last executing test programs:

47.454041261s ago: executing program 2 (id=1221):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000800000000000000000010c00028005000100880000003c000100002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e0001080007400000000100"/148], 0x94}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="dd1370b5bc1828cc080800000004000000040000000900200f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18090000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030800000000008500000021000100b70000000100117d95586bf181e1ee1c5fd87b00002595"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e0274200000000000000002f0800", 0x0, 0x906e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000001050500000000000000000a000000040002803c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000001000001080007400000000004000680"], 0x60}}, 0x0)
socket(0x10, 0x803, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
close(r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r6, 0x14, &(0x7f0000003a40)=[{0x9, 0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000002340)=""/198, 0xc6}, {&(0x7f0000002440)=""/251, 0xfb}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000002540)=""/175, 0xaf}, {&(0x7f0000002600)=""/135, 0x87}, {&(0x7f00000026c0)=""/155, 0x9b}, {&(0x7f0000002780)=""/216, 0xd8}, {&(0x7f0000002880)=""/146, 0x92}, {&(0x7f0000002940)=""/4096, 0x1000}], &(0x7f0000003a00)=[0x4, 0x4, 0x0, 0xa, 0x7]}], 0x1)
bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x7, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5)
shutdown(r7, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8)
read$FUSE(r6, &(0x7f0000000280)={0x2020}, 0x2020)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
close_range(r9, 0xffffffffffffffff, 0x0)

47.368140996s ago: executing program 2 (id=1223):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000400), 0x0, 0x0)
bind$alg(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet(0x2, 0x80001, 0x100)
listen(r2, 0x3)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_route(r3, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x5c}}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x2c)
r6 = open(0x0, 0x2a4c0, 0x0)
pipe2$9p(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, 0x0, 0x15)
r8 = dup(r7)
write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0xfffffffffffffffe}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r8, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[])
connect$inet6(r5, 0x0, 0x0)
write$binfmt_misc(r6, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xffffffffffffff2b)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
fspick(0xffffffffffffff9c, 0x0, 0x1)

47.293676706s ago: executing program 2 (id=1225):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000040c0)=ANY=[], 0x10d4}, 0x1, 0x0, 0x0, 0x20000085}, 0x4040044)
recvmmsg$unix(r1, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000340)=""/198, 0xc6}], 0x2}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r2=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=<r3=>0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r9=>0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0)
sendmmsg$nfc_llcp(r1, &(0x7f0000003b80)=[{&(0x7f0000000140)={0x27, r2, 0x0, 0x7, 0x1, 0x0, "24ae1badf4751e2c662bb13aaadc979e1c8ee5d2607d1ec3f3ac750abce1fd7fda6c88ffbfe710ee24427bf9c198564f34fa1a6f6867cd2889f810f553482f", 0x16}, 0x60, &(0x7f00000003c0)=[{&(0x7f00000001c0)="fba86bc1502d5210a5a6f906d1a899178bb63828eab0c35eef106e3377901e6f24e79f21f30fed471c1c1580afd988279648646f6566b27f89aa89e7d1f5f9f380c636a83d1e01844b43a6d0d4fe6590e0f273c7f7c3bb8f6256e8e323305b88", 0x60}, {&(0x7f0000000240)="a299252b4a0b12813aec64b6f6cca9237fbb3c522a4f9200c81ce2d139ffe4eaf83956cd8a6775d7db5b99a9b5271c2da0ce2d4289d3208471c866a2e9ea9f0f0550ea98abdd81d3ccb5329da505e6a5889d23d316fcd6a5f8110e08dbb6a19ef96ee8960fce21c01e9e87d9f189325668685a6d69445251d5e6675f88730896a47cff925876ff6c8dad35870b71a9717fa13b057e061a4155e6f2ca6fb6f567548bafe794e6a8eacc22", 0xaa}, {&(0x7f0000000300)="a4d94a5452f54ceb6a570d73956f5a5feb6f2a5a34453315deb7462f72e4b33943335895bf3abc25dfc288349c923ab5ee4f8a91bb14d98c494bb5a544e36c48e057d5869b55433a9cd50a556a85e66f0df3c2bc0403b84f80f3148c44d1b9514740fee5a9092fbb30069ebfdd5743cf4d72a49097fd101dcb3dc1f3043306eaa8882952", 0x84}], 0x3, &(0x7f0000000400)={0xb8, 0x112, 0xf98, "0f8edf3e69db36f9398a6d4bbd25c5f1559d416e93a1c99750891f447ab58d63f6671545615707a6c370433c505e275b60aa83c03b9ecbb42ccf65bf2e8aa3cc12d525b5453dc18a876afe9c9671599aa14a1cdd9568f24240b59534c140fac80e65e17795b58174bd36485ddd5255de393daf5d0242db1e08f9883539bf4eb6e2f36f8331bdcad52b37881ccf6aa75127da0fb1bb149e9e561e97262f3304cbafe4f4"}, 0xb8, 0x20000000}, {&(0x7f0000000500)={0x27, r3, 0x1, 0x6, 0x6, 0x8, "039c7126461bac6dc861a85fef268c1d6340dd39e662f2f596514cd746864d98657eda18b2e10af7497c99c7552593e8fd2686b1de316770729e6ff9fb3d6d", 0x39}, 0x60, &(0x7f00000006c0)=[{&(0x7f0000000580)="c4191c6ae6f68438cf688b7bc88b79a5230483b43f161124d80c1f32b93f95f357cfc2a5417d3b34492094b7780e28b075a710c5791be74ab7439b4018ae8966c13353ee0de88736805eeb8be3c8ba163cbff773533b39a8e683663238f7736b5b7a85cb3e23147ef04e4c21d3bf2c2302f9bc90d37abe6c15b71e3d61d9c7830f9fbc9297118fd7004ccd266c6728bb812c4c8ca5a298d9a4846debe9733bf2d69e10482795413f12962369cd8bd8ceb7964a235722e9403ca06b1bffd8d1", 0xbf}, {&(0x7f0000000640)="724c576388e150a14ff2", 0xa}, {&(0x7f0000000680)="5fa61e9970d09c8310927b222cb2bc310e607b22e0d31a6d29a2449c1ed0d6c5e47dfb6977554607dd8664ccbdb4ac3a440350a7f212ff33054978529e8b99f0", 0x40}], 0x3, &(0x7f0000000700)={0x28, 0x101, 0x8, "94ab84bc7f43e3e2daf80e6483c869a31c43"}, 0x28, 0x48400}, {&(0x7f0000000740)={0x27, 0x0, 0x0, 0x7, 0x9, 0x3, "f9766984ae8c4817b8cdf0c60cdcea7b789a4f7b111feac9088f823cda51f9d0e20e5df8d82ec8225001046239288d43f3a616890e960aba2f2d82e972a197", 0x8}, 0x60, &(0x7f0000000b00)=[{&(0x7f00000007c0)="a1b3ea4e627f28bc6794d558a604e8971e4cd3d3c6d0cdb3ecc08fd35891e138f61e93da9f31969b151a41fb6827cd2f32787b5ea35cf2defefc3d309700d088dc4260166189527938b6d8486b1dc6afc15c2a930ff6a48f0c96ca07bcbc3852f6ac18b9249c8ed121e04eaa8f84257a21f6e51bff34f9dfba606ec02d0170232729aaa9e6f75c0305917c4759d2261665d360", 0x93}, {&(0x7f0000000880)="9f60f84933d11c33de03f5c60c034b49275ed2b7cf61cb0a961ebc89991cea20414fd87b66a3b7be02dcb5b251c5b8721b8d893141882dc9f2c8d22b0fa4bb0d8ea74ad4c52c4643c4cb5d6f0972df0bbfd39fe8f4423e374cbca5d468a5f27c0cd8bc628517a3b66302485e2d7ab1bf190cd9f535351dfa10ca1608e62346d6ea8436ec5f147bbb83d9e66b6da793f3f4d0aca951624d17fef6ef155cf4b367b5a53bd1acd90cf8fece7c009fe8c6cb17740b4a88e2d32fd9750c492d4a8a9c7c291849ffffddad5dd945e4c6f81ee7c55b2557ba2229a5fd74f361", 0xdc}, {&(0x7f0000000980)="f5dd7ddb932ca60d1765751b71e886f83f949ffd54d13f5db111039f49555c651706bc7e28714f62c6fbc95a02f130c45fc11c5b62c1891823106468c283c0b0868e2baf79a9e260ff10e0960f2824b6dab415a036688adbf4823992c747fc4974f25f706b0c3997914dba327648527bc6e044f21eca71596b082267ee1de3a042a00976718eec51a1a53b82784fe7277c3b", 0x92}, {&(0x7f0000000a40)="24bee1b0038bd9448a26f11b43c799220ced030dc01da600835ebd9551fca321b567a3fef75e2adf3b50b6f1ebccfe75cca1645279371e7d584f9bcaf0c43c458cdc078fe1717013eaa3eb96e61536ed2d494ab6c27b29f69890c9b259e3bdeda1a604c5447c2518b88dc8eb9bb21cb42a12b30bddf493863b", 0x79}, {&(0x7f0000000ac0)="91f2971d8f94cdda4797ee97d08ce3eb1e929c3b85683f2e39ee450060b7e6b8913f735671dc6c28", 0x28}], 0x5, &(0x7f0000000b80)={0x38, 0x11, 0x9, "697d4551760611807ba85d3f57af0bfe233966867932d77c2a2758b0b96f760ff7968b4b18aa"}, 0x38, 0x20000000}, {&(0x7f0000000bc0)={0x27, r5, 0x1, 0x7, 0x80, 0x7, "16216df27f29c4d22221bb6606d2383b0da9e51316a9c55b41dde1fc16167e843b9471509ebc96b855d1fa9da243a911f5b3b2719f60fb54082c07e5e00762", 0x1c}, 0x60, &(0x7f0000000c80)=[{&(0x7f0000000c40)="28a949df13c3f720eb", 0x9}], 0x1, &(0x7f0000000dc0)={0x68, 0x116, 0x5, "8cd3623bfbfe3133cb8d30e07d6448d0203a6c8bd775d308e7b275cd6446577335cf6b06e670aba2eb97108da5dfb05278486a6f15c52d6f53824e92eaca78c2e01b75be1ce1ab8a39e93196b5db7f4962"}, 0x68, 0x15}, {&(0x7f0000000e40)={0x27, 0x0, 0x0, 0x9d87e170d5d03d61, 0x0, 0xff, "1b1df84465fac08d2e575fe16300989655c8198921bb6a62a7ee3c6915760f9af167cb48e3be96baff760704374a5fd36836cb5149d143f8edc38a95dffb23", 0x1}, 0x60, &(0x7f0000002240)=[{&(0x7f0000000ec0)="58a226913bf622d8ea4b8d7def4880b6d8f0632a27a5a98a0ea3b175ae6a03fc73e033a33b59b64471b0cdeb20123f6e9c39d2cb1e11eca3ea715c711d33088bba99704d44406aaa65ae4511b17e796726fc2c754f6d3a219cab414ac913ecd8800cba28e5abf7", 0x67}, {&(0x7f0000000f40)="cf77c01fb0709a392323269ff6c0433c74c7de9d2496b3c6c01b1cb1b21c0d4a10fdaa1e79bb83e1021ba2692f42bc15d4e95c2e91106c1f087860b7c9cf690120b73cb599002999e74d9c7ae2f64bae8cb61f9264cdcb4ec0f11f9ba724595c74288e5e0303583e9e83c65d5e321500d2", 0x71}, {&(0x7f0000000fc0)="4969648e4c4a11d38f174d67f22c96afa2f707a1917fa0726a3fe2a56c4828c93ef47033f220274e0466fd357626028d05085433cfb7", 0x36}, {&(0x7f0000001000)='H\t', 0x2}, {&(0x7f0000001040)="7e863be3ec840c4c4ed0441d58c0bb2764c773f7c49b0c2fba5dc6a9c49b759f0e42cea6756e710ed8c8f700ba9436b7b3fa1405a1d018f488d9b2bb492145fe668278170969a53e6a021facc1fda79553f61ad2b8876e225f7023c9f087f08391ca4859b9794de71a468a8c7434cf1478ae4ab747f2184dee7fecae1a3e7ddb8bdbfff61fcbb123550ff507b88f1ebc9bd2fbf657c3933d48cbbeaf3f15a40b4f4c423fdfd9ec609606e9f8bc781edf", 0xb0}, {&(0x7f0000001100)="4f984411a10d945ac30605e7ad12bff5b9ded788014e35b2a9f563f4187f65396cc126d9ae", 0x25}, {&(0x7f0000001140)="68691ddd3285ade685b752f0faef7caa9220996df70c684d55ffae8c768e436bfdab", 0x22}, {&(0x7f0000001180)="b331e465e9b833684dd4e21bd22ba6b7132674784d02fb1be7403810653c7f51e1643d7afcfce66c02229392fa0d6cb997fb05583b54", 0x36}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="c488d232a6fc54c0d45f25d890f7eda671c26bf119db9980af788fd613d1e24d1d16afe2204ba00c98f9328d718b631f51bd0f6f5db467ce40d94916aaedde47ae484c5fb3ee30c6a950e3", 0x4b}], 0xa, &(0x7f0000002300)={0xd0, 0x102, 0x9, "d9e037f490a69671b26659ec35564425a1ee4b7edcd3de298a8594a9420150e2b47d453e06200d2662675a109edb61d46543950f7b003e81f1219aa7819522c3fe7c998b31e1e4fe4feb9ff0dd5efafa53486a6732196dc56f00b664febf53b225f1e45a0b9f97d5d4c63fff3a9bb8f0c1a24825397727af917ec969425c92fb0374f5a5cb936a641606d3e4ea72669d8dec5311ad990cf81913beb38d5a6368665051bf4aa52b24a06ee554a1c3df2aa55933454c3d374be9"}, 0xd0, 0x40080}, {&(0x7f0000002400)={0x27, r9, 0xffffffffffffffff, 0x2, 0x5, 0x6, "0afa8410915a93ac523262268cc5591e83c37accec2684c64868f03f4b7991b72770901d45941967d539c21a1f4b20300656a61639c1cca1b09b4fd1a3c0c5", 0xc}, 0x60, &(0x7f0000002ac0)=[{&(0x7f0000002480)="c140b5611f4a7cdefb9176395b40e1c321b06879de4b1561e279198111160109e3e0f16c26e40f4deb777f0f85092e6b4c931447502f7b563ad292c251fbb212c2777b76a5cf3e6b36b04b7f2355f68d3ae1bbafb93a26f9320a4a5aa64e4390b9b59c8d994544d93023a93e8dad26ae339067d0d89fa3e9c81624b78fb478c5ea3bd1a30943d9c91aa617fcd363cef360d068", 0x93}, {&(0x7f0000002540)="f52b5f2c30d95a68bc3a03da879da461de42480bb93e96769fbd99d710b9e868c36e1d6b7c885a792096bf047f96a751b84a89dd819134bbf232eab608aa29e88bdc4b8cf8f7933bb3f0d390b0fc72534771df297009d81229f6261c3210f4d0ef43b9fb37cdd10544b0db25fe70101461c8904bddea69523f93425cf6f7a658902cd23e2cac88b5fc0975ee84c8284aac6bf48a617e73db9be749b42da95426c54c150928fa29c3f86627b8578c405d75f4265311a26ca1fb16d6cd501473024adf698077617a1b37d98da6958346550f090dfc33", 0xd5}, {&(0x7f0000002640)="69fe641958fc9e0718c1c617b332c5a9652c5f1516bd1bb30d5a0ccb62645bdbb1b3e637aa6d048c1ad6ce77beaa603efabcd9a7efe8bfb7a433b29087757b2bb8f6004b510e279a5b808729e59840c891c040b5b231a1e0db4ebc0cb83118dfed12fc8ae65695506c8b50dc42e395487143f8eb04431a51faee1d1da62b360f6276398b3a5dada9c1cdc80e9ed31d0a89be265db952dc133add8bb91d115f4553798ec8dee9431b0ee5d822a57197bc85a2b9ce2250152a1b0af9be64b072d11ded49c068167f50bb3d893a1f7be548145d0269ff4dd95b7c6b624fcb", 0xdd}, {&(0x7f0000002740)="5e4738ca791d8a7dde45b229b6dbc39a34bc568c2e705ff0e04671dfb9d2a15cdf5889f62074ce5cb7f183277d452142e74cde56867fe1ae5403384627393cf414b2c0735c66ed970a472c9f8db4600dee742b61ad4f3c43f751861af7e10057cc349e9457a822e5b0d63dfcea2dc3bfbc72ab9dd8ea536b738ca4306773466677c551a8858bd045caa365e1c347e590a5d74dce2eef996f19873268d91547643cd214616e29180f7c5a1b4ef60094f34a6551c029debf8bec09d8814c354abcc823963616a2bb9f8157490742778b80dc137e0d5e853bfc6598", 0xda}, {&(0x7f0000002840)="d92d89ef6f58c2784b38a1076697f1b5f7ec25c2f17df9bdda69c7c29b66f943f78e0f3f3a79347af41dc99e35679a1c9cfadf8b3a6c373b8a31eb456e909013202e032d77194d84d5c8ef1cb3849d8b42879e6655470dbe48bf7ac8ac7ce4a5f120bd2a31010bffdaa5a6fa6a0d614051fc345a3c6b18009dc3628c309b3e41fa555b23c5427c762152872361d2fe7b71fd373059db33179efe31efbed271072b0b2cbd208b049977f16b2c3aa357632d1cab", 0xb3}, {&(0x7f0000002900)="6765a13fdd9fd76fc7451e2397448b0ef73b337cb445e8fef01239544121157903492de0bd432eeaa2c4722c4ce94ab1a2cf50791a0b7333be1a8dfedb7d08d84867b78396ee3e6401395b577892d89d6464f4d5a887b674053d49229ecce75b5c05929c339025843d1cec074e9cfb7cb8576a842b948baa05cc600117cd65983387560758a629ef84ab7be14e5919034b207ea540d11e903602aadcb3a6e7453b9d9a00e3fa1571e94efe13a58baf15af233d997ab852e69c608b39351b2c9a0058d93622125db9d856dc2b5b7c9306e4358a1ba2a73f59521a", 0xda}, {&(0x7f0000002a00)="18795171ecd61132ce94408bd01ccddd90b950fba7e6fab52272e550b6296ef2799b7612837a25456e6581cb909f21315e544a36ce52384925cc76fc7ca52b110c6fedbc4777767305cc02f6d212902076bfa9d0ab6b139094802bd4d08732e9be95e7898c22bceca7afa49b3160f475a1ceb05ed438fd4d3a531f27491febfc50dfa6cc54fe63ef2fba", 0x8a}], 0x7, &(0x7f0000002b40)={0x1010, 0x109, 0xffffffff, "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"}, 0x1010, 0x804}], 0x6, 0x0)
r12 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r12, 0xc058560f, &(0x7f00000000c0)=@userptr={0x4, 0x0, 0x4, 0x71400, 0x4, {}, {0x1, 0x8, 0x9, 0x35, 0x9d, 0x1, "c38a61a9"}, 0xdbb, 0x2, {}, 0x7})
ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x7, 0x7, 0x48524742, 0x3, 0x10001, 0xbb, 0x4, 0x4, 0x0, 0x4, 0x0, 0x4}})

