511] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  945.139391][T17308] usb 6-1: GET_CAPABILITIES returned 0
[  945.139412][T17308] usbtmc 6-1:16.0: can't read capabilities
[  945.860404][  T832] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  945.974235][T17308] usb 6-1: USB disconnect, device number 25
[  946.006447][  T832] usb 9-1: Using ep0 maxpacket: 8
[  946.012032][  T832] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  946.014878][  T832] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  946.018275][  T832] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  946.021535][  T832] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  946.024992][  T832] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  946.029466][  T832] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  946.032601][  T832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.244648][  T832] usb 9-1: GET_CAPABILITIES returned 0
[  946.246192][  T832] usbtmc 9-1:16.0: can't read capabilities
[  946.417865][T20531] syzkaller0: tun_chr_ioctl cmd 1074025677
[  946.419610][T20531] syzkaller0: linktype set to 0
[  946.447783][   T57] usb 9-1: USB disconnect, device number 10
[  946.965004][T20541] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  947.252192][T20536] syzkaller0: tun_chr_ioctl cmd 1074025677
[  947.285142][T20536] syzkaller0: linktype set to 0
[  947.504317][T20545] syzkaller0: tun_chr_ioctl cmd 1074025677
[  947.509537][T20545] syzkaller0: linktype set to 0
[  947.739727][T20554] syzkaller0: tun_chr_ioctl cmd 1074025677
[  947.741767][T20554] syzkaller0: linktype set to 0
[  948.065723][T17308] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  948.555550][T17308] usb 6-1: Using ep0 maxpacket: 8
[  948.628932][T17308] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  948.631445][T17308] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  948.634616][T17308] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  948.638527][T17308] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  948.641102][T17308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.753172][T20570] loop6: detected capacity change from 0 to 524287999
[  948.760176][T20570] ldm_validate_partition_table(): Disk read failed.
[  948.763455][T20570] Dev loop6: unable to read RDB block 0
[  948.766743][T20570]  loop6: unable to read partition table
[  948.769035][T20570] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  949.040243][T17308] usbtmc 6-1:16.0: bulk endpoints not found
[  949.353693][ T5994] usb 6-1: USB disconnect, device number 26
[  950.295520][T17308] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  950.579985][T17308] usb 6-1: Using ep0 maxpacket: 8
[  950.584006][T17308] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  950.586524][T17308] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  950.587544][T20589] syzkaller0: tun_chr_ioctl cmd 1074025677
[  950.589036][T17308] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  950.590762][T20589] syzkaller0: linktype set to 0
[  950.593637][T17308] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  950.597357][T17308] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  950.600698][T17308] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  950.603078][T17308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.814179][T17308] usb 6-1: GET_CAPABILITIES returned 0
[  950.815730][T17308] usbtmc 6-1:16.0: can't read capabilities
[  950.819034][T20592] syzkaller0: tun_chr_ioctl cmd 1074025677
[  950.820689][T20592] syzkaller0: linktype set to 0
[  950.878563][T20595] syzkaller0: tun_chr_ioctl cmd 1074025677
[  950.880390][T20595] syzkaller0: linktype set to 0
[  951.014326][ T1328] usb 6-1: USB disconnect, device number 27
[  951.020677][T20598] syzkaller0: tun_chr_ioctl cmd 1074025677
[  951.025823][T20598] syzkaller0: linktype set to 0
[  951.660325][T20615] loop6: detected capacity change from 0 to 524287999
[  951.680285][    C0] blk_print_req_error: 24 callbacks suppressed
[  951.680298][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  951.684560][    C0] buffer_io_error: 24 callbacks suppressed
[  951.684605][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  951.689590][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  951.692041][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  951.695804][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  951.698212][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  951.705904][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  951.708745][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  951.711970][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  951.714447][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  951.726179][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  951.728651][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  951.756067][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  951.759279][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  951.859266][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  951.861691][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  951.863844][T20615] ldm_validate_partition_table(): Disk read failed.
[  951.875409][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  951.877761][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  951.885542][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  951.888056][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  951.890623][T20615] Dev loop6: unable to read RDB block 0
[  951.892969][T20615]  loop6: unable to read partition table
[  951.894516][T20615] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  951.962613][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2725'.
[  952.321631][T17308] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  952.515777][T17308] usb 6-1: Using ep0 maxpacket: 8
[  952.530857][T17308] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  952.539835][T17308] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  952.554978][T17308] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  952.562404][T17308] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  952.569855][T17308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  952.789304][T20642] siw: device registration error -23
[  952.792360][T17308] usbtmc 6-1:16.0: bulk endpoints not found
[  952.998864][T20643] syzkaller0: tun_chr_ioctl cmd 1074025677
[  953.000568][T20643] syzkaller0: linktype set to 0
[  953.008561][   T57] usb 6-1: USB disconnect, device number 28
[  953.394366][T20648] syzkaller0: tun_chr_ioctl cmd 1074025677
[  953.397074][T20648] syzkaller0: linktype set to 0
[  953.602736][T20655] syzkaller0: tun_chr_ioctl cmd 1074025677
[  953.604499][T20655] syzkaller0: linktype set to 0
[  953.990714][T20663] overlayfs: failed to clone lowerpath
[  954.140151][T20672] syzkaller0: tun_chr_ioctl cmd 1074025677
[  954.140337][T20672] syzkaller0: linktype set to 0
[  954.315954][T11992] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  954.528214][T11992] usb 6-1: Using ep0 maxpacket: 8
[  954.535974][T11992] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  954.538077][T11992] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  954.540569][T11992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  954.543068][T11992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  954.545934][T11992] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  954.549257][T11992] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  954.551571][T11992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.815465][ T5994] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  954.840077][T11992] usb 6-1: GET_CAPABILITIES returned 0
[  954.842678][T11992] usbtmc 6-1:16.0: can't read capabilities
[  954.975573][ T5994] usb 5-1: Using ep0 maxpacket: 8
[  954.979733][ T5994] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  954.982670][ T5994] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  954.987089][ T5994] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  954.989920][ T5994] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  954.992646][ T5994] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  954.996090][ T5994] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  954.999268][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.037878][T11992] usb 6-1: USB disconnect, device number 29
[  955.214126][ T5994] usb 5-1: GET_CAPABILITIES returned 0
[  955.216471][ T5994] usbtmc 5-1:16.0: can't read capabilities
[  955.309840][T20683] syzkaller0: tun_chr_ioctl cmd 1074025677
[  955.312020][T20683] syzkaller0: linktype set to 0
[  955.648247][ T1328] usb 5-1: USB disconnect, device number 19
[  955.891660][T20688] syzkaller0: tun_chr_ioctl cmd 1074025677
[  955.894204][T20688] syzkaller0: linktype set to 0
[  956.708480][T20710] overlayfs: failed to clone lowerpath
[  956.709761][T20707] syzkaller0: tun_chr_ioctl cmd 1074025677
[  956.712362][T20707] syzkaller0: linktype set to 0
[  956.783610][T20718] GUP no longer grows the stack in syz.2.2744 (20718): 20004000-2000a000 (20002000)
[  956.788933][T20718] CPU: 1 UID: 0 PID: 20718 Comm: syz.2.2744 Not tainted 6.13.0-rc3-syzkaller #0
[  956.791212][T20718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  956.793926][T20718] Call Trace:
[  956.794776][T20718]  <TASK>
[  956.795556][T20718]  dump_stack_lvl+0x16c/0x1f0
[  956.796771][T20718]  gup_vma_lookup+0x1d2/0x220
[  956.797985][T20718]  __get_user_pages+0x236/0x3b50
[  956.799251][T20718]  ? find_held_lock+0x2d/0x110
[  956.800451][T20718]  ? mtree_load+0x30a/0xa40
[  956.801607][T20718]  ? __pfx_lock_release+0x10/0x10
[  956.802903][T20718]  ? __pfx___get_user_pages+0x10/0x10
[  956.804287][T20718]  get_user_pages_remote+0x25e/0xb30
[  956.805645][T20718]  ? __pfx_get_user_pages_remote+0x10/0x10
[  956.807158][T20718]  __access_remote_vm+0x3a5/0x7b0
[  956.808472][T20718]  ? __pfx___access_remote_vm+0x10/0x10
[  956.809880][T20718]  ? lock_acquire+0x2f/0xb0
[  956.811049][T20718]  ? proc_pid_cmdline_read+0x25b/0x8d0
[  956.812447][T20718]  proc_pid_cmdline_read+0x4f4/0x8d0
[  956.813811][T20718]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  956.815294][T20718]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  956.816842][T20718]  vfs_readv+0x6bf/0x890
[  956.817940][T20718]  ? __pfx___lock_acquire+0x10/0x10
[  956.819293][T20718]  ? __pfx_vfs_readv+0x10/0x10
[  956.820540][T20718]  ? __fget_files+0x1fc/0x3a0
[  956.821764][T20718]  ? __pfx_lock_release+0x10/0x10
[  956.823081][T20718]  ? __fget_files+0x206/0x3a0
[  956.824293][T20718]  ? do_preadv+0x1b1/0x270
[  956.825435][T20718]  do_preadv+0x1b1/0x270
[  956.826528][T20718]  ? __pfx_do_preadv+0x10/0x10
[  956.827798][T20718]  __do_fast_syscall_32+0x73/0x120
[  956.829145][T20718]  do_fast_syscall_32+0x32/0x80
[  956.830430][T20718]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  956.832086][T20718] RIP: 0023:0xf7fa7579
[  956.833177][T20718] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  956.838073][T20718] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 000000000000014d
[  956.840247][T20718] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000040
[  956.842302][T20718] RDX: 0000000000000001 RSI: 0000000000000300 RDI: 0000000000000000
[  956.844357][T20718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  956.846402][T20718] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  956.848462][T20718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  956.850509][T20718]  </TASK>
[  956.957313][T11992] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  957.176300][T11992] usb 9-1: Using ep0 maxpacket: 8
[  957.443459][T20723] loop6: detected capacity change from 0 to 524287999
[  957.446926][    C2] blk_print_req_error: 7 callbacks suppressed
[  957.446936][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  957.451080][    C2] buffer_io_error: 7 callbacks suppressed
[  957.451088][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  957.455709][T11992] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  957.457880][T11992] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  957.458760][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  957.460452][T11992] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  957.460466][T11992] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  957.462857][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  957.465323][T11992] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  957.465346][T11992] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  957.470008][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  957.473109][T11992] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.475543][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  957.478022][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  957.482647][T11992] usbtmc 9-1:16.0: bulk endpoints not found
[  957.485529][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  957.493611][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  957.496836][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  957.499529][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  957.502044][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  957.505213][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  957.507811][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  957.510250][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  957.512982][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  957.515276][T20723] ldm_validate_partition_table(): Disk read failed.
