last executing test programs:

2m3.270592214s ago: executing program 2 (id=97):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002b40)="fb1add96eb5c4cee3df251747b4c22fa53f4688d7e1de775eb384e67c6582a1c81de03b4a72c33625ef534c5ca4d2efe7943bb3192c53781854a9d34a1bf7e0d6284f0e66080d445b540a2f7e462a8338abd11bf2789063bf6f3064a921853c52bdf68e827858e06ccf3ed47c27b11f2bf39d587a2912ef9643a51e3bf0e366ffa", 0x81}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000800}], 0x1, 0x91)
recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

2m3.03989849s ago: executing program 2 (id=100):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0x6}]})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000000e00)={0xc, {"a2e3ad204fc752f91b5d34f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9b5522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r6, 0x800455d1, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=[@exit_looper], 0x0, 0x0, 0x0})
r7 = dup3(r4, r3, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0})

2m2.907247301s ago: executing program 2 (id=101):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x5e5640, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115})
io_uring_enter(r2, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0)
dup3(r2, r5, 0x80000)
syz_open_dev$MSR(&(0x7f0000000000), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x5)
socket$kcm(0x29, 0x2, 0x0)

2m2.904184708s ago: executing program 2 (id=102):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') (async)
r0 = syz_io_uring_setup(0x7624, &(0x7f0000000380)={0x0, 0x10, 0x400, 0x80005, 0x80}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r3], 0x1}) (async)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_mreqsrc(r6, 0x0, 0x1, 0x0, 0x0) (async)
munlockall() (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async)
munmap(&(0x7f00009f8000/0x2000)=nil, 0x2000) (async)
unshare(0x2c020400)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
fstat(r7, &(0x7f0000000240))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) (async)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_IDLE(r8, 0x103, 0x7, &(0x7f0000000dc0)=0x6, 0x4) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

2m2.720856405s ago: executing program 2 (id=103):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) (async)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
chdir(&(0x7f0000000140)='./file1\x00') (async)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async)

2m2.648599992s ago: executing program 2 (id=104):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x100}]})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0xa11f, 0x100, 0x4, 0x1}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xd4442, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'veth0_to_hsr\x00', @remote})
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x2)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
r7 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x5, 0xa0080)
ioctl$FE_GET_FRONTEND(r7, 0x80246f4d, &(0x7f0000000200)={0x0, 0x0, @qam})

1m47.436411006s ago: executing program 32 (id=104):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x100}]})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0xa11f, 0x100, 0x4, 0x1}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xd4442, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'veth0_to_hsr\x00', @remote})
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x2)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
r7 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x5, 0xa0080)
ioctl$FE_GET_FRONTEND(r7, 0x80246f4d, &(0x7f0000000200)={0x0, 0x0, @qam})

1m40.471011924s ago: executing program 3 (id=375):
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) (async, rerun: 64)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) (async)
syz_emit_ethernet(0x105, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)

1m40.421014884s ago: executing program 3 (id=378):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64)
eventfd(0x8005) (async, rerun: 64)
r2 = eventfd2(0x7, 0x80000)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0xffff1000, 0x8, r2, 0x9}) (async)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1m40.07094106s ago: executing program 3 (id=382):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004)

1m40.070589934s ago: executing program 3 (id=383):
mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f00000002c0)={[{@dyn}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
getdents64(r0, 0x0, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
unshare(0x2040400)
shutdown(0xffffffffffffffff, 0x2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='nfsd\x00', 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xcd52db7e1aadfefa)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x4)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffff}, &(0x7f0000000180)=0x8)

1m39.986182618s ago: executing program 3 (id=385):
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) (async, rerun: 32)
execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) (async, rerun: 32)
mount(&(0x7f0000000300), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180)='zonefs\x00', 0x2200892, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x204840, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1108, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) (async, rerun: 32)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) (rerun: 32)

1m39.670465327s ago: executing program 3 (id=389):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000740)='^', 0x1, 0x40000, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0x8040800)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000440)={0x8f, 0x0, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000003300)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

1m39.604491374s ago: executing program 33 (id=389):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000740)='^', 0x1, 0x40000, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0x8040800)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000440)={0x8f, 0x0, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000003300)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

43.724171823s ago: executing program 1 (id=1147):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

43.720229919s ago: executing program 1 (id=1149):
r0 = socket$kcm(0x21, 0x2, 0xa)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x10, 0xffee}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x11}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}]}}]}, 0x40}}, 0x4048000)
socket$inet_icmp(0x2, 0x2, 0x1)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0xf3)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r5=>0x0})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840)
unshare(0x2c020400)
write$nci(r6, &(0x7f0000000340)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0x4, "b2e896d9"}, 0x7)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11027, 0x29020}, [@IFLA_GROUP={0x8, 0x1b, 0x6}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40040)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000100100160100000000000000001000001000000000000000100100000b000000"], 0x28}, 0xfc40)

42.77956693s ago: executing program 1 (id=1170):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x24008000) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1})

42.774254614s ago: executing program 1 (id=1173):
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x57})
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4)
mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000280)={'syz_tun\x00', 0x400})
linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f00000002c0)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x80800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4)
mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00')
sendmmsg$alg(r4, &(0x7f0000001ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r4)

42.600433225s ago: executing program 1 (id=1177):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@bridge_delneigh={0x28, 0x1d, 0x400, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x20, 0x22, 0x1}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c893}, 0x40040)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x801070cf, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdb0400000000000e0001006e657464090073696d0000000f0002006e657464657673696d300000080003000200000008000b000800000006001100040000000800150002000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x44)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x72}, 0x3e}, 0x1c)
recvmmsg(r2, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/28, 0xffffff3b}], 0x1}, 0x7}], 0x1, 0x40000120, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
accept4(r6, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060088470000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r8 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x84, &(0x7f0000000000), 0x90)
pselect6(0x40, &(0x7f0000000200)={0x9, 0x4b615c57, 0x6, 0x800000000, 0x3, 0xe, 0x0, 0x3}, &(0x7f0000000240)={0x4940000000, 0x7dd, 0xfe1, 0xffff, 0x5, 0x30d, 0x8, 0x100000001}, &(0x7f0000000300)={0x6, 0x1, 0x8, 0x2f, 0x496, 0x7f, 0x3, 0x7}, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000440)={&(0x7f0000000380)={[0x7fffffff]}, 0x8})
sendmsg$inet(r8, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84834}}], 0x7b, 0x404c040)
ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

42.310108482s ago: executing program 1 (id=1181):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010102}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000240)={0x2e, @multicast1, 0x4e23, 0x0, 'lc\x00', 0x3, 0x5, 0x9}, 0x2c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x8c, 0x10, 0x24, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9000, 0x3cc40}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x62}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x80}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

42.278726796s ago: executing program 34 (id=1181):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010102}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000240)={0x2e, @multicast1, 0x4e23, 0x0, 'lc\x00', 0x3, 0x5, 0x9}, 0x2c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x8c, 0x10, 0x24, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9000, 0x3cc40}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x62}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x80}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

41.077060218s ago: executing program 0 (id=1191):
r0 = socket$packet(0x11, 0x3, 0x300)
setxattr$trusted_overlay_origin(0x0, &(0x7f0000000340), 0x0, 0x0, 0x1) (async)
setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000100)=0x9, 0xc) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @broadcast, @void, {@generic={0x88f7, "9e0900000073ff129710eb86aed6533e7e47a180ad44bdb657612676"}}}, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x5, r4, 0x0, &(0x7f000000d000/0x2000)=nil, 0x2000, 0x7ff})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r4, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) (async)
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r4, 0x0, &(0x7f0000000440)="d9", 0x1, 0xe})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r4, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x70e})
ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000240)={0x18, r4, 0x27ff, 0x8280000000})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fedbdf253400000008000300", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4044) (async)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r9, 0x0, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r8, r1, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x54}], 0x1, 0x41, 0x0, 0x0) (async)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
open$dir(0x0, 0x80, 0xb1)

41.00971229s ago: executing program 0 (id=1193):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newqdisc={0xc8, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0x6}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x558}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8, 0x7ff, 0x6, 0x2, 0xce, 0x0, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xf8, 0x2, 0x9b, 0x8, 0x0, 0x5, 0x3ff, 0x5}}, {0xe, 0x2, [0xe, 0x6, 0x3, 0x2, 0x8]}}, {{0x1c, 0x1, {0x4, 0x3, 0xe71f, 0x7, 0x0, 0x1, 0x10000, 0x1}}, {0x6, 0x2, [0xf]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

40.719967424s ago: executing program 0 (id=1196):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000080)=0x7, 0x4)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delchain={0x34, 0x65, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xc}, {0x3, 0xfff3}, {0xe, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004010)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r4, 0x21b, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000)

40.718372326s ago: executing program 0 (id=1198):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(r0, 0x0)
accept$ax25(r0, 0x0, 0x0)
getpgid(0xffffffffffffffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, <r1=>0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, 0x0)
r6 = syz_open_procfs(r1, &(0x7f0000000040)='fdinfo/4\x00')
preadv(r6, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/198, 0xc6}], 0x1, 0x7, 0x40b)

39.790193965s ago: executing program 0 (id=1200):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f000000010902"], 0x0)
shutdown(r4, 0x2)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40800)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000013c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b4425b00", @ANYRES16=r5, @ANYBLOB="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"], 0x10b4}, 0x1, 0x0, 0x0, 0x1}, 0x40041)
syz_emit_ethernet(0x1e, &(0x7f0000000040)={@broadcast, @empty, @void, {@can={0xc, {{0x2, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "0b78afc8d3f13529"}}}}, &(0x7f00000001c0)={0x0, 0x3, [0x8fc, 0x252, 0xf3c, 0x765]})
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

39.27876486s ago: executing program 5 (id=1209):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) (async)
write(r0, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff807000000b8000000000000", 0x1b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200009d96d1c800000000000000008500000020000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/13, 0xd}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3, &(0x7f0000000380)=""/45, 0x2d}, 0x12000)

39.215413154s ago: executing program 5 (id=1212):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newqdisc={0xc8, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r1, {0x7, 0x6}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x558}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8, 0x7ff, 0x6, 0x2, 0xce, 0x0, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xf8, 0x2, 0x9b, 0x8, 0x0, 0x5, 0x3ff, 0x5}}, {0xe, 0x2, [0xe, 0x6, 0x3, 0x2, 0x8]}}, {{0x1c, 0x1, {0x4, 0x3, 0xe71f, 0x7, 0x0, 0x1, 0x10000, 0x1}}, {0x6, 0x2, [0xf]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

39.110256516s ago: executing program 5 (id=1213):
syz_open_pts(0xffffffffffffffff, 0x200)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
ioctl$TIOCMIWAIT(r0, 0x545c, 0x0)
r1 = gettid()
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', <r3=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x26, &(0x7f0000000140)=@raw=[@ldst={0x3, 0x0, 0x6, 0x8, 0x0, 0x50, 0xfffffffffffffff0}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0xe9, 0xf, 0xf, 0xffff, 0x9b1e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x42cb, 0x0, 0x0, 0x0, 0x400}, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffc00000}}], &(0x7f0000000280)='syzkaller\x00', 0xfffff801, 0x3c, &(0x7f00000002c0)=""/60, 0x40f00, 0x40, '\x00', r3, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x1, 0x2, 0xe16}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000380)=[r0, r0, r0, r0, r0], &(0x7f00000003c0)=[{0x1, 0x3, 0x5}, {0x3, 0x2, 0x7, 0x8}, {0x1, 0x1, 0x1, 0x9}, {0x0, 0x2, 0x4, 0xc}, {0x1, 0x5, 0x10, 0x7}, {0x0, 0x4, 0x9, 0xa}], 0x10, 0x8}, 0x94)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)
ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406)
r4 = syz_io_uring_setup(0x222, &(0x7f0000000500)={0x0, 0x3c4c, 0x800, 0x1, 0x3d6, 0x0, r0}, &(0x7f0000000580), &(0x7f00000005c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x50, r4, 0x0)
ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000600)=0x49)
r5 = syz_open_procfs(r1, &(0x7f0000000640)='net/fib_trie\x00')
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000680)='%*\x00', 0x0, r5)
inotify_init()
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x1200000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x3}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x7}]}, 0x5c}}, 0x24004080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@getnetconf={0x14, 0x52, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000900)={{0x0, 0x2, 0x3, 0x2}, 0x5, 0x9, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x8, 0x7, 0x3})
socket$nl_route(0x10, 0x3, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000)
r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00), 0x400000, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x10)
ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x1)
connect$inet6(r7, &(0x7f0000000a40)={0xa, 0x4e22, 0x6, @private0, 0xb}, 0x1c)
sendmsg$802154_dgram(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)="c775848d937096edfafa5e8944c3c76799b9f47b66175eac67d8247ac6a485c01e8fe55b2086494d47b5259873ab67cd6effe67f4461f1906971d1a2", 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xfcb3f689654f7928)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000b40)={0xfffffffd, 0x3b})
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000bc0)={{r8}, "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"})

39.109143484s ago: executing program 5 (id=1216):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x40f0f022})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'vlan0\x00', <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40140)
getsockopt$inet6_buf(r4, 0x29, 0x4, 0x0, &(0x7f00000003c0))
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002c00128009000100766c616e000000001c0002800600010004000000100003800c000100070000000100000008000500", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x0, @vbi={0x0, 0x9, 0x81, 0x32315659, [0x35c1, 0xdc2], [0x3ff, 0x4], 0x1}})
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000040)=""/95)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x88, 0x3, 0x10000, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}})

38.760501734s ago: executing program 0 (id=1225):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0})
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000500)={0x7f, 0x2, 0x8, 0xffffffffffffffff, 0xd})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x4000000)

38.722871758s ago: executing program 35 (id=1225):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0})
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000500)={0x7f, 0x2, 0x8, 0xffffffffffffffff, 0xd})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x4000000)

37.885073375s ago: executing program 5 (id=1233):
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x161000, 0x0)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x4, 'lblcr\x00', 0x0, 0xfffffffc, 0x1}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)

37.271532278s ago: executing program 5 (id=1243):
r0 = userfaultfd(0x801)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