46.310285127s ago: executing program 2 (id=1228):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000002140)=0x7ff, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
syz_emit_ethernet(0x16, &(0x7f0000000380)=ANY=[], 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

46.309856888s ago: executing program 2 (id=1230):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0xa01, 0x0, 0x0, {0x80, 0x9}}, 0x14}}, 0xc000)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
socket(0xa, 0x80000, 0x3)

46.201445484s ago: executing program 2 (id=1231):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2600, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000140)={0x20, 0x3, &(0x7f0000000440)="b2017371edb395fe7771d75b968cc03721b5f66da0fa1ede1800de1b2406dc425eda62809bafee9bf09a6dc0e0bead107d56df59382e2891bb1d1c99887af4d18d63", 0x1, 0x1000})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001400)={0x28, 0x4, r1, 0x0, &(0x7f00006a2000/0x2000)=nil, 0x2000, 0x1000000002})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000180)={0x28, 0x6, 0x0, r1, 0xa93, 0x0, 0x3fff})
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r3 = syz_open_pts(r2, 0x40)
fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000100), &(0x7f0000000240)={0x0, 0xfb, 0x67, 0x3, 0x0, "16e3f7d335b3958c547c5ca43a199397", "0b44dd5f0e10e205de29513d049ff1e1a0524402979703f8dcfbc4eaa9eeeb4a5fa0894bc84d22ddc4eab37ed27da4679eba7e86ab0ff25f8b70ac9c97dd3ce05bfa8cfb9f61e19dcc00d6a7f24dc96d6e19"}, 0x67, 0x0)
move_mount(r2, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000040)={'bond0\x00', @random='\a\x00\x00 \x00'})
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, 0x0, 0x0, 0xc805d, 0x0)
umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8)

46.163077721s ago: executing program 32 (id=1231):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2600, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000140)={0x20, 0x3, &(0x7f0000000440)="b2017371edb395fe7771d75b968cc03721b5f66da0fa1ede1800de1b2406dc425eda62809bafee9bf09a6dc0e0bead107d56df59382e2891bb1d1c99887af4d18d63", 0x1, 0x1000})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001400)={0x28, 0x4, r1, 0x0, &(0x7f00006a2000/0x2000)=nil, 0x2000, 0x1000000002})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000180)={0x28, 0x6, 0x0, r1, 0xa93, 0x0, 0x3fff})
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r3 = syz_open_pts(r2, 0x40)
fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000100), &(0x7f0000000240)={0x0, 0xfb, 0x67, 0x3, 0x0, "16e3f7d335b3958c547c5ca43a199397", "0b44dd5f0e10e205de29513d049ff1e1a0524402979703f8dcfbc4eaa9eeeb4a5fa0894bc84d22ddc4eab37ed27da4679eba7e86ab0ff25f8b70ac9c97dd3ce05bfa8cfb9f61e19dcc00d6a7f24dc96d6e19"}, 0x67, 0x0)
move_mount(r2, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000040)={'bond0\x00', @random='\a\x00\x00 \x00'})
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, 0x0, 0x0, 0xc805d, 0x0)
umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8)

37.265676108s ago: executing program 4 (id=1335):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="052000000000026e93599600000008000300", @ANYRES32=r2, @ANYBLOB="0c002380"], 0x28}}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x30001000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4084)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x1b, 0x1, 0x24, "7275d705775fc3ed9d1057205fc04326", "8a7d3ea95376"}, 0x1b, 0x2)

37.262793716s ago: executing program 4 (id=1337):
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x12000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x442, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000076245344f0a16987000000060000000000004c6c00950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000380)={0x4, @local, 0x4e24, 0x1, 'lc\x00', 0x24, 0x100, 0x7b}, 0x2c)
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x78, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x0, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xe}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x0, 0x1, 0x2}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}]}, 0x78}}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r7=>0x0})
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, &(0x7f0000000040)=0x5bc, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0)
ppoll(&(0x7f0000000100)=[{r9, 0x15db93612d05caa9}, {r9}], 0x2, 0x0, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14007800"], 0x14}}, 0x20000080)
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd7000fbdbdf253400000008000300", @ANYRES32=r7, @ANYBLOB="14005500f2df616cd06842c8400c9bf9c7d125f508001f01020000001400fe0037fe87080000000019000000000000aecab8b14f97ea49d66339599ce90000050020016300000008001f0105"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

37.137990112s ago: executing program 4 (id=1338):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r0=>0x0, 0xe3, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) (async)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000080)={0x10, 0x7d, 0x20f}) (async)
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000080)={0x10, 0x7d, 0x20f})
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00')
pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xaf4d}, 0x1c)
ioctl$KDFONTOP_COPY(r5, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0x9, 0x1, 0xeb, &(0x7f0000000400)})

37.13776945s ago: executing program 4 (id=1339):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1000)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = fanotify_init(0x8, 0x800)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x40)
fanotify_mark(r1, 0x41, 0x8000038, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140))
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r5, &(0x7f0000000040), 0x8)
shutdown(r5, 0x1)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r6, &(0x7f0000003500)=[{{&(0x7f0000001540)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}], 0x20}}], 0x1, 0x44004)
bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="b40500000000000061100800000000002d000000000000009500000000000000faf68626f31cf59060bc42f46378c5fc17aa4482318dd06a8ab315ef936afbc084a146438365d70a035c5849fd854af499568c6cac028bf412339e6ad2140709c62f4f3f9c4cc4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000000c0)={<r7=>0x0, 0xf6, 0x6})
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000004c0)={r7, "2ceda1b7f683efa6c02686c748fe8764"})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2})
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000001580)=0x6, 0x4)
ptrace$getregset(0x4205, 0x0, 0x6, &(0x7f0000000240)={&(0x7f00000015c0)=""/124, 0x7c})
accept4$alg(r4, 0x0, 0x0, 0x0)

36.987994163s ago: executing program 4 (id=1340):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)}}], 0x2, 0x0)
bind$alg(r0, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
r2 = socket$inet(0x2, 0x80001, 0x100)
listen(r2, 0x3)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x5c}}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x2c)
r6 = open(0x0, 0x2a4c0, 0x0)
pipe2$9p(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r7, 0x0, 0x15)
r8 = dup(r7)
write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r8, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[])
connect$inet6(r5, 0x0, 0x0)
write$binfmt_misc(r6, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x800)
fspick(0xffffffffffffff9c, 0x0, 0xf)

34.657689947s ago: executing program 4 (id=1359):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$KDFONTOP_GET(r3, 0x2854, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {<r4=>0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
read$FUSE(r1, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r4, r5}}, './file0\x00'})

34.63091939s ago: executing program 33 (id=1359):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$KDFONTOP_GET(r3, 0x2854, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {<r4=>0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
read$FUSE(r1, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r4, r5}}, './file0\x00'})

28.115112157s ago: executing program 1 (id=1453):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x0, 0x26}, &(0x7f0000000500), &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x2e38, 0x400, 0x40000003, 0x1}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000001540))
syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x42bb, 0x0, 0x5c, 0x12})
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x0)
mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x818892, &(0x7f0000000000)={[{@uid={'uid', 0x3d, r4}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8)
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000640)={'trans=virtio,', {[{@version_u}, {@afid={'afid', 0x3d, 0x10}}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', r4}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@dont_appraise}, {@dont_appraise}, {@dont_hash}, {@appraise}, {@uid_gt={'uid>', r5}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}})
io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

27.206343723s ago: executing program 1 (id=1464):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000081"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x0, "a701f6dd566a4aff01000000000000a83971e3aece62c53bb500", 0x20385655})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

27.206016692s ago: executing program 1 (id=1465):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) (async, rerun: 64)
keyctl$KEYCTL_WATCH_KEY(0x16, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)

27.204596024s ago: executing program 1 (id=1466):
r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40400)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae09, &(0x7f0000000180)=ANY=[@ANYRES32=r2])
r3 = syz_socket_connect_nvme_tcp()
ioctl$NBD_DO_IT(r0, 0xab03)
recvfrom$inet_nvme(r3, &(0x7f00000010c0)=""/3, 0x3, 0x40, &(0x7f0000001100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x4, 0x4, 0x1, 0x3}}, 0x80)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000001180)={0x6800000000000000, 0xdddd1000, 0x6, 0xc, 0x6})
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil)
munmap(&(0x7f0000004000/0x3000)=nil, 0x3000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$char_usb(r7, &(0x7f0000000080)=""/139, 0x8b)
setpriority(0x2, 0x2, 0x200)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
sendto$netrom(r6, &(0x7f00000000c0)="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", 0xfee, 0x80, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="25aedd15de010000611160000000000018000000000000000000000000000000950000e3ffffff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$NBD_SET_SIZE(r0, 0xab02, 0x8)

27.091219969s ago: executing program 1 (id=1468):
setuid(0xee01)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f150000000000108500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

27.013201257s ago: executing program 1 (id=1471):
syz_usbip_server_init(0x2) (async)
r0 = syz_usbip_server_init(0x2)
write$usbip_server(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0xf1d)

26.958671434s ago: executing program 34 (id=1471):
syz_usbip_server_init(0x2) (async)
r0 = syz_usbip_server_init(0x2)
write$usbip_server(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0xf1d)

16.493414853s ago: executing program 5 (id=1545):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0)
io_setup(0x2, &(0x7f0000000080)=<r2=>0x0)
io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x58c, r0, &(0x7f0000000680)="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", 0x1000, 0x1, 0x0, 0x2}, &(0x7f00000001c0))
ioctl$CDROM_DISC_STATUS(r1, 0x5327)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0xd0001})
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b80a0000000f23c80f21f866350c00a0000f23f866b9800000c00f326635000400000f300fc76a002e0f080f23742e3b5753baf80c66b8f494f78e66efbafc0c66b83ac8000066efda6509", 0x4f}], 0x1, 0x2e, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00')
preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="200001", @ANYRES32=0x0, @ANYBLOB="08ed"], 0x38}}, 0x0)

16.247107926s ago: executing program 5 (id=1551):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x14, 0x6, 0x1, 0x301, 0x70bd26, 0x25dfdbff, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48004)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="2e0003", 0x3)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYRES8=r0, @ANYRES32, @ANYBLOB="18009d"], 0x34}}, 0x0)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x115)
pipe2(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
syz_io_uring_setup(0x24fa, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x800000}, &(0x7f0000000100)=<r9=>0x0, &(0x7f00000000c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}})
r11 = mmap$IORING_OFF_SQES(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x100000d, 0x100010, r7, 0x10000000)
r12 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_int(r12, 0x0, 0x12, 0x0, &(0x7f0000000040))
r13 = syz_io_uring_setup(0x427f3, &(0x7f0000000500)={0x0, 0xf05e, 0x400, 0x800a, 0x3}, &(0x7f0000000300), &(0x7f0000000100))
r14 = io_uring_setup(0x3408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x1})
r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r14, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r13, 0x1c, 0x20000000, r15)
syz_io_uring_submit(r9, r11, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x1, 0x0, 0x1, {0x0, r15}})
pipe(&(0x7f0000000040))
fsopen(&(0x7f0000000080)='udf\x00', 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='jfs\x00', 0x11, 0x0)

16.023460959s ago: executing program 5 (id=1555):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8], [0x10000], [0x7]], '\x00', [{0xffffffff}, {0x0, 0x10}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}], '\x00', 0x1000})
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8], [0x10000], [0x7]], '\x00', [{0xffffffff}, {0x0, 0x10}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}], '\x00', 0x1000}) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x40) (async)

16.021992473s ago: executing program 5 (id=1556):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r0, 0x80015b11, 0x0)

11.179235753s ago: executing program 5 (id=1573):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bind$unix(r5, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
getpeername$packet(r4, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x4e)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp], 0x2)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r6, &(0x7f0000000240)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000680)="b1", 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r6, &(0x7f0000007a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="94", 0x1}], 0x1}}], 0x1, 0x404c000)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x1000f)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))

11.11235777s ago: executing program 5 (id=1580):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108)
r2 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r2, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$kcm(0x29, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r4])
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080))
munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="dc010000210000000400000000000000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

1.84780093s ago: executing program 6 (id=1653):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r3 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0)
r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xfffefffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0xfc, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0xfc}}, 0x0)

1.844090424s ago: executing program 6 (id=1654):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r0, 0x5b03, 0x0)

1.248035367s ago: executing program 6 (id=1659):
r0 = socket(0x1, 0x80000, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x24, &(0x7f0000000000), 0x20000000)

1.24763539s ago: executing program 6 (id=1661):
r0 = socket(0x10, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x40402, 0x0)
write$binfmt_elf64(r1, 0x0, 0x4f2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0x148}, 0x1, 0x0, 0x0, 0x4044800}, 0x0)
r3 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, 0x0, 0x6}}]}}]}, 0x58}}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0) (async)
chdir(&(0x7f0000000480)='./cgroup\x00') (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.events\x00', 0x275a, 0x0)
read$FUSE(r7, &(0x7f0000006440)={0x2020}, 0x2020) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7801, 0x0, 0x1}}) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)

1.163736409s ago: executing program 6 (id=1662):
r0 = fanotify_init(0x200, 0x0)
r1 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x5)
r2 = dup(r1)
close(r1)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000040)={0x7, @sdr={0x31303553, 0x5}})
r4 = open(0xfffffffffffffffc, 0x400, 0x85)
getpeername$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000004800000227bd7000ffdbdf250a000100413e6ac883a7013683b40a6786cf62926b2d76cb89859bef12c7d8ce100b6d88b9d57e49343c04946fdf7e599a7ce83a0daa9a364b301b7a919c6a541c40409fc04ed262c3e3a553b94bdff5da7d18dd19147bc22781d6c9b1f9c44485caef38512265db89ebe8778ddd26aca50a4c94f2ebd22f5c4a64e69e10121cc060f6f4e5f7c6765265dc23757575f1a5709275baeb81867fcbf5148e37e306a6d7", @ANYRESHEX=r2, @ANYBLOB="42c2000014000100fe8000000000000000000000000000bb"], 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x20008000)
fanotify_mark(r0, 0x1, 0x4000105b, r2, 0x0)
r5 = fanotify_init(0x200, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded', 0x101200, 0x1f9)
read$rfkill(r6, &(0x7f0000000040), 0x8)
r7 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r8 = dup(r7)
fanotify_mark(r5, 0x1, 0x8000009, r8, 0x0)
ftruncate(r7, 0xdcb)
copy_file_range(r7, &(0x7f0000000100)=0xb76, r8, 0x0, 0x2aad109b, 0x0)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000006a49e832f0", 0x0, 0x8000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0xfffffffffffffd2d}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000005000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x7f)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)

1.110306756s ago: executing program 6 (id=1663):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e00000020000e0ff00000000000000000000000000000000000000a02c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x154}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r3, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x32}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)

842.065718ms ago: executing program 3 (id=1666):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x700, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x64010100}}}})
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[r3], 0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000040)=[r3], &(0x7f00000000c0), 0x1, 0x1})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r6)
sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r7, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r8, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x3ffdcf, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_class_of_dev={{0x9}, {0x0, "33011c"}}}}, 0xa)
sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

757.342285ms ago: executing program 3 (id=1667):
mkdir(&(0x7f0000005740)='./file0\x00', 0x3b)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setresuid(0x0, r1, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x200, 0x20)
openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
open(&(0x7f00000024c0)='./file0\x00', 0xcc42, 0x5)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)

756.728518ms ago: executing program 3 (id=1668):
r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)

307.761144ms ago: executing program 0 (id=1669):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async)
r4 = timerfd_create(0x0, 0x0)
timerfd_settime(r4, 0x3, &(0x7f0000000140), 0x0) (async)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) (async)
timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) (async)
openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
chdir(&(0x7f0000000080)='./file1\x00') (async)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) (async)
r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x2000, 0xffffffff], [0x0, 0x0, 0x0, 0xfffffffc], [0x400000000000001]})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) (async)
r7 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2e, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff4, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0xffffffffffffff64, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x4}]}}]}, 0x60}}, 0x44080) (async)
socket$inet6_dccp(0xa, 0x6, 0x0) (async)
sendmmsg$inet6(r5, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)