[  957.517734][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  957.520231][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  957.522958][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  957.525672][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  957.529009][T20723] Dev loop6: unable to read RDB block 0
[  957.532034][T20723]  loop6: unable to read partition table
[  957.534056][T20723] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  957.660902][T20729] syzkaller0: tun_chr_ioctl cmd 1074025677
[  957.662734][T20729] syzkaller0: linktype set to 0
[  957.694575][   T57] usb 9-1: USB disconnect, device number 11
[  957.814685][T20733] syzkaller0: tun_chr_ioctl cmd 1074025677
[  957.816703][T20733] syzkaller0: linktype set to 0
[  958.145491][   T35] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  958.295685][   T35] usb 6-1: Using ep0 maxpacket: 8
[  958.297611][   T35] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  958.297645][   T35] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  958.297664][   T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  958.297686][   T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  958.297706][   T35] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  958.297736][   T35] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  958.297757][   T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  958.523497][   T35] usb 6-1: GET_CAPABILITIES returned 0
[  958.524938][   T35] usbtmc 6-1:16.0: can't read capabilities
[  958.635522][   T64] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  958.785551][   T64] usb 5-1: Using ep0 maxpacket: 8
[  958.795264][   T35] usb 6-1: USB disconnect, device number 30
[  958.803037][   T64] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  958.805979][   T64] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  958.809328][   T64] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  958.812995][   T64] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  958.816949][   T64] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  958.821605][   T64] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  958.824802][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  958.926026][T11992] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  959.038069][   T64] usb 5-1: GET_CAPABILITIES returned 0
[  959.039524][   T64] usbtmc 5-1:16.0: can't read capabilities
[  959.175475][T11992] usb 9-1: Using ep0 maxpacket: 8
[  959.178094][T11992] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  959.180236][T11992] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  959.182977][T11992] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  959.185776][T11992] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  959.188551][T11992] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  959.191893][T11992] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  959.194420][T11992] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.247380][   T57] usb 5-1: USB disconnect, device number 20
[  959.268107][T20754] syzkaller0: tun_chr_ioctl cmd 1074025677
[  959.269992][T20754] syzkaller0: linktype set to 0
[  959.411553][T11992] usb 9-1: GET_CAPABILITIES returned 0
[  959.413320][T11992] usbtmc 9-1:16.0: can't read capabilities
[  959.619165][T11992] usb 9-1: USB disconnect, device number 12
[  959.854289][T20770] syzkaller0: tun_chr_ioctl cmd 1074025677
[  959.856242][T20770] syzkaller0: linktype set to 0
[  960.009051][T20777] loop6: detected capacity change from 0 to 524287999
[  960.018551][T20777] ldm_validate_partition_table(): Disk read failed.
[  960.021321][T20777] Dev loop6: unable to read RDB block 0
[  960.023712][T20777]  loop6: unable to read partition table
[  960.025697][T20777] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  961.056344][T20793] syzkaller0: tun_chr_ioctl cmd 1074025677
[  961.058139][T20793] syzkaller0: linktype set to 0
[  961.525539][ T5994] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  961.755486][ T5994] usb 9-1: Using ep0 maxpacket: 8
[  961.762028][ T5994] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  961.764190][ T5994] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  961.772661][ T5994] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  961.780988][ T5994] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  961.783653][ T5994] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  961.790740][ T5994] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  961.793247][ T5994] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  962.000271][ T5994] usb 9-1: GET_CAPABILITIES returned 0
[  962.001734][ T5994] usbtmc 9-1:16.0: can't read capabilities
[  962.241778][T17308] usb 9-1: USB disconnect, device number 13
[  962.575738][T11992] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  962.905678][T11992] usb 6-1: Using ep0 maxpacket: 8
[  962.910520][T11992] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  962.913462][T11992] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  962.926486][T11992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  962.929894][T11992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  962.933259][T11992] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  962.941354][T11992] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  962.945831][T11992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  962.955979][T20822] syzkaller0: tun_chr_ioctl cmd 1074025677
[  962.957603][T20822] syzkaller0: linktype set to 0
[  962.982561][T20825] syzkaller0: tun_chr_ioctl cmd 1074025677
[  962.984358][T20825] syzkaller0: linktype set to 0
[  963.140725][T20828] syzkaller0: tun_chr_ioctl cmd 1074025677
[  963.142519][T20828] syzkaller0: linktype set to 0
[  963.193122][T11992] usb 6-1: GET_CAPABILITIES returned 0
[  963.194840][T11992] usbtmc 6-1:16.0: can't read capabilities
[  963.423559][   T57] usb 6-1: USB disconnect, device number 31
[  963.535824][T20835] loop6: detected capacity change from 0 to 524287999
[  963.538693][    C0] blk_print_req_error: 24 callbacks suppressed
[  963.538703][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  963.543218][    C0] buffer_io_error: 24 callbacks suppressed
[  963.543226][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  963.547056][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  963.550122][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  963.553102][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  963.556146][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  963.559285][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  963.562204][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  963.565042][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  963.568127][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  963.571015][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  963.573745][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  963.576466][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  963.579445][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  963.582383][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  963.585587][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  963.588419][T20835] ldm_validate_partition_table(): Disk read failed.
[  963.590675][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  963.593146][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  963.596006][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  963.598389][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  963.601032][T20835] Dev loop6: unable to read RDB block 0
[  963.604217][T20835]  loop6: unable to read partition table
[  963.606124][T20835] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  964.305226][ T5353] ldm_validate_partition_table(): Disk read failed.