37.215089031s ago: executing program 36 (id=1243):
r0 = userfaultfd(0x801)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

2.718518772s ago: executing program 7 (id=1797):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async)
sysfs$1(0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x0, 0x3e}, 0x28) (async)
sysfs$1(0x1, &(0x7f0000000040)='!\\/,_(^[:\x00') (async)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000200)=""/4096, 0x1000, 0x2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10)
sysfs$1(0x1, &(0x7f0000000000)='!\\/,_(^[:\x00')

2.649411875s ago: executing program 7 (id=1798):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203)
ppoll(&(0x7f0000000280)=[{r3, 0x10320}], 0x1, 0x0, 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
poll(&(0x7f00000001c0)=[{r4, 0x1002}], 0x1, 0x9f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000000, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3)
getsockopt$bt_hci(r5, 0x11a, 0x3, 0x0, &(0x7f0000000200))
chdir(&(0x7f0000000100)='./file0\x00')
rmdir(&(0x7f0000000080)='./file2\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2, <r6=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000500"/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1b, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x7e, 0x4, 0xb, 0x1, 0xbae1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x91, &(0x7f0000000600)=""/145, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0xffffff5b, 0xf}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r2, r2, r2, r7], 0x0, 0x10, 0xf}, 0x94)

2.428503014s ago: executing program 7 (id=1799):
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1b00000000000000000000001500000000000069", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080), 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = accept4(r2, &(0x7f0000000240)=@caif=@rfm, &(0x7f0000000300)=0x80, 0x800)
sendmsg$inet6(r5, &(0x7f0000000640)={&(0x7f0000000400)={0xa, 0x4e22, 0x9, @mcast1, 0x101}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000004c0)="2bef6fbcfc3a23f187428f7eb10a156cadda029c28680d12dde1f2762da3b73eb4d2b1a685ff907c4cf5d4e3080b709c2b0fcee90dd83acad1da2a35749c4c04f912cc85028695bc35ad3b2253ffe05ed8af458cd2ec15afb5fe1889d08f79254d1c6285c573ac4dfb2d9570d83d10511750f7c7a585adc47a020933e222fec27c", 0x81}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000000580)="e2e0b4b608650ef8f8daed53f8eeadc1864211826607fe856f81ffe3e0e4d18ffe2a9a6db46e138538432df15f73695eea9312fd21ad6843", 0x38}, {&(0x7f00000005c0)="902e4ebaf2cbc21beed80655224af882e8df2ce6125ed5e3a36783192592ffc048230672888028a06da159ce86ee9540627293ec", 0x34}], 0x4}, 0x40010)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYRES64=r1], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x84)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
connect$unix(r5, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0xc00, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r8, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r9, r8, <r10=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r7, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r10})
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x141400, 0x0)
preadv(r12, &(0x7f0000000200)=[{&(0x7f0000000000)=""/129, 0x81}, {0x0, 0x31}], 0x2, 0x40000005, 0x5)
syz_emit_ethernet(0x3e, &(0x7f0000002880)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7409bf", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@hopopts={0x89}]}}}}}, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={<r13=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r12, 0xc01064c4, &(0x7f0000000200)={&(0x7f0000000140)=[r13], 0x1})
setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14)

2.19915551s ago: executing program 7 (id=1801):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff0001}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8})
mq_timedreceive(r1, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) (async)
mq_timedreceive(r1, &(0x7f0000000140)=""/12, 0xc, 0x7, &(0x7f0000000280))
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x1, 0x4, {0xa, 0x4e20, 0xbc3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x73}}}, 0x32)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async)
r5 = fcntl$dupfd(r4, 0x406, r4)
ioctl$TCFLSH(r5, 0x400455c8, 0x1)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r5, &(0x7f0000000540)="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", &(0x7f00000002c0)=""/171, 0x4}, 0x20) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x8000)

2.000175377s ago: executing program 6 (id=1806):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7b8]}, @NL80211_ATTR_FRAME={0x2e, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xf}, @device_b, @device_a, @from_mac=@device_b, {0xc, 0x6}, @value=@ver_80211n={0x0, 0x3, 0x2, 0x1}}, 0x11bc0, 0xff, {0x0, 0x6, @default_ap_ssid}, @val, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x40810)
fcntl$setsig(r1, 0xa, 0x3c)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}})
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0})
write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f)

1.910280901s ago: executing program 6 (id=1808):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000200)={0x0, 0x2, "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"})
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x7, 0x71})
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x4, &(0x7f0000000800), 0x0, 0x9, 0x7, 0x0, 0x8, 0x9, 0x0})
syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)="d6a5a87479", 0x5}], 0x1)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f00000000c0)={0x10000, 0x7, 0x43, 0x4, 0x8000, 0x1, 0x5})
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x1200005, &(0x7f0000000000)='usrquota')

1.006430745s ago: executing program 8 (id=1821):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xa)
r1 = socket(0x2, 0xa, 0x300)
r2 = socket(0x2c, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="110000000400000004000000ff", @ANYRES8=r2], 0x17)
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=[@increfs={0x40046304, 0x1}, @enter_looper, @enter_looper], 0x0, 0x0, 0x0})
r5 = dup3(r4, r2, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000740)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000c00)={0x54, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x1100, 0x2}, @fda={0x66646185, 0x1, 0x1, 0xf}, @fd}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0})
r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
finit_module(r7, 0x0, 0x1)
sendmsg$TIPC_NL_NODE_GET(r6, 0x0, 0x40008)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x3, 0x3, 0x3, &(0x7f0000000100))
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r8, &(0x7f0000000580)={0x11, 0x19, r9, 0x1, 0x89}, 0x14)
setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x43a, 0x3000, 0x3a, 0xffffffff, 0x0, 0xffffffff}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)

869.486791ms ago: executing program 4 (id=1823):
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0xfffffffffffffe39)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={<r1=>0x0, 0x1})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@x86={0x6, 0x0, 0x8, 0x0, 0x4, 0x8, 0x6, 0xb, 0x83, 0xe, 0x5, 0xa, 0x0, 0x101, 0x2a, 0x0, 0x0, 0x0, 0x0, '\x00', 0xff, 0x100000d})
ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000180))
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r1], 0x1000000000000002, 0x1, 0x1})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880100001800c0010800400088004430f00000002000000000000000000"], 0x34}}, 0x4008094)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="6f040000000000000401000718"], 0x28)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0)
r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f0000000000)=0x1)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0xfffffffffffffe39) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@x86={0x6, 0x0, 0x8, 0x0, 0x4, 0x8, 0x6, 0xb, 0x83, 0xe, 0x5, 0xa, 0x0, 0x101, 0x2a, 0x0, 0x0, 0x0, 0x0, '\x00', 0xff, 0x100000d}) (async)
ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000180)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r1], 0x1000000000000002, 0x1, 0x1}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880100001800c0010800400088004430f00000002000000000000000000"], 0x34}}, 0x4008094) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="6f040000000000000401000718"], 0x28) (async)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) (async)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f0000000000)=0x1) (async)

759.397164ms ago: executing program 8 (id=1824):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 64)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) (async)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008) (async, rerun: 64)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) (rerun: 64)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r7=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dfd, 0xfffffffffffffffe}}}, 0x90) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x3, {0xa, 0x4e23, 0x4, @empty, 0x1000}, r7}}, 0x38) (async, rerun: 32)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x136, [0x200000000340, 0x0, 0x0, 0x200000000416, 0x200000000446], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff01000000031d00004000000022f06e723000000000000000000000000000726f73653000000000000000000000006970766c616e310000000000000000006e723000000000000000000000000000000000000000ffffffffffffffffff00ffff006e0000006e000000a6000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff000000000000000000"]}, 0x1ae) (async, rerun: 32)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="b800000013df257f00000100000000290042cac69c0000fe8000000000000000000000000000aa0000c0bcaeac0e5fd0b5fa7900040000000000000000000000c524e608339a4454e2124d9b9ff3bcc06b904cd27e020655ec5bfe4269faf39b923b947f1d1e03e74dfc1e8823b947b763a9813935510dd04b00000000000000000000bb3ddf23293fb8bb938403fe1b5e36038273e9d22eb8ef81cbb7091825e90b727908c13855895799da5bf5962dbe600694c8ccad74d810149f1f74f6f80bf281db407272137e4dac801e7da004018ef8ec5c3b2d", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) (async)
write$dsp(r2, &(0x7f0000000900)='B', 0x1) (async, rerun: 64)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) (async, rerun: 64)
close(r2) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "32b54f4fa4605c3c7567691787df69d070928457233395fa42b4e3d2aa33532b", "4e174ff31e81f37086fac1cb880e02ed34f3b8be7c853d766c1d468fc6a3b2db", "f961cc50cc0f1ad651a50219039d6f3dd79340f1998a1d188a454a5861e9dc39", "b773fc1d6c6621afa0adbd6ee031b65ed0f843dfc33f9045dfa77cda818b8f76", "0ac6d326ebfd555563d3041ea53a09f2af7da6d3e28d6408ea108238f200", "a0774981f7ea18c1eff6c6fd", 0x1, 0x4, 0x43, 0xb4, 0xffffffff}})

699.710412ms ago: executing program 4 (id=1825):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8970, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000040)=0x7, 0x4)
getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f0000000200))

697.552844ms ago: executing program 6 (id=1826):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) (rerun: 64)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r3, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01030000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002"], 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r6, 0x0) (async)
syz_open_procfs(r6, &(0x7f0000000040)='oom_score_adj\x00') (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r5, 0x3000003, 0x2011, r3, 0x0)

695.910024ms ago: executing program 4 (id=1827):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0x820c94, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x9)
recvmsg$can_j1939(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1}, 0x10000)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xab1}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008044}, 0x4084804)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000008300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="27af093f6a0c107d659327a0c6e1e4ccd76fe556919f0acaf028d41eb699d4e3504a142bda5870fbf3ab", 0x2a}], 0x1, 0x0, 0x0, 0x20048000}], 0x1, 0x40800)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000040)=0xf)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x14c)
stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000440))

489.703017ms ago: executing program 6 (id=1828):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x3) (async)
ppoll(&(0x7f00000004c0)=[{r1, 0x21}], 0x1, &(0x7f0000000500), 0x0, 0x0)
process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
r2 = fcntl$getown(0xffffffffffffffff, 0x9) (async, rerun: 32)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
ptrace(0x10, r3)
ptrace$poke(0x420f, r3, 0x0, 0xfffffffffffffffd) (async)
r4 = syz_clone3(&(0x7f00000007c0)={0x20000000, &(0x7f0000000540), &(0x7f00000005c0), &(0x7f0000000600), {0x1b}, &(0x7f0000000640)=""/13, 0xd, &(0x7f0000000680)=""/213, &(0x7f0000000780)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) (async, rerun: 64)
r5 = fcntl$getown(0xffffffffffffffff, 0x9) (rerun: 64)
r6 = getpid()
r7 = syz_clone(0x4010200, &(0x7f0000000840)="4bf0472458f5c048ba1954289db533e1e727b84753bc6164e8f24de094acb010d0a12320d4c1554993c7bcca882fe95092b860a3487fab0d82570e", 0x3b, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)="6cb0366bb66da369fa2403462e069be72172d858629f4316f9672930fcd604d4c1b8db23b587405977b9f70f79a33759ce80b1f4988c46483a52c8d717d429b62e7698063cf1ba0d") (async, rerun: 64)
read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020) (async, rerun: 64)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000029c0)={0x2, 0x0, {<r9=>0xffffffffffffffff}, {}, 0x3, 0x5}) (async)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002a40)='syz1\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000002a80)={0x88014000, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380), {0x3}, &(0x7f00000003c0)=""/76, 0x4c, &(0x7f0000000440)=""/237, &(0x7f0000002a00)=[r0, r2, r3, r4, r5, r6, r7, r8, r9], 0x9, {r10}}, 0x58) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', <r12=>0x0, 0x80, 0x1, 0x8, 0x5, {{0x50, 0x4, 0x3, 0x3, 0x140, 0x68, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100, {[@cipso={0x86, 0x4c, 0x2, [{0x7, 0x12, "c907b64700cdf3d8f636d516b9cb4a1d"}, {0x6, 0xe, "ac64a5cfdcfec82f6a902bb5"}, {0x2, 0x10, "3b183116493117efb734cc7bbd45"}, {0x7, 0x7, "eead561780"}, {0x7, 0xa, "4459adf24f571fe7"}, {0x0, 0x5, "0e8d6c"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xbb, 0x0, 0x0, [0x7]}, @timestamp_prespec={0x44, 0x4c, 0x28, 0x3, 0x2, [{@multicast1, 0x1}, {@multicast2, 0x1000}, {@multicast1, 0xc}, {@rand_addr=0x64010102, 0x5}, {@private=0xa010102, 0x90}, {@private=0xa010101, 0x3}, {@broadcast, 0x5}, {@loopback, 0x100}, {@local}]}, @generic={0x44, 0x10, "94e82c1a7022bef8c74e62e6649c"}, @ssrr={0x89, 0xf, 0x94, [@broadcast, @empty, @loopback]}, @noop, @cipso={0x86, 0x64, 0xffffffffffffffff, [{0x6, 0x9, "1670f27e46b52d"}, {0x7, 0x8, "9efc3ef72a40"}, {0x6, 0xa, "d18fddb5232ca26f"}, {0x0, 0x10, "fc005ffc0273d46d33aaad3d8bba"}, {0x1, 0x6, "fa770638"}, {0x3203cafa61166997, 0xe, "57d309cc3af17d83c7a9fbeb"}, {0x5, 0xc, "2b729b649bc3af286223"}, {0x1, 0x7, "7039b31fe9"}, {0x1, 0x5, "809509"}, {0x6, 0x7, "7308d95673"}]}, @noop]}}}}}) (async, rerun: 32)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={<r13=>0x0, @dev, @loopback}, &(0x7f0000000200)=0xc)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv4_getnetconf={0x54, 0x52, 0x401, 0x70bd25, 0x25dfdbfe, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xcd}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}, @NETCONFA_IFINDEX={0x8, 0x1, r12}, @NETCONFA_FORWARDING={0x8, 0x2, 0xbe}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xfeb0}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r13}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4603}]}, 0x54}, 0x1, 0xba01, 0x0, 0x44844}, 0x0)