222.980059ms ago: executing program 0 (id=1670):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000140)=""/155) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})

137.036259ms ago: executing program 0 (id=1671):
prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async, rerun: 32)
r1 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) (async, rerun: 32)
r2 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r2}, &(0x7f00000002c0)=""/46, 0x2e, &(0x7f0000000380)={&(0x7f0000000300)={'sha1-avx\x00'}}) (async)
recvmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/211, 0xd3}], 0x2, &(0x7f0000000240)=""/115, 0x73}, 0x3}, {{&(0x7f0000000400)=@nl=@proc, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/149, 0x95}}, {{&(0x7f00000005c0)=@vsock, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/14, 0xe}, {&(0x7f0000000680)=""/171, 0xab}], 0x2, &(0x7f0000001700)=""/4096, 0x1000}, 0x9f4}, {{&(0x7f0000000780)=@un=@abs, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/252, 0xfc}, {&(0x7f0000000900)=""/74, 0x4a}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/185, 0xb9}], 0x5, &(0x7f0000000c00)=""/173, 0xad}, 0x5fb4}, {{&(0x7f0000000cc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d40)=""/134, 0x86}, {&(0x7f0000000e00)=""/94, 0x5e}, {&(0x7f0000000e80)=""/205, 0xcd}], 0x3, &(0x7f0000000fc0)=""/245, 0xf5}, 0xe1}], 0x5, 0x101, &(0x7f0000001200)={0x0, 0x3938700}) (async)
eventfd2(0x0, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
epoll_create1(0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x20000804)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) (async)
syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x4) (async)
write$uinput_user_dev(r6, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x80, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) (async, rerun: 32)
ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) (async, rerun: 32)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x2020) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async, rerun: 32)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1294078, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3]) (rerun: 32)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)

136.859142ms ago: executing program 3 (id=1672):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xba02004b, 0x108, 0x4, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'caif0\x00', 'veth0\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x2}}]}, @common=@SET={0x60}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'wg2\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f0000000080)=""/237, 0xed)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000580)={0x1, &(0x7f0000000480)=[{0xffffffb6, 0x0, 0x0}]})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x20000000)
socket$inet6(0xa, 0x200000000003, 0x87)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=""/96, 0x60)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000)
syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r0], 0x0)

71.417412ms ago: executing program 3 (id=1673):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0xd, 0xb}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0xfffffff7, 0xfffffffc, 0x21c, {0x3, 0x2, 0x4f14, 0x5, 0x3c20, 0x9}, {0xec, 0x2, 0x7, 0x6, 0xfb, 0x43}, 0x8, 0x5, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

70.984741ms ago: executing program 0 (id=1674):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c00018006000600800a0000100002800c000b00050002"], 0x34}}, 0xc000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c0001800600060008"], 0x528}}, 0xc000) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c0001800600060008"], 0x528}}, 0xc000)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) (async)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
connect$llc(r4, &(0x7f0000000380)={0x1a, 0x18, 0x6, 0x0, 0x3, 0x3, @multicast}, 0x10) (async)
connect$llc(r4, &(0x7f0000000380)={0x1a, 0x18, 0x6, 0x0, 0x3, 0x3, @multicast}, 0x10)
r5 = accept4$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000280)=0x10, 0x80800)
connect$llc(r5, &(0x7f0000000300)={0x1a, 0x100, 0xfc, 0x5, 0x6, 0x48, @random="a1971cfa4611"}, 0x10)
fsmount(r2, 0x0, 0x81)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x4008090)

8.549703ms ago: executing program 0 (id=1675):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_sock_addr=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

952.181µs ago: executing program 0 (id=1676):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f000000bdc0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="01002bbd7000ffdbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="10005080050002000b00000084000500c550a33a5ddf966c09fee8658a5657eaff779e41ca40c1ba52d0943000c4b358ab50fbef3a062b266f38b3a36ce927f07e899769100c6f7c6716ff4b9ba5afb03f927a22fbefcc661489470a897dec4609aaa763a1d59559d0741e597d1cdd074b32f9f4f5e5e0e1918f0c6ce8ed37bc58961935249961b085c6c86d3dd26874a212f4c80aa797c008cc8d3cffb8ea8784c4be0c6c24"], 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x884)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000080a05000000000000000000020000000900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000aa45150ee85d411800b47b81bbbcd3cb2afd863cb8abaa8b126a4"], 0x54}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 8kmAU\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r8}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0xa, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="a1f872478e76a81b13ce", 0x0, 0x0, 0x0, 0x0, 0x0})
r11 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
fsmount(r11, 0x1, 0xf6)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000240)=0xe, 0x4)
sendmsg$netlink(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="300000001200000011030000000000000923fcae397539a7002f70726f632f6b65797300"/45], 0x30}], 0x1}, 0x0)
pread64(r3, &(0x7f0000000080)=""/237, 0xed, 0x5)
ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@none, 0x7})
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r12)

0s ago: executing program 3 (id=1677):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f00000002c0)=0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

kernel console output (not intermixed with test programs):