[  964.331350][ T5353] Dev loop6: unable to read RDB block 0
[  964.333203][ T5353]  loop6: unable to read partition table
[  964.364680][T20857] syzkaller0: tun_chr_ioctl cmd 1074025677
[  964.366774][T20857] syzkaller0: linktype set to 0
[  964.533852][T20859] syzkaller0: tun_chr_ioctl cmd 1074025677
[  964.537363][T20859] syzkaller0: linktype set to 0
[  964.885577][T11992] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  965.121036][T11992] usb 9-1: Using ep0 maxpacket: 8
[  965.144521][T11992] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  965.147460][T11992] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  965.150236][T11992] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  965.152619][T11992] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  965.154982][T11992] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  965.158410][T11992] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  965.160652][T11992] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.180573][T20875] syzkaller0: tun_chr_ioctl cmd 1074025677
[  965.183439][T20875] syzkaller0: linktype set to 0
[  965.288958][T20878] syzkaller0: tun_chr_ioctl cmd 1074025677
[  965.290629][T20878] syzkaller0: linktype set to 0
[  965.375277][T11992] usb 9-1: GET_CAPABILITIES returned 0
[  965.376718][T11992] usbtmc 9-1:16.0: can't read capabilities
[  965.587831][   T57] usb 9-1: USB disconnect, device number 14
[  965.615474][T20884] syzkaller0: tun_chr_ioctl cmd 1074025677
[  965.617023][T20884] syzkaller0: linktype set to 0
[  965.655562][T20883] syzkaller0: tun_chr_ioctl cmd 1074025677
[  965.657521][T20883] syzkaller0: linktype set to 0
[  966.615582][   T57] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  966.765443][   T57] usb 5-1: Using ep0 maxpacket: 8
[  966.768108][   T57] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  966.770082][   T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  966.772451][   T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  966.774952][   T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  966.777442][   T57] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  966.780706][   T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  966.782937][   T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.999061][   T57] usb 5-1: GET_CAPABILITIES returned 0
[  967.000464][   T57] usbtmc 5-1:16.0: can't read capabilities
[  967.201302][ T1328] usb 5-1: USB disconnect, device number 21
[  967.842794][T20902] syzkaller0: tun_chr_ioctl cmd 1074025677
[  967.844601][T20902] syzkaller0: linktype set to 0
[  968.757040][T20916] syzkaller0: tun_chr_ioctl cmd 1074025677
[  968.759202][T20916] syzkaller0: linktype set to 0
[  968.855579][T11992] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  969.005456][T11992] usb 6-1: Using ep0 maxpacket: 8
[  969.007936][T11992] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  969.009998][T11992] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  969.012336][T11992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  969.014796][T11992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  969.017901][T11992] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  969.021060][T11992] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  969.023374][T11992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.142181][T20922] syzkaller0: tun_chr_ioctl cmd 1074025677
[  969.144517][T20922] syzkaller0: linktype set to 0
[  969.321509][T11992] usb 6-1: GET_CAPABILITIES returned 0
[  969.323825][T11992] usbtmc 6-1:16.0: can't read capabilities
[  969.466838][T20929] syzkaller0: tun_chr_ioctl cmd 1074025677
[  969.468442][T20929] syzkaller0: linktype set to 0
[  969.530063][ T1328] usb 6-1: USB disconnect, device number 32
[  970.258965][T20939] loop6: detected capacity change from 0 to 524287999
[  970.264077][    C1] blk_print_req_error: 26 callbacks suppressed
[  970.264087][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  970.268095][    C1] buffer_io_error: 25 callbacks suppressed
[  970.268103][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  970.272260][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  970.274721][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  970.277249][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  970.279626][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  970.281883][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  970.284273][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  970.286644][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  970.289000][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  970.291984][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  970.294422][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  970.298075][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  970.300442][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  970.302655][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  970.304910][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  970.306917][T20939] ldm_validate_partition_table(): Disk read failed.
[  970.312297][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  970.314894][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  970.317687][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  970.320086][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  970.322648][T20939] Dev loop6: unable to read RDB block 0
[  970.325138][T20939]  loop6: unable to read partition table
[  970.327059][T20939] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  970.459741][T20947] syz.1.2794: attempt to access beyond end of device
[  970.459741][T20947] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0
[  970.464332][T20947] FAT-fs (nbd1): unable to read boot sector
[  971.561886][T20963] loop6: detected capacity change from 0 to 524287999
[  971.566094][T20963] ldm_validate_partition_table(): Disk read failed.
[  971.568799][T20963] Dev loop6: unable to read RDB block 0
[  971.571452][T20963]  loop6: unable to read partition table
[  971.573315][T20963] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  972.025584][   T35] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  972.176462][   T35] usb 5-1: Using ep0 maxpacket: 8
[  972.182365][   T35] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  972.185219][   T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  972.189170][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  972.192229][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  972.196145][   T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  972.200791][   T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  972.204074][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.365224][T20973] syzkaller0: tun_chr_ioctl cmd 1074025677
[  972.365841][T20973] syzkaller0: linktype set to 0
[  972.412630][   T35] usb 5-1: GET_CAPABILITIES returned 0
[  972.412649][   T35] usbtmc 5-1:16.0: can't read capabilities
[  972.628150][ T1328] usb 5-1: USB disconnect, device number 22
[  972.657860][T20979] syzkaller0: tun_chr_ioctl cmd 1074025677
[  972.659645][T20979] syzkaller0: linktype set to 0
[  973.458102][T20986] syzkaller0: tun_chr_ioctl cmd 1074025677
[  973.460244][T20986] syzkaller0: linktype set to 0
[  974.113666][T20998] loop6: detected capacity change from 0 to 524287999
[  974.119484][T20998] ldm_validate_partition_table(): Disk read failed.
[  974.123443][T20998] Dev loop6: unable to read RDB block 0
[  974.129077][T20998]  loop6: unable to read partition table
[  974.131362][T20998] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  974.185808][T11992] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  974.335453][T11992] usb 5-1: Using ep0 maxpacket: 8
[  974.340108][T11992] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  974.342316][T11992] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  974.344914][T11992] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  974.347574][T11992] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  974.350629][T11992] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  974.354132][T11992] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  974.359787][T11992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.653717][T11992] usb 5-1: GET_CAPABILITIES returned 0
[  974.655577][T11992] usbtmc 5-1:16.0: can't read capabilities
[  974.995735][T21017] loop6: detected capacity change from 0 to 524287999
[  974.999460][T21017] ldm_validate_partition_table(): Disk read failed.
[  975.001785][T21017] Dev loop6: unable to read RDB block 0
[  975.004151][T21017]  loop6: unable to read partition table
[  975.005979][T21017] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  975.017280][T15345] usb 5-1: USB disconnect, device number 23
[  975.367783][T21022] syzkaller0: tun_chr_ioctl cmd 1074025677
[  975.369859][T21022] syzkaller0: linktype set to 0
[  975.780251][T21034] syzkaller0: tun_chr_ioctl cmd 1074025677
[  975.782600][T21034] syzkaller0: linktype set to 0
[  976.304558][T21039] syzkaller0: tun_chr_ioctl cmd 1074025677
[  976.312346][T21039] syzkaller0: linktype set to 0
[  976.569318][T21041] ������ speed is unknown, defaulting to 1000
[  976.603036][T21041] ������ speed is unknown, defaulting to 1000
[  976.605053][T21041] ������ speed is unknown, defaulting to 1000
[  977.054537][T21055] loop6: detected capacity change from 0 to 524287999
[  977.077755][    C3] blk_print_req_error: 58 callbacks suppressed
[  977.077775][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  977.083377][    C3] buffer_io_error: 58 callbacks suppressed
[  977.083391][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  977.087770][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  977.090159][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  977.092593][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  977.094971][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  977.097534][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  977.100061][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  977.102449][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  977.104940][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  977.108976][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  977.112415][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  977.115414][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  977.118581][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  977.122693][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  977.125328][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  977.127467][T21055] ldm_validate_partition_table(): Disk read failed.
[  977.130056][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  977.133144][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  977.135986][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  977.139247][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  977.146140][T21055] Dev loop6: unable to read RDB block 0
[  977.148792][T21055]  loop6: unable to read partition table
[  977.150725][T21055] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  977.592162][T21069] loop6: detected capacity change from 0 to 524287999
[  977.596813][T21069] ldm_validate_partition_table(): Disk read failed.
[  977.599011][T21069] Dev loop6: unable to read RDB block 0
[  977.601023][T21069]  loop6: unable to read partition table
[  977.602599][T21069] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  978.073823][T21085] syzkaller0: tun_chr_ioctl cmd 1074025677
[  978.077438][T21085] syzkaller0: linktype set to 0
[  978.432366][T21090] syzkaller0: tun_chr_ioctl cmd 1074025677
[  978.434491][T21090] syzkaller0: linktype set to 0
[  978.825547][T11992] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  978.877438][T21097] syzkaller0: tun_chr_ioctl cmd 1074025677
[  978.882946][T21097] syzkaller0: linktype set to 0
[  978.976412][T11992] usb 9-1: Using ep0 maxpacket: 8
[  978.979020][T11992] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  978.981211][T11992] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  978.983750][T11992] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  978.986444][T11992] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  978.988987][T11992] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  978.998798][T11992] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  979.001388][T11992] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.220702][T11992] usb 9-1: GET_CAPABILITIES returned 0
[  979.222196][T11992] usbtmc 9-1:16.0: can't read capabilities
[  979.421835][T11992] usb 9-1: USB disconnect, device number 15
[  979.620250][T21103] syzkaller0: tun_chr_ioctl cmd 1074025677
[  979.623040][T21103] syzkaller0: linktype set to 0
[  980.350322][T21114] loop6: detected capacity change from 0 to 524287999
[  980.353105][T21114] ldm_validate_partition_table(): Disk read failed.