319.180718ms ago: executing program 6 (id=1829):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40842, 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x1200000, &(0x7f0000000180)={[{@favordynmods}, {@name={'name', 0x3d, '\x00'}}, {@nofavordynmods}, {}, {@cpuset_v2_mode}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', 0xee01}}, {@dont_measure}, {@appraise_type}, {@measure}]})
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
writev(r1, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_on}]})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12214, 0x30000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000690000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)

318.11509ms ago: executing program 6 (id=1830):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000e5ff6500000008000300", @ANYRES32=r3], 0x30}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0x5b14, 0x0)

240.240678ms ago: executing program 4 (id=1831):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x11, r2, 0x0, 0x3, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x4}, 0x94) (async, rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', <r4=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

238.584071ms ago: executing program 4 (id=1832):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000480)=r2, 0x4)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x400000000000004, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc, 0x2000000]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x3}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r7, 0x5, 0x70bd2d, 0x25dfdaff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xbf}]}]}, 0x28}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r7, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0xbbe6ac2bc0d3b2f7)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x401}}}]}, 0x3c}}, 0x0)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[], 0x254}, 0x1, 0x0, 0x0, 0x20004084}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

148.583773ms ago: executing program 4 (id=1833):
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000380)={0x1, 0x0, 0x81, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
getdents64(r1, &(0x7f0000000500)=""/166, 0xa6)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
ioctl$TIOCNOTTY(r1, 0x5422)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0])
r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042)
write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff01000000fc5e15f4c3d3fbd80dad00000a"], 0x125)
chdir(&(0x7f0000000100)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x100)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_clone(0x22000100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2)
unlink(&(0x7f0000000340)='./file0\x00')
openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x181800, 0x0)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x0)

148.126064ms ago: executing program 7 (id=1834):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x444c5}, 0x40040d4)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x1000, 0x400000)
timer_create(0x7, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x2})
r5 = socket$kcm(0x2, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x204840, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1108, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)
ioctl$DVB_DEMUX_DMX_EXPBUF(r7, 0xc00c6f3e, &(0x7f0000000140)={0x5, 0x0, r4})
setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000180), 0x43)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)

147.976469ms ago: executing program 8 (id=1835):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000001c0)=0x1)
r4 = syz_open_dev$rtc(&(0x7f0000000080), 0x100000000, 0x2)
close_range(r3, r4, 0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000480)=0x2)
mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0])
r5 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000200)={0x0, 0x7, [{r2, 0x0, 0x100000000, 0x100000000}, {r2, 0x0, 0x1000, 0xfffffffffffff000}, {r2, 0x0, 0xffffe000, 0x4000}, {r2, 0x0, 0x1000000000000, 0xffffc000}, {r2, 0x0, 0xfffffffffffff000, 0x1000}, {0xffffffffffffffff, 0x0, 0x2000, 0x2000}, {r2, 0x0, 0x8000, 0x10000}]})
dup2(r5, r1)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000000c0)={0x5, 0x4, 0x1, 'queue1\x00', 0x1000})

79.969748ms ago: executing program 8 (id=1836):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f00000002c0)={0xff, 0x1, 0x2, 0xfc, 0x8000})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/mdstat\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000340)=0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000000040))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @void}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20040000)

76.783207ms ago: executing program 7 (id=1837):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xffffffff, 0x4, 0x2, 0x0, 0x8, 0x20009, 0x1, 0x199b, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x9, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0xb, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x3, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0x1, 0x10, 0x80000001, 0x80000001, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x101, 0x7, 0x6d7e, 0x80003, 0x8, 0x8001, 0xbf23, 0x6, 0x9, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x7, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x0, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x8002, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0x10a80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x132, 0x6]}, 0x45c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'sit0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c00000001040500000000000000000000000000060006400000000008000540000000000500010001"], 0x7c}}, 0x0)

76.626418ms ago: executing program 8 (id=1838):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0xa, 0x8}, {0xffff, 0xfff2}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xe}}]}}}]}, 0x78}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0xa, 0x8}, {0xffff, 0xfff2}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xe}}]}}}]}, 0x78}}, 0x0) (async)

0s ago: executing program 8 (id=1839):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
write(r0, &(0x7f0000000000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r1, &(0x7f0000000ac0), 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) (async)
write$vhost_msg(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r4, &(0x7f0000000a00)={0x1, {&(0x7f00000008c0)=""/38, 0x26, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r4, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48) (async)
write$vhost_msg(r4, &(0x7f0000000640)={0x1, {&(0x7f0000000400)=""/234, 0xfede, 0x0, 0x3, 0x2}}, 0x48) (async)
write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) (async)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) (async)
r6 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x109200) (async)
mkdir(&(0x7f0000000280)='./file0\x00', 0x324) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
chdir(&(0x7f0000000140)='./bus\x00') (async)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000000)) (async)
ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000040)) (async)
ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000380))
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) (async)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYRES8=r5], &(0x7f0000001040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)

kernel console output (not intermixed with test programs):