nk: 'syz.0.1102': attribute type 1 has an invalid length.
[  146.218293][ T9924] nbd: couldn't find a device at index 20
[  146.222579][ T9924] pim6reg0: tun_chr_ioctl cmd 1074025676
[  146.224243][ T9924] pim6reg0: owner set to 776
[  146.225955][ T9927] netlink: 'syz.2.1103': attribute type 12 has an invalid length.
[  146.482483][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout
[  146.495053][   T39] audit: type=1400 audit(4237.554:668): avc:  denied  { unmount } for  pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  146.505760][ T9937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.508346][ T9937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.770409][ T8957] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  146.849379][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1110'.
[  146.852877][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1110'.
[  146.916048][   T39] audit: type=1400 audit(4237.937:669): avc:  denied  { append } for  pid=9950 comm="syz.3.1112" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  146.920156][ T9951] random: crng reseeded on system resumption
[  146.943433][ T8957] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  146.946703][ T8957] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  146.949564][ T8957] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  146.952253][ T8957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.956809][ T9938] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  146.961248][ T8957] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  147.178185][ T9937] netlink: 'syz.1.1107': attribute type 4 has an invalid length.
[  147.180353][ T9937] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1107'.
[  147.230491][ T5970] usb 6-1: USB disconnect, device number 7
[  147.282387][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1115'.
[  147.282579][   T39] audit: type=1400 audit(4238.283:670): avc:  denied  { getopt } for  pid=9962 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  147.411897][ T5946] Bluetooth: hci1: command 0x0405 tx timeout
[  147.708541][ T9992] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1128'.
[  147.747514][ T9995] ieee802154 phy0 wpan0: encryption failed: -22
[  147.993053][T10013] netfs: Couldn't get user pages (rc=-14)
[  147.998739][   T39] audit: type=1400 audit(4238.947:671): avc:  denied  { execute } for  pid=10012 comm="syz.3.1134" path="/263/file0/cpu.stat" dev="9p" ino=38535905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  148.020937][   T39] audit: type=1400 audit(4238.975:672): avc:  denied  { append } for  pid=10019 comm="syz.2.1136" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  148.068508][T10028] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1139'.
[  148.074150][   T39] audit: type=1400 audit(4239.022:673): avc:  denied  { setopt } for  pid=10024 comm="syz.2.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  148.103739][   T39] audit: type=1400 audit(4239.050:674): avc:  denied  { nlmsg_write } for  pid=10033 comm="syz.0.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  148.133311][T10038] batman_adv: batadv0: Adding interface: dummy0
[  148.135069][T10038] batman_adv: batadv0: Interface activated: dummy0
[  148.142763][T10038] batadv0: mtu less than device minimum
[  148.146267][T10038] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  148.152004][T10038] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  148.157007][T10038] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  148.162110][T10038] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  148.167146][T10038] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  148.172194][T10038] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  148.177389][T10038] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  148.182397][T10038] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  148.186968][T10038] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  148.197934][T10029] kvm: pic: non byte write
[  148.466272][T10057] block device autoloading is deprecated and will be removed.
[  148.694793][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout
[  148.700303][T10070] netlink: 'syz.3.1151': attribute type 21 has an invalid length.
[  148.702666][T10070] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1151'.
[  148.707447][T10070] netlink: 'syz.3.1151': attribute type 21 has an invalid length.
[  148.710938][T10070] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1151'.
[  148.919289][ T8957] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  149.001780][T10084] can0: slcan on ptm2.
[  149.090458][ T8957] usb 7-1: Using ep0 maxpacket: 8
[  149.093969][ T8957] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  149.097108][ T8957] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  149.100787][ T8957] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  149.104743][ T8957] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  149.108400][ T8957] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.114544][ T8957] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  149.116125][T10083] can0 (unregistered): slcan off ptm2.
[  149.118261][ T8957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.140930][T10091] fuseblk: Unknown parameter 'fowner<18446744073709551615'
[  149.143024][   T39] audit: type=1400 audit(4240.023:675): avc:  denied  { mounton } for  pid=10090 comm="syz.1.1157" path="/185/file0/file0" dev="9p" ino=38535947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  149.152466][   T39] audit: type=1400 audit(4240.032:676): avc:  denied  { map } for  pid=10090 comm="syz.1.1157" path="/185/file0/cgroup.kill" dev="9p" ino=38535951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  149.155455][T10091] netfs: Couldn't get user pages (rc=-14)
[  149.164876][   T39] audit: type=1400 audit(4240.032:677): avc:  denied  { read write } for  pid=10090 comm="syz.1.1157" path="/185/file0/cgroup.kill" dev="9p" ino=38535951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  149.339555][ T8957] usb 7-1: usb_control_msg returned -32
[  149.341226][ T8957] usbtmc 7-1:16.0: can't read capabilities
[  149.458422][T10113] program syz.3.1162 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  149.484494][T10130] random: crng reseeded on system resumption
[  149.646231][ T5946] Bluetooth: hci1: command 0x0405 tx timeout
[  149.650396][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1167'.
[  149.655121][T10135] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1167'.
[  149.742744][ T5978] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  149.749762][T10145] usbtmc 7-1:16.0: INDICATOR_PULSE returned 0
[  149.822921][   T39] audit: type=1400 audit(4240.659:678): avc:  denied  { listen } for  pid=10151 comm="syz.3.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  149.875297][T10154] hfs: unable to load iocharset "io#harset"
[  149.913627][ T5978] usb 5-1: Using ep0 maxpacket: 8
[  149.916900][ T5978] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  149.919953][ T5978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  149.922984][ T5978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  149.927961][ T5978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  149.932137][ T5978] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.938292][ T5978] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  149.941767][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.045365][ T2305] usb 7-1: USB disconnect, device number 14
[  150.165607][ T5978] usb 5-1: usb_control_msg returned -32
[  150.167359][ T5978] usbtmc 5-1:16.0: can't read capabilities
[  150.229716][   T39] audit: type=1400 audit(4241.043:679): avc:  denied  { bind } for  pid=10167 comm="syz.1.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  150.236636][T10168] (syz.1.1177,10168,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "grpquotaE" or missing value
[  150.240004][T10168] (syz.1.1177,10168,1):ocfs2_fill_super:1178 ERROR: status = -22
[  150.246234][T10167] delete_channel: no stack
[  150.395613][T10186] FAULT_INJECTION: forcing a failure.
[  150.395613][T10186] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.399364][T10186] CPU: 3 UID: 0 PID: 10186 Comm: syz.1.1183 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[  150.402523][T10186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  150.405559][T10186] Call Trace:
[  150.406624][T10186]  <TASK>
[  150.407489][T10186]  dump_stack_lvl+0x16c/0x1f0
[  150.408873][T10186]  should_fail_ex+0x497/0x5b0
[  150.410247][T10186]  _copy_to_user+0x32/0xd0
[  150.411574][T10186]  simple_read_from_buffer+0xd0/0x160
[  150.413154][T10186]  proc_fail_nth_read+0x198/0x270
[  150.414602][T10186]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  150.416198][T10186]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  150.417786][T10186]  vfs_read+0x1df/0xbe0
[  150.418986][T10186]  ? __fget_files+0x1fc/0x3a0
[  150.420384][T10186]  ? __pfx___mutex_lock+0x10/0x10
[  150.421827][T10186]  ? __pfx_vfs_read+0x10/0x10
[  150.423240][T10186]  ? __fget_files+0x206/0x3a0
[  150.424683][T10186]  ksys_read+0x12b/0x250
[  150.425924][T10186]  ? __pfx_ksys_read+0x10/0x10
[  150.427342][T10186]  do_syscall_64+0xcd/0x250
[  150.428655][T10186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.430356][T10186] RIP: 0033:0x7f11ad58473c
[  150.431679][T10186] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  150.437174][T10186] RSP: 002b:00007f11ae400030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  150.439601][T10186] RAX: ffffffffffffffda RBX: 00007f11ad775fa0 RCX: 00007f11ad58473c
[  150.441856][T10186] RDX: 000000000000000f RSI: 00007f11ae4000a0 RDI: 0000000000000007
[  150.444126][T10186] RBP: 00007f11ae400090 R08: 0000000000000000 R09: 0000000000000000
[  150.446411][T10186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.448769][T10186] R13: 0000000000000000 R14: 00007f11ad775fa0 R15: 00007fff9902a5b8
[  150.451079][T10186]  </TASK>
[  150.543632][T10192] XFS (nullb0): Invalid superblock magic number
[  150.644486][T10211] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  150.765129][   T39] audit: type=1400 audit(4241.538:680): avc:  denied  { read } for  pid=10228 comm="syz.2.1196" path="socket:[35482]" dev="sockfs" ino=35482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  151.068124][ T5970] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  151.096841][T10248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28181 sclass=netlink_xfrm_socket pid=10248 comm=syz.3.1204
[  151.134443][T10250] ip6tnl2: entered allmulticast mode
[  151.218097][T10259] vivid-000: =================  START STATUS  =================
[  151.221229][T10259] vivid-000: Test Pattern: 75% Colorbar
[  151.223840][T10259] vivid-000: Fill Percentage of Frame: 100
[  151.226126][T10259] vivid-000: Horizontal Movement: No Movement
[  151.228416][ T5970] usb 6-1: Using ep0 maxpacket: 8
[  151.231485][T10259] vivid-000: Vertical Movement: No Movement
[  151.233269][T10259] vivid-000: OSD Text Mode: All
[  151.234820][T10259] vivid-000: Show Border: false
[  151.236353][T10259] vivid-000: Show Square: false
[  151.237821][ T5970] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  151.240302][ T5970] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  151.241084][T10259] vivid-000: Sensor Flipped Horizontally: true
[  151.243296][ T5970] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  151.245203][T10259] 
[  151.245210][T10259] vivid-000: Sensor Flipped Vertically: false
[  151.247995][ T5970] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  151.248013][ T5970] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  151.248024][ T5970] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  151.248059][ T5970] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  151.248761][T10259] 
[  151.250640][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.267292][T10259] vivid-000: Insert SAV Code in Image: false
[  151.269709][T10259] vivid-000: Insert EAV Code in Image: false
[  151.272365][T10259] vivid-000: Insert Video Guard Band: false
[  151.274145][T10259] vivid-000: Reduced Framerate: false
[  151.275742][T10259] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  151.277945][T10259] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  151.280198][T10259] vivid-000: Enable Capture Cropping: true
[  151.282068][T10259] vivid-000: Enable Capture Composing: true
[  151.283778][T10259] vivid-000: Enable Capture Scaler: true
[  151.285384][T10259] vivid-000: Timestamp Source: End of Frame
[  151.287095][T10259] vivid-000: Colorspace: sRGB
[  151.288465][T10259] vivid-000: Transfer Function: Default
[  151.290063][T10259] vivid-000: Y'CbCr Encoding: Default
[  151.291619][T10259] vivid-000: HSV Encoding: Hue 0-256
[  151.293231][T10259] vivid-000: Quantization: Default
[  151.294647][T10259] vivid-000: Apply Alpha To Red Only: false
[  151.296479][T10259] vivid-000: Standard Aspect Ratio: 4x3
[  151.298128][T10259] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  151.300342][T10259] vivid-000: DV Timings: 640x480p59 inactive
[  151.302047][T10259] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  151.304219][T10259] vivid-000: Maximum EDID Blocks: 2
[  151.305715][T10259] vivid-000: Limited RGB Range (16-235): false
[  151.307501][T10259] vivid-000: Rx RGB Quantization Range: Automatic
[  151.309348][T10259] vivid-000: Power Present: 0x00000001
[  151.310911][T10259] tpg source WxH: 640x360 (Y'CbCr)
[  151.312393][T10259] tpg field: 1
[  151.313411][T10259] tpg crop: 640x360@0x0
[  151.314677][T10259] tpg compose: 640x360@0x0
[  151.316043][T10259] tpg colorspace: 6
[  151.317162][T10259] tpg transfer function: 5/0
[  151.318488][T10259] tpg Y'CbCr encoding: 0/0
[  151.319793][T10259] tpg quantization: 0/0
[  151.321003][T10259] tpg RGB range: 0/2
[  151.322126][T10259] vivid-000: ==================  END STATUS  ==================
[  151.324321][T10261] vivid-000: =================  START STATUS  =================
[  151.326581][T10261] vivid-000: Test Pattern: 75% Colorbar
[  151.328333][T10261] vivid-000: Fill Percentage of Frame: 100
[  151.330012][T10261] vivid-000: Horizontal Movement: No Movement
[  151.331857][T10261] vivid-000: Vertical Movement: No Movement
[  151.333556][T10261] vivid-000: OSD Text Mode: All
[  151.334994][T10261] vivid-000: Show Border: false
[  151.336918][T10261] vivid-000: Show Square: false
[  151.338447][T10261] vivid-000: Sensor Flipped Horizontally: true
[  151.340221][T10261] vivid-000: Sensor Flipped Vertically: false
[  151.341950][T10261] vivid-000: Insert SAV Code in Image: false
[  151.343667][T10261] vivid-000: Insert EAV Code in Image: false
[  151.345425][T10261] vivid-000: Insert Video Guard Band: false
[  151.347392][T10261] vivid-000: Reduced Framerate: false
[  151.349263][T10261] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  151.351465][T10261] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  151.353809][T10261] vivid-000: Enable Capture Cropping: true
[  151.355499][T10261] vivid-000: Enable Capture Composing: true
[  151.357318][T10261] vivid-000: Enable Capture Scaler: true
[  151.359067][T10261] vivid-000: Timestamp Source: End of Frame
[  151.360806][T10261] vivid-000: Colorspace: sRGB
[  151.362167][T10261] vivid-000: Transfer Function: Default
[  151.363828][T10261] vivid-000: Y'CbCr Encoding: Default
[  151.365366][T10261] vivid-000: HSV Encoding: Hue 0-256
[  151.366898][T10261] vivid-000: Quantization: Default
[  151.368852][T10261] vivid-000: Apply Alpha To Red Only: false
[  151.371116][T10261] vivid-000: Standard Aspect Ratio: 4x3
[  151.372749][T10261] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  151.374989][T10261] vivid-000: DV Timings: 640x480p59 inactive
[  151.376718][T10261] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  151.379262][T10261] vivid-000: Maximum EDID Blocks: 2
[  151.380790][T10261] vivid-000: Limited RGB Range (16-235): false
[  151.382535][T10261] vivid-000: Rx RGB Quantization Range: Automatic
[  151.384343][T10261] vivid-000: Power Present: 0x00000001
[  151.385907][T10261] tpg source WxH: 640x360 (Y'CbCr)
[  151.387359][T10261] tpg field: 1
[  151.388368][T10261] tpg crop: 640x360@0x0
[  151.389644][T10261] tpg compose: 640x360@0x0
[  151.390932][T10261] tpg colorspace: 6
[  151.392052][T10261] tpg transfer function: 5/0
[  151.393380][T10261] tpg Y'CbCr encoding: 0/0
[  151.394664][T10261] tpg quantization: 0/0
[  151.395864][T10261] tpg RGB range: 0/2
[  151.397020][T10261] vivid-000: ==================  END STATUS  ==================
[  151.467928][ T5970] usb 6-1: usb_control_msg returned -32
[  151.469597][ T5970] usbtmc 6-1:16.0: can't read capabilities
[  151.595075][T10278] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=10278 comm=syz.3.1213
[  151.668769][T10284] xt_cgroup: xt_cgroup: no path or classid specified
[  151.845645][T10302] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0
[  151.869887][ T5946] Bluetooth: hci1: command 0x0405 tx timeout
[  151.992195][T10309] ntfs3(nbd3): try to read out of volume at offset 0x0
[  152.063592][ T5970] usb 5-1: USB disconnect, device number 18
[  152.967714][T10323] __nla_validate_parse: 8 callbacks suppressed
[  152.967731][T10323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1226'.
[  153.042974][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.322619][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  153.328350][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  153.333523][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  153.338393][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  153.342172][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  153.344542][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  153.442725][T10348] chnl_net:caif_netlink_parms(): no params data found
[  153.499816][T10348] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.501989][T10348] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.504048][T10348] bridge_slave_0: entered allmulticast mode
[  153.506290][T10348] bridge_slave_0: entered promiscuous mode
[  153.510546][T10348] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.512629][T10348] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.514648][T10348] bridge_slave_1: entered allmulticast mode
[  153.516968][T10348] bridge_slave_1: entered promiscuous mode
[  153.554302][T10348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.557918][T10348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.577594][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1233'.
[  153.579164][T10348] team0: Port device team_slave_0 added
[  153.580307][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1233'.
[  153.583059][T10348] team0: Port device team_slave_1 added
[  153.612788][T10348] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.614850][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.622797][T10348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.628781][T10348] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.631330][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.638624][T10348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.642317][T10359] net_ratelimit: 11 callbacks suppressed
[  153.642326][T10359] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  153.669334][T10348] hsr_slave_0: entered promiscuous mode
[  153.671281][T10348] hsr_slave_1: entered promiscuous mode
[  153.673096][T10348] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.675172][T10348] Cannot create hsr debugfs directory
[  153.751272][T10348] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  153.754582][T10348] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  153.761839][T10348] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  153.767712][T10348] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  153.784094][T10348] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.786302][T10348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.787477][   T39] kauditd_printk_skb: 10 callbacks suppressed
[  153.787491][   T39] audit: type=1400 audit(4244.373:691): avc:  denied  { execmod } for  pid=10367 comm="syz.0.1238" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  153.788466][T10348] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.790934][   T39] audit: type=1400 audit(4244.373:692): avc:  denied  { execute } for  pid=10367 comm="syz.0.1238" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  153.798304][T10348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.817343][T10348] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.823915][ T9357] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.828785][ T9357] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.842542][T10348] 8021q: adding VLAN 0 to HW filter on device team0
[  153.850553][ T9357] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.853490][ T9357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.859201][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.861276][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.946198][T10348] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.021419][ T5970] usb 6-1: USB disconnect, device number 8
[  154.041359][T10348] veth0_vlan: entered promiscuous mode
[  154.045175][T10348] veth1_vlan: entered promiscuous mode
[  154.056505][T10348] veth0_macvtap: entered promiscuous mode
[  154.061146][T10348] veth1_macvtap: entered promiscuous mode
[  154.069796][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.072911][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.075590][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.078570][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.085660][T10348] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.092868][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.098586][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.102066][T10348] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.106091][T10348] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.108800][T10348] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.111234][T10348] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.113721][T10348] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.152247][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.154532][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.165465][   T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.168302][   T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.182893][   T39] audit: type=1400 audit(4244.737:693): avc:  denied  { mounton } for  pid=10348 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  154.594860][   T39] audit: type=1400 audit(4245.121:694): avc:  denied  { bind } for  pid=10406 comm="syz.3.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  154.613324][T10410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1248'.
[  154.617522][T10410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1248'.
[  154.619572][T10412] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  154.660205][ T8957] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  154.671431][T10424] wg1: entered promiscuous mode
[  154.675214][T10417] XFS (nullb0): Invalid superblock magic number
[  154.809819][ T8957] usb 9-1: device descriptor read/64, error -71
[  154.869101][T10442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1258'.
[  155.077031][ T8957] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  155.216016][ T8957] usb 9-1: device descriptor read/64, error -71
[  155.235364][   T39] audit: type=1400 audit(4245.720:695): avc:  denied  { read } for  pid=10451 comm="syz.1.1261" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  155.247753][   T39] audit: type=1400 audit(4245.720:696): avc:  denied  { open } for  pid=10451 comm="syz.1.1261" path="/206/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  155.259526][T10453] block device autoloading is deprecated and will be removed.
[  155.263723][   T39] audit: type=1400 audit(4245.748:697): avc:  denied  { ioctl } for  pid=10451 comm="syz.1.1261" path="/206/file0/file0" dev="fuse" ino=64 ioctlcmd=0x915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  155.333770][ T8957] usb usb9-port1: attempt power cycle
[  155.536922][ T5946] Bluetooth: hci3: command tx timeout
[  155.662278][   T39] audit: type=1400 audit(4246.122:698): avc:  denied  { append } for  pid=10534 comm="syz.0.1266" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  155.718448][ T8957] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  155.750965][ T8957] usb 9-1: device descriptor read/8, error -71
[  156.007197][ T8957] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  156.035034][ T8957] usb 9-1: device descriptor read/8, error -71
[  156.090081][T10564] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1276'.
[  156.093285][T10564] trusted_key: encrypted_key: keylen parameter is missing
[  156.146264][ T8957] usb usb9-port1: unable to enumerate USB device
[  156.153343][   T39] audit: type=1400 audit(4246.580:699): avc:  denied  { connect } for  pid=10568 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  156.153818][T10570] ax25_connect(): syz.3.1278 uses autobind, please contact jreuter@yaina.de
[  156.167182][T10572] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1278'.
[  156.225354][T10582] gtp0: entered promiscuous mode
[  156.282077][T10593] block nbd3: NBD_DISCONNECT
[  156.330407][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'.
[  156.333042][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'.
[  156.379787][T10608] syz.0.1286: vmalloc error: size 3383414784, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  156.384238][T10608] CPU: 2 UID: 0 PID: 10608 Comm: syz.0.1286 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[  156.387172][T10608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  156.390158][T10608] Call Trace:
[  156.391112][T10608]  <TASK>
[  156.392031][T10608]  dump_stack_lvl+0x16c/0x1f0
[  156.393376][T10608]  warn_alloc+0x24d/0x3a0
[  156.394592][T10608]  ? __pfx_warn_alloc+0x10/0x10
[  156.395925][T10608]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  156.397543][T10608]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  156.399056][T10608]  ? kasan_save_stack+0x42/0x60
[  156.400411][T10608]  ? kasan_save_stack+0x33/0x60
[  156.401776][T10608]  ? kasan_save_track+0x14/0x30
[  156.403086][T10608]  ? __kasan_kmalloc+0xaa/0xb0
[  156.404390][T10608]  ? vb2_vmalloc_alloc+0xe2/0x3d0
[  156.405793][T10608]  ? vb2_core_create_bufs+0x55d/0xab0
[  156.407246][T10608]  ? vb2_create_bufs+0x566/0x780
[  156.408675][T10608]  ? v4l_create_bufs+0x156/0x270
[  156.410093][T10608]  __vmalloc_node_range_noprof+0x10df/0x1530
[  156.411746][T10608]  ? vb2_vmalloc_alloc+0x11e/0x3d0
[  156.413110][T10608]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  156.414797][T10608]  ? vb2_vmalloc_alloc+0x11e/0x3d0
[  156.416240][T10608]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  156.417821][T10608]  vmalloc_user_noprof+0x6b/0x90
[  156.419248][T10608]  ? vb2_vmalloc_alloc+0x11e/0x3d0
[  156.420737][T10608]  vb2_vmalloc_alloc+0x11e/0x3d0
[  156.422170][T10608]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  156.423753][T10608]  __vb2_queue_alloc+0x896/0x1230
[  156.425211][T10608]  vb2_core_create_bufs+0x55d/0xab0
[  156.426742][T10608]  ? __pfx_vb2_core_create_bufs+0x10/0x10
[  156.428383][T10608]  ? rcu_is_watching+0x12/0xc0
[  156.429765][T10608]  ? trace_contention_end+0xee/0x140
[  156.431290][T10608]  vb2_create_bufs+0x566/0x780
[  156.432672][T10608]  ? __pfx_vb2_create_bufs+0x10/0x10
[  156.434184][T10608]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  156.435891][T10608]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  156.437590][T10608]  v4l_create_bufs+0x156/0x270
[  156.438980][T10608]  __video_do_ioctl+0xaf0/0xf00
[  156.440400][T10608]  ? __pfx___video_do_ioctl+0x10/0x10
[  156.441947][T10608]  ? __might_fault+0xe3/0x190
[  156.443316][T10608]  video_usercopy+0x4d2/0x1620
[  156.444700][T10608]  ? __pfx___video_do_ioctl+0x10/0x10
[  156.446249][T10608]  ? __pfx_video_usercopy+0x10/0x10
[  156.447758][T10608]  v4l2_ioctl+0x1ba/0x250
[  156.449014][T10608]  ? __pfx_v4l2_ioctl+0x10/0x10
[  156.450421][T10608]  __x64_sys_ioctl+0x190/0x200
[  156.451816][T10608]  do_syscall_64+0xcd/0x250
[  156.453138][T10608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.454837][T10608] RIP: 0033:0x7fbd85785d29
[  156.456139][T10608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.461629][T10608] RSP: 002b:00007fbd8656b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  156.464011][T10608] RAX: ffffffffffffffda RBX: 00007fbd85975fa0 RCX: 00007fbd85785d29
[  156.466269][T10608] RDX: 00000000200004c0 RSI: 00000000c100565c RDI: 0000000000000087
[  156.468536][T10608] RBP: 00007fbd85801b08 R08: 0000000000000000 R09: 0000000000000000
[  156.470780][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.473033][T10608] R13: 0000000000000000 R14: 00007fbd85975fa0 R15: 00007ffd50e568b8
[  156.475290][T10608]  </TASK>
[  156.479461][T10608] Mem-Info:
[  156.480478][T10608] active_anon:6293 inactive_anon:0 isolated_anon:0
[  156.480478][T10608]  active_file:6626 inactive_file:48717 isolated_file:0
[  156.480478][T10608]  unevictable:3822 dirty:137 writeback:0
[  156.480478][T10608]  slab_reclaimable:11790 slab_unreclaimable:77869
[  156.480478][T10608]  mapped:24271 shmem:2478 pagetables:961
[  156.480478][T10608]  sec_pagetables:298 bounce:0
[  156.480478][T10608]  kernel_misc_reclaimable:0
[  156.480478][T10608]  free:449680 free_pcp:3083 free_cma:0
[  156.494592][T10608] Node 0 active_anon:25172kB inactive_anon:0kB active_file:26504kB inactive_file:194740kB unevictable:11752kB isolated(anon):0kB isolated(file):0kB mapped:97028kB dirty:524kB writeback:0kB shmem:6376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12912kB pagetables:3844kB sec_pagetables:1192kB all_unreclaimable? no
[  156.503806][T10608] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:24kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  156.512268][T10608] Node 0 DMA free:15344kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB
[  156.519827][T10608] lowmem_reserve[]: 0 1240 0 0 0
[  156.521397][T10608] Node 0 DMA32 free:200908kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:25172kB inactive_anon:0kB active_file:26504kB inactive_file:194740kB unevictable:11752kB writepending:524kB present:2080628kB managed:1269912kB mlocked:8224kB bounce:0kB free_pcp:5096kB local_pcp:1552kB free_cma:0kB
[  156.529843][T10608] lowmem_reserve[]: 0 0 0 0 0
[  156.531473][T10608] Node 1 Normal free:1583344kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:3536kB writepending:24kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:6500kB local_pcp:1236kB free_cma:0kB
[  156.539604][T10608] lowmem_reserve[]: 0 0 0 0 0
[  156.541006][T10608] Node 0 DMA: 2*4kB (M) 3*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 1*256kB (M) 2*512kB (M) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15344kB
[  156.545855][T10608] Node 0 DMA32: 55*4kB (UM) 51*8kB (UME) 2*16kB (UE) 10*32kB (UE) 5*64kB (UE) 207*128kB (UE) 189*256kB (UME) 89*512kB (UM) 35*1024kB (UME) 11*2048kB (UM) 5*4096kB (M) = 200596kB
[  156.550893][T10608] Node 1 Normal: 2*4kB (E) 3*8kB (E) 5*16kB (E) 136*32kB (UE) 51*64kB (UME) 19*128kB (UME) 9*256kB (UME) 6*512kB (UME) 5*1024kB (UE) 5*2048kB (UME) 379*4096kB (UM) = 1583280kB
[  156.556134][T10608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  156.558744][T10608] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  156.561660][T10608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  156.564853][T10608] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  156.567480][T10608] 57821 total pagecache pages
[  156.568822][T10608] 0 pages in swap cache
[  156.570010][T10608] Free swap  = 124332kB
[  156.571202][T10608] Total swap = 124996kB
[  156.572408][T10608] 1048443 pages RAM
[  156.573597][T10608] 0 pages HighMem/MovableOnly
[  156.574993][T10608] 281644 pages reserved
[  156.576193][T10608] 0 pages cma reserved
[  156.615129][   T39] audit: type=1400 audit(4247.010:700): avc:  denied  { create } for  pid=10617 comm="syz.3.1288" name="#34" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  156.905122][ T2305] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  156.915967][ T5970] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  157.066763][ T2305] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.070807][ T2305] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  157.076357][ T5970] usb 8-1: Using ep0 maxpacket: 8
[  157.076530][ T2305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  157.079060][ T5970] usb 8-1: config index 0 descriptor too short (expected 5924, got 36)
[  157.081313][ T2305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.081337][ T2305] usb 5-1: Product: syz
[  157.083774][ T5970] usb 8-1: config 250 has an invalid interface number: 228 but max is -1
[  157.086762][ T2305] usb 5-1: Manufacturer: syz
[  157.088078][ T5970] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0
[  157.088091][ T5970] usb 8-1: config 250 has no interface number 0
[  157.088107][ T5970] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  157.088120][ T5970] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  157.088131][ T5970] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  157.088163][ T5970] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  157.088176][ T5970] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  157.088208][ T5970] usb 8-1: config 250 interface 228 has no altsetting 0
[  157.089794][ T5970] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  157.091230][ T2305] usb 5-1: SerialNumber: syz
[  157.092559][ T5970] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  157.121313][ T5970] usb 8-1: Product: syz
[  157.122527][ T5970] usb 8-1: SerialNumber: syz
[  157.125866][ T5970] hub 8-1:250.228: bad descriptor, ignoring hub
[  157.127759][ T5970] hub 8-1:250.228: probe with driver hub failed with error -5
[  157.318527][T10622] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  157.341195][ T5970] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  157.760417][ T5946] Bluetooth: hci3: command tx timeout
[  157.966544][T10622] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  157.979542][T10624] usb 8-1: reset high-speed USB device number 17 using dummy_hcd
[  158.049021][T10382] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  158.183143][ T2305] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  158.185116][ T2305] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  158.187332][ T2305] cdc_mbim 5-1:1.0: setting rx_max = 2048
[  158.209361][T10382] usb 9-1: Using ep0 maxpacket: 8
[  158.212077][T10382] usb 9-1: config index 0 descriptor too short (expected 74, got 45)
[  158.214225][T10382] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  158.217168][T10382] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  158.219759][T10382] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  158.222435][T10382] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.225786][T10382] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  158.228161][T10382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.399038][ T2305] cdc_mbim 5-1:1.0: setting tx_max = 184
[  158.401499][ T2305] cdc_mbim 5-1:1.0: cdc-wdm1: USB WDM device
[  158.409100][ T2305] wwan wwan0: port wwan0mbim0 attached
[  158.418319][ T2305] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42
[  158.447629][T10382] usb 9-1: usb_control_msg returned -32
[  158.449180][T10382] usbtmc 9-1:16.0: can't read capabilities
[  158.535784][ T5649] 8021q: adding VLAN 0 to HW filter on device wwan0
[  158.594645][T10664] netlink: 'syz.1.1302': attribute type 2 has an invalid length.
[  158.596897][T10664] netlink: 'syz.1.1302': attribute type 11 has an invalid length.
[  158.599193][T10664] __nla_validate_parse: 3 callbacks suppressed
[  158.599201][T10664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1302'.
[  158.604625][T10664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.610908][T10664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.614230][T10664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.617820][T10664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.620818][T10664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.623566][T10664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.626780][T10664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.631120][T10664] macsec3: entered allmulticast mode
[  158.632683][T10664] batadv_slave_0: entered allmulticast mode
[  158.635381][T10664] batadv_slave_0: left allmulticast mode
[  158.953245][T10690] netlink: 'syz.1.1309': attribute type 1 has an invalid length.
[  158.955486][T10690] netlink: 'syz.1.1309': attribute type 4 has an invalid length.
[  158.958834][T10690] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1309'.
[  158.989800][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.992481][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.057905][T10694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.061203][T10694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.108441][T10697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1310'.
[  159.492644][   T39] kauditd_printk_skb: 5 callbacks suppressed
[  159.492655][   T39] audit: type=1400 audit(4249.704:706): avc:  denied  { attach_queue } for  pid=10710 comm="syz.3.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  159.984534][ T5946] Bluetooth: hci3: command tx timeout
[  160.421335][T10722] Trying to write to read-only block-device nullb0
[  160.497219][ T5970] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  160.642913][   T39] audit: type=1400 audit(4250.780:707): avc:  denied  { sys_chroot } for  pid=10731 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  160.650402][   T39] audit: type=1400 audit(4250.780:708): avc:  denied  { setgid } for  pid=10731 comm="dhcpcd" capability=6  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  160.657603][ T5970] usb 6-1: Using ep0 maxpacket: 8
[  160.660473][ T5970] usb 6-1: config index 0 descriptor too short (expected 5924, got 36)
[  160.663267][ T5970] usb 6-1: config 250 has an invalid interface number: 228 but max is -1
[  160.666271][ T5970] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0
[  160.670292][ T5970] usb 6-1: config 250 has no interface number 0
[  160.672506][ T5970] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  160.676314][ T5970] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  160.679774][ T5970] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  160.682749][ T5970] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  160.685522][ T5970] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  160.690049][ T5970] usb 6-1: config 250 interface 228 has no altsetting 0
[  160.693803][ T5970] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  160.696965][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  160.699626][ T5970] usb 6-1: Product: syz
[  160.701270][ T5970] usb 6-1: SerialNumber: syz
[  160.705386][ T5970] hub 6-1:250.228: bad descriptor, ignoring hub
[  160.707251][ T5970] hub 6-1:250.228: probe with driver hub failed with error -5
[  160.734026][T10734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1323'.
[  160.736688][T10734] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  161.411870][   T39] audit: type=1400 audit(4251.500:709): avc:  denied  { accept } for  pid=10739 comm="syz.3.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  161.769624][T10680] usb 8-1: reset high-speed USB device number 17 using dummy_hcd