[  980.355216][T21114] Dev loop6: unable to read RDB block 0
[  980.357534][T21114]  loop6: unable to read partition table
[  980.359222][T21114] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  981.214623][T21133] loop6: detected capacity change from 0 to 524287999
[  981.465767][T11992] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  981.466017][T21133] ldm_validate_partition_table(): Disk read failed.
[  981.491679][T21133] Dev loop6: unable to read RDB block 0
[  981.493657][T21133]  loop6: unable to read partition table
[  981.495199][T21133] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  981.675751][T11992] usb 6-1: Using ep0 maxpacket: 8
[  981.684655][T11992] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  981.687146][T11992] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  981.689968][T11992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  981.692743][T11992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  981.696753][T11992] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  981.703061][T11992] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  981.707242][T11992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  981.942374][T11992] usb 6-1: GET_CAPABILITIES returned 0
[  981.943857][T11992] usbtmc 6-1:16.0: can't read capabilities
[  981.961264][T21142] syzkaller0: tun_chr_ioctl cmd 1074025677
[  981.963062][T21142] syzkaller0: linktype set to 0
[  982.143894][T11992] usb 6-1: USB disconnect, device number 33
[  982.895837][ T5994] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  983.075465][ T5994] usb 9-1: Using ep0 maxpacket: 8
[  983.080508][ T5994] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  983.082751][ T5994] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  983.141142][ T5994] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  983.143701][ T5994] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  983.146496][ T5994] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  983.151488][ T5994] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  983.153884][ T5994] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.377612][ T5994] usb 9-1: GET_CAPABILITIES returned 0
[  983.380274][ T5994] usbtmc 9-1:16.0: can't read capabilities
[  983.570054][T21173] ������ speed is unknown, defaulting to 1000
[  983.657685][T11992] usb 9-1: USB disconnect, device number 16
[  983.729639][T21173] ������ speed is unknown, defaulting to 1000
[  983.732352][T21173] ������ speed is unknown, defaulting to 1000
[  985.335829][ T1328] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  985.545729][   T64] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  985.575476][ T1328] usb 9-1: Using ep0 maxpacket: 8
[  985.584145][ T1328] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  985.619689][ T1328] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  985.622292][ T1328] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  985.624848][ T1328] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  985.628088][ T1328] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  985.632719][ T1328] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  985.635158][ T1328] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.725521][   T64] usb 5-1: Using ep0 maxpacket: 8
[  985.849414][T21210] syzkaller0: tun_chr_ioctl cmd 1074025677
[  985.851229][T21210] syzkaller0: linktype set to 0
[  985.947858][   T64] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  985.950190][   T64] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  985.953008][   T64] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  985.956187][   T64] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  985.959012][   T64] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  985.962566][   T64] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  985.965150][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.238556][   T64] usb 5-1: GET_CAPABILITIES returned 0
[  986.240511][   T64] usbtmc 5-1:16.0: can't read capabilities
[  986.269364][ T1328] usb 9-1: GET_CAPABILITIES returned 0
[  986.270951][ T1328] usbtmc 9-1:16.0: can't read capabilities
[  986.325984][T21213] netlink: 'syz.1.2849': attribute type 1 has an invalid length.
[  986.328962][T21213] netlink: 'syz.1.2849': attribute type 3 has an invalid length.
[  986.331752][T21213] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2849'.
[  986.458571][    T8] usb 5-1: USB disconnect, device number 24
[  986.770071][T11992] usb 9-1: USB disconnect, device number 17
[  987.623331][T21225] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  987.625064][T21225] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  987.627241][T21225] vhci_hcd vhci_hcd.0: Device attached
[  987.747304][T21234] syzkaller0: entered promiscuous mode
[  987.748842][T21234] syzkaller0: entered allmulticast mode
[  987.918562][ T1328] vhci_hcd: vhci_device speed not set
[  987.989567][ T1328] usb 39-1: new full-speed USB device number 6 using vhci_hcd
[  988.255505][T15345] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  988.405536][T15345] usb 5-1: Using ep0 maxpacket: 8
[  988.408809][T15345] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  988.411691][T15345] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  988.414959][T15345] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  988.418765][T15345] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  988.422156][T15345] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  988.426636][T15345] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  988.429633][T15345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.638179][T15345] usb 5-1: GET_CAPABILITIES returned 0
[  988.640090][T15345] usbtmc 5-1:16.0: can't read capabilities
[  988.861461][T21231] vhci_hcd: connection reset by peer
[  988.863807][ T1135] vhci_hcd: stop threads
[  988.866069][ T1135] vhci_hcd: release socket
[  988.868443][ T1135] vhci_hcd: disconnect device
[  989.265495][   T64] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  989.415483][   T64] usb 6-1: Using ep0 maxpacket: 8
[  989.418832][   T64] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  989.421841][   T64] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  989.425170][   T64] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  989.429092][   T64] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  989.432665][   T64] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  989.436634][   T64] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  989.441393][   T64] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  989.444696][   T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.452104][   T64] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22
[  989.666921][T21250] syzkaller0: tun_chr_ioctl cmd 1074025677
[  989.668765][T21250] syzkaller0: linktype set to 0
[  989.762135][T21247] ������ speed is unknown, defaulting to 1000
[  990.127359][T21247] ������ speed is unknown, defaulting to 1000
[  990.129558][T21247] ������ speed is unknown, defaulting to 1000
[  990.203943][T15345] usb 5-1: USB disconnect, device number 25
[  990.298316][T11992] usb 6-1: USB disconnect, device number 34
[  991.295682][   T64] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  991.455463][   T64] usb 6-1: Using ep0 maxpacket: 8
[  991.458561][   T64] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  991.461495][   T64] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  991.465747][   T64] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  991.471500][   T64] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  991.475696][   T64] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  991.481779][   T64] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  991.488849][   T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.609912][T21273] syzkaller0: tun_chr_ioctl cmd 1074025677
[  991.611980][T21273] syzkaller0: linktype set to 0
[  991.713490][   T64] usb 6-1: GET_CAPABILITIES returned 0
[  991.714940][   T64] usbtmc 6-1:16.0: can't read capabilities
[  992.219556][T21282] syzkaller0: tun_chr_ioctl cmd 1074025677
[  992.221337][T21282] syzkaller0: linktype set to 0
[  992.286011][ T1412] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  992.288764][ T1412] ieee802154 phy1 wpan1: encryption failed: -22
[  993.065836][T11992] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  993.085524][ T1328] vhci_hcd: vhci_device speed not set
[  993.204799][    T8] usb 6-1: USB disconnect, device number 35
[  993.225533][T11992] usb 9-1: Using ep0 maxpacket: 8
[  993.228516][T11992] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  993.230684][T11992] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  993.233396][T11992] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  993.236924][T11992] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  993.239471][T11992] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  993.242821][T11992] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  993.245698][T11992] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  993.466856][T11992] usb 9-1: GET_CAPABILITIES returned 0
[  993.468345][T11992] usbtmc 9-1:16.0: can't read capabilities
[  993.676250][   T57] usb 9-1: USB disconnect, device number 18
[  995.675555][   T35] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  995.755576][T15345] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  995.779644][T21314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2870'.
[  995.845578][   T35] usb 5-1: Using ep0 maxpacket: 8
[  995.848872][   T35] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  995.851689][   T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  995.855053][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  995.858535][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  995.861922][   T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  995.866480][   T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  995.869629][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.905527][T15345] usb 6-1: Using ep0 maxpacket: 8
[  995.909241][T15345] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  995.912374][T15345] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  995.916123][T15345] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  995.919503][T15345] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  995.923001][T15345] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  995.927363][T15345] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  995.932104][T15345] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  995.935321][T15345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.945327][T15345] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22
[  996.079989][   T35] usb 5-1: GET_CAPABILITIES returned 0
[  996.081462][   T35] usbtmc 5-1:16.0: can't read capabilities
[  996.160237][   T35] usb 6-1: USB disconnect, device number 36
[  996.288326][   T64] usb 5-1: USB disconnect, device number 26
[  996.865818][T21331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2875'.