0 has no interface number 0
[  136.170366][ T5981] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  136.177646][ T5981] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  136.184159][ T5981] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  136.189133][ T5981] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  136.194842][ T5981] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  136.198984][ T5981] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  136.205096][ T5981] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  136.209084][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.215443][ T5981] usb 5-1: config 0 descriptor??
[  136.218342][ T9766] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  136.225052][ T5981] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  136.245943][ T9777] bridge0: port 3(batadv0) entered disabled state
[  136.249741][ T9777] bridge_slave_0: left allmulticast mode
[  136.252077][ T9777] bridge_slave_0: left promiscuous mode
[  136.254286][ T9777] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.257895][ T9777] bridge_slave_1: left allmulticast mode
[  136.259743][ T9777] bridge_slave_1: left promiscuous mode
[  136.261593][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.267139][ T9777] bond0: (slave bond_slave_0): Releasing backup interface
[  136.270231][ T9777] bond0: (slave bond_slave_1): Releasing backup interface
[  136.274509][ T9777] team0: Port device team_slave_0 removed
[  136.277337][ T9777] team0: Port device team_slave_1 removed
[  136.279615][ T9777] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.282323][ T9777] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.285306][ T9777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  136.292737][ T6018] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  136.295715][ T9777] team0: No ports can be present during mode change
[  136.298526][ T9778] team0: No ports can be present during mode change
[  136.300862][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1035'.
[  136.312640][ T6018] usb 10-1: device descriptor read/8, error -71
[  136.313296][ T9777] team0 (unregistering): Port device netdevsim0 removed
[  136.411346][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  136.411363][   T40] audit: type=1400 audit(5323713370.684:765): avc:  denied  { create } for  pid=9779 comm="syz.1.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  136.424893][ T9766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.425773][   T40] audit: type=1400 audit(5323713370.684:766): avc:  denied  { connect } for  pid=9779 comm="syz.1.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  136.429677][ T9766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.449273][   T40] audit: type=1326 audit(5323713370.724:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.1.1036" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb319d9c799 code=0x0
[  136.449460][ T9766] efs: device does not support 512 byte blocks
[  136.463272][ T9766] device does not support 512 byte blocks
[  136.463272][ T9766] 
[  136.475278][ T9766] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90
[  136.479722][ T9789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.484793][ T9789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.488914][ T9788] efs: device does not support 512 byte blocks
[  136.490949][ T9788] device does not support 512 byte blocks
[  136.490949][ T9788] 
[  136.503385][ T1927] usb 5-1: USB disconnect, device number 17
[  136.511001][ T1927] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  136.534249][ T9793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7440 sclass=netlink_route_socket pid=9793 comm=syz.0.1039
[  136.551505][ T9793] vlan3: entered allmulticast mode
[  136.555100][ T6018] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  136.557789][ T9793] veth0_to_bond: entered allmulticast mode
[  136.572833][ T6018] usb 10-1: device descriptor read/8, error -71
[  136.600232][ T9796] cgroup: Unknown subsys name 'audit'
[  136.619088][ T9797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1038'.
[  136.684965][ T6018] usb usb10-port1: unable to enumerate USB device
[  137.035835][ T9803] xt_hashlimit: size too large, truncated to 1048576
[  137.035836][ T9802] xt_hashlimit: size too large, truncated to 1048576
[  137.276472][ T9815] qrtr: Invalid version 0
[  137.376983][ T9820] syzkaller0: entered promiscuous mode
[  137.378780][ T9820] syzkaller0: entered allmulticast mode
[  137.382676][   T40] audit: type=1400 audit(5323713371.664:768): avc:  denied  { setopt } for  pid=9819 comm="syz.0.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  137.539931][   T40] audit: type=1400 audit(5323713371.814:769): avc:  denied  { read } for  pid=9823 comm="syz.4.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  137.671712][    T9] kernel read not supported for file /swradio1 (pid: 9 comm: kworker/0:0)
[  137.686883][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  137.689660][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  137.939946][ T9842] netlink: 'syz.0.1054': attribute type 1 has an invalid length.
[  137.954131][ T9842] 8021q: adding VLAN 0 to HW filter on device bond4
[  138.105216][   T40] audit: type=1400 audit(5323713372.384:770): avc:  denied  { ioctl } for  pid=9845 comm="syz.0.1055" path="socket:[33499]" dev="sockfs" ino=33499 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1
[  138.131850][   T40] audit: type=1804 audit(5323713372.404:771): pid=9849 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1056" name="/newroot/146/file0" dev="tmpfs" ino=804 res=1 errno=0
[  138.162199][   T40] audit: type=1800 audit(5323713372.434:772): pid=9849 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1056" name="file0" dev="tmpfs" ino=804 res=0 errno=0
[  138.176102][ T9853] Invalid source name
[  138.177829][ T9853] UBIFS error (pid: 9853): cannot open "/dev/sg0", error -22
[  138.182226][   T40] audit: type=1804 audit(5323713372.434:773): pid=9849 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1056" name="/newroot/146/file0" dev="tmpfs" ino=804 res=1 errno=0
[  138.203002][ T9854] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  138.242837][ T9862] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1060'.
[  138.259628][ T9857] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  138.294052][ T9869] openvswitch: netlink: Flow key attr not present in new flow.
[  138.298756][ T9871] openvswitch: netlink: Flow key attr not present in new flow.
[  138.339274][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'.
[  138.344876][ T9873] support for cryptoloop has been removed.  Use dm-crypt instead.
[  138.485618][ T9887] x_tables: duplicate underflow at hook 1
[  138.526915][   T40] audit: type=1400 audit(5323713372.804:774): avc:  denied  { create } for  pid=9890 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  138.647098][   T12] tipc: Subscription rejected, illegal request
[  138.716685][ T9904] netlink: 'syz.0.1073': attribute type 10 has an invalid length.
[  138.721150][ T9904] bond0: (slave wlan1): Opening slave failed
[  138.735653][ T9909] loop5: detected capacity change from 0 to 7
[  138.752888][    C1] blk_print_req_error: 25 callbacks suppressed
[  138.752903][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.759612][    C1] buffer_io_error: 25 callbacks suppressed
[  138.759623][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  138.765772][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.769324][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  138.774004][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.777410][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  138.781925][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.785526][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  138.789414][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.792565][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  138.798053][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.802093][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  138.812090][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.816449][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  138.819860][ T9137] ldm_validate_partition_table(): Disk read failed.
[  138.822871][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.826143][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  138.829290][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.833023][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  138.835992][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.839051][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  138.840204][   T12] Bluetooth: hci2: Frame reassembly failed (-84)
[  138.841651][ T9137] Dev loop5: unable to read RDB block 0
[  138.846731][ T9137]  loop5: unable to read partition table
[  138.849416][ T9137] loop5: partition table beyond EOD, truncated
[  138.854772][ T9909] ldm_validate_partition_table(): Disk read failed.
[  138.862541][ T9909] Dev loop5: unable to read RDB block 0
[  138.864723][ T9909]  loop5: unable to read partition table
[  138.866653][ T9909] loop5: partition table beyond EOD, truncated
[  138.882193][ T9909] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  138.883937][ T9919] can0: slcan on ttynull.
[  139.046244][ T9918] can0 (unregistered): slcan off ttynull.
[  139.088809][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'.
[  139.152612][ T9941] tmpfs: Bad value for 'mpol'
[  139.475356][ T9956] netlink: 'syz.0.1084': attribute type 3 has an invalid length.
[  139.478894][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'.
[  139.530213][ T9985] overlay: Unknown parameter '/'
[  139.533101][ T9987] syzkaller0: entered promiscuous mode
[  139.535358][ T9987] syzkaller0: entered allmulticast mode
[  139.555117][ T9986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=9986 comm=syz.5.1090
[  139.590838][ T9990] syzkaller0: entered promiscuous mode
[  139.594122][ T9990] syzkaller0: entered allmulticast mode
[  139.604747][ T9990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1092'.
[  139.683603][ T9992] comedi comedi0: comedi_config --init_data is deprecated
[  139.842672][ T5943] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  139.846864][ T5943] Bluetooth: hci4: Injecting HCI hardware error event
[  139.851612][ T5943] Bluetooth: hci4: hardware error 0x00
[  140.532282][ T9693] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  140.682262][ T9693] usb 6-1: Using ep0 maxpacket: 8
[  140.686682][ T9693] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  140.689806][ T9693] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  140.693198][ T9693] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  140.697422][ T9693] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  140.701619][ T9693] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  140.708019][ T9693] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  140.712595][ T9693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.882709][   T63] Bluetooth: hci2: command 0x1003 tx timeout
[  140.882988][ T5944] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  141.015787][T10034] __nla_validate_parse: 2 callbacks suppressed
[  141.015804][T10034] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1105'.
[  141.056412][T10036] binder: binder_mmap: 10035 200000ff7000-200001000000 bad vm_flags failed -1
[  141.269824][T10055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10055 comm=syz.4.1109
[  141.270101][T10054] SELinux:  policydb string length 0 does not match expected length 8
[  141.277476][T10054] SELinux: failed to load policy
[  141.284140][T10055] SELinux:  policydb string length 8192 does not match expected length 8
[  141.286955][T10055] SELinux: failed to load policy
[  141.288789][T10055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1109'.
[  141.334840][T10062] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  141.337661][T10067] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1107'.
[  141.341124][ T5944] Bluetooth: hci0: unexpected event 0x06 length: 13 > 3
[  141.494352][T10086] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1102'.
[  141.501227][T10086] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  141.629136][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  141.629147][   T40] audit: type=1326 audit(2000000002.800:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10099 comm="syz.0.1120" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd32b9c799 code=0x0
[  141.801434][    T9] usb 6-1: USB disconnect, device number 7
[  141.932480][ T5943] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  142.152438][   T50] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  142.302551][   T50] usb 9-1: device descriptor read/64, error -71
[  142.517630][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'.
[  142.523620][T10143] sch_tbf: burst 8 is lower than device batadv_slave_0 mtu (1514) !
[  142.528523][   T40] audit: type=1326 audit(2000000003.700:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10142 comm="syz.1.1130" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb319d9c799 code=0x0
[  142.554042][   T50] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  142.610835][T10148] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  142.621155][T10150] netlink: 'syz.1.1132': attribute type 21 has an invalid length.
[  142.625473][T10150] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1132'.
[  142.628514][T10150] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1132'.
[  142.641581][T10150] netlink: 'syz.1.1132': attribute type 21 has an invalid length.
[  142.644260][T10150] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1132'.
[  142.647300][T10150] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1132'.
[  142.692475][   T50] usb 9-1: device descriptor read/64, error -71
[  142.778701][T10146] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1131'.
[  142.802729][   T50] usb usb9-port1: attempt power cycle
[  142.821985][   T40] audit: type=1400 audit(2000000003.990:782): avc:  denied  { listen } for  pid=10144 comm="syz.5.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  142.828765][   T40] audit: type=1400 audit(2000000003.990:783): avc:  denied  { accept } for  pid=10144 comm="syz.5.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  142.835171][   T40] audit: type=1400 audit(2000000003.990:784): avc:  denied  { accept } for  pid=10144 comm="syz.5.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  142.995280][T10167] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  143.152216][   T50] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  143.173002][   T50] usb 9-1: device descriptor read/8, error -71
[  143.412186][   T50] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  143.433528][   T50] usb 9-1: device descriptor read/8, error -71
[  143.553040][   T50] usb usb9-port1: unable to enumerate USB device
[  143.560382][T10171] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  143.792964][   T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  144.029085][   T40] audit: type=1400 audit(2000000005.200:785): avc:  denied  { ioctl } for  pid=10203 comm="syz.5.1144" path="socket:[36939]" dev="sockfs" ino=36939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  144.030868][T10208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.047058][T10208] bridge_slave_1: default FDB implementation only supports local addresses
[  150.426789][   T40] audit: type=1400 audit(2000000011.600:786): avc:  denied  { create } for  pid=10252 comm="syz.1.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  150.435751][T10257] netlink: 'syz.4.1150': attribute type 10 has an invalid length.
[  150.440151][T10257] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  150.443896][T10257] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  150.447756][T10257] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  150.463599][T10261] __nla_validate_parse: 4 callbacks suppressed
[  150.463615][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1151'.
[  150.463871][T10255] random: crng reseeded on system resumption
[  150.466781][   T40] audit: type=1400 audit(2000000011.640:787): avc:  denied  { write } for  pid=10252 comm="syz.1.1149" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  150.466791][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1151'.
[  150.478185][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1151'.
[  150.478214][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1151'.
[  150.483104][  T166] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.485823][   T40] audit: type=1400 audit(2000000011.640:788): avc:  denied  { ioctl } for  pid=10252 comm="syz.1.1149" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  150.488930][  T166] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  150.499645][  T166] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  150.505494][  T166] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  150.508470][   T40] audit: type=1400 audit(2000000011.690:789): avc:  denied  { create } for  pid=10258 comm="syz.5.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  150.519694][   T40] audit: type=1400 audit(2000000011.690:790): avc:  denied  { setopt } for  pid=10258 comm="syz.5.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  150.527299][   T40] audit: type=1400 audit(2000000011.690:791): avc:  denied  { bind } for  pid=10258 comm="syz.5.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  150.591688][  T166] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  150.595678][   T40] audit: type=1400 audit(2000000011.770:792): avc:  denied  { write } for  pid=10252 comm="syz.1.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  150.643974][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'.
[  150.728922][   T40] audit: type=1400 audit(2000000011.900:793): avc:  denied  { setopt } for  pid=10281 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  150.752818][T10282] macsec1: entered promiscuous mode
[  150.754799][T10282] macsec1: entered allmulticast mode
[  150.802862][   T40] audit: type=1400 audit(2000000011.970:794): avc:  denied  { write } for  pid=10287 comm="syz.0.1157" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  150.819301][T10290] netlink: 'syz.5.1159': attribute type 4 has an invalid length.
[  150.824370][T10290] netlink: 'syz.5.1159': attribute type 1 has an invalid length.
[  150.827376][T10290] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1159'.
[  150.845020][T10290] bond0: Error: Cannot enslave bond to itself.
[  151.144711][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'.
[  151.154426][T10328] ip6gretap0: entered promiscuous mode
[  151.157191][T10328] macsec1: entered promiscuous mode
[  151.159734][T10328] macsec1: entered allmulticast mode
[  151.162025][T10328] ip6gretap0: entered allmulticast mode
[  151.166804][T10328] ip6gretap0: left allmulticast mode
[  151.168857][T10328] ip6gretap0: left promiscuous mode
[  151.236035][T10327] block nbd0: shutting down sockets
[  151.259243][T10255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  151.295442][T10332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1168'.
[  151.299199][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  151.304210][T10335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1169'.
[  151.394846][   T40] audit: type=1400 audit(2000000012.570:795): avc:  denied  { link } for  pid=10342 comm="syz.1.1173" name="#1f" dev="tmpfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  151.698152][T10359] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  151.795775][T10371] openvswitch: netlink: Flow key attribute not present in set flow.