[  161.930181][T10680] usb 8-1: device firmware changed
[  161.934035][ T2305] usb 8-1: USB disconnect, device number 17
[  161.936825][ T2305] usblp0: removed
[  161.940533][ T5970] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  161.941888][   T35] usb 9-1: USB disconnect, device number 6
[  161.954498][ T8957] usb 5-1: USB disconnect, device number 19
[  161.956542][ T8957] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  161.963085][ T5970] usb 6-1: USB disconnect, device number 9
[  162.003238][ T5970] usblp0: removed
[  162.044516][   T39] audit: type=1400 audit(4252.090:710): avc:  denied  { listen } for  pid=10768 comm="syz.4.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  162.068984][ T2305] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  162.087658][T10784] netlink: 'syz.4.1335': attribute type 16 has an invalid length.
[  162.089899][T10784] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1335'.
[  162.098801][ T8957] wwan wwan0: port wwan0mbim0 disconnected
[  162.182973][   T39] audit: type=1400 audit(4252.221:711): avc:  denied  { setopt } for  pid=10789 comm="syz.4.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  162.210004][ T5946] Bluetooth: hci3: command tx timeout
[  162.258665][   T39] audit: type=1804 audit(4252.295:712): pid=10811 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1339" name="/newroot/11/bus/file1" dev="overlay" ino=83 res=1 errno=0
[  162.267078][ T2305] usb 8-1: Using ep0 maxpacket: 8
[  162.270186][ T2305] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  162.273201][ T2305] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  162.275920][ T2305] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  162.278628][ T2305] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  162.281378][ T2305] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  162.286080][ T2305] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  162.288640][ T2305] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.321202][   T39] audit: type=1400 audit(4252.352:713): avc:  denied  { ioctl } for  pid=10809 comm="syz.4.1339" path="socket:[38184]" dev="sockfs" ino=38184 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  162.510631][ T2305] usb 8-1: usb_control_msg returned -32
[  162.512332][ T2305] usbtmc 8-1:16.0: can't read capabilities
[  162.980140][ T5948] Bluetooth: hci2: unexpected event for opcode 0x2031
[  163.461445][T10845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=10845 comm=syz.0.1347
[  163.641035][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1348'.
[  163.988255][T10864] cgroup: release_agent respecified
[  164.017609][   T39] audit: type=1400 audit(4253.942:714): avc:  denied  { append } for  pid=10867 comm="syz.0.1353" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  164.442031][ T5948] Bluetooth: hci3: command 0x0405 tx timeout
[  164.701248][ T9356] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.755024][ T9356] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.799765][ T5970] usb 8-1: USB disconnect, device number 18
[  164.853006][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  164.854113][T10889] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  164.857556][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  164.861088][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'.
[  164.864171][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  164.867096][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  164.871050][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  164.879061][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  164.883760][ T9356] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.887920][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'.
[  164.920294][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'.
[  164.959859][ T9356] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.963058][   T39] audit: type=1400 audit(4254.821:715): avc:  denied  { mounton } for  pid=10894 comm="syz.3.1363" path="/342/file0/file0" dev="9p" ino=38535947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  164.970595][   T39] audit: type=1400 audit(4254.821:716): avc:  denied  { open } for  pid=10894 comm="syz.3.1363" path="/342/file0/file0" dev="9p" ino=38535947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  164.983008][T10895] erofs (device erofs): cannot find valid erofs superblock
[  164.989114][T10895] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.004439][T10886] chnl_net:caif_netlink_parms(): no params data found
[  165.057656][T10886] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.059641][T10886] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.061682][T10886] bridge_slave_0: entered allmulticast mode
[  165.064745][T10886] bridge_slave_0: entered promiscuous mode
[  165.067534][T10886] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.069477][T10886] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.071456][T10886] bridge_slave_1: entered allmulticast mode
[  165.073566][T10886] bridge_slave_1: entered promiscuous mode
[  165.097132][T10886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.111906][T10886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.137117][   T39] audit: type=1400 audit(4254.980:717): avc:  denied  { accept } for  pid=10903 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  165.173392][   T39] audit: type=1400 audit(4255.017:718): avc:  denied  { create } for  pid=10907 comm="syz.3.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  165.177724][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'.
[  165.196550][T10886] team0: Port device team_slave_0 added
[  165.218898][T10886] team0: Port device team_slave_1 added
[  165.238015][ T9356] bridge_slave_1: left allmulticast mode
[  165.239782][ T9356] bridge_slave_1: left promiscuous mode
[  165.241499][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.246143][ T9356] bridge_slave_0: left allmulticast mode
[  165.247975][ T9356] bridge_slave_0: left promiscuous mode
[  165.250267][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.468340][T10382] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  165.529512][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  165.534051][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  165.537337][ T9356] bond0 (unregistering): Released all slaves
[  165.572861][T10886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.574854][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.582310][T10886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.590170][T10886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.592210][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.600293][T10886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.639028][T10886] hsr_slave_0: entered promiscuous mode
[  165.642068][T10382] usb 5-1: Using ep0 maxpacket: 8
[  165.642763][T10886] hsr_slave_1: entered promiscuous mode
[  165.644930][T10382] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  165.647534][T10382] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  165.655102][T10382] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  165.655249][T10886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.657917][T10382] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  165.661779][T10886] Cannot create hsr debugfs directory
[  165.663112][T10382] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  165.671193][T10382] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  165.677081][T10382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.807199][T10967] tmpfs: Bad value for 'mpol'
[  165.807537][T10958] ieee802154 phy0 wpan0: encryption failed: -22
[  165.828181][T10886] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  165.832138][T10886] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  165.835727][T10886] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  165.839563][T10886] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  165.873461][ T9356] hsr_slave_0: left promiscuous mode
[  165.876835][ T9356] hsr_slave_1: left promiscuous mode
[  165.879224][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.881832][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.883621][T10977] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  165.885971][T10977] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  165.891598][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.891997][T10977] vhci_hcd vhci_hcd.0: Device attached
[  165.893740][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.902598][T10382] usb 5-1: usb_control_msg returned -32
[  165.904196][T10382] usbtmc 5-1:16.0: can't read capabilities
[  165.928534][ T9356] veth1_macvtap: left promiscuous mode
[  165.930167][ T9356] veth0_macvtap: left promiscuous mode
[  165.931760][ T9356] veth1_vlan: left promiscuous mode
[  165.933221][ T9356] veth0_vlan: left promiscuous mode
[  165.968597][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1385'.
[  166.023268][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.025892][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.028255][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.030397][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.032532][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.034680][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.036897][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.039002][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.041291][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.043431][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.046927][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.049285][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.051524][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.053608][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.055810][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.058308][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.060476][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.062643][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.064739][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.066881][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.069109][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.071213][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.073304][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.081137][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.083414][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.085643][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.087975][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.088371][ T5978] vhci_hcd: vhci_device speed not set
[  166.091753][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.093947][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.096137][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.098352][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.100637][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.102875][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.105085][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.107266][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.109491][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.111733][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.113868][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.116049][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.118283][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.120567][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.123486][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.125711][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.128002][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.130244][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.132622][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.135140][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.137398][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.139942][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.142466][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.144908][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.147264][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.149677][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.152016][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.154307][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.156682][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.158966][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.161255][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.163285][ T5978] usb 43-1: new full-speed USB device number 3 using vhci_hcd
[  166.163619][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.167016][   T62] usb 8-1: new low-speed USB device number 19 using dummy_hcd
[  166.167790][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.172152][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.174386][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.176556][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.178698][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.180914][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 3016
[  166.336536][   T62] usb 8-1: config index 0 descriptor too short (expected 8240, got 27)
[  166.339949][   T62] usb 8-1: config 66 has too many interfaces: 107, using maximum allowed: 32
[  166.343485][   T62] usb 8-1: config 66 has an invalid descriptor of length 115, skipping remainder of the config
[  166.347736][   T62] usb 8-1: config 66 has 0 interfaces, different from the descriptor's value: 107
[  166.351300][   T62] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  166.354913][   T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.587419][T10979] usbip_core: unknown command
[  166.589063][T10979] vhci_hcd: unknown pdu 813183024
[  166.589554][   T62] usb 8-1: string descriptor 0 read error: -71
[  166.591138][T10979] usbip_core: unknown command
[  166.595377][   T74] vhci_hcd: stop threads
[  166.598953][   T74] vhci_hcd: release socket
[  166.600659][   T74] vhci_hcd: disconnect device
[  166.607605][   T62] usb 8-1: USB disconnect, device number 19
[  166.637489][ T9356] team0 (unregistering): Port device team_slave_1 removed
[  166.711335][ T9356] team0 (unregistering): Port device team_slave_0 removed
[  167.085159][ T5948] Bluetooth: hci3: command tx timeout
[  167.246691][T10982] netlink: 'syz.1.1385': attribute type 21 has an invalid length.
[  167.249992][T10982] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1385'.
[  167.281521][T10886] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.289756][T10886] 8021q: adding VLAN 0 to HW filter on device team0
[  167.294128][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.296819][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.307340][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.309464][ T9357] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.339605][ T5948] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  167.343205][ T5948] Bluetooth: hci2: Injecting HCI hardware error event
[  167.346609][ T5946] Bluetooth: hci2: hardware error 0x00
[  167.351637][T10996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1389'.
[  167.457345][T10886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.491285][T11018] netlink: 'syz.1.1391': attribute type 2 has an invalid length.
[  167.493546][T11018] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1391'.
[  167.501898][T11020] binder: 11019:11020 ioctl 40286608 20000000 returned -22
[  167.596283][T10886] veth0_vlan: entered promiscuous mode
[  167.600611][T10886] veth1_vlan: entered promiscuous mode
[  167.616400][T10886] veth0_macvtap: entered promiscuous mode
[  167.621317][T10886] veth1_macvtap: entered promiscuous mode
[  167.628433][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.634571][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.638203][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.642604][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.647194][T10886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.654420][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.658316][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.664191][T10886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.668044][T10886] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.671919][T10886] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.674502][T10886] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.677082][T10886] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.713669][ T9350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.718144][ T9350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.727437][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.730356][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.812486][T11051] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0
[  167.946884][T11070] xt_hashlimit: Unknown mode mask 180, kernel too old?
[  167.950137][   T39] audit: type=1400 audit(4257.618:719): avc:  denied  { ioctl } for  pid=11066 comm="syz.3.1399" path="socket:[42252]" dev="sockfs" ino=42252 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  167.959752][T11068] bridge0: entered promiscuous mode
[  167.961457][T11068] macvlan2: entered promiscuous mode
[  167.963824][T11068] bridge0: port 3(macvlan2) entered blocking state
[  167.965769][T11068] bridge0: port 3(macvlan2) entered disabled state
[  167.967657][T11068] macvlan2: entered allmulticast mode
[  167.969090][T11068] bridge0: entered allmulticast mode
[  167.979757][T11068] macvlan2: left allmulticast mode
[  167.981721][T11068] bridge0: left allmulticast mode
[  167.987391][T11068] bridge0: left promiscuous mode
[  168.028049][   T25] usb 5-1: USB disconnect, device number 20
[  168.145984][T11087] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  168.357932][T11099] overlayfs: conflicting lowerdir path
[  168.389604][   T39] audit: type=1400 audit(4258.029:720): avc:  denied  { wake_alarm } for  pid=11106 comm="syz.3.1408" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  168.397959][   T39] audit: type=1326 audit(4258.029:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11106 comm="syz.3.1408" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc774d85d29 code=0x0
[  168.401024][T11110] netlink: 'syz.5.1409': attribute type 2 has an invalid length.
[  168.407074][T11110] netlink: 'syz.5.1409': attribute type 1 has an invalid length.
[  168.609240][ T5948] Bluetooth: hci2: unexpected event for opcode 0x0c5b
[  168.651003][T11147] support for the xor transformation has been removed.
[  168.654095][   T39] audit: type=1800 audit(4258.273:722): pid=11147 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1419" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  168.654474][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'.
[  168.706488][   T39] audit: type=1400 audit(4258.319:723): avc:  denied  { relabelfrom } for  pid=11152 comm="syz.1.1422" name="" dev="pipefs" ino=38654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  168.707105][T11153] SELinux:  Context system_u: is not valid (left unmapped).
[  168.718381][   T39] audit: type=1400 audit(4258.338:724): avc:  denied  { relabelto } for  pid=11152 comm="syz.1.1422" name="" dev="pipefs" ino=38654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:"
[  168.771739][T10382] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  168.932047][T10382] usb 8-1: Using ep0 maxpacket: 8
[  168.938545][T10382] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  168.940959][T10382] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  168.944184][T10382] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  168.947077][T10382] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  168.949865][T10382] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  168.953614][T10382] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  168.956172][T10382] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.964451][   T35] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  169.124471][   T35] usb 5-1: Using ep0 maxpacket: 8
[  169.127156][   T35] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  169.129554][   T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  169.132346][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  169.135329][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  169.138141][   T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  169.141812][   T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  169.144400][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.185036][T10382] usb 8-1: usb_control_msg returned -32
[  169.186750][T10382] usbtmc 8-1:16.0: can't read capabilities
[  169.212990][T11139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1416'.
[  169.221344][T11139] overlayfs: failed to resolve './file1': -2
[  169.349077][   T25] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  169.364941][   T35] usb 5-1: usb_control_msg returned -32
[  169.366666][   T35] usbtmc 5-1:16.0: can't read capabilities
[  169.369712][   T35] usb 5-1: USB disconnect, device number 21
[  169.509532][   T25] usb 10-1: Using ep0 maxpacket: 8
[  169.513085][   T25] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  169.515551][   T25] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  169.518378][   T25] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  169.522011][   T25] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  169.526069][   T25] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  169.531886][   T25] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  169.535512][   T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.562908][ T5946] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  169.757803][   T25] usb 10-1: usb_control_msg returned -32
[  169.759506][   T25] usbtmc 10-1:16.0: can't read capabilities
[  169.761387][T11183] usbtmc 8-1:16.0: usb_control_msg returned -71
[  169.763601][   T35] usb 8-1: USB disconnect, device number 20
[  169.766443][T10382] usb 10-1: USB disconnect, device number 2
[  169.822119][T11192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11192 comm=syz.1.1430
[  169.833926][T11192] hpfs: hpfs_map_sector(): read error
[  169.910518][T11199] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  169.926748][T11201] batman_adv: batadv0: Interface deactivated: dummy0
[  169.928725][T11201] batman_adv: batadv0: Removing interface: dummy0
[  169.931250][T11201] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.933454][T11201] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.935970][T11201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.938458][T11201] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.941098][T11201] batman_adv: batadv0: Removing interface: ip6gretap1
[  169.991223][ T5946] Bluetooth: hci3: command tx timeout
[  170.130241][T11208] smc: net device lo erased user defined pnetid SYZ0
[  170.169510][T11211] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  170.621201][   T25] usb 5-1: new low-speed USB device number 22 using dummy_hcd
[  170.631918][T10382] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  170.782730][   T25] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  170.785084][   T25] usb 5-1: config 0 has no interface number 0
[  170.786863][   T25] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  170.789921][   T25] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  170.802939][T10382] usb 8-1: Using ep0 maxpacket: 8
[  170.803038][   T25] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  170.805711][T10382] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  170.807770][   T25] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  170.807784][   T25] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  170.815944][T10382] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  170.828588][T10382] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  170.831646][   T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  170.834300][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.839845][T10382] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  170.842770][T10382] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  170.846483][   T25] usb 5-1: config 0 descriptor??
[  170.846957][T11223] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  170.848482][T10382] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  170.851400][   T25] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  170.852757][T10382] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.968334][T11260] __nla_validate_parse: 4 callbacks suppressed
[  170.968345][T11260] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1449'.
[  171.074601][    T8] usb 5-1: USB disconnect, device number 22
[  171.083427][    T8] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  171.086002][T10382] usb 8-1: usb_control_msg returned -71
[  171.087650][T10382] usbtmc 8-1:16.0: can't read capabilities
[  171.088201][T11268] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57 sclass=netlink_tcpdiag_socket pid=11268 comm=syz.1.1452
[  171.091855][T10382] usb 8-1: USB disconnect, device number 21
[  171.273346][ T6130] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  171.433765][ T6130] usb 10-1: Using ep0 maxpacket: 8
[  171.436562][ T6130] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  171.438948][ T6130] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  171.441797][ T6130] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  171.444989][ T6130] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  171.447869][ T6130] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  171.451530][ T6130] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  171.454145][ T6130] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.605983][ T5978] vhci_hcd: vhci_device speed not set
[  171.640913][T11288] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1454'.
[  171.676792][ T6130] usb 10-1: usb_control_msg returned -32
[  171.678389][ T6130] usbtmc 10-1:16.0: can't read capabilities
[  171.685579][ T6130] usb 10-1: USB disconnect, device number 3
[  172.086505][   T35] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  172.097610][T10382] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  172.214354][ T5946] Bluetooth: hci3: command tx timeout
[  172.246277][   T35] usb 8-1: Using ep0 maxpacket: 8
[  172.250918][   T35] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  172.253305][   T35] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  172.256052][   T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  172.258969][   T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  172.261771][   T35] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  172.265406][   T35] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  172.267670][T10382] usb 5-1: Using ep0 maxpacket: 8
[  172.268084][   T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.271308][T10382] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  172.285906][T10382] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  172.289031][T10382] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  172.291703][T10382] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  172.296378][T10382] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  172.298198][ T5946] Bluetooth: min 0 < 6
[  172.298533][   T39] kauditd_printk_skb: 5 callbacks suppressed
[  172.298541][   T39] audit: type=1400 audit(4261.677:730): avc:  denied  { listen } for  pid=11327 comm="syz.5.1469" path=2F6E6577726F6F742F31352FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  172.301243][T10382] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  172.313786][T10382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.490041][   T35] usb 8-1: usb_control_msg returned -71
[  172.491758][   T35] usbtmc 8-1:16.0: can't read capabilities
[  172.494900][   T35] usb 8-1: USB disconnect, device number 22
[  172.518376][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  172.522982][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  172.525842][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  172.531181][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  172.533595][ T5948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  172.537725][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  172.538114][T10382] usb 5-1: usb_control_msg returned -32
[  172.541412][T10382] usbtmc 5-1:16.0: can't read capabilities
[  172.549263][T10382] usb 5-1: USB disconnect, device number 23
[  172.615412][T11336] chnl_net:caif_netlink_parms(): no params data found
[  172.659510][T11336] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.661575][T11336] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.663851][T11336] bridge_slave_0: entered allmulticast mode
[  172.666188][T11336] bridge_slave_0: entered promiscuous mode
[  172.671897][T11336] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.675839][T11336] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.677902][T11336] bridge_slave_1: entered allmulticast mode
[  172.680083][T11336] bridge_slave_1: entered promiscuous mode
[  172.700633][T11336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.711984][T11336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.746933][ T9350] bridge_slave_1: left allmulticast mode
[  172.748857][ T9350] bridge_slave_1: left promiscuous mode
[  172.750546][ T9350] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.753175][ T9350] bridge_slave_0: left allmulticast mode
[  172.754821][ T9350] bridge_slave_0: left promiscuous mode
[  172.756478][ T9350] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.800457][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'.
[  172.959999][ T9350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.963479][ T9350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.966585][ T9350] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  172.969191][ T9350] bond0 (unregistering): Released all slaves
[  172.973673][ T9350] bond1 (unregistering): Released all slaves
[  172.988033][T11336] team0: Port device team_slave_0 added
[  172.990270][T11346] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1474'.
[  173.000648][T11336] team0: Port device team_slave_1 added
[  173.036441][T11336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.038585][T11336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.045938][T11336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.050209][T11336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.052474][T11336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.060408][T11336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.082935][ T9350] IPVS: stopping backup sync thread 8144 ...
[  173.095961][T11336] hsr_slave_0: entered promiscuous mode
[  173.098107][T11336] hsr_slave_1: entered promiscuous mode
[  173.100117][T11336] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  173.102642][T11336] Cannot create hsr debugfs directory
[  173.205742][T11336] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  173.209492][T11336] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  173.214972][T11336] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  173.218001][T11336] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  173.230265][T11352] loop6: detected capacity change from 0 to 524287999
[  173.246068][ T9350] hsr_slave_0: left promiscuous mode
[  173.248186][ T9350] hsr_slave_1: left promiscuous mode
[  173.250001][ T9350] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.252533][ T9350] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.268398][ T9350] pim6reg (unregistering): left allmulticast mode
[  173.289236][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.289954][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'.
[  173.291935][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  173.296884][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.299543][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  173.302163][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.304806][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  173.307231][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.307267][T10382] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  173.309865][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  173.314392][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.316981][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  173.319516][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.322092][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  173.324445][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.327072][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  173.330797][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.333596][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  173.335861][T11352] ldm_validate_partition_table(): Disk read failed.
[  173.342389][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.345019][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  173.347546][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.350093][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  173.352560][T11352] Dev loop6: unable to read RDB block 0
[  173.354513][T11352]  loop6: unable to read partition table
[  173.356175][T11352] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5)
[  173.369109][ T9525] ldm_validate_partition_table(): Disk read failed.
[  173.375796][ T9525] Dev loop6: unable to read RDB block 0
[  173.377771][ T9525]  loop6: unable to read partition table
[  173.382340][T11357] ldm_validate_partition_table(): Disk read failed.
[  173.384507][T11357] Dev loop6: unable to read RDB block 0
[  173.386484][T11357]  loop6: unable to read partition table
[  173.388230][T11357] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5)
[  173.398915][ T5349] ldm_validate_partition_table(): Disk read failed.
[  173.403870][ T5349] Dev loop6: unable to read RDB block 0
[  173.406825][ T5349]  loop6: unable to read partition table
[  173.475705][T10382] usb 10-1: Using ep0 maxpacket: 8
[  173.479766][T10382] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  173.482547][T10382] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  173.485322][T10382] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  173.488636][T10382] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  173.491517][T10382] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  173.495133][T10382] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  173.498595][T10382] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.727172][T10382] usb 10-1: usb_control_msg returned -32
[  173.728852][T10382] usbtmc 10-1:16.0: can't read capabilities
[  173.735877][T10382] usb 10-1: USB disconnect, device number 4
[  173.995329][ T9350] team0 (unregistering): Port device team_slave_1 removed
[  174.048189][T11384] xt_NFQUEUE: number of queues (65534) out of range (got 131068)
[  174.048560][ T9350] team0 (unregistering): Port device team_slave_0 removed
[  174.301909][   T35] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  174.404039][T11388] overlay: ./file0 is not a directory
[  174.418657][T11388] netlink: 'syz.5.1485': attribute type 39 has an invalid length.
[  174.469951][   T35] usb 5-1: Using ep0 maxpacket: 8
[  174.472599][   T35] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  174.475205][   T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  174.480467][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  174.489630][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  174.492412][   T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  174.495845][   T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  174.498325][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.534106][ T5946] Bluetooth: hci3: command tx timeout
[  174.592139][   T39] audit: type=1400 audit(4263.829:731): avc:  denied  { nlmsg_write } for  pid=11390 comm="syz.3.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  174.612414][T11336] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.618455][T11336] 8021q: adding VLAN 0 to HW filter on device team0
[  174.631650][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.633833][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.638528][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.640581][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.737065][   T35] usb 5-1: usb_control_msg returned -71
[  174.739801][   T35] usbtmc 5-1:16.0: can't read capabilities
[  174.749680][   T35] usb 5-1: USB disconnect, device number 24
[  174.753324][T11336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.780086][ T5946] Bluetooth: hci1: command tx timeout
[  174.848120][T11336] veth0_vlan: entered promiscuous mode
[  174.851936][T11336] veth1_vlan: entered promiscuous mode
[  174.871360][T11336] veth0_macvtap: entered promiscuous mode
[  174.880978][T11336] veth1_macvtap: entered promiscuous mode
[  174.899853][T11336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.900147][T10382] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  174.902719][T11336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.902731][T11336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.910627][T11336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.914116][T11336] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.918570][T11336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.921845][T11336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.925136][T11336] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.930950][T11336] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.933480][T11336] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.936042][T11336] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.938569][T11336] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.991146][ T9347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.993470][ T9347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.015549][ T9347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.019592][ T9347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.037068][T10382] usb 8-1: device descriptor read/64, error -71
[  175.293063][T10382] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  175.432045][T10382] usb 8-1: device descriptor read/64, error -71
[  175.550235][T10382] usb usb8-port1: attempt power cycle
[  175.571187][   T35] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  175.731280][   T35] usb 5-1: Using ep0 maxpacket: 8
[  175.734190][   T35] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  175.736946][   T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  175.739985][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  175.745198][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  175.748914][   T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  175.754036][   T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  175.757450][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.923806][T10382] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  175.946149][T10382] usb 8-1: device descriptor read/8, error -71
[  175.980005][   T35] usb 5-1: GET_CAPABILITIES returned 0
[  175.981860][   T35] usbtmc 5-1:16.0: can't read capabilities
[  176.035369][   T39] audit: type=1400 audit(4265.185:732): avc:  denied  { read } for  pid=11420 comm="syz.5.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  176.182430][T11487] Mount JFS Failure: -22