[  999.087425][T21351] ������ speed is unknown, defaulting to 1000
[  999.470031][T21358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2881'.
[  999.473936][T21358] netlink: 'syz.2.2881': attribute type 5 has an invalid length.
[  999.534290][T21363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2881'.
[  999.760452][T21351] ������ speed is unknown, defaulting to 1000
[  999.766862][T21351] ������ speed is unknown, defaulting to 1000
[  999.844825][T21372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2882'.
[ 1000.205786][T21362] rdma_rxe: rxe_newlink: failed to add bond0
[ 1000.588009][T21381] loop6: detected capacity change from 0 to 524287999
[ 1000.590566][    C2] blk_print_req_error: 58 callbacks suppressed
[ 1000.590577][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1000.594578][    C2] buffer_io_error: 58 callbacks suppressed
[ 1000.594585][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1000.599077][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1000.601494][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1000.606413][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1000.608761][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1000.619210][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1000.621584][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1000.625538][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1000.627930][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1000.639961][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1000.642487][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1000.655428][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1000.657803][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1000.669269][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1000.671653][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1000.673789][T21381] ldm_validate_partition_table(): Disk read failed.
[ 1000.676015][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1000.678346][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1000.680490][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1000.682874][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1000.698198][T21381] Dev loop6: unable to read RDB block 0
[ 1000.701408][T21381]  loop6: unable to read partition table
[ 1000.703261][T21381] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1001.759545][T21403] loop6: detected capacity change from 0 to 524287999
[ 1001.763832][T21403] ldm_validate_partition_table(): Disk read failed.
[ 1001.767993][T21403] Dev loop6: unable to read RDB block 0
[ 1001.771525][T21403]  loop6: unable to read partition table
[ 1001.774315][T21403] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1002.075563][T15345] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1002.225457][T15345] usb 5-1: Using ep0 maxpacket: 8
[ 1002.228259][T15345] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1002.230476][T15345] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1002.233064][T15345] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1002.235869][T15345] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1002.238954][T15345] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1002.242542][T15345] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1002.244983][T15345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.622041][T15345] usb 5-1: GET_CAPABILITIES returned 0
[ 1002.623732][T15345] usbtmc 5-1:16.0: can't read capabilities
[ 1002.931940][T11992] usb 5-1: USB disconnect, device number 27
[ 1003.402387][   T64] libceph: connect (1)[c::]:6789 error -101
[ 1003.404615][   T64] libceph: mon0 (1)[c::]:6789 connect error
[ 1003.530081][T21426] syz.1.2892: attempt to access beyond end of device
[ 1003.530081][T21426] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0
[ 1003.619687][T21420] ceph: No mds server is up or the cluster is laggy
[ 1003.925675][T21444] loop9: detected capacity change from 0 to 6
[ 1004.000885][T21444] Dev loop9: unable to read RDB block 6
[ 1004.001024][T21444]  loop9: unable to read partition table
[ 1004.001700][T21444] loop9: partition table beyond EOD, truncated
[ 1004.001794][T21444] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dƤ����ݡ�����
[ 1004.001794][T21444] 
) failed (rc=-5)
[ 1004.455002][T21451] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1004.456882][T21451] syzkaller0: linktype set to 0
[ 1005.177775][T21470] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1005.181983][T21470] syzkaller0: linktype set to 0
[ 1005.385559][   T57] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1005.543587][   T57] usb 9-1: device descriptor read/64, error -71
[ 1005.845524][   T57] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1005.995567][   T57] usb 9-1: device descriptor read/64, error -71
[ 1006.105962][   T57] usb usb9-port1: attempt power cycle
[ 1006.505544][   T57] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1006.536625][   T57] usb 9-1: device descriptor read/8, error -71
[ 1007.145474][   T57] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 1007.145476][T17308] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1007.167015][   T57] usb 9-1: device descriptor read/8, error -71
[ 1007.275865][   T57] usb usb9-port1: unable to enumerate USB device
[ 1007.295511][T17308] usb 5-1: Using ep0 maxpacket: 8
[ 1007.298850][T17308] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1007.301061][T17308] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1007.303636][T17308] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1007.311725][T17308] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1007.314464][T17308] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1007.314491][T17308] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1007.314504][T17308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1007.543379][T17308] usb 5-1: GET_CAPABILITIES returned 0
[ 1007.544981][T17308] usbtmc 5-1:16.0: can't read capabilities
[ 1007.747006][T17308] usb 5-1: USB disconnect, device number 28
[ 1008.018921][T21488] netlink: 'syz.1.2905': attribute type 4 has an invalid length.
[ 1008.032475][T21488] netlink: 'syz.1.2905': attribute type 4 has an invalid length.
[ 1009.002085][T21504] loop6: detected capacity change from 0 to 524287999
[ 1009.092471][    C1] blk_print_req_error: 24 callbacks suppressed
[ 1009.092509][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1009.097899][    C1] buffer_io_error: 24 callbacks suppressed
[ 1009.097912][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1009.105476][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1009.108649][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1009.117716][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1009.120899][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1009.124320][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1009.127515][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1009.135458][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1009.138605][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1009.145459][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1009.148620][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1009.153669][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1009.156867][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1009.163670][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1009.166838][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1009.169539][T21504] ldm_validate_partition_table(): Disk read failed.
[ 1009.175454][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1009.178578][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1009.182227][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1009.185404][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1009.189145][T21504] Dev loop6: unable to read RDB block 0
[ 1009.194274][T21504]  loop6: unable to read partition table
[ 1009.197056][T21504] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1009.745309][   T39] audit: type=1800 audit(1734350609.938:751): pid=21523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2913" name="bus" dev="9p" ino=36574864 res=0 errno=0
[ 1010.213436][T21530] overlayfs: failed to clone lowerpath
[ 1010.247662][T21540] siw: device registration error -23
[ 1010.310498][ T1135] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1010.547271][ T5994] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1010.561722][T21546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2918'.
[ 1010.706255][ T5994] usb 5-1: Using ep0 maxpacket: 32
[ 1010.709923][ T5994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1010.718643][ T5994] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1010.721852][T21552] hub 2-0:1.0: USB hub found
[ 1010.723101][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1010.725675][ T5994] usb 5-1: Product: syz
[ 1010.725925][T21552] hub 2-0:1.0: 2 ports detected
[ 1010.726900][ T5994] usb 5-1: Manufacturer: syz
[ 1010.730726][ T5994] usb 5-1: SerialNumber: syz
[ 1010.759585][ T5994] usb 5-1: config 0 descriptor??
[ 1010.968952][   T64] usb 5-1: USB disconnect, device number 29
[ 1011.553803][T21562] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1011.556739][T21562] syzkaller0: linktype set to 0
[ 1012.112408][T21565] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1012.114705][T21565] syzkaller0: linktype set to 0
[ 1012.233541][T21569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'.
[ 1012.241862][T21569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1012.365553][   T66] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[ 1014.115977][   T64] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1014.167005][T21599] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1014.169286][T21599] syzkaller0: linktype set to 0
[ 1014.275537][   T64] usb 6-1: Using ep0 maxpacket: 16
[ 1014.278925][   T64] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1014.282023][   T64] usb 6-1: config 0 has no interface number 0
[ 1014.284217][   T64] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1014.288472][   T64] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1014.293791][   T64] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1014.297405][   T64] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1014.300464][   T64] usb 6-1: Product: syz
[ 1014.301934][   T64] usb 6-1: SerialNumber: syz
[ 1014.305330][   T64] usb 6-1: config 0 descriptor??
[ 1014.309664][   T64] cm109 6-1:0.8: invalid payload size 0, expected 4
[ 1014.313751][   T64] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input37
[ 1014.585859][T21596] Invalid ELF header magic: != ELF
[ 1014.587985][   T39] audit: type=1804 audit(1734350614.778:752): pid=21596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2929" name="/newroot/733/file0/bus/bus" dev="overlay" ino=11 res=1 errno=0
[ 1014.594917][    C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1014.598705][    C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1014.600724][    C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1014.602615][   T64] usb 6-1: USB disconnect, device number 37
[ 1014.604170][    C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1014.604183][    C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1014.622215][   T64] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1015.543633][T21616] loop6: detected capacity change from 0 to 524287999
[ 1015.547058][    C3] blk_print_req_error: 7 callbacks suppressed
[ 1015.547074][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1015.552319][    C3] buffer_io_error: 7 callbacks suppressed
[ 1015.552330][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1015.557698][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1015.560879][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1015.563981][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1015.567114][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1015.570156][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1015.572935][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1015.575607][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1015.578736][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1015.581709][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1015.584842][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1015.587897][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1015.591540][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1015.601060][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1015.604828][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1015.611465][T21616] ldm_validate_partition_table(): Disk read failed.