[  151.942735][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  151.946493][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  151.949456][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  151.952510][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  151.955460][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  152.105529][T10377] chnl_net:caif_netlink_parms(): no params data found
[  152.212218][T10377] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.215273][T10377] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.218205][T10377] bridge_slave_0: entered allmulticast mode
[  152.221304][T10377] bridge_slave_0: entered promiscuous mode
[  152.227518][T10377] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.229901][T10377] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.232315][T10377] bridge_slave_1: entered allmulticast mode
[  152.235361][T10377] bridge_slave_1: entered promiscuous mode
[  152.284479][T10397] xt_socket: unknown flags 0xc
[  152.406677][ T1145] bond5 (unregistering): (slave gretap1): Releasing active interface
[  152.502409][ T1145] bond0 (unregistering): Released all slaves
[  152.508769][ T1145] bond1 (unregistering): Released all slaves
[  152.518463][ T1145] bond2 (unregistering): Released all slaves
[  152.528167][ T1145] bond3 (unregistering): Released all slaves
[  152.538553][ T1145] bond4 (unregistering): Released all slaves
[  152.549238][ T1145] bond5 (unregistering): Released all slaves
[  152.562077][T10377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.570300][T10377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.607615][T10377] team0: Port device team_slave_0 added
[  152.613399][T10377] team0: Port device team_slave_1 added
[  152.627577][T10377] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.629823][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.638446][T10377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.644627][T10377] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.646843][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.655180][T10377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.681704][T10377] hsr_slave_0: entered promiscuous mode
[  152.684240][T10377] hsr_slave_1: entered promiscuous mode
[  152.686357][T10377] debugfs: 'hsr0' already exists in 'hsr'
[  152.688201][T10377] Cannot create hsr debugfs directory
[  152.691117][ T1145] : left promiscuous mode
[  152.780026][ T1145] tipc: Left network mode
[  152.842359][T10411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.845691][T10411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.923822][T10377] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  152.943076][T10377] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  152.955130][T10377] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  152.964730][T10377] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  153.005461][T10377] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.014720][T10377] 8021q: adding VLAN 0 to HW filter on device team0
[  153.019790][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.022050][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.032624][T10428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10428 comm=syz.4.1190
[  153.033340][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.039929][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.072224][ T1927] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  153.082391][ T1145] hsr_slave_0: left promiscuous mode
[  153.086150][ T1145] hsr_slave_1: left promiscuous mode
[  153.420084][T10457] ucma_write: process 698 (syz.4.1197) changed security contexts after opening file descriptor, this is not allowed.
[  154.006166][ T5943] Bluetooth: hci2: command tx timeout
[  154.509804][T10377] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.597222][ T5943] Bluetooth: hci1: unexpected event for opcode 0x0406
[  154.656256][ T5943] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  154.702340][T10377] veth0_vlan: entered promiscuous mode
[  154.710881][T10377] veth1_vlan: entered promiscuous mode
[  154.712246][ T1927] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  154.729627][T10377] veth0_macvtap: entered promiscuous mode
[  154.737243][T10377] veth1_macvtap: entered promiscuous mode
[  154.746777][T10377] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.754041][T10377] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.763134][   T67] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.766267][   T67] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.769993][   T67] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.773749][   T67] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.778764][ T5342]  pmem0: [POWERTEC]
[  154.855808][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.858544][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.869738][ T1927] usb 5-1: Using ep0 maxpacket: 8
[  154.880666][ T1927] usb 5-1: config 0 has no interfaces?
[  154.883007][ T1927] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  154.885849][ T1927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.893007][ T1927] usb 5-1: config 0 descriptor??
[  154.907839][  T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.909520][ T1145] IPVS: stop unused estimator thread 0...
[  154.910411][  T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.931737][T10526] netlink: 'syz.4.1211': attribute type 1 has an invalid length.
[  154.955128][T10526] 8021q: adding VLAN 0 to HW filter on device bond4
[  155.040965][T10538] vlan2: entered allmulticast mode
[  155.042918][    T9] usb 5-1: USB disconnect, device number 19
[  155.042923][T10538] vlan0: entered allmulticast mode
[  155.042934][T10538] veth0_vlan: entered allmulticast mode
[  155.100078][T10545] loop6: detected capacity change from 0 to 2640
[  155.102750][T10545] buffer_io_error: 25 callbacks suppressed
[  155.102759][T10545] Buffer I/O error on dev loop6, logical block 0, async page read
[  155.107412][T10545] Buffer I/O error on dev loop6, logical block 0, async page read
[  155.109925][T10545] Buffer I/O error on dev loop6, logical block 0, async page read
[  155.112860][T10545] Buffer I/O error on dev loop6, logical block 0, async page read
[  155.117359][T10545] Buffer I/O error on dev loop6, logical block 0, async page read
[  155.127262][T10545] Buffer I/O error on dev loop6, logical block 0, async page read
[  155.129955][T10545] Buffer I/O error on dev loop6, logical block 0, async page read
[  155.135392][T10545] Buffer I/O error on dev loop6, logical block 0, async page read
[  155.137972][T10545] ldm_validate_partition_table(): Disk read failed.
[  155.140357][T10545] Buffer I/O error on dev loop6, logical block 0, async page read
[  155.147006][T10545] Buffer I/O error on dev loop6, logical block 0, async page read
[  155.149674][T10545] Dev loop6: unable to read RDB block 0
[  155.152652][T10545]  loop6: unable to read partition table
[  155.154633][T10545] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  155.169085][T10550] netlink: 'syz.6.1219': attribute type 13 has an invalid length.
[  155.178468][T10550] netlink: 'syz.6.1219': attribute type 13 has an invalid length.
[  155.182154][   T46] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.185142][   T46] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.188163][   T46] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.191003][   T46] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.292455][ T5981] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  155.293163][T10562] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input17
[  155.463433][ T5981] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[  155.466158][ T5981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.470197][ T5981] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  155.473593][ T5981] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  155.476185][ T5981] usb 10-1: Manufacturer: syz
[  155.478994][ T5981] usb 10-1: config 0 descriptor??
[  155.498645][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  155.507517][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  155.512204][   T40] kauditd_printk_skb: 12 callbacks suppressed
[  155.512210][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  155.512215][   T40] audit: type=1400 audit(2000000016.680:808): avc:  denied  { lock } for  pid=10569 comm="syz.4.1226" path="socket:[38513]" dev="sockfs" ino=38513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  155.532301][ T5981] rc_core: IR keymap rc-hauppauge not found
[  155.533250][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  155.534258][ T5981] Registered IR keymap rc-empty
[  155.537043][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  155.540045][ T5981] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0
[  155.551362][ T5981] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input18
[  155.668595][T10575] chnl_net:caif_netlink_parms(): no params data found
[  155.703173][   T39] usb 10-1: USB disconnect, device number 13
[  155.748836][T10575] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.751177][T10575] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.754650][T10575] bridge_slave_0: entered allmulticast mode
[  155.757502][T10575] bridge_slave_0: entered promiscuous mode
[  155.761976][T10575] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.766384][T10575] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.768707][T10575] bridge_slave_1: entered allmulticast mode
[  155.771335][T10575] bridge_slave_1: entered promiscuous mode
[  155.790062][T10575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.795459][T10575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.810601][T10575] team0: Port device team_slave_0 added
[  155.814461][T10575] team0: Port device team_slave_1 added
[  155.827190][T10575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.829558][T10575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  155.839294][T10575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.845826][T10575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.848166][T10575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  155.856449][T10575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.891303][T10575] hsr_slave_0: entered promiscuous mode
[  155.893809][T10575] hsr_slave_1: entered promiscuous mode
[  155.896157][T10575] debugfs: 'hsr0' already exists in 'hsr'
[  155.897968][T10575] Cannot create hsr debugfs directory
[  155.993003][T10589] program syz.4.1229 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.003996][T10575] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  156.014017][T10575] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  156.018494][T10575] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  156.023789][T10575] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  156.041457][T10575] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.044148][T10575] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.046776][T10575] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.049258][T10575] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.077207][T10575] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.088122][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.094665][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.103868][T10575] 8021q: adding VLAN 0 to HW filter on device team0
[  156.113520][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.116770][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.124668][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.127152][ T1259] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.235245][T10575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.251845][T10605] loop9: detected capacity change from 0 to 7
[  156.283301][T10515] Dev loop9: unable to read RDB block 7
[  156.287111][T10515]  loop9: unable to read partition table
[  156.289145][T10515] loop9: partition table beyond EOD, truncated
[  156.313650][T10605] Dev loop9: unable to read RDB block 7
[  156.315733][T10605]  loop9: unable to read partition table
[  156.318349][T10605] loop9: partition table beyond EOD, truncated
[  156.322300][T10605] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ	œëÜ%õ«`Éæ�˜Èµ4FLQkÝŠ5) failed (rc=-5)
[  156.387964][T10622] cgroup: subsys name conflicts with all
[  156.403274][T10622] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  156.467458][T10575] veth0_vlan: entered promiscuous mode
[  156.475079][T10575] veth1_vlan: entered promiscuous mode
[  156.494926][T10575] veth0_macvtap: entered promiscuous mode
[  156.501084][T10575] veth1_macvtap: entered promiscuous mode
[  156.510815][T10575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.517006][T10575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.524901][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.529201][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.533868][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.544531][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.591139][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.595104][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.651352][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.654004][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.685831][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.689328][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.759564][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.763484][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.833652][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.838831][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.923668][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.928080][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.999472][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  157.003558][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  157.007796][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  157.011874][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  157.015744][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  157.045914][   T40] audit: type=1400 audit(2000000018.220:809): avc:  denied  { append } for  pid=10664 comm="syz.7.1248" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  157.217405][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.220407][   T12] bond_slave_0: left allmulticast mode
[  157.228409][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.231418][   T12] bond_slave_1: left allmulticast mode
[  157.234567][   T12] bond0 (unregistering): Released all slaves
[  157.239552][   T12] bond1 (unregistering): Released all slaves
[  157.351714][T10662] chnl_net:caif_netlink_parms(): no params data found
[  157.450391][T10662] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.453070][T10662] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.455369][T10662] bridge_slave_0: entered allmulticast mode
[  157.458004][T10662] bridge_slave_0: entered promiscuous mode
[  157.461093][T10662] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.464777][T10662] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.467763][T10662] bridge_slave_1: entered allmulticast mode
[  157.470649][T10662] bridge_slave_1: entered promiscuous mode
[  157.493461][T10662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.497862][T10662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.533312][T10662] team0: Port device team_slave_0 added
[  157.536965][T10662] team0: Port device team_slave_1 added
[  157.550018][T10662] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.553582][T10662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.561542][T10662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.566473][T10662] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.568708][T10662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.577162][T10662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.603371][T10662] hsr_slave_0: entered promiscuous mode
[  157.603462][ T5943] Bluetooth: hci0: command tx timeout
[  157.606026][T10662] hsr_slave_1: entered promiscuous mode
[  157.609230][T10662] debugfs: 'hsr0' already exists in 'hsr'
[  157.611029][T10662] Cannot create hsr debugfs directory
[  157.656443][   T12] hsr_slave_0: left promiscuous mode
[  157.664442][   T12] hsr_slave_1: left promiscuous mode
[  157.666565][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.668881][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.671400][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.676187][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.682320][ T5943] Bluetooth: hci2: command tx timeout
[  157.685183][   T12] veth1_macvtap: left promiscuous mode
[  157.686960][   T12] veth0_macvtap: left promiscuous mode
[  157.688701][   T12] veth1_vlan: left promiscuous mode
[  157.690345][   T12] veth0_vlan: left promiscuous mode
[  157.868085][   T12] team0 (unregistering): Port device team_slave_1 removed
[  157.877242][   T12] team0 (unregistering): Port device team_slave_0 removed
[  157.918172][T10705] __nla_validate_parse: 10 callbacks suppressed
[  157.918185][T10705] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1255'.
[  157.953930][   T40] audit: type=1400 audit(2000000019.130:810): avc:  denied  { read } for  pid=10706 comm="syz.7.1256" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  157.965172][   T40] audit: type=1400 audit(2000000019.130:811): avc:  denied  { open } for  pid=10706 comm="syz.7.1256" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  157.977683][   T40] audit: type=1400 audit(2000000019.130:812): avc:  denied  { ioctl } for  pid=10706 comm="syz.7.1256" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  157.990601][T10704] bridge0: port 3(syz_tun) entered blocking state
[  157.993538][T10704] bridge0: port 3(syz_tun) entered disabled state
[  157.996756][T10704] syz_tun: entered allmulticast mode
[  158.007965][T10704] syz_tun: entered promiscuous mode
[  158.017696][T10704] bridge0: port 3(syz_tun) entered blocking state
[  158.020886][T10704] bridge0: port 3(syz_tun) entered forwarding state
[  158.024920][T10713] random: crng reseeded on system resumption
[  158.025639][   T40] audit: type=1400 audit(2000000019.200:813): avc:  denied  { append } for  pid=10712 comm="syz.7.1257" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  158.035049][T10705] bridge0: port 3(syz_tun) entered disabled state
[  158.035230][T10705] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.035764][T10705] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.133956][T10720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.139807][T10722] 9p: Could not find request transport: v
[  158.151362][   T40] audit: type=1400 audit(2000000019.320:814): avc:  denied  { append } for  pid=10724 comm="syz.4.1262" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  158.167646][   T40] audit: type=1400 audit(2000000019.340:815): avc:  denied  { ioctl } for  pid=10724 comm="syz.4.1262" path="socket:[40415]" dev="sockfs" ino=40415 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  158.192328][   T40] audit: type=1400 audit(2000000019.340:816): avc:  denied  { read } for  pid=10724 comm="syz.4.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  158.204528][   T40] audit: type=1400 audit(2000000019.380:817): avc:  denied  { accept } for  pid=10718 comm="syz.6.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  158.247061][T10662] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  158.251150][T10662] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  158.255658][T10662] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  158.275789][T10737] Bluetooth: MGMT ver 1.23
[  158.277837][T10737] Bluetooth: hci0: unsupported parameter 255
[  158.280395][T10737] Bluetooth: hci0: unsupported parameter 255
[  158.293061][T10662] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  158.356523][T10662] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.369721][T10662] 8021q: adding VLAN 0 to HW filter on device team0