[  176.184877][T11487] jfs_mount failed w/return code = -22
[  176.188344][T11487] ALSA: mixer_oss: invalid OSS volume ''
[  176.205479][T10382] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  176.224030][T10382] usb 8-1: device descriptor read/8, error -71
[  176.282171][T11498] cgroup: release_agent respecified
[  176.342520][T10382] usb usb8-port1: unable to enumerate USB device
[  176.568069][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1504'.
[  176.571146][T11516] netlink: 'syz.5.1504': attribute type 1 has an invalid length.
[  176.582513][T11516] bond1: entered allmulticast mode
[  176.584181][T11516] 8021q: adding VLAN 0 to HW filter on device bond1
[  176.749897][T11521] /dev/sr0: Can't open blockdev
[  176.854499][T11523] /dev/sr0: Can't open blockdev
[  177.003526][ T5946] Bluetooth: hci1: command tx timeout
[  177.020856][T11537] : entered promiscuous mode
[  177.046431][T11541] binder: 11539:11541 ioctl c0306201 20000440 returned -14
[  177.255372][T10382] hid-generic 00EC:0003:0000.0005: unknown main item tag 0x0
[  177.258076][T10382] hid-generic 00EC:0003:0000.0005: unknown main item tag 0x0
[  177.261201][T10382] hid-generic 00EC:0003:0000.0005: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  177.306475][   T39] audit: type=1400 audit(4266.373:733): avc:  denied  { checkpoint_restore } for  pid=11559 comm="syz.5.1516" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  178.290025][ T5946] block nbd5: Receive control failed (result -107)
[  178.380342][T11578] syz.5.1521: attempt to access beyond end of device
[  178.380342][T11578] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[  178.382555][T11577] nbd5: detected capacity change from 0 to 20
[  178.385102][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  178.390573][T11578] block nbd5: Dead connection, failed to find a fallback
[  178.392951][T11578] block nbd5: shutting down sockets
[  178.394816][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=9, location=9
[  178.394866][ T9521] ldm_validate_partition_table(): Disk read failed.
[  178.397409][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8, location=8
[  178.399937][ T9521] Dev nbd5: unable to read RDB block 0
[  178.401820][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=7, location=7
[  178.403946][ T9521]  nbd5: unable to read partition table
[  178.406045][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  178.407472][ T9521] nbd5: partition table beyond EOD, truncated
[  178.410203][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  178.414509][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=4, location=4
[  178.416752][ T9521] ldm_validate_partition_table(): Disk read failed.
[  178.417505][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=3, location=3
[  178.419244][ T9521] Dev nbd5: unable to read RDB block 0
[  178.421456][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=2, location=2
[  178.423239][ T9521]  nbd5: unable to read partition table
[  178.425666][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  178.427330][ T9521] nbd5: partition table beyond EOD, truncated
[  178.430803][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  178.436230][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=1, location=1
[  178.439544][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0
[  178.442818][T11578] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  178.446255][T11578] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[  178.524200][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1522'.
[  178.597673][T11584] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001
[  178.970689][  T832] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  179.130945][  T832] usb 10-1: Using ep0 maxpacket: 8
[  179.133828][  T832] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  179.136156][  T832] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  179.139083][  T832] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  179.142173][  T832] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  179.145057][  T832] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  179.148635][  T832] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  179.151201][  T832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.238074][ T5946] Bluetooth: hci1: command tx timeout
[  179.372164][  T832] usb 10-1: usb_control_msg returned -32
[  179.373820][  T832] usbtmc 10-1:16.0: can't read capabilities
[  180.662207][   T39] audit: type=1400 audit(4269.507:734): avc:  denied  { remount } for  pid=11664 comm="syz.3.1527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  181.461616][ T5946] Bluetooth: hci1: command tx timeout
[  181.633548][T11460] usbtmc 5-1:16.0: usb_control_msg returned -110
[  181.660093][ T8957] usb 5-1: USB disconnect, device number 25
[  181.663068][   T39] audit: type=1400 audit(4270.442:735): avc:  denied  { accept } for  pid=11690 comm="syz.6.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  181.666357][T11693] CUSE: info not properly terminated
[  181.734085][   T39] audit: type=1400 audit(4270.508:736): avc:  denied  { setattr } for  pid=11700 comm="syz.3.1532" name="UDPLITEv6" dev="sockfs" ino=46213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  181.784533][T11716] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  182.020527][T11734] /dev/sg0: Can't lookup blockdev
[  182.092238][  T832] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  182.263245][  T832] usb 8-1: Using ep0 maxpacket: 8
[  182.265972][  T832] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  182.268313][  T832] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  182.271044][  T832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  182.273754][  T832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  182.276701][  T832] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  182.280359][  T832] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  182.283007][  T832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.503595][  T832] usb 8-1: GET_CAPABILITIES returned 0
[  182.505357][  T832] usbtmc 8-1:16.0: can't read capabilities
[  182.733839][  T832] usb 10-1: USB disconnect, device number 5
[  182.747762][T11741] block nbd5: Unsupported socket: shutdown callout must be supported.
[  182.750637][T11741] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1541'.
[  182.778077][T11741] block nbd5: Unsupported socket: shutdown callout must be supported.
[  182.786200][T11749] binder: 11748:11749 ioctl c0306201 200001c0 returned -22
[  182.813228][   T39] audit: type=1400 audit(4271.518:737): avc:  denied  { create } for  pid=11751 comm="syz.0.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  182.818860][   T39] audit: type=1400 audit(4271.518:738): avc:  denied  { ioctl } for  pid=11751 comm="syz.0.1544" path="socket:[45329]" dev="sockfs" ino=45329 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  183.119951][T11780] netlink: 'syz.5.1551': attribute type 3 has an invalid length.
[  183.170662][T11792] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1552'.
[  183.170774][   T39] audit: type=1400 audit(4271.855:739): avc:  denied  { map } for  pid=11778 comm="syz.5.1551" path="pipe:[43595]" dev="pipefs" ino=43595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  183.182303][T11780] syz.5.1551: attempt to access beyond end of device
[  183.182303][T11780] loop5: rw=0, sector=64, nr_sectors = 8 limit=0
[  183.182926][T11792] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1552'.
[  183.185996][   T39] audit: type=1400 audit(4271.864:740): avc:  denied  { execute } for  pid=11778 comm="syz.5.1551" path="pipe:[43595]" dev="pipefs" ino=43595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  183.190532][T11792] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1552'.
[  183.194701][T11780] syz.5.1551: attempt to access beyond end of device
[  183.194701][T11780] loop5: rw=0, sector=120, nr_sectors = 8 limit=0
[  183.197121][T11792] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1552'.
[  183.204936][T11780] Mount JFS Failure: -5
[  183.206199][T11780] jfs_mount failed w/return code = -5
[  183.429680][ T8957] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  183.514232][   T35] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  183.620968][ T8957] usb 11-1: Using ep0 maxpacket: 32
[  183.624898][ T8957] usb 11-1: config 0 has an invalid interface number: 184 but max is 0
[  183.628143][ T8957] usb 11-1: config 0 has no interface number 0
[  183.629833][ T8957] usb 11-1: config 0 interface 184 has no altsetting 0
[  183.633309][ T8957] usb 11-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  183.635872][ T8957] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.638073][ T8957] usb 11-1: Product: syz
[  183.639253][ T8957] usb 11-1: Manufacturer: syz
[  183.640572][ T8957] usb 11-1: SerialNumber: syz
[  183.643364][ T8957] usb 11-1: config 0 descriptor??
[  183.646103][ T8957] smsc75xx v1.0.0
[  183.647181][ T8957] smsc75xx 11-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  183.650083][ T8957] smsc75xx 11-1:0.184: probe with driver smsc75xx failed with error -22
[  183.686530][   T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.689841][   T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.692709][   T35] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  183.695341][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.699710][   T35] usb 5-1: config 0 descriptor??
[  184.136648][   T35] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  184.139930][   T35] hid-thrustmaster 0003:044F:B65D.0006: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0
[  184.143151][   T35] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints?
[  184.349302][    C3] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -32
[  184.416955][   T35] usb 5-1: USB disconnect, device number 26
[  185.057828][T11811] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  185.310597][   T39] audit: type=1400 audit(4273.847:741): avc:  denied  { execmem } for  pid=11820 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  185.780557][ T5970] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  185.940935][ T5970] usb 5-1: Using ep0 maxpacket: 8
[  185.944158][ T5970] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  185.947239][ T5970] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  185.950010][ T5970] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  185.952912][ T5970] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  185.956663][ T5970] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  185.959233][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.177961][ T5970] usb 5-1: GET_CAPABILITIES returned 0
[  186.179570][ T5970] usbtmc 5-1:16.0: can't read capabilities
[  186.385529][   T63] usb 11-1: USB disconnect, device number 2
[  186.404730][   T39] audit: type=1400 audit(4274.885:742): avc:  denied  { create } for  pid=11843 comm="syz.6.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  186.410148][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1567'.
[  186.428274][   T39] audit: type=1400 audit(4274.904:743): avc:  denied  { write } for  pid=11843 comm="syz.6.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  186.429531][T11844] openvswitch: netlink: Multiple metadata blocks provided
[  186.438151][T11844] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1567'.
[  186.881622][   T63] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  187.052639][   T63] usb 11-1: Using ep0 maxpacket: 16
[  187.055755][   T63] usb 11-1: config 0 has an invalid interface number: 8 but max is 0
[  187.058767][   T63] usb 11-1: config 0 has no interface number 0
[  187.060665][   T63] usb 11-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  187.065075][   T63] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  187.068642][   T63] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  187.073445][   T63] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  187.078023][   T63] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  187.081131][   T63] usb 11-1: Product: syz
[  187.082741][   T63] usb 11-1: SerialNumber: syz
[  187.086861][   T63] usb 11-1: config 0 descriptor??
[  187.089364][T11850] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  187.093604][   T63] cm109 11-1:0.8: invalid payload size 1024, expected 4
[  187.097056][   T63] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input13
[  187.307159][    C1] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71
[  187.307407][ T2305] usb 11-1: USB disconnect, device number 3
[  187.309221][    C1] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  187.319457][ T2305] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  188.132740][T11722] usbtmc 8-1:16.0: usb_control_msg returned -110
[  188.145965][   T63] usb 8-1: USB disconnect, device number 27
[  188.148726][ T5970] usb 5-1: USB disconnect, device number 27
[  188.190340][   T39] audit: type=1400 audit(4276.550:744): avc:  denied  { mounton } for  pid=11910 comm="syz.5.1573" path="/49/file1/file0" dev="autofs" ino=44388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  188.200278][T11919] team0: No ports can be present during mode change
[  188.225942][T11919] wireguard0: entered promiscuous mode
[  188.227609][T11919] wireguard0: entered allmulticast mode
[  188.287240][T11935] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=770 sclass=netlink_tcpdiag_socket pid=11935 comm=syz.3.1583
[  188.318192][T11939] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  188.344847][T11942] syz.3.1586: attempt to access beyond end of device
[  188.344847][T11942] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0
[  188.350335][T11942] syz.3.1586: attempt to access beyond end of device
[  188.350335][T11942] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0
[  188.354525][T11942] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  188.358219][T11942] syz.3.1586: attempt to access beyond end of device
[  188.358219][T11942] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0
[  188.362652][T11942] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  188.365696][T11942] syz.3.1586: attempt to access beyond end of device
[  188.365696][T11942] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0
[  188.371191][T11942] syz.3.1586: attempt to access beyond end of device
[  188.371191][T11942] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0
[  188.375133][T11942] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  188.378551][T11942] syz.3.1586: attempt to access beyond end of device
[  188.378551][T11942] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0
[  188.382436][T11942] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  188.385378][T11942] syz.3.1586: attempt to access beyond end of device
[  188.385378][T11942] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0
[  188.389206][T11942] syz.3.1586: attempt to access beyond end of device
[  188.389206][T11942] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0
[  188.393780][T11942] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  188.396942][T11942] syz.3.1586: attempt to access beyond end of device
[  188.396942][T11942] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0
[  188.401102][T11942] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  188.403957][T11942] syz.3.1586: attempt to access beyond end of device
[  188.403957][T11942] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  188.407683][T11942] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  188.410608][T11942] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  188.413300][T11942] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  188.570748][   T35] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[  188.742130][   T35] usb 11-1: Using ep0 maxpacket: 8
[  188.744898][   T35] usb 11-1: config index 0 descriptor too short (expected 301, got 45)
[  188.747686][   T35] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  188.750653][   T35] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  188.754598][   T35] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  188.758038][   T35] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  188.762046][   T35] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  188.765606][   T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.985863][   T35] usb 11-1: GET_CAPABILITIES returned 0
[  188.988002][   T35] usbtmc 11-1:16.0: can't read capabilities
[  189.213602][T12019] wg1: entered promiscuous mode
[  189.214668][T12021] binder: Binderfs stats mode cannot be changed during a remount
[  189.215521][   T39] audit: type=1400 audit(4277.514:745): avc:  denied  { remount } for  pid=12018 comm="syz.0.1598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  190.197319][T12047] hfsplus: unable to find HFS+ superblock
[  191.156363][T12052] mkiss: ax0: crc mode is auto.
[  191.214415][T12053] xt_hashlimit: size too large, truncated to 1048576
[  191.730687][T12057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.377608][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1609'.
[  193.653921][T12089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1617'.
[  193.657037][T12089] tipc: Started in network mode
[  193.659036][T12089] tipc: Node identity 7, cluster identity 5
[  193.661159][T12089] tipc: Node number set to 7
[  193.771141][T12093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.775159][T12093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.033727][   T25] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  194.622891][T11937] usbtmc 11-1:16.0: usb_control_msg returned -110
[  194.639345][   T35] usb 11-1: USB disconnect, device number 4
[  194.708548][T12102] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[  194.724850][T12108] tmpfs: Bad value for 'mpol'
[  194.740913][T12106] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  194.747723][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1624'.
[  194.752335][T12112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1624'.
[  194.754320][   T39] audit: type=1400 audit(4282.677:746): avc:  denied  { execute } for  pid=12105 comm="syz.0.1622" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  194.769009][T12112] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=12112 comm=syz.3.1624
[  194.771305][   T39] audit: type=1400 audit(4282.705:747): avc:  denied  { ioctl } for  pid=12111 comm="syz.3.1624" path="socket:[44725]" dev="sockfs" ino=44725 ioctlcmd=0xae8a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  194.835396][T12121] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  195.044641][   T39] audit: type=1400 audit(4282.958:748): avc:  denied  { mount } for  pid=12130 comm="syz.0.1631" name="/" dev="9p" ino=38535835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  195.051126][   T39] audit: type=1400 audit(4282.967:749): avc:  denied  { rename } for  pid=12130 comm="syz.0.1631" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=38535942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  195.057925][T12132] sctp: [Deprecated]: syz.0.1631 (pid 12132) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.057925][T12132] Use struct sctp_sack_info instead
[  195.507594][T12137] xt_l2tp: v2 doesn't support IP mode
[  195.680880][T12156] program syz.6.1638 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  195.688847][T12156] macvtap0: entered promiscuous mode
[  195.691883][T12156] macvtap0: left promiscuous mode
[  195.895619][   T39] audit: type=1400 audit(4283.762:750): avc:  denied  { unmount } for  pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  196.043475][   T63] usb 11-1: new low-speed USB device number 5 using dummy_hcd
[  196.046014][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'.
[  196.205555][   T63] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  196.214475][   T63] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  196.217544][   T63] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  196.220826][   T63] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  196.223941][   T63] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  196.228394][   T63] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  196.230545][   T63] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  196.233568][   T63] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  196.237019][   T63] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  196.240182][   T63] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  196.244050][   T63] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  196.246239][   T63] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  196.249664][   T63] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  196.252966][   T63] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  196.256083][   T63] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  196.261565][   T63] usb 11-1: string descriptor 0 read error: -22
[  196.263389][   T63] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  196.265967][   T63] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.271299][   T63] adutux 11-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  196.326192][T12170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26198 sclass=netlink_route_socket pid=12170 comm=syz.3.1643
[  196.546840][ T5970] usb 11-1: USB disconnect, device number 5
[  196.605478][T12174] kvm: pic: non byte write
[  196.696374][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'.
[  197.453222][   T39] audit: type=1326 audit(4285.212:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.3.1652" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc774d85d29 code=0x0
[  197.502344][   T39] audit: type=1400 audit(4285.259:752): avc:  denied  { connect } for  pid=12202 comm="syz.6.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  197.747921][T12214] new mount options do not match the existing superblock, will be ignored
[  198.057434][T12219] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1657'.
[  198.060231][T12219] ksmbd: Unknown IPC event: 0, ignore.
[  198.130483][   T39] audit: type=1400 audit(4285.848:753): avc:  denied  { create } for  pid=12228 comm="syz.6.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  198.136263][   T39] audit: type=1400 audit(4285.848:754): avc:  denied  { write } for  pid=12228 comm="syz.6.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  198.136798][T12229] sch_tbf: burst 824 is lower than device lo mtu (65550) !
[  198.181211][   T39] audit: type=1400 audit(4285.895:755): avc:  denied  { watch watch_reads } for  pid=12232 comm="syz.6.1662" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=44964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  198.186561][T12234] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1662'.
[  198.239012][T12237] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  198.491668][T10382] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  198.502622][T12242] netlink: 'syz.3.1665': attribute type 11 has an invalid length.
[  198.674962][T10382] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.678154][T10382] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  198.682641][T10382] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  198.685393][T10382] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.687739][T10382] usb 11-1: Product: syz
[  198.689008][T10382] usb 11-1: Manufacturer: syz
[  198.690374][T10382] usb 11-1: SerialNumber: syz
[  198.910185][T12237] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  199.209980][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.212027][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.213980][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.215916][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.217929][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.220115][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.222095][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.224058][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.226019][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.227983][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.230160][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.232168][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.234124][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.236087][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.238131][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.240217][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.242434][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.244422][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.246397][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.248363][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.250331][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.252452][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.254409][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.256387][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.258355][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.260329][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.262455][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.264448][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.266443][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.268400][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.270377][T12264] tracefs: Unknown parameter '18446744073709551615'
[  199.295483][T12271] openvswitch: netlink: Actions may not be safe on all matching packets
[  199.298642][T12271] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1674'.
[  199.299064][T12272] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1674'.
[  199.301285][T12271] openvswitch: netlink: Missing key (keys=40, expected=80)
[  199.303939][T12272] openvswitch: netlink: Missing key (keys=40, expected=80)
[  199.341387][T12237] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1663'.
[  199.363060][T12277] ata1.00: invalid multi_count 128 ignored
[  199.433445][ T5970] 
[  199.434484][ T5970] ======================================================
[  199.437244][ T5970] WARNING: possible circular locking dependency detected
[  199.439978][ T5970] 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 Not tainted
[  199.443942][ T5970] ------------------------------------------------------
[  199.446918][ T5970] kworker/2:3/5970 is trying to acquire lock:
[  199.449294][ T5970] ffff888026bc1470 (&q->q_usage_counter(queue)#51){++++}-{0:0}, at: blk_mq_alloc_request+0x59b/0x950
[  199.453595][ T5970] 
[  199.453595][ T5970] but task is already holding lock:
[  199.456405][ T5970] ffff888026bc1a88 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0
[  199.460252][ T5970] 
[  199.460252][ T5970] which lock already depends on the new lock.
[  199.460252][ T5970] 
[  199.464270][ T5970] 
[  199.464270][ T5970] the existing dependency chain (in reverse order) is:
[  199.467698][ T5970] 
[  199.467698][ T5970] -> #5 (&q->limits_lock){+.+.}-{4:4}:
[  199.470596][ T5970]        __mutex_lock+0x19b/0xa60
[  199.472474][ T5970]        __nbd_set_size+0x2c0/0x730
[  199.474105][ T5970]        nbd_start_device+0x8fd/0xd70
[  199.476118][ T5970]        nbd_ioctl+0x21a/0xfd0
[  199.478048][ T5970]        blkdev_ioctl+0x276/0x6d0
[  199.480100][ T5970]        __x64_sys_ioctl+0x190/0x200
[  199.482148][ T5970]        do_syscall_64+0xcd/0x250
[  199.484180][ T5970]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.486753][ T5970] 
[  199.486753][ T5970] -> #4 (&q->q_usage_counter(io)#54){++++}-{0:0}:
[  199.490092][ T5970]        blk_mq_submit_bio+0x1fb6/0x24c0
[  199.492243][ T5970]        __submit_bio+0x384/0x540
[  199.494019][ T5970]        submit_bio_noacct_nocheck+0x698/0xd70
[  199.496300][ T5970]        submit_bio_noacct+0x93a/0x1e20
[  199.498283][ T5970]        mpage_readahead+0x41d/0x590
[  199.500171][ T5970]        read_pages+0x1a8/0xdc0
[  199.501950][ T5970]        page_cache_ra_unbounded+0x3dc/0x750
[  199.504032][ T5970]        force_page_cache_ra+0x24b/0x340
[  199.505920][ T5970]        page_cache_sync_ra+0x110/0x9c0
[  199.507980][ T5970]        filemap_get_pages+0xd7b/0x1be0
[  199.509966][ T5970]        filemap_read+0x3ca/0xd70
[  199.511753][ T5970]        blkdev_read_iter+0x187/0x480
[  199.513639][ T5970]        vfs_read+0x87f/0xbe0
[  199.515414][ T5970]        ksys_read+0x12b/0x250
[  199.517296][ T5970]        do_syscall_64+0xcd/0x250
[  199.519319][ T5970]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.521768][ T5970] 
[  199.521768][ T5970] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}:
[  199.524886][ T5970]        down_read+0x9a/0x330
[  199.526793][ T5970]        filemap_fault+0x62c/0x2820
[  199.528849][ T5970]        __do_fault+0x10a/0x490
[  199.530652][ T5970]        do_pte_missing+0xebd/0x3e00
[  199.532720][ T5970]        __handle_mm_fault+0x103c/0x2a40
[  199.534828][ T5970]        handle_mm_fault+0x3fa/0xaa0
[  199.536387][ T5970]        __get_user_pages+0x8d9/0x3b50
[  199.537926][ T5970]        populate_vma_page_range+0x27f/0x3a0
[  199.539671][ T5970]        __mm_populate+0x1d6/0x380
[  199.541115][ T5970]        do_mlock+0x40a/0x7d0
[  199.542462][ T5970]        __x64_sys_mlock+0x59/0x80
[  199.543917][ T5970]        do_syscall_64+0xcd/0x250
[  199.545304][ T5970]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.547186][ T5970] 
[  199.547186][ T5970] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[  199.549325][ T5970]        __might_fault+0x11b/0x190
[  199.550786][ T5970]        _copy_from_user+0x29/0xd0
[  199.552253][ T5970]        __blk_trace_setup+0xa8/0x180
[  199.553785][ T5970]        blk_trace_setup+0x47/0x70
[  199.555275][ T5970]        sg_ioctl+0x65e/0x2750
[  199.556663][ T5970]        __x64_sys_ioctl+0x190/0x200
[  199.558169][ T5970]        do_syscall_64+0xcd/0x250
[  199.558575][T12237] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  199.559615][ T5970]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.563464][ T5970] 
[  199.563464][ T5970] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[  199.565688][ T5970]        __mutex_lock+0x19b/0xa60
[  199.567131][ T5970]        blk_mq_init_sched+0x42b/0x640
[  199.568686][ T5970]        elevator_init_mq+0x2cd/0x420
[  199.570212][ T5970]        add_disk_fwnode+0x113/0x1300
[  199.571750][ T5970]        sd_probe+0xa86/0x1000
[  199.573068][ T5970]        really_probe+0x23e/0xa90
[  199.574499][ T5970]        __driver_probe_device+0x1de/0x440
[  199.576168][ T5970]        driver_probe_device+0x4c/0x1b0
[  199.577740][ T5970]        __device_attach_driver+0x1df/0x310
[  199.579428][ T5970]        bus_for_each_drv+0x157/0x1e0
[  199.580959][ T5970]        __device_attach_async_helper+0x1d3/0x290
[  199.582787][ T5970]        async_run_entry_fn+0x9c/0x530
[  199.584369][ T5970]        process_one_work+0x9c5/0x1ba0
[  199.585928][ T5970]        worker_thread+0x6c8/0xf00
[  199.587393][ T5970]        kthread+0x2c1/0x3a0
[  199.588718][ T5970]        ret_from_fork+0x45/0x80
[  199.590126][ T5970]        ret_from_fork_asm+0x1a/0x30
[  199.591643][ T5970] 
[  199.591643][ T5970] -> #0 (&q->q_usage_counter(queue)#51){++++}-{0:0}:
[  199.594124][ T5970]        __lock_acquire+0x249e/0x3c40
[  199.595663][ T5970]        lock_acquire.part.0+0x11b/0x380
[  199.597254][ T5970]        blk_queue_enter+0x50f/0x640
[  199.598754][ T5970]        blk_mq_alloc_request+0x59b/0x950
[  199.600371][ T5970]        scsi_execute_cmd+0x1da/0xf40
[  199.601900][ T5970]        read_capacity_16+0x213/0xe10
[  199.603434][ T5970]        sd_revalidate_disk.isra.0+0x1a06/0xa8d0
[  199.605228][ T5970]        scsi_rescan_device+0x243/0x340
[  199.606821][ T5970]        ata_scsi_dev_rescan+0x1cb/0x470
[  199.608424][ T5970]        process_one_work+0x9c5/0x1ba0
[  199.609979][ T5970]        worker_thread+0x6c8/0xf00
[  199.611444][ T5970]        kthread+0x2c1/0x3a0
[  199.612778][ T5970]        ret_from_fork+0x45/0x80
[  199.614187][ T5970]        ret_from_fork_asm+0x1a/0x30
[  199.615714][ T5970] 
[  199.615714][ T5970] other info that might help us debug this:
[  199.615714][ T5970] 
[  199.618476][ T5970] Chain exists of:
[  199.618476][ T5970]   &q->q_usage_counter(queue)#51 --> &q->q_usage_counter(io)#54 --> &q->limits_lock
[  199.618476][ T5970] 
[  199.622695][ T5970]  Possible unsafe locking scenario:
[  199.622695][ T5970] 
[  199.624798][ T5970]        CPU0                    CPU1
[  199.626230][ T5970]        ----                    ----
[  199.627735][ T5970]   lock(&q->limits_lock);
[  199.629010][ T5970]                                lock(&q->q_usage_counter(io)#54);
[  199.631212][ T5970]                                lock(&q->limits_lock);
[  199.633178][ T5970]   rlock(&q->q_usage_counter(queue)#51);
[  199.634761][ T5970] 
[  199.634761][ T5970]  *** DEADLOCK ***
[  199.634761][ T5970] 
[  199.637007][ T5970] 5 locks held by kworker/2:3/5970:
[  199.638461][ T5970]  #0: ffff88801b088948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  199.641367][ T5970]  #1: ffffc90005027d80 ((work_completion)(&(&ap->scsi_rescan_task)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  199.644940][ T5970]  #2: ffff88802727c358 (&ap->scsi_scan_mutex){+.+.}-{4:4}, at: ata_scsi_dev_rescan+0x3e/0x470
[  199.647733][ T5970]  #3: ffff888027732378 (&dev->mutex){....}-{4:4}, at: scsi_rescan_device+0x27/0x340
[  199.650372][ T5970]  #4: ffff888026bc1a88 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0
[  199.653340][ T5970] 
[  199.653340][ T5970] stack backtrace:
[  199.655014][ T5970] CPU: 2 UID: 0 PID: 5970 Comm: kworker/2:3 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[  199.658006][ T5970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  199.660987][ T5970] Workqueue: events ata_scsi_dev_rescan
[  199.662543][ T5970] Call Trace:
[  199.663468][ T5970]  <TASK>
[  199.664314][ T5970]  dump_stack_lvl+0x116/0x1f0
[  199.665654][ T5970]  print_circular_bug+0x419/0x5d0
[  199.667041][ T5970]  check_noncircular+0x31a/0x400
[  199.668406][ T5970]  ? __pfx_check_noncircular+0x10/0x10
[  199.669861][ T5970]  ? lockdep_lock+0xc6/0x200
[  199.671095][ T5970]  ? __pfx_lockdep_lock+0x10/0x10
[  199.672455][ T5970]  __lock_acquire+0x249e/0x3c40
[  199.673807][ T5970]  ? __pfx___lock_acquire+0x10/0x10
[  199.675245][ T5970]  lock_acquire.part.0+0x11b/0x380
[  199.676640][ T5970]  ? blk_mq_alloc_request+0x59b/0x950
[  199.678134][ T5970]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  199.679688][ T5970]  ? rcu_is_watching+0x12/0xc0
[  199.681061][ T5970]  ? trace_lock_acquire+0x14e/0x1f0
[  199.682546][ T5970]  ? blk_mq_alloc_request+0x59b/0x950
[  199.684055][ T5970]  ? lock_acquire+0x2f/0xb0
[  199.685305][ T5970]  ? blk_mq_alloc_request+0x59b/0x950
[  199.686813][ T5970]  blk_queue_enter+0x50f/0x640
[  199.688170][ T5970]  ? blk_mq_alloc_request+0x59b/0x950
[  199.689658][ T5970]  ? __pfx_blk_queue_enter+0x10/0x10
[  199.691140][ T5970]  ? add_lock_to_list+0x17d/0x390
[  199.692535][ T5970]  ? lockdep_unlock+0x11a/0x290
[  199.693908][ T5970]  blk_mq_alloc_request+0x59b/0x950
[  199.695377][ T5970]  ? __pfx_blk_mq_alloc_request+0x10/0x10
[  199.696967][ T5970]  ? find_held_lock+0x2d/0x110
[  199.698319][ T5970]  scsi_execute_cmd+0x1da/0xf40
[  199.699707][ T5970]  ? __pfx_scsi_execute_cmd+0x10/0x10
[  199.701189][ T5970]  ? sd_revalidate_disk.isra.0+0x52c/0xa8d0
[  199.702822][ T5970]  read_capacity_16+0x213/0xe10
[  199.704131][ T5970]  ? blk_mq_free_request+0x1e9/0x340
[  199.705643][ T5970]  ? __pfx_read_capacity_16+0x10/0x10
[  199.707174][ T5970]  ? __pfx___mutex_lock+0x10/0x10
[  199.708570][ T5970]  sd_revalidate_disk.isra.0+0x1a06/0xa8d0
[  199.710184][ T5970]  ? mark_held_locks+0x9f/0xe0
[  199.711489][ T5970]  ? __pfx_sd_revalidate_disk.isra.0+0x10/0x10
[  199.713128][ T5970]  ? kasan_save_stack+0x33/0x60
[  199.714420][ T5970]  ? kasan_save_track+0x14/0x30
[  199.715753][ T5970]  ? kasan_save_free_info+0x3b/0x60
[  199.717170][ T5970]  ? __kasan_slab_free+0x51/0x70
[  199.718579][ T5970]  ? kfree+0x14f/0x4b0
[  199.719755][ T5970]  ? scsi_attach_vpd+0x4dc/0x580
[  199.721174][ T5970]  ? scsi_rescan_device+0xf5/0x340
[  199.722602][ T5970]  ? ata_scsi_dev_rescan+0x1cb/0x470
[  199.724092][ T5970]  ? process_one_work+0x9c5/0x1ba0
[  199.725521][ T5970]  ? worker_thread+0x6c8/0xf00
[  199.726898][ T5970]  ? kthread+0x2c1/0x3a0
[  199.728113][ T5970]  ? hlock_class+0x4e/0x130
[  199.729415][ T5970]  ? mark_lock+0xb5/0xc60
[  199.730660][ T5970]  ? mark_held_locks+0x9f/0xe0
[  199.732037][ T5970]  ? kasan_quarantine_put+0x10a/0x240
[  199.733565][ T5970]  ? lockdep_hardirqs_on+0x7c/0x110
[  199.735052][ T5970]  ? kfree+0x14f/0x4b0
[  199.736219][ T5970]  ? lockdep_hardirqs_on+0x7c/0x110
[  199.737706][ T5970]  ? scsi_attach_vpd+0x4dc/0x580
[  199.739129][ T5970]  ? scsi_attach_vpd+0x4dc/0x580
[  199.740516][ T5970]  ? __pfx_sd_rescan+0x10/0x10
[  199.741821][ T5970]  scsi_rescan_device+0x243/0x340
[  199.743263][ T5970]  ata_scsi_dev_rescan+0x1cb/0x470
[  199.744735][ T5970]  process_one_work+0x9c5/0x1ba0
[  199.746159][ T5970]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  199.747763][ T5970]  ? __pfx_process_one_work+0x10/0x10
[  199.749273][ T5970]  ? rcu_is_watching+0x12/0xc0
[  199.750581][ T5970]  ? assign_work+0x1a0/0x250
[  199.751894][ T5970]  worker_thread+0x6c8/0xf00
[  199.753167][ T5970]  ? __kthread_parkme+0x148/0x220
[  199.754604][ T5970]  ? __pfx_worker_thread+0x10/0x10
[  199.756071][ T5970]  kthread+0x2c1/0x3a0
[  199.757239][ T5970]  ? _raw_spin_unlock_irq+0x23/0x50
[  199.758716][ T5970]  ? __pfx_kthread+0x10/0x10
[  199.760046][ T5970]  ret_from_fork+0x45/0x80
[  199.761308][ T5970]  ? __pfx_kthread+0x10/0x10
[  199.762580][ T5970]  ret_from_fork_asm+0x1a/0x30
[  199.763928][ T5970]  </TASK>
[  199.776455][T10382] cdc_mbim 11-1:1.0: MAC-Address: 42:42:42:42:42:42
[  199.778443][T10382] cdc_mbim 11-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  199.780687][T10382] cdc_mbim 11-1:1.0: setting rx_max = 2048
[  199.990633][T10382] cdc_mbim 11-1:1.0: setting tx_max = 184
[  199.992983][T10382] cdc_mbim 11-1:1.0: cdc-wdm0: USB WDM device
[  199.995548][T10382] wwan wwan0: port wwan0mbim0 attached
[  199.999021][T10382] cdc_mbim 11-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 42:42:42:42:42:42
[  200.098315][ T5649] 8021q: adding VLAN 0 to HW filter on device wwan0
[  200.180835][ T5946] Bluetooth: hci1: command tx timeout
[  200.205222][    C0] cdc_mbim 11-1:1.0: nonzero urb status received: -71
[  200.207198][    C0] cdc_mbim 11-1:1.0: wdm_int_callback - 0 bytes
[  200.209128][    C0] cdc_mbim 11-1:1.0: nonzero urb status received: -71
[  200.211066][    C0] cdc_mbim 11-1:1.0: wdm_int_callback - 0 bytes
[  200.213024][    C0] cdc_mbim 11-1:1.0: nonzero urb status received: -71
[  200.214950][    C0] cdc_mbim 11-1:1.0: wdm_int_callback - 0 bytes
[  200.216791][    C0] cdc_mbim 11-1:1.0: nonzero urb status received: -71
[  200.218636][    C0] cdc_mbim 11-1:1.0: wdm_int_callback - 0 bytes
[  200.220593][    C0] cdc_mbim 11-1:1.0: nonzero urb status received: -71
[  200.222494][    C0] cdc_mbim 11-1:1.0: wdm_int_callback - 0 bytes
[  200.225393][   T63] usb 11-1: USB disconnect, device number 6
[  200.227341][   T63] cdc_mbim 11-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM
[  200.289213][   T63] wwan wwan0: port wwan0mbim0 disconnected
[  203.517180][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[  203.519334][ T1416] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
03:54:02  Registers:
info registers vcpu 0