[ 1015.614854][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1015.618203][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1015.621490][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1015.624823][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1015.631303][T21616] Dev loop6: unable to read RDB block 0
[ 1015.635723][T21616]  loop6: unable to read partition table
[ 1015.637675][T21616] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1015.644337][T21629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2935'.
[ 1015.657214][T21629] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1016.885537][   T30] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1017.105447][   T30] usb 9-1: Using ep0 maxpacket: 8
[ 1017.111194][   T30] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1017.113455][   T30] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1017.116325][   T30] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1017.118847][   T30] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1017.121413][   T30] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1017.124809][   T30] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1017.127532][   T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1017.725683][T21655] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1017.729278][T21655] syzkaller0: linktype set to 0
[ 1017.834429][   T30] usb 9-1: GET_CAPABILITIES returned 0
[ 1017.836229][   T30] usbtmc 9-1:16.0: can't read capabilities
[ 1018.035666][   T30] usb 9-1: USB disconnect, device number 23
[ 1018.375324][T21672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2943'.
[ 1018.443206][   T30] libceph: connect (1)[c::]:6789 error -101
[ 1018.445081][   T30] libceph: mon0 (1)[c::]:6789 connect error
[ 1018.678599][T21676] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1018.685799][T21668] ceph: No mds server is up or the cluster is laggy
[ 1018.722598][   T30] libceph: connect (1)[c::]:6789 error -101
[ 1018.725096][   T30] libceph: mon0 (1)[c::]:6789 connect error
[ 1019.406835][T21686] loop6: detected capacity change from 0 to 524287999
[ 1019.455138][T21686] ldm_validate_partition_table(): Disk read failed.
[ 1019.457607][T21686] Dev loop6: unable to read RDB block 0
[ 1019.465944][T21686]  loop6: unable to read partition table
[ 1019.467673][T21686] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1019.470984][T17308] libceph: connect (1)[c::]:6789 error -101
[ 1019.472681][T17308] libceph: mon0 (1)[c::]:6789 connect error
[ 1019.553907][T21699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2947'.
[ 1019.565847][T21699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1019.620602][T21700] syz.0.2955: attempt to access beyond end of device
[ 1019.620602][T21700] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0
[ 1019.635090][T21684] syz0: rxe_newlink: already configured on bond0
[ 1019.725608][T17308] libceph: connect (1)[c::]:6789 error -101
[ 1019.727293][T17308] libceph: mon0 (1)[c::]:6789 connect error
[ 1019.743186][T21694] ceph: No mds server is up or the cluster is laggy
[ 1020.298435][T21721] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1020.300111][T21721] syzkaller0: linktype set to 0
[ 1020.472357][T21730] erofs (device erofs): cannot find valid erofs superblock
[ 1020.573909][T21732] loop6: detected capacity change from 0 to 524287999
[ 1020.775018][    C3] blk_print_req_error: 24 callbacks suppressed
[ 1020.775031][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1020.779100][    C3] buffer_io_error: 24 callbacks suppressed
[ 1020.779108][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1020.783390][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1020.786479][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1020.789266][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1020.792624][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1020.795750][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1020.798891][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1020.801398][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1020.804429][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1020.807264][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1020.810177][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1020.812795][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1020.816188][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1020.819289][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1020.821865][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1020.824243][T21732] ldm_validate_partition_table(): Disk read failed.
[ 1020.826447][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1020.828899][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1020.831832][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1020.834459][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1020.837631][T21732] Dev loop6: unable to read RDB block 0
[ 1020.847018][T21732]  loop6: unable to read partition table
[ 1020.849240][T21732] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1021.269204][T17308] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 1021.376810][T21749] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1021.378705][T21749] syzkaller0: linktype set to 0
[ 1021.565716][T17308] usb 9-1: Using ep0 maxpacket: 8
[ 1021.645566][T17308] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1021.648954][T17308] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1021.652098][T17308] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1021.655611][T17308] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1021.658461][T17308] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1021.665670][T17308] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1021.668398][T17308] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1022.074589][T21762] loop6: detected capacity change from 0 to 524287999
[ 1022.079646][T21762] ldm_validate_partition_table(): Disk read failed.
[ 1022.082326][T21762] Dev loop6: unable to read RDB block 0
[ 1022.085239][T21762]  loop6: unable to read partition table
[ 1022.087234][T21762] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1022.259226][T21751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2953'.
[ 1022.363956][T17308] usb 9-1: GET_CAPABILITIES returned 0
[ 1022.365586][T17308] usbtmc 9-1:16.0: can't read capabilities
[ 1022.571188][T15345] usb 9-1: USB disconnect, device number 24
[ 1022.738716][T21769] tc_dump_action: action bad kind
[ 1022.848024][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2960'.
[ 1023.293662][T21780] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1023.297145][T21780] syzkaller0: linktype set to 0
[ 1023.405746][T21784] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1025.026594][T21812] loop6: detected capacity change from 0 to 524287999
[ 1025.039336][T21812] ldm_validate_partition_table(): Disk read failed.
[ 1025.042764][T21812] Dev loop6: unable to read RDB block 0
[ 1025.186036][T21812]  loop6: unable to read partition table
[ 1025.187963][T21812] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1025.646950][T21822] netlink: 'syz.4.2970': attribute type 4 has an invalid length.
[ 1025.656428][T21822] netlink: 'syz.4.2970': attribute type 4 has an invalid length.
[ 1026.389737][T21834] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1026.391618][T21834] syzkaller0: linktype set to 0
[ 1026.747918][T21842] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1026.775570][   T30] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1026.935745][   T30] usb 6-1: Using ep0 maxpacket: 8
[ 1026.944754][   T30] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1026.946899][   T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1026.949371][   T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1026.951870][   T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1026.954373][   T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1026.975422][   T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1026.977755][   T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.216625][   T30] usb 6-1: GET_CAPABILITIES returned 0
[ 1027.218031][   T30] usbtmc 6-1:16.0: can't read capabilities
[ 1027.490717][T17308] usb 6-1: USB disconnect, device number 38
[ 1027.789584][ T5994] libceph: connect (1)[c::]:6789 error -101
[ 1027.791359][ T5994] libceph: mon0 (1)[c::]:6789 connect error
[ 1027.899459][T21859] syz.2.2978: attempt to access beyond end of device
[ 1027.899459][T21859] nbd2: rw=4096, sector=0, nr_sectors = 2 limit=0
[ 1027.974666][T21853] ceph: No mds server is up or the cluster is laggy
[ 1028.357460][T21883] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1028.359069][T21883] syzkaller0: linktype set to 0
[ 1028.476089][T21886] loop6: detected capacity change from 0 to 524287999
[ 1028.479717][    C2] blk_print_req_error: 41 callbacks suppressed
[ 1028.479780][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1028.485466][    C2] buffer_io_error: 41 callbacks suppressed
[ 1028.485479][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1028.491329][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1028.494646][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1028.500376][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1028.503522][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1028.507517][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1028.510811][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1028.514577][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1028.517665][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1028.521166][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1028.523688][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1028.531104][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1028.533590][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1028.538696][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1028.541060][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1028.543281][T21886] ldm_validate_partition_table(): Disk read failed.
[ 1028.545453][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1028.547790][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1028.567303][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1028.569760][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1028.572329][T21886] Dev loop6: unable to read RDB block 0
[ 1028.577285][T21886]  loop6: unable to read partition table
[ 1028.579239][T21886] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1029.409510][T21904] loop6: detected capacity change from 0 to 524287999
[ 1029.437616][T21904] ldm_validate_partition_table(): Disk read failed.
[ 1029.440279][T21904] Dev loop6: unable to read RDB block 0
[ 1029.442729][T21904]  loop6: unable to read partition table
[ 1029.444700][T21904] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1031.072707][T21925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2987'.