[  158.377419][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.379831][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.389090][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.391416][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.508483][T10662] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.661200][T10662] veth0_vlan: entered promiscuous mode
[  158.668491][T10662] veth1_vlan: entered promiscuous mode
[  158.682485][T10662] veth0_macvtap: entered promiscuous mode
[  158.687404][T10662] veth1_macvtap: entered promiscuous mode
[  158.695805][T10662] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.704318][T10662] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.720099][   T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.723820][   T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.727365][   T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.730164][   T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.776471][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.778940][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.801402][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.806958][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.949875][T10769] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2139632632 (8558530528 ns) > initial count (4400489236 ns). Using initial count to start timer.
[  159.043745][ T5943] Bluetooth: hci1: command tx timeout
[  159.077513][T10780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.106026][T10783] erofs: Unknown parameter 'discard'
[  159.112959][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1271'.
[  159.170983][T10790] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  159.253233][T10794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=10794 comm=syz.8.1274
[  159.257293][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1274'.
[  159.260157][T10794] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1274'.
[  159.263342][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1274'.
[  159.266114][T10794] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1274'.
[  159.325441][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1277'.
[  159.521744][T10806] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  159.524073][T10806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  159.528543][T10806] vhci_hcd vhci_hcd.0: Device attached
[  159.533678][T10807] vhci_hcd: connection closed
[  159.535024][ T1146] vhci_hcd vhci_hcd.4: stop threads
[  159.538700][ T1146] vhci_hcd vhci_hcd.4: release socket
[  159.540992][ T1146] vhci_hcd vhci_hcd.4: disconnect device
[  159.682417][ T5943] Bluetooth: hci0: command tx timeout
[  159.762567][ T5943] Bluetooth: hci2: command tx timeout
[  160.011989][T10814] Bluetooth: MGMT ver 1.23
[  160.720085][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  160.720101][   T40] audit: type=1400 audit(2000000021.890:822): avc:  denied  { connect } for  pid=10840 comm="syz.7.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  160.840448][   T40] audit: type=1400 audit(2000000022.010:823): avc:  denied  { map } for  pid=10856 comm="syz.6.1291" path="socket:[41196]" dev="sockfs" ino=41196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  160.908349][   T40] audit: type=1800 audit(2000000022.080:824): pid=10870 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1294" name="file1" dev="overlay" ino=156 res=0 errno=0
[  160.916562][   T40] audit: type=1804 audit(2000000022.090:825): pid=10870 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1294" name="/newroot/25/bus/file0" dev="overlay" ino=156 res=1 errno=0
[  160.995059][T10886] IPv6: NLM_F_CREATE should be specified when creating new route
[  160.997673][T10886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  161.001193][T10886] IPv6: NLM_F_CREATE should be set when creating new route
[  161.015160][T10889] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  161.015160][   T40] audit: type=1400 audit(2000000022.190:826): avc:  denied  { getattr } for  pid=10887 comm="syz.6.1299" name="/" dev="9p" ino=80478263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  161.031789][   T40] audit: type=1400 audit(2000000022.200:827): avc:  denied  { read write } for  pid=10887 comm="syz.6.1299" name="file0" dev="overlay" ino=80478313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  161.045484][   T40] audit: type=1400 audit(2000000022.200:828): avc:  denied  { open } for  pid=10887 comm="syz.6.1299" path="/27/bus/file0" dev="overlay" ino=80478313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  161.052974][   T40] audit: type=1400 audit(2000000022.210:829): avc:  denied  { setattr } for  pid=10887 comm="syz.6.1299" name="#175" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  161.059928][   T40] audit: type=1400 audit(2000000022.210:830): avc:  denied  { link } for  pid=10887 comm="syz.6.1299" name="#175" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  161.071444][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1302'.
[  161.075487][   T40] audit: type=1400 audit(2000000022.250:831): avc:  denied  { unlink } for  pid=10377 comm="syz-executor" name="file0" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  161.133991][ T5944] Bluetooth: hci1: command tx timeout
[  161.184703][ T5943] Bluetooth: hci2: Opcode 0x0401 failed: -112
[  161.773632][ T5943] Bluetooth: hci0: command tx timeout
[  161.933009][T10900] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  161.935773][T10900] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  161.939075][T10900] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  161.944107][T10900] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  161.946388][T10900] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  161.950953][T10900] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  161.955482][T10900] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  161.957517][T10900] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  161.960195][T10900] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  161.994566][T10925] cgroup2: Unknown parameter 'memory_hugetlb_accounting<hì˜5s½mû'
[  162.081072][T10931] xt_CT: You must specify a L4 protocol and not use inversions on it
[  162.086929][T10931] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1312'.
[  162.128721][T10931] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1312'.
[  162.132244][T10931] nbd: device at index 64 is going down
[  162.135716][T10936] overlayfs: cannot append lower layer
[  162.145094][T10936] netlink: 'syz.6.1313': attribute type 7 has an invalid length.
[  162.147856][T10936] netlink: 'syz.6.1313': attribute type 8 has an invalid length.
[  162.201491][T10262] udevd[10262]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  162.207258][T10515] udevd[10515]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  162.595591][T10979] kvm: kvm [10978]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0xfffffc18
[  162.599834][T10979] kvm: kvm [10978]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0xfffffc18
[  162.612650][T10985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=10985 comm=syz.7.1330
[  162.617378][T10985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=10985 comm=syz.7.1330
[  162.619345][T10979] kvm: kvm [10978]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0xfffffc18
[  162.622020][T10985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=10985 comm=syz.7.1330
[  162.629476][T10985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=10985 comm=syz.7.1330
[  162.642427][T10979] kvm: kvm [10978]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0xfffffc18
[  162.645622][T10979] kvm: kvm [10978]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0xfffffc18
[  162.654149][T10987] IPv6: Can't replace route, no match found
[  162.762807][T10995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.766773][T10995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.002236][ T6633] usb 11-1: new full-speed USB device number 2 using dummy_hcd
[  163.099524][T11005] GUP no longer grows the stack in syz.7.1335 (11005): 200000004000-20000000a000 (200000002000)
[  163.103159][T11005] CPU: 2 UID: 0 PID: 11005 Comm: syz.7.1335 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.103178][T11005] Tainted: [L]=SOFTLOCKUP
[  163.103183][T11005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  163.103189][T11005] Call Trace:
[  163.103194][T11005]  <TASK>
[  163.103199][T11005]  dump_stack_lvl+0x100/0x190
[  163.103231][T11005]  gup_vma_lookup.cold+0x83/0x96
[  163.103247][T11005]  __get_user_pages+0x241/0x34d0
[  163.103265][T11005]  ? find_held_lock+0x2b/0x80
[  163.103280][T11005]  ? mtree_load+0x311/0xa40
[  163.103302][T11005]  ? __pfx___get_user_pages+0x10/0x10
[  163.103318][T11005]  get_user_pages_remote+0x3d2/0xb10
[  163.103330][T11005]  ? mas_new_root+0x690/0x6e0
[  163.103347][T11005]  ? __pfx_get_user_pages_remote+0x10/0x10
[  163.103361][T11005]  ? __access_remote_vm+0x84d/0xa70
[  163.103383][T11005]  __access_remote_vm+0x3ba/0xa70
[  163.103403][T11005]  ? do_raw_spin_lock+0x128/0x260
[  163.103416][T11005]  ? __pfx___access_remote_vm+0x10/0x10
[  163.103436][T11005]  ? alloc_pages_noprof+0x233/0x390
[  163.103449][T11005]  proc_pid_cmdline_read+0x4f2/0x8c0
[  163.103466][T11005]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  163.103484][T11005]  ? rw_verify_area+0xce/0x6d0
[  163.103500][T11005]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  163.103515][T11005]  vfs_readv+0x5d8/0x8d0
[  163.103534][T11005]  ? __pfx_vfs_readv+0x10/0x10
[  163.103560][T11005]  ? __fget_files+0x21f/0x3d0
[  163.103576][T11005]  ? do_preadv+0x1ac/0x270
[  163.103590][T11005]  do_preadv+0x1ac/0x270
[  163.103606][T11005]  ? __pfx_do_preadv+0x10/0x10
[  163.103626][T11005]  do_syscall_64+0x106/0xf80
[  163.103641][T11005]  ? clear_bhb_loop+0x40/0x90
[  163.103654][T11005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.103665][T11005] RIP: 0033:0x7f9a0bb9c799
[  163.103675][T11005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.103685][T11005] RSP: 002b:00007f9a0ca0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  163.103697][T11005] RAX: ffffffffffffffda RBX: 00007f9a0be16090 RCX: 00007f9a0bb9c799
[  163.103703][T11005] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000006
[  163.103709][T11005] RBP: 00007f9a0bc32c99 R08: 00000000fffffff9 R09: 0000000000000000
[  163.103716][T11005] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  163.103723][T11005] R13: 00007f9a0be16128 R14: 00007f9a0be16090 R15: 00007ffe3a55cdb8
[  163.103738][T11005]  </TASK>
[  163.172275][ T6633] usb 11-1: device descriptor read/64, error -71
[  163.202323][ T5943] Bluetooth: hci2: command 0x0401 tx timeout
[  163.250451][T11009] __nla_validate_parse: 5 callbacks suppressed
[  163.250463][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'.
[  163.432242][ T6633] usb 11-1: new full-speed USB device number 3 using dummy_hcd
[  163.524865][T11015] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  163.562181][ T6633] usb 11-1: device descriptor read/64, error -71
[  163.639239][T11026] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  163.651555][T11026] macsec1: entered promiscuous mode
[  163.657899][T11026] macsec1: entered allmulticast mode
[  163.672620][ T6633] usb usb11-port1: attempt power cycle
[  163.772276][ T1026] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  163.913900][ T1026] usb 9-1: device descriptor read/64, error -71
[  163.943351][ T6018] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  163.977347][T11036] openvswitch: netlink: IP tunnel dst address not specified
[  164.002479][ T5943] Bluetooth: hci1: command 0x0419 tx timeout
[  164.002504][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout
[  164.022406][ T6633] usb 11-1: new full-speed USB device number 4 using dummy_hcd
[  164.059962][ T6633] usb 11-1: device descriptor read/8, error -71
[  164.092351][ T6018] usb 13-1: Using ep0 maxpacket: 8
[  164.095512][ T6018] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  164.098793][ T6018] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  164.101638][ T6018] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.106325][ T6018] usb 13-1: config 0 descriptor??
[  164.137904][T11044] fuse: Bad value for 'fd'
[  164.152234][ T1026] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  164.282387][ T1026] usb 9-1: device descriptor read/64, error -71
[  164.302880][ T6633] usb 11-1: new full-speed USB device number 5 using dummy_hcd
[  164.311993][T11028] netlink: 'syz.8.1342': attribute type 13 has an invalid length.
[  164.336175][ T6633] usb 11-1: device descriptor read/8, error -71
[  164.402969][ T1026] usb usb9-port1: attempt power cycle
[  164.454163][ T6633] usb usb11-port1: unable to enumerate USB device
[  164.485636][T11069] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4)
[  164.488448][T11069] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  164.492472][T11069] vhci_hcd vhci_hcd.0: Device attached
[  164.503317][T11069] vhci_hcd vhci_hcd.0: port 0 already used
[  164.506117][T11071] vhci_hcd: connection closed
[  164.515629][ T1157] vhci_hcd vhci_hcd.7: stop threads
[  164.519695][ T1157] vhci_hcd vhci_hcd.7: release socket
[  164.521841][ T1157] vhci_hcd vhci_hcd.7: disconnect device
[  164.587327][ T6018] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  164.594290][ T6018] usb 13-1: USB disconnect, device number 2
[  164.742217][ T1026] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  164.763280][ T1026] usb 9-1: device descriptor read/8, error -71
[  165.002330][ T1026] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  165.023466][ T1026] usb 9-1: device descriptor read/8, error -71
[  165.140066][ T1026] usb usb9-port1: unable to enumerate USB device
[  165.292827][ T5944] Bluetooth: hci2: command 0x0401 tx timeout
[  165.598294][T11112] No such timeout policy "syz1"
[  165.878760][T11134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.883473][T11134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.964815][ T5944] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  166.082300][ T5944] Bluetooth: hci1: command 0x0419 tx timeout
[  166.084750][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout
[  166.132614][T11153] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1367'.
[  166.143681][   T39] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  166.292222][   T39] usb 11-1: device descriptor read/64, error -71
[  166.333772][T11168] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=55 sclass=netlink_tcpdiag_socket pid=11168 comm=syz.8.1373
[  166.339652][T11168] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=55 sclass=netlink_tcpdiag_socket pid=11168 comm=syz.8.1373
[  166.354342][T11168] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11168 comm=syz.8.1373
[  166.480202][T11181] netlink: 'syz.7.1377': attribute type 1 has an invalid length.
[  166.497464][T11181] 8021q: adding VLAN 0 to HW filter on device bond1
[  166.535405][T11181] bond1: (slave veth3): Enslaving as an active interface with a down link
[  166.542260][   T39] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  166.548891][T11181] vlan2: entered allmulticast mode
[  166.551051][T11181] bond1: entered allmulticast mode
[  166.554870][T11181] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  166.602061][T11192] input: syz1 as /devices/virtual/input/input19
[  166.682240][   T39] usb 11-1: device descriptor read/64, error -71
[  166.802536][   T39] usb usb11-port1: attempt power cycle
[  166.818774][T11211] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1385'.
[  166.822863][T11211] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1385'.
[  166.909826][T11215] sp0: Synchronizing with TNC
[  166.934926][T11214] [U] è
[  167.001761][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'.
[  167.048663][T11220] random: crng reseeded on system resumption
[  167.101364][   T40] kauditd_printk_skb: 11 callbacks suppressed
[  167.101377][   T40] audit: type=1400 audit(2000000028.270:843): avc:  denied  { ioctl } for  pid=11229 comm="syz.7.1391" path="pid:[4026532878]" dev="nsfs" ino=4026532878 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  167.153099][   T39] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  167.172586][   T39] usb 11-1: device descriptor read/8, error -71
[  167.362422][ T5943] Bluetooth: hci2: command 0x0401 tx timeout
[  167.422191][   T39] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  167.455262][   T39] usb 11-1: device descriptor read/8, error -71
[  167.513067][T11263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53272 sclass=netlink_route_socket pid=11263 comm=syz.7.1402
[  167.552749][T11266] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  167.556533][T11266] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  167.564426][   T39] usb usb11-port1: unable to enumerate USB device
[  167.581592][T11265] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.586065][T11265] bridge_slave_1: left allmulticast mode
[  167.589075][T11265] bridge_slave_1: left promiscuous mode
[  167.591981][T11265] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.600721][T11265] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  167.616637][T11270] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  167.717295][T11284] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11284 comm=syz.4.1409
[  168.162238][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout
[  168.162651][   T63] Bluetooth: hci1: command 0x0419 tx timeout
[  168.415085][   T40] audit: type=1400 audit(2000000029.590:844): avc:  denied  { setattr } for  pid=11328 comm="syz.7.1417" name="NETLINK" dev="sockfs" ino=42868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  168.475767][T11331] bridge1: entered promiscuous mode
[  168.477771][T11331] bridge1: entered allmulticast mode
[  168.522526][   T39] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[  168.599317][   T40] audit: type=1400 audit(2000000029.770:845): avc:  denied  { listen } for  pid=11334 comm="syz.7.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  168.617724][T11335] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  168.629249][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1420'.
[  168.692248][   T39] usb 13-1: Using ep0 maxpacket: 32
[  168.696802][   T39] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  168.701603][   T39] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  168.706585][   T39] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  168.714234][   T39] usb 13-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  168.718381][   T39] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.719871][   T40] audit: type=1400 audit(2000000029.890:846): avc:  denied  { search } for  pid=11336 comm="syz.4.1421" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  168.721645][   T39] usb 13-1: Product: syz
[  168.730512][   T39] usb 13-1: Manufacturer: syz
[  168.732689][   T39] usb 13-1: SerialNumber: syz
[  168.743551][   T39] usb 13-1: config 0 descriptor??
[  168.750802][   T39] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input22
[  168.769609][    C0] xpad 13-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  168.812620][    C0] xpad 13-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  168.828030][    C0] xpad 13-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  168.922061][T11350] CIFS mount error: No usable UNC path provided in device string!
[  168.922061][T11350] 
[  168.929638][T11350] smb3_fs_context_validate: 55 callbacks suppressed
[  168.929656][T11350] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  168.954340][ T6633] usb 13-1: USB disconnect, device number 3
[  168.954450][    C0] xpad 13-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[  168.995472][   T40] audit: type=1400 audit(2000000030.170:847): avc:  denied  { connect } for  pid=11355 comm="syz.6.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  169.022321][T11361] veth1_vlan: left allmulticast mode