CPU#0
RAX=000000000027b5b4 RBX=0000000000000000 RCX=ffffffff8b2a27c9 RDX=ffffed100d4c6fee
RSI=ffffffff8bd1ef60 RDI=ffffffff8170a6b9 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20
R8 =0000000000000000 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000
R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f4b50 R15=0000000000000000
RIP=ffffffff8b2a3baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c42a1a0 CR3=00000000304ce000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4c6d2b50 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc774e02a9a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc774e02aa7
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc774e02aa1
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc774e02ab5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc774e02b3b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc774e02c19
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000033523c RBX=0000000000000001 RCX=ffffffff8b2a27c9 RDX=ffffed100d4e6fee
RSI=ffffffff8bd1ef60 RDI=ffffffff8170a6b9 RBP=ffffed1003ad1910 RSP=ffffc90000187e08
R8 =0000000000000000 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000
R12=0000000000000001 R13=ffff88801d68c880 R14=ffffffff905f4b50 R15=0000000000000000
RIP=ffffffff8b2a3baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000003295e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=0cda67900cda6790 0cda67900cda6790 0cda67900cda6790 0cda67900cda6790 0cda67900cda6790 0cda67900cda6790 0cda67900cda6790 0cda67900cda6790
ZMM22=6f78020a6f78020a 6f78020a6f78020a 6f78020a6f78020a 6f78020a6f78020a 6f78020a6f78020a 6f78020a6f78020a 6f78020a6f78020a 6f78020a6f78020a
ZMM23=bc96f04dbc96f04d bc96f04dbc96f04d bc96f04dbc96f04d bc96f04dbc96f04d bc96f04dbc96f04d bc96f04dbc96f04d bc96f04dbc96f04d bc96f04dbc96f04d
ZMM24=cd46a4e9cd46a4e9 cd46a4e9cd46a4e9 cd46a4e9cd46a4e9 cd46a4e9cd46a4e9 cd46a4e9cd46a4e9 cd46a4e9cd46a4e9 cd46a4e9cd46a4e9 cd46a4e9cd46a4e9
ZMM25=57237ea057237ea0 57237ea057237ea0 57237ea057237ea0 57237ea057237ea0 57237ea057237ea0 57237ea057237ea0 57237ea057237ea0 57237ea057237ea0
ZMM26=706bbaf2706bbaf2 706bbaf2706bbaf2 706bbaf2706bbaf2 706bbaf2706bbaf2 706bbaf2706bbaf2 706bbaf2706bbaf2 706bbaf2706bbaf2 706bbaf2706bbaf2
ZMM27=015f95de015f95de 015f95de015f95de 015f95de015f95de 015f95de015f95de 015f95de015f95de 015f95de015f95de 015f95de015f95de 015f95de015f95de
ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=f3070000f3070000 f3070000f3070000 f3070000f3070000 f3070000f3070000 f3070000f3070000 f3070000f3070000 f3070000f3070000 f3070000f3070000
info registers vcpu 2