[ 1031.315621][   T64] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1031.475518][   T64] usb 9-1: Using ep0 maxpacket: 8
[ 1031.487278][   T64] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1031.489426][   T64] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1031.492564][   T64] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1031.496618][   T64] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1031.499685][   T64] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1031.504084][   T64] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1031.507576][   T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1031.733860][   T64] usb 9-1: GET_CAPABILITIES returned 0
[ 1031.735779][   T64] usbtmc 9-1:16.0: can't read capabilities
[ 1031.946706][ T5994] usb 9-1: USB disconnect, device number 25
[ 1032.518668][   T30] libceph: connect (1)[c::]:6789 error -101
[ 1032.520343][   T30] libceph: mon0 (1)[c::]:6789 connect error
[ 1032.667454][T21945] syz.4.2989: attempt to access beyond end of device
[ 1032.667454][T21945] nbd4: rw=4096, sector=0, nr_sectors = 2 limit=0
[ 1032.710361][T21932] ceph: No mds server is up or the cluster is laggy
[ 1032.775787][   T30] libceph: connect (1)[c::]:6789 error -101
[ 1032.778288][   T30] libceph: mon0 (1)[c::]:6789 connect error
[ 1032.927433][T21955] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2992'.
[ 1032.975608][T21955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1033.007247][T21944] vivid-002: disconnect
[ 1033.306979][T21933] vivid-002: reconnect
[ 1034.720545][T21989] Invalid logical block size (524288)
[ 1034.828734][T21992] loop6: detected capacity change from 0 to 524287999
[ 1034.832292][    C3] blk_print_req_error: 24 callbacks suppressed
[ 1034.832309][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1034.837761][    C3] buffer_io_error: 24 callbacks suppressed
[ 1034.837773][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1034.976877][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1034.980418][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1034.984909][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1034.989684][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1034.995656][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1034.998615][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1035.005429][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1035.008692][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1035.012860][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1035.016443][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1035.020729][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1035.024069][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1035.028468][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1035.030855][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1035.032909][T21992] ldm_validate_partition_table(): Disk read failed.
[ 1035.034735][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1035.037129][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1035.041921][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1035.044283][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1035.051297][T21992] Dev loop6: unable to read RDB block 0
[ 1035.055709][T21992]  loop6: unable to read partition table
[ 1035.057252][T21992] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1035.429505][ T5353] ldm_validate_partition_table(): Disk read failed.
[ 1035.432307][ T5353] Dev loop6: unable to read RDB block 0
[ 1035.434691][ T5353]  loop6: unable to read partition table
[ 1035.790209][T22000] 
[ 1035.790913][T22000] ======================================================
[ 1035.793176][T22000] WARNING: possible circular locking dependency detected
[ 1035.795664][T22000] 6.13.0-rc3-syzkaller #0 Not tainted
[ 1035.797889][T22000] ------------------------------------------------------
[ 1035.802129][T22000] syz.4.3003/22000 is trying to acquire lock:
[ 1035.803835][T22000] ffff88802442e0b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_disable+0xb5/0x490
[ 1035.806251][T22000] 
[ 1035.806251][T22000] but task is already holding lock:
[ 1035.808192][T22000] ffff888043dae278 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500
[ 1035.812265][T22000] 
[ 1035.812265][T22000] which lock already depends on the new lock.
[ 1035.812265][T22000] 
[ 1035.815924][T22000] 
[ 1035.815924][T22000] the existing dependency chain (in reverse order) is:
[ 1035.819086][T22000] 
[ 1035.819086][T22000] -> #4 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[ 1035.822176][T22000]        blk_mq_submit_bio+0x1fb6/0x24c0
[ 1035.824175][T22000]        __submit_bio+0x384/0x540
[ 1035.825734][T22000]        submit_bio_noacct_nocheck+0x698/0xd70
[ 1035.827958][T22000]        submit_bio_noacct+0x93a/0x1e20
[ 1035.829926][T22000]        mpage_readahead+0x41d/0x590
[ 1035.831846][T22000]        read_pages+0x1a8/0xdc0
[ 1035.833207][T22000]        page_cache_ra_unbounded+0x3dc/0x750
[ 1035.834775][T22000]        force_page_cache_ra+0x24b/0x340
[ 1035.836213][T22000]        page_cache_sync_ra+0x110/0x9c0
[ 1035.837636][T22000]        filemap_get_pages+0xd7b/0x1be0
[ 1035.839455][T22000]        filemap_read+0x3ca/0xd70
[ 1035.841298][T22000]        blkdev_read_iter+0x187/0x480
[ 1035.843265][T22000]        vfs_read+0x87f/0xbe0
[ 1035.844969][T22000]        ksys_read+0x12b/0x250
[ 1035.846702][T22000]        do_syscall_64+0xcd/0x250
[ 1035.848248][T22000]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1035.850507][T22000] 
[ 1035.850507][T22000] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}:
[ 1035.853168][T22000]        down_read+0x9a/0x330
[ 1035.854602][T22000]        page_cache_ra_unbounded+0x173/0x750
[ 1035.856741][T22000]        page_cache_ra_order+0x8f2/0xc80
[ 1035.858452][T22000]        filemap_fault+0x14a5/0x2820
[ 1035.860144][T22000]        __do_fault+0x10a/0x490
[ 1035.861939][T22000]        do_pte_missing+0x99f/0x3e00
[ 1035.863415][T22000]        __handle_mm_fault+0x103c/0x2a40
[ 1035.864912][T22000]        handle_mm_fault+0x3fa/0xaa0
[ 1035.866645][T22000]        __get_user_pages+0x8d9/0x3b50
[ 1035.868187][T22000]        __gup_longterm_locked+0x5ff/0x1870
[ 1035.870287][T22000]        pin_user_pages+0x13f/0x160
[ 1035.872186][T22000]        xdp_umem_create+0x73c/0x1270
[ 1035.874073][T22000]        xsk_setsockopt+0x7e7/0xac0
[ 1035.875940][T22000]        do_sock_setsockopt+0x222/0x480
[ 1035.877839][T22000]        __sys_setsockopt+0x1a0/0x230
[ 1035.879615][T22000]        __ia32_sys_setsockopt+0xbc/0x160
[ 1035.881632][T22000]        __do_fast_syscall_32+0x73/0x120
[ 1035.883646][T22000]        do_fast_syscall_32+0x32/0x80
[ 1035.885555][T22000]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1035.887934][T22000] 
[ 1035.887934][T22000] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[ 1035.890338][T22000]        __might_fault+0x11b/0x190
[ 1035.892059][T22000]        _copy_from_user+0x29/0xd0
[ 1035.893758][T22000]        __blk_trace_setup+0xa8/0x180
[ 1035.895534][T22000]        blk_trace_setup+0x47/0x70
[ 1035.897199][T22000]        sg_ioctl+0x7a3/0x26b0
[ 1035.898796][T22000]        compat_ptr_ioctl+0x6b/0xa0
[ 1035.900509][T22000]        __do_compat_sys_ioctl+0x1cb/0x2c0
[ 1035.902462][T22000]        __do_fast_syscall_32+0x73/0x120
[ 1035.904326][T22000]        do_fast_syscall_32+0x32/0x80
[ 1035.906098][T22000]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1035.908335][T22000] 
[ 1035.908335][T22000] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[ 1035.910896][T22000]        __mutex_lock+0x19b/0xa60
[ 1035.912573][T22000]        blk_mq_exit_sched+0xd1/0x310
[ 1035.914369][T22000]        elevator_exit+0x58/0x80
[ 1035.916044][T22000]        del_gendisk+0x568/0xad0
[ 1035.917709][T22000]        nbd_dev_remove+0x3b/0xe0
[ 1035.919397][T22000]        process_one_work+0x958/0x1b30
[ 1035.921267][T22000]        worker_thread+0x6c8/0xf00
[ 1035.923022][T22000]        kthread+0x2c1/0x3a0
[ 1035.924592][T22000]        ret_from_fork+0x45/0x80
[ 1035.926297][T22000]        ret_from_fork_asm+0x1a/0x30
[ 1035.928118][T22000] 
[ 1035.928118][T22000] -> #0 (&eq->sysfs_lock){+.+.}-{4:4}:
[ 1035.930727][T22000]        __lock_acquire+0x249e/0x3c40
[ 1035.932586][T22000]        lock_acquire.part.0+0x11b/0x380
[ 1035.934446][T22000]        __mutex_lock+0x19b/0xa60
[ 1035.936107][T22000]        elevator_disable+0xb5/0x490
[ 1035.937768][T22000]        __blk_mq_update_nr_hw_queues+0x41e/0x1500
[ 1035.939903][T22000]        blk_mq_update_nr_hw_queues+0x2a/0x40
[ 1035.941598][T22000]        nbd_start_device+0x15b/0xd70
[ 1035.943114][T22000]        nbd_ioctl+0x21a/0xfd0
[ 1035.944643][T22000]        compat_blkdev_ioctl+0x2f7/0x750
[ 1035.946332][T22000]        __do_compat_sys_ioctl+0x1cb/0x2c0
[ 1035.947900][T22000]        __do_fast_syscall_32+0x73/0x120
[ 1035.949346][T22000]        do_fast_syscall_32+0x32/0x80
[ 1035.950750][T22000]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1035.952544][T22000] 
[ 1035.952544][T22000] other info that might help us debug this:
[ 1035.952544][T22000] 
[ 1035.955820][T22000] Chain exists of:
[ 1035.955820][T22000]   &eq->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#53
[ 1035.955820][T22000] 
[ 1035.960822][T22000]  Possible unsafe locking scenario:
[ 1035.960822][T22000] 
[ 1035.963314][T22000]        CPU0                    CPU1
[ 1035.965046][T22000]        ----                    ----
[ 1035.966818][T22000]   lock(&q->q_usage_counter(io)#53);
[ 1035.968599][T22000]                                lock(mapping.invalidate_lock#2);
[ 1035.971155][T22000]                                lock(&q->q_usage_counter(io)#53);
[ 1035.973737][T22000]   lock(&eq->sysfs_lock);
[ 1035.975043][T22000] 
[ 1035.975043][T22000]  *** DEADLOCK ***
[ 1035.975043][T22000] 
[ 1035.977649][T22000] 6 locks held by syz.4.3003/22000:
[ 1035.979349][T22000]  #0: ffff888024428198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0
[ 1035.982386][T22000]  #1: ffff8880244280d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40
[ 1035.985902][T22000]  #2: ffff888043dae838 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x205/0x1500
[ 1035.989504][T22000]  #3: ffff888043dae7a8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x214/0x1500
[ 1035.993016][T22000]  #4: ffff888043dae278 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500
[ 1035.996878][T22000]  #5: ffff888043dae2b0 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500
[ 1036.000798][T22000] 
[ 1036.000798][T22000] stack backtrace:
[ 1036.002779][T22000] CPU: 3 UID: 0 PID: 22000 Comm: syz.4.3003 Not tainted 6.13.0-rc3-syzkaller #0
[ 1036.005702][T22000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1036.009180][T22000] Call Trace:
[ 1036.010294][T22000]  <TASK>
[ 1036.011298][T22000]  dump_stack_lvl+0x116/0x1f0
[ 1036.012897][T22000]  print_circular_bug+0x41c/0x610
[ 1036.014577][T22000]  check_noncircular+0x31a/0x400
[ 1036.016189][T22000]  ? __pfx_check_noncircular+0x10/0x10
[ 1036.017944][T22000]  ? save_trace+0x42/0xa10
[ 1036.019426][T22000]  ? add_lock_to_list+0x17d/0x390
[ 1036.021139][T22000]  __lock_acquire+0x249e/0x3c40
[ 1036.022808][T22000]  ? __pfx___lock_acquire+0x10/0x10
[ 1036.024558][T22000]  ? find_held_lock+0x2d/0x110
[ 1036.026203][T22000]  lock_acquire.part.0+0x11b/0x380
[ 1036.027963][T22000]  ? elevator_disable+0xb5/0x490
[ 1036.029683][T22000]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1036.031588][T22000]  ? rcu_is_watching+0x12/0xc0
[ 1036.033231][T22000]  ? trace_lock_acquire+0x14e/0x1f0
[ 1036.034975][T22000]  ? elevator_disable+0xb5/0x490
[ 1036.036644][T22000]  ? lock_acquire+0x2f/0xb0
[ 1036.038154][T22000]  ? elevator_disable+0xb5/0x490
[ 1036.039805][T22000]  __mutex_lock+0x19b/0xa60
[ 1036.041321][T22000]  ? elevator_disable+0xb5/0x490
[ 1036.042985][T22000]  ? elevator_disable+0xb5/0x490
[ 1036.044597][T22000]  ? __pfx___mutex_lock+0x10/0x10
[ 1036.046269][T22000]  ? __pfx_blk_mq_sched_free_rqs+0x10/0x10
[ 1036.048204][T22000]  ? mark_held_locks+0x9f/0xe0
[ 1036.049826][T22000]  ? elevator_disable+0xb5/0x490
[ 1036.051496][T22000]  elevator_disable+0xb5/0x490
[ 1036.053146][T22000]  __blk_mq_update_nr_hw_queues+0x41e/0x1500
[ 1036.055225][T22000]  ? __mutex_trylock_common+0xea/0x250
[ 1036.057091][T22000]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1036.059115][T22000]  ? blk_mq_update_nr_hw_queues+0x20/0x40
[ 1036.061087][T22000]  ? rcu_is_watching+0x12/0xc0
[ 1036.062726][T22000]  ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10
[ 1036.064862][T22000]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1036.066824][T22000]  ? blk_mq_update_nr_hw_queues+0x20/0x40
[ 1036.068291][T22000]  ? __pfx___mutex_lock+0x10/0x10
[ 1036.069586][T22000]  ? trace_contention_end+0xee/0x140
[ 1036.070955][T22000]  ? __mutex_lock+0x1cc/0xa60
[ 1036.072202][T22000]  ? nbd_ioctl+0x151/0xfd0
[ 1036.073365][T22000]  ? __pfx___mutex_lock+0x10/0x10
[ 1036.074687][T22000]  blk_mq_update_nr_hw_queues+0x2a/0x40
[ 1036.076104][T22000]  nbd_start_device+0x15b/0xd70
[ 1036.077360][T22000]  ? bpf_lsm_capable+0x9/0x10
[ 1036.078579][T22000]  nbd_ioctl+0x21a/0xfd0
[ 1036.079686][T22000]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1036.080929][T22000]  ? __pfx_lock_release+0x10/0x10
[ 1036.082263][T22000]  ? trace_lock_acquire+0x14e/0x1f0
[ 1036.083616][T22000]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1036.084857][T22000]  compat_blkdev_ioctl+0x2f7/0x750
[ 1036.086175][T22000]  ? __pfx_compat_blkdev_ioctl+0x10/0x10
[ 1036.087593][T22000]  ? __fget_files+0x206/0x3a0
[ 1036.088812][T22000]  ? __pfx_compat_blkdev_ioctl+0x10/0x10
[ 1036.090250][T22000]  __do_compat_sys_ioctl+0x1cb/0x2c0
[ 1036.091617][T22000]  __do_fast_syscall_32+0x73/0x120
[ 1036.092960][T22000]  do_fast_syscall_32+0x32/0x80
[ 1036.094220][T22000]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1036.095855][T22000] RIP: 0023:0xf7f31579
[ 1036.096908][T22000] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1036.101830][T22000] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1036.103986][T22000] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ab03
[ 1036.106002][T22000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1036.108003][T22000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1036.110004][T22000] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[ 1036.112048][T22000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1036.114032][T22000]  </TASK>
[ 1036.226314][T22001] block nbd4: shutting down sockets

VM DIAGNOSIS:
12:03:56  Registers:
info registers vcpu 0

CPU#0
RAX=000000000311cb6c RBX=0000000000000000 RCX=ffffffff8b1a17a9 RDX=ffffed1005686fee
RSI=ffffffff8bb16b40 RDI=ffffffff81702e19 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20
R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001
R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cd990 R15=0000000000000000
RIP=ffffffff8b1a2b8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f52194fa CR3=000000006449e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000002 RBX=ffff88800064a440 RCX=ffffc9002f8e4000 RDX=0000000000100000
RSI=ffffffff81e1afbc RDI=ffff88800064a988 RBP=0000000000000103 RSP=ffffc9000320fb30
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000b8f
R12=0000000000000000 R13=ffff88804c3119d0 R14=ffffc9000320fd40 R15=0000000000010000
RIP=ffffffff81994f43 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020004000 CR3=000000006f18e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000fb10ec RBX=0000000000000002 RCX=ffffffff8b1a17a9 RDX=ffffed10056c6fee
RSI=ffffffff8bb16b40 RDI=ffffffff81702e19 RBP=ffffed1003a51000 RSP=ffffc9000048fe08
R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=ffff88802b73fb10
R12=0000000000000002 R13=ffff88801d288000 R14=ffffffff901cd990 R15=0000000000000000
RIP=ffffffff8b1a2b8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f5044da4 CR3=0000000023288000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85142075 RDI=ffffffff9a665300 RBP=ffffffff9a6652c0 RSP=ffffc900031defd0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d
R12=0000000000000000 R13=000000000000002d R14=ffffffff85142010 R15=0000000000000000
RIP=ffffffff8514209f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020026000 CR3=0000000023288000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000