[  169.073380][   T40] audit: type=1400 audit(2000000030.250:848): avc:  denied  { audit_read } for  pid=11351 comm="syz.7.1427" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  169.074060][T11352] ceph: No source
[  169.084680][   T40] audit: type=1400 audit(2000000030.260:849): avc:  denied  { accept } for  pid=11351 comm="syz.7.1427" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  169.283588][T11380] netlink: 'syz.6.1434': attribute type 21 has an invalid length.
[  169.335679][T11384] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  169.500856][T11388] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1437'.
[  169.772217][ T1927] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  170.244028][ T5943] Bluetooth: hci1: command 0x0419 tx timeout
[  170.338108][ T1927] usb 11-1: Using ep0 maxpacket: 8
[  170.342279][ T1927] usb 11-1: config index 0 descriptor too short (expected 301, got 45)
[  170.345643][ T1927] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  170.349683][ T1927] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  170.362571][ T1927] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  170.366792][ T1927] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  170.371993][ T1927] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  170.376229][ T1927] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.499854][T11418] ip6gre1: entered promiscuous mode
[  170.609434][ T1927] usb 11-1: usb_control_msg returned -32
[  170.611273][ T1927] usbtmc 11-1:16.0: can't read capabilities
[  170.697903][T11427] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1445'.
[  170.701260][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1445'.
[  170.900166][   T40] audit: type=1400 audit(2000000032.070:850): avc:  denied  { read append } for  pid=11465 comm="syz.8.1453" name="file0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  170.916628][   T40] audit: type=1400 audit(2000000032.090:851): avc:  denied  { mounton } for  pid=11465 comm="syz.8.1453" path="/55/file0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  170.927133][T11466] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  170.964402][T11467] usbtmc 11-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  170.987392][T11469] overlayfs: conflicting options: userxattr,redirect_dir=on
[  171.111287][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'.
[  171.172050][ T1927] usb 11-1: USB disconnect, device number 10
[  171.182531][T11476] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20003
[  171.188383][   T40] audit: type=1400 audit(2000000032.360:852): avc:  denied  { ioctl } for  pid=11475 comm="syz.8.1455" path="socket:[44671]" dev="sockfs" ino=44671 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  171.241449][T11478] kAFS: unable to lookup cell '1'
[  171.540285][T11490] Invalid logical block size (536872960)
[  171.543631][T11489] Invalid logical block size (536872960)
[  171.676403][T11499] netlink: 'syz.7.1464': attribute type 1 has an invalid length.
[  171.691260][T11499] bond2: entered promiscuous mode
[  171.694738][T11499] 8021q: adding VLAN 0 to HW filter on device bond2
[  171.717944][T11499] bond2: (slave bridge2): making interface the new active one
[  171.721229][T11499] bridge2: entered promiscuous mode
[  171.725944][T11499] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  171.873021][T11514] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  171.880328][T11516] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  171.916711][T11522] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1471'.
[  171.921645][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1471'.
[  172.074028][T11536] macvlan0: entered allmulticast mode
[  172.075970][T11536] veth1_vlan: entered allmulticast mode
[  172.081062][T11536] pim6reg: entered allmulticast mode
[  172.086457][T11536] veth1_vlan: left allmulticast mode
[  172.090842][T11536] macvlan0 (unregistering): left allmulticast mode
[  172.122447][T11538] ip6t_srh: unknown srh match flags  4000
[  172.133812][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'.
[  172.199153][   T40] audit: type=1400 audit(2000000033.370:853): avc:  denied  { write } for  pid=11542 comm="syz.7.1477" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  172.209372][   T40] audit: type=1400 audit(2000000033.370:854): avc:  denied  { write } for  pid=11542 comm="syz.7.1477" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  172.223044][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1478'.
[  172.226568][T11546] openvswitch: netlink: nsh attr 8 is out of range max 3
[  172.245241][T11555] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1480'.
[  172.249635][T11554] IPv4: Oversized IP packet from 127.202.26.0
[  172.308188][T11564] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  172.312862][T11561] overlay: Unknown parameter 'fowner>00000000000000000000'
[  172.319904][   T40] audit: type=1400 audit(2000000033.490:855): avc:  denied  { name_bind } for  pid=11563 comm="syz.6.1483" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  172.334956][ T5943] Bluetooth: hci1: command 0x0419 tx timeout
[  172.352146][   T40] audit: type=1400 audit(2000000033.520:856): avc:  denied  { mounton } for  pid=11568 comm="syz.8.1484" path="/file0" dev="ramfs" ino=44864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  172.355902][T11569] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  172.359267][   T40] audit: type=1400 audit(2000000033.520:857): avc:  denied  { mount } for  pid=11568 comm="syz.8.1484" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  172.359293][   T40] audit: type=1400 audit(2000000033.520:858): avc:  denied  { remount } for  pid=11568 comm="syz.8.1484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  172.368068][T11571] ipt_rpfilter: unknown options
[  172.406048][T11569] overlayfs: failed to set xattr on upper
[  172.408530][T11569] overlayfs: ...falling back to redirect_dir=nofollow.
[  172.411491][T11569] overlayfs: ...falling back to index=off.
[  172.420098][T11569] overlayfs: ...falling back to uuid=null.
[  172.451990][T11569] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  172.540008][   T40] audit: type=1400 audit(2000000033.710:859): avc:  denied  { accept } for  pid=11581 comm="syz.8.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  172.549293][T11584] cgroup: release_agent respecified
[  172.560610][T11584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11584 comm=syz.7.1490
[  172.572189][T11584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=11584 comm=syz.7.1490
[  172.577328][T11584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11584 comm=syz.7.1490
[  172.581712][   T40] audit: type=1400 audit(2000000033.750:860): avc:  denied  { name_bind } for  pid=11587 comm="syz.6.1491" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  172.636210][T11585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11585 comm=syz.7.1490
[  172.642787][T11585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=11585 comm=syz.7.1490
[  172.647148][T11585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11585 comm=syz.7.1490
[  172.847593][T11605] netlink: 'syz.7.1495': attribute type 10 has an invalid length.
[  173.511558][T11659] sp0: Synchronizing with TNC
[  173.517099][T11658] [U] è
[  173.604448][   T40] audit: type=1400 audit(2000000034.780:861): avc:  denied  { append } for  pid=11665 comm="syz.7.1511" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  173.605757][T11666] binder: 11665:11666 ioctl 400c620e 200000000100 returned -22
[  173.629324][   T40] audit: type=1400 audit(2000000034.800:862): avc:  denied  { ioctl } for  pid=11665 comm="syz.7.1511" path="socket:[43993]" dev="sockfs" ino=43993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  173.759987][ T6633] IPVS: starting estimator thread 0...
[  173.762224][ T1927] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  173.764581][T11683] netlink: 'syz.8.1517': attribute type 11 has an invalid length.
[  173.785905][T11683] netlink: 'syz.8.1517': attribute type 3 has an invalid length.
[  173.817601][T11688] binder: 11687:11688 ioctl 80184560 2000000000c0 returned -22
[  173.844635][T11694] syzkaller0: entered promiscuous mode
[  173.847238][T11694] syzkaller0: entered allmulticast mode
[  173.853984][T11693] tipc: Started in network mode
[  173.856366][T11693] tipc: Node identity 9638f1584135, cluster identity 4711
[  173.859226][T11693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.864244][T11686] IPVS: using max 25 ests per chain, 60000 per kthread
[  173.864904][T11698] tipc: Started in network mode
[  173.868891][T11698] tipc: Node identity 9246b25d3ddc, cluster identity 4711
[  173.871260][T11698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.875700][T11698] syzkaller0: entered promiscuous mode
[  173.876279][T11699] netlink: 'syz.4.1523': attribute type 10 has an invalid length.
[  173.877532][T11698] syzkaller0: entered allmulticast mode
[  173.890250][T11699] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  173.893693][T11700] tipc: Resetting bearer <eth:syzkaller0>
[  173.910406][T11700] tipc: Disabling bearer <eth:syzkaller0>
[  173.917667][T11698] tipc: Resetting bearer <eth:syzkaller0>
[  173.920752][T11696] tipc: Resetting bearer <eth:syzkaller0>
[  173.922661][ T1927] usb 11-1: Using ep0 maxpacket: 32
[  173.928401][ T1927] usb 11-1: config 0 has an invalid interface number: 119 but max is 0
[  173.932023][ T1927] usb 11-1: config 0 has no interface number 0
[  173.932379][T11702] SELinux: security_context_str_to_sid („) failed with errno=-22
[  173.935333][ T1927] usb 11-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  173.943771][T11696] tipc: Disabling bearer <eth:syzkaller0>
[  173.944605][ T1927] usb 11-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  173.951511][ T1927] usb 11-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27
[  173.956668][ T1927] usb 11-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  173.964455][ T1927] usb 11-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  173.968306][ T1927] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.971567][ T1927] usb 11-1: Product: syz
[  173.973689][ T1927] usb 11-1: Manufacturer: syz
[  173.975636][ T1927] usb 11-1: SerialNumber: syz
[  173.980541][ T1927] usb 11-1: config 0 descriptor??
[  173.984159][T11654] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  173.992188][ T1927] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.119/input/input24
[  173.993078][T11704] __nla_validate_parse: 3 callbacks suppressed
[  173.993092][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1525'.
[  173.999612][ T5326] usb 11-1: BOGUS urb xfer, pipe 1 != type 3
[  174.158937][T11716] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1530'.
[  174.164740][T11716] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11716 comm=syz.8.1530
[  174.195634][ T1927] usb 11-1: USB disconnect, device number 11
[  174.429172][T11731] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  174.437259][T11731] CUSE: unknown device info ""
[  174.438953][T11731] CUSE: zero length info key specified
[  174.605961][T11744] No control pipe specified
[  174.759477][T11757] netlink: 'syz.6.1543': attribute type 1 has an invalid length.
[  174.797284][T11757] 8021q: adding VLAN 0 to HW filter on device bond1
[  174.808683][T11757] bond1: (slave geneve2): making interface the new active one
[  174.811860][T11757] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  174.816893][T11288] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  174.824213][T11288] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  174.828852][T11288] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  174.831141][T11757] netlink: 'syz.6.1543': attribute type 10 has an invalid length.
[  174.832316][T11288] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  174.893996][T11770] tmpfs: Bad value for 'mpol'
[  174.940107][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1547'.
[  175.165269][T11757] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  175.414505][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1552'.
[  175.426827][T11785] vlan2: entered allmulticast mode
[  175.428550][T11785] bridge3: entered allmulticast mode
[  175.431676][T11785] bridge3: port 1(erspan0) entered blocking state
[  175.434113][T11785] bridge3: port 1(erspan0) entered disabled state
[  175.436353][T11785] erspan0: entered allmulticast mode
[  175.438964][T11785] erspan0: entered promiscuous mode
[  175.441160][T11785] bridge3: port 1(erspan0) entered blocking state
[  175.443356][T11785] bridge3: port 1(erspan0) entered forwarding state
[  175.483586][T11776] /dev/sr0: Can't open blockdev
[  175.528619][T11795] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  175.581027][T11800] netlink: 'syz.8.1556': attribute type 3 has an invalid length.
[  175.746701][T11817] netlink: 'syz.7.1561': attribute type 9 has an invalid length.
[  175.750061][T11817] netlink: 'syz.7.1561': attribute type 11 has an invalid length.
[  175.753550][T11817] netlink: 'syz.7.1561': attribute type 12 has an invalid length.
[  175.756817][T11817] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.1561'.
[  175.816673][T11825] netlink: 'syz.7.1563': attribute type 1 has an invalid length.
[  175.819171][T11825] netlink: 'syz.7.1563': attribute type 2 has an invalid length.
[  175.823842][T11825] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1563'.
[  175.828301][T11825] netlink: 'syz.7.1563': attribute type 1 has an invalid length.
[  175.830911][T11825] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1563'.
[  176.031427][T11854] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  176.305637][ T1927] IPVS: starting estimator thread 0...
[  176.402989][T11871] IPVS: using max 44 ests per chain, 105600 per kthread
[  176.481419][T11885] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1583'.
[  176.486709][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1583'.
[  176.489175][T11886] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  176.594114][T11893] afs: Unknown parameter 'dy'
[  176.604791][T11893] NILFS (nbd6): device size too small
[  177.084959][T11915] netlink: 'syz.6.1591': attribute type 4 has an invalid length.
[  177.214025][T11931] syzkaller0: entered promiscuous mode
[  177.216553][T11931] syzkaller0: entered allmulticast mode
[  177.500185][T11937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11937 comm=syz.7.1598
[  177.506044][T11937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11937 comm=syz.7.1598
[  177.511128][T11937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11937 comm=syz.7.1598
[  177.551287][T11941] ip6t_REJECT: ECHOREPLY is not supported
[  177.561056][   T40] kauditd_printk_skb: 9 callbacks suppressed
[  177.561071][   T40] audit: type=1400 audit(2000000038.730:872): avc:  denied  { mounton } for  pid=11942 comm="syz.7.1600" path="/proc/389/cgroup" dev="proc" ino=48391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  177.571124][T11944] efs: cannot read volume header
[  177.627656][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1602'.
[  177.672426][T11960] Cannot find add_set index 65532 as target
[  177.691875][T11953] xt_l2tp: unknown flags: 51
[  177.770682][T11966] overlay: filesystem on ./bus not supported
[  177.903427][   T40] audit: type=1400 audit(2000000039.080:873): avc:  denied  { write } for  pid=11974 comm="syz.6.1612" name="/" dev="9p" ino=80478263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  178.529192][T11962] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  178.531940][T11962] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  178.534810][T11962] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  178.652370][T12011] 9p: Invalid gid '0x00000000ffffffff'
[  178.680615][   T40] audit: type=1800 audit(2000000039.850:874): pid=12013 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.1623" name="bus" dev="tmpfs" ino=763 res=0 errno=0
[  178.795513][T12018] dlm: no local IP address has been set
[  178.796626][T12019] bond1: option xmit_hash_policy: invalid value (6)
[  178.799480][T12018] dlm: cannot start dlm midcomms -107
[  178.806124][T12019] bond1 (unregistering): Released all slaves
[  178.843728][T12023] binder: 12010:12023 unknown command 343459308
[  178.845824][T12023] binder: 12010:12023 ioctl c0306201 200000000080 returned -22
[  179.144867][T12036] SELinux:  Context system_u:object_r:root_t:s0 is not valid (left unmapped).
[  179.147847][   T40] audit: type=1400 audit(2000000040.320:875): avc:  denied  { relabelfrom } for  pid=12035 comm="syz.6.1629" name="ALG" dev="sockfs" ino=48439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  179.162189][   T40] audit: type=1400 audit(2000000040.320:876): avc:  denied  { relabelto } for  pid=12035 comm="syz.6.1629" name="ALG" dev="sockfs" ino=48439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=alg_socket permissive=1 trawcon="system_u:object_r:root_t:s0"
[  179.509780][T12055] overlayfs: conflicting lowerdir path
[  179.522259][T12058] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  179.524994][T12058] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  179.531204][T12058] vhci_hcd vhci_hcd.0: Device attached
[  179.555122][T12062] __nla_validate_parse: 12 callbacks suppressed
[  179.555133][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1636'.
[  179.562217][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1636'.
[  179.590094][T12065] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1637'.
[  179.683004][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1638'.
[  179.702273][   T34] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  179.719045][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1639'.
[  179.772494][   T34] usb 49-1: new full-speed USB device number 2 using vhci_hcd
[  179.791193][T12079] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  179.842290][ T5943] Bluetooth: hci2: command 0x0401 tx timeout
[  180.354416][T12059] vhci_hcd: connection reset by peer
[  180.356351][ T1205] vhci_hcd vhci_hcd.6: stop threads
[  180.358345][ T1205] vhci_hcd vhci_hcd.6: release socket
[  180.360143][ T1205] vhci_hcd vhci_hcd.6: disconnect device
[  180.562624][ T5943] Bluetooth: hci1: command 0x0419 tx timeout
[  180.564722][   T63] Bluetooth: hci0: command 0x0c1a tx timeout
[  181.173592][T12115] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  181.338688][   T63] Bluetooth: hci2: unexpected event for opcode 0x203d
[  181.416609][T12137] cgroup: release_agent respecified
[  181.421063][T12137] vivid-000: =================  START STATUS  =================
[  181.426080][T12137] vivid-000: Test Pattern: 75% Colorbar
[  181.429097][T12137] vivid-000: Fill Percentage of Frame: 100
[  181.431798][T12137] vivid-000: Horizontal Movement: No Movement
[  181.436000][T12137] vivid-000: Vertical Movement: Move Down Slow
[  181.438766][T12137] vivid-000: OSD Text Mode: All
[  181.440958][T12137] vivid-000: Show Border: false
[  181.443501][T12137] vivid-000: Show Square: false
[  181.445553][T12137] vivid-000: Sensor Flipped Horizontally: false
[  181.448248][T12137] vivid-000: Sensor Flipped Vertically: false
[  181.450821][T12137] vivid-000: Insert SAV Code in Image: false
[  181.456201][T12137] vivid-000: Insert EAV Code in Image: false
[  181.458543][T12137] vivid-000: Insert Video Guard Band: false
[  181.461198][T12137] vivid-000: Reduced Framerate: false
[  181.464070][T12137] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  181.467190][T12137] vivid-000: S-Video 000-0 Is Connected To: None
[  181.469846][T12137] vivid-000: Enable Capture Cropping: true
[  181.474406][T12137] vivid-000: Enable Capture Composing: true