CPU#2
RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff851c1355 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc90005026a78
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36
R12=0000000000000000 R13=0000000000000069 R14=ffffffff851c12f0 R15=0000000000000000
RIP=ffffffff851c137f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fbd86549f98 CR3=000000004616c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 78d0fdca4df62eae b4d492b9a13a714e
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e586b32f592e1970 2dd74796321f67b7
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3120420c02f65a64 bf7def1fbacdfd9d
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a4f800e5e8844ba aa417ba1716103a1
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000d440
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f380c0087673600 000079e5b1835800
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8001000080010000 80010000b53d0800
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000079e580010000 824d5200000079e5
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80010000000079e5 000079e580010000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a2204c0e163e198 337c57f2aadd8482
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d20c43c78f3a6069 be345c118f9b4fcb
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007379656b2f63 6f72702f00a73975 39aefc2309000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd864ad100 00007fbd8594b440 00007fbd85940004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd8594b498 00007fbd8594b490 00007fbd8594b488 00007fbd8594b480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 246c0cbec48487ea b8ff3c8dcc08c097 a70ac8f412a27468 d23d6dc8c685b061
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 992435199658bc37 ede86c0c8f91e1e0 e5f5f4f9324b07dd 1c7d591e74d05995
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5a163a7aa0946ec 7d890a47891466cc effb227a923fb0af a59b4bff16677c6f
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c106997897ef027 e96ca3b3386f262b 063aeffb50ab58b3 c4003094d052bac1
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=ffff88806a846880 RCX=ffffffff818e191c RDX=ffff8880265fc880
RSI=ffffffff818e18f6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900060077b8
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=00000000000a4001
R12=ffffed100d508d11 R13=0000000000000001 R14=ffff88806a846888 R15=ffff88806a93fe40
RIP=ffffffff818e18f8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020f5dfe4 CR3=00000000304ce000 CR4=00352ef0
DR0=000000000000126c DR1=0000000000000003 DR2=0000000000000081 DR3=0000000000000002 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4c6d2b50 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc774e02a9a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc774e02aa7
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc774e02aa1
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc774e02ab5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc774e02b3b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc774e02c19
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000