[  181.480946][T12137] vivid-000: Enable Capture Scaler: true
[  181.484174][T12137] vivid-000: Timestamp Source: End of Frame
[  181.486860][T12137] vivid-000: Colorspace: sRGB
[  181.489004][T12137] vivid-000: Transfer Function: Default
[  181.491396][T12137] vivid-000: Y'CbCr Encoding: Default
[  181.494761][T12137] vivid-000: HSV Encoding: Hue 0-179
[  181.496750][T12137] vivid-000: Quantization: Limited Range
[  181.499459][T12137] vivid-000: Apply Alpha To Red Only: false
[  181.502071][T12137] vivid-000: Standard Aspect Ratio: 4x3
[  181.504827][T12137] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  181.507870][T12137] vivid-000: DV Timings: 640x480p59 inactive
[  181.510385][T12137] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  181.513525][T12137] vivid-000: Maximum EDID Blocks: 2
[  181.516022][T12137] vivid-000: Limited RGB Range (16-235): false
[  181.518394][T12137] vivid-000: Rx RGB Quantization Range: Automatic
[  181.521237][T12137] vivid-000: Power Present: 0x00000001
[  181.523798][T12137] tpg source WxH: 320x180 (Y'CbCr)
[  181.525505][T12137] tpg field: 1
[  181.526636][T12137] tpg crop: (0,0)/320x180
[  181.528045][T12137] tpg compose: (0,0)/320x180
[  181.529559][T12137] tpg colorspace: 8
[  181.530874][T12137] tpg transfer function: 0/2
[  181.532552][T12137] tpg Y'CbCr encoding: 0/1
[  181.534185][T12137] tpg quantization: 2/2
[  181.535563][T12137] tpg RGB range: 0/2
[  181.536874][T12137] vivid-000: ==================  END STATUS  ==================
[  181.572457][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1661'.
[  181.582922][T12144] hsr_slave_0: left promiscuous mode
[  181.585336][T12144] hsr_slave_1: left promiscuous mode
[  181.906489][T12156] syzkaller0: entered promiscuous mode
[  181.908368][T12156] syzkaller0: entered allmulticast mode
[  183.227441][T12169] validate_nla: 2 callbacks suppressed
[  183.227459][T12169] netlink: 'syz.7.1669': attribute type 8 has an invalid length.
[  183.243303][T12170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12170 comm=syz.6.1670
[  183.312329][T12172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1671'.
[  183.314090][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1671'.
[  183.326100][   T40] audit: type=1400 audit(2000000044.500:877): avc:  denied  { map } for  pid=12171 comm="syz.6.1671" path="socket:[48049]" dev="sockfs" ino=48049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  183.446048][T12183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12183 comm=syz.8.1674
[  183.587353][   T40] audit: type=1326 audit(2000000044.760:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb919c799 code=0x7ffc0000
[  183.613152][   T40] audit: type=1326 audit(2000000044.760:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb919c799 code=0x7ffc0000
[  183.623623][   T40] audit: type=1326 audit(2000000044.760:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb919c799 code=0x7ffc0000
[  183.633477][   T40] audit: type=1326 audit(2000000044.760:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1679" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfb919c799 code=0x7ffc0000
[  183.643165][   T40] audit: type=1326 audit(2000000044.760:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb919c799 code=0x7ffc0000
[  183.652981][   T40] audit: type=1326 audit(2000000044.760:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb919c799 code=0x7ffc0000
[  183.662570][   T40] audit: type=1326 audit(2000000044.760:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb919c799 code=0x7ffc0000
[  183.671806][   T40] audit: type=1326 audit(2000000044.760:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb919c799 code=0x7ffc0000
[  183.681275][   T40] audit: type=1326 audit(2000000044.760:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb919c799 code=0x7ffc0000
[  183.786341][T12204] tmpfs: Unknown parameter 'uadÞ0x0000000000000000'
[  183.792325][ T1927] usb 13-1: new high-speed USB device number 4 using dummy_hcd
[  183.956774][ T1927] usb 13-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  183.960431][ T1927] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  183.963803][ T1927] usb 13-1: Product: syz
[  183.965489][ T1927] usb 13-1: Manufacturer: syz
[  183.967495][ T1927] usb 13-1: SerialNumber: syz
[  183.971807][ T1927] usb 13-1: config 0 descriptor??
[  183.977646][ T1927] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  183.980673][ T1927] dvb-usb: bulk message failed: -22 (2/0)
[  183.986530][ T1927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  183.990089][ T1927] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  183.993313][ T1927] usb 13-1: media controller created
[  184.000543][ T1927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  184.184155][T12197] dvb-usb: bulk message failed: -22 (15/0)
[  184.187582][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1678'.
[  184.200243][ T1927] cxusb: set interface failed
[  184.201874][ T1927] dvb-usb: bulk message failed: -22 (1/0)
[  184.235997][ T1927] DVB: Unable to find symbol mt352_attach()
[  184.242967][T12223] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  184.245579][ T1927] dvb-usb: bulk message failed: -22 (5/0)
[  184.248069][ T1927] zl10353_read_register: readreg error (reg=127, ret==-121)
[  184.250544][ T1927] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  184.312196][ T1927] rc_core: IR keymap rc-dvico-mce not found
[  184.314429][ T1927] Registered IR keymap rc-empty
[  184.318878][ T1927] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0
[  184.330353][ T1927] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input26
[  184.333473][T12233] xt_hashlimit: size too large, truncated to 1048576
[  184.338674][ T1927] dvb-usb: schedule remote query interval to 100 msecs.
[  184.340889][ T1927] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  184.347586][ T1927] usb 13-1: USB disconnect, device number 4
[  184.382430][ T1927] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  184.450367][T12243] netlink: 'syz.6.1692': attribute type 1 has an invalid length.
[  184.453068][T12243] netlink: 'syz.6.1692': attribute type 1 has an invalid length.
[  184.455684][T12243] netlink: 9172 bytes leftover after parsing attributes in process `syz.6.1692'.
[  184.462669][T12243] 8021q: VLANs not supported on ip6_vti0
[  184.466352][T12239] macvlan0: entered allmulticast mode
[  184.476732][T12239] pim6reg: entered allmulticast mode
[  184.760050][T12260] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  184.796950][T12260] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  184.842389][T12264] netdevsim netdevsim6 ªªªªªª: renamed from netdevsim0 (while UP)
[  184.882641][   T34] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  184.945475][T12270] nbd: socks must be embedded in a SOCK_ITEM attr
[  184.949908][T12268] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1700'.
[  185.043778][T12279] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1703'.
[  185.047623][T12279] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1703'.
[  185.077270][T12281] binder: 12280:12281 ioctl c018620c 200000000900 returned -1
[  185.150846][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'.
[  185.211572][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1704'.
[  185.261412][T12291] IPv6: sit2: Disabled Multicast RS
[  185.264599][T12291] sit2: entered allmulticast mode
[  185.303592][T12294] tmpfs: Unknown parameter 'hu'
[  185.372306][   T63] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  185.375870][   T63] Bluetooth: hci2: Injecting HCI hardware error event
[  185.380004][   T63] Bluetooth: hci2: hardware error 0x00
[  185.602878][ T1026] usb 9-1: new low-speed USB device number 20 using dummy_hcd
[  185.753816][ T1026] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  185.757928][ T1026] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  185.760969][ T1026] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30315, setting to 8
[  185.766151][ T1026] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  185.769334][ T1026] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.774318][T12287] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  185.778081][ T1026] hub 9-1:1.0: bad descriptor, ignoring hub
[  185.780427][ T1026] hub 9-1:1.0: probe with driver hub failed with error -5
[  185.783151][ T1026] cdc_wdm 9-1:1.0: skipping garbage
[  185.784842][ T1026] cdc_wdm 9-1:1.0: skipping garbage
[  185.788791][ T1026] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  185.790957][ T1026] cdc_wdm 9-1:1.0: Unknown control protocol
[  185.871964][T12325] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1718'.
[  185.875456][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1718'.
[  185.879677][T12325] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1718'.
[  185.885591][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1718'.
[  185.889237][T12325] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1718'.
[  186.063061][T12329] hfsplus: unable to find HFS+ superblock
[  186.079002][T12351] syzkaller0: refused to change device tx_queue_len
[  186.262478][T12367] IPVS: sync thread started: state = MASTER, mcast_ifn = gretap0, syncid = 2, id = 0
[  186.572497][T12287] cdc_wdm 9-1:1.0: Error autopm - -16
[  186.576368][ T1026] usb 9-1: USB disconnect, device number 20
[  186.733281][ T1026] usb 9-1: new full-speed USB device number 21 using dummy_hcd
[  186.895860][ T1026] usb 9-1: unable to get BOS descriptor or descriptor too short
[  186.908209][ T1026] usb 9-1: unable to read config index 0 descriptor/start: -71
[  186.910954][ T1026] usb 9-1: can't read configurations, error -71
[  186.912289][ T6020] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  187.042325][ T6020] usb 12-1: device descriptor read/64, error -71
[  187.282649][ T6020] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  187.412277][ T6020] usb 12-1: device descriptor read/64, error -71
[  187.442287][   T63] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  187.522472][ T6020] usb usb12-port1: attempt power cycle
[  187.562266][    T9] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  187.681293][T12425] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  187.716229][    T9] usb 11-1: too many configurations: 9, using maximum allowed: 8
[  187.724199][    T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  187.728216][    T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  187.732018][    T9] usb 11-1: config 0 interface 0 has no altsetting 0
[  187.747221][    T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  187.750248][    T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  187.754309][    T9] usb 11-1: config 0 interface 0 has no altsetting 0
[  187.757193][    T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  187.760808][    T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  187.765530][    T9] usb 11-1: config 0 interface 0 has no altsetting 0
[  187.768423][    T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  187.771307][    T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  187.776064][    T9] usb 11-1: config 0 interface 0 has no altsetting 0
[  187.780045][    T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  187.785744][    T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  187.789221][    T9] usb 11-1: config 0 interface 0 has no altsetting 0
[  187.792257][    T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  187.796027][    T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  187.799770][    T9] usb 11-1: config 0 interface 0 has no altsetting 0
[  187.803396][    T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  187.806186][    T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  187.809699][    T9] usb 11-1: config 0 interface 0 has no altsetting 0
[  187.813265][    T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  187.816095][    T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  187.819663][    T9] usb 11-1: config 0 interface 0 has no altsetting 0
[  187.824342][    T9] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  187.827296][    T9] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  187.830158][    T9] usb 11-1: Product: syz
[  187.831499][    T9] usb 11-1: Manufacturer: syz
[  187.833305][    T9] usb 11-1: SerialNumber: syz
[  187.836953][    T9] usb 11-1: config 0 descriptor??
[  187.844434][    T9] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0
[  187.862226][ T6020] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  187.882922][ T6020] usb 12-1: device descriptor read/8, error -71
[  187.964286][T12439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12439 comm=syz.8.1749
[  187.969239][T12439] netlink: 'syz.8.1749': attribute type 1 has an invalid length.
[  187.986137][T12439] 8021q: adding VLAN 0 to HW filter on device bond1
[  188.001213][T12439] bond1: (slave geneve2): making interface the new active one
[  188.005792][T12439] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  188.046989][T12413] netlink: 'syz.6.1741': attribute type 10 has an invalid length.
[  188.119673][    T9] usb 11-1: USB disconnect, device number 12
[  188.122207][ T6020] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  188.123589][ T1026] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  188.131175][    T9] yurex 11-1:0.0: USB YUREX #0 now disconnected
[  188.142680][ T6020] usb 12-1: device descriptor read/8, error -71
[  188.230383][T12448] kvm: MWAIT instruction emulated as NOP!
[  188.239382][T12448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12448 comm=syz.8.1752
[  188.252667][ T6020] usb usb12-port1: unable to enumerate USB device
[  188.275747][ T1026] usb 9-1: too many configurations: 9, using maximum allowed: 8
[  188.279579][ T1026] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  188.282584][ T1026] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  188.286023][ T1026] usb 9-1: config 0 interface 0 has no altsetting 0
[  188.288907][ T1026] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  188.291762][ T1026] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  188.296003][ T1026] usb 9-1: config 0 interface 0 has no altsetting 0
[  188.298985][ T1026] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  188.301853][ T1026] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  188.305384][ T1026] usb 9-1: config 0 interface 0 has no altsetting 0
[  188.319620][ T1026] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  188.322825][ T1026] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  188.326899][ T1026] usb 9-1: config 0 interface 0 has no altsetting 0
[  188.329820][ T1026] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  188.333150][ T1026] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  188.336555][ T1026] usb 9-1: config 0 interface 0 has no altsetting 0
[  188.341519][ T1026] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  188.344419][ T1026] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  188.347864][ T1026] usb 9-1: config 0 interface 0 has no altsetting 0
[  188.353219][ T1026] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  188.356089][ T1026] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  188.359979][ T1026] usb 9-1: config 0 interface 0 has no altsetting 0
[  188.365100][ T1026] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  188.368963][ T1026] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  188.373326][ T1026] usb 9-1: config 0 interface 0 has no altsetting 0
[  188.384080][ T1026] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  188.386948][ T1026] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  188.389967][ T1026] usb 9-1: Product: syz
[  188.391336][ T1026] usb 9-1: Manufacturer: syz
[  188.393558][ T1026] usb 9-1: SerialNumber: syz
[  188.397082][ T1026] usb 9-1: config 0 descriptor??
[  188.404527][ T1026] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0
[  188.537719][ T5342]  pmem0: [POWERTEC]
[  188.870426][   T40] kauditd_printk_skb: 53 callbacks suppressed
[  188.870498][   T40] audit: type=1400 audit(2000000050.040:940): avc:  denied  { map } for  pid=12474 comm="syz.6.1759" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1
[  189.067421][T12481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.072363][T12481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.079792][T12481] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  189.091438][T12481] bond0 (unregistering): Released all slaves
[  189.171396][T12480] infiniband sy‡1: set down
[  189.175959][ T6020] sy‡1: Port: 1 Link DOWN
[  189.178824][T12480] infiniband sy‡1: added bond0
[  189.214438][T12480] RDS/IB: sy‡1: added
[  189.216640][T12480] smc: adding ib device sy‡1 with port count 1
[  189.219223][T12480] smc:    ib device sy‡1 port 1 has no pnetid
[  189.362607][   T34] usb 11-1: new high-speed USB device number 13 using dummy_hcd
[  189.501168][T12489] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  189.522514][   T34] usb 11-1: Using ep0 maxpacket: 8
[  189.526040][   T34] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  189.528438][   T34] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  189.534430][   T34] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  189.539001][   T34] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  189.542885][   T34] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  189.547280][   T34] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  189.549772][   T34] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  189.553567][   T34] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  189.557216][   T34] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  189.560870][   T34] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  189.565289][   T34] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  189.567707][   T34] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  189.571983][   T34] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  189.578338][   T34] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  189.583842][   T34] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  189.591698][   T34] usb 11-1: string descriptor 0 read error: -22
[  189.595028][   T34] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  189.598875][   T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.614183][   T34] adutux 11-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  189.723587][T12498] IPv6: NLM_F_CREATE should be specified when creating new route
[  190.081921][   T40] audit: type=1400 audit(2000000051.250:941): avc:  denied  { read } for  pid=12510 comm="syz.8.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  190.082399][ T1927] usb 12-1: new low-speed USB device number 6 using dummy_hcd
[  190.224197][T11283] smc: removing ib device sy‡1
[  190.246155][ T1927] usb 12-1: config 0 has an invalid interface number: 55 but max is 0
[  190.249720][ T1927] usb 12-1: config 0 has no interface number 0
[  190.252374][ T1927] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  190.256858][ T1927] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  190.261189][ T1927] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  190.266432][ T1927] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  190.271010][ T1927] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  190.276365][ T1927] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  190.281741][ T1927] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  190.286868][ T1927] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.306831][ T1927] usb 12-1: config 0 descriptor??
[  190.309886][T12502] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  190.322708][T12502] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  190.346511][ T1927] ldusb 12-1:0.55: LD USB Device #2 now attached to major 180 minor 2
[  190.399199][T12531] veth0: entered promiscuous mode
[  190.405529][T12532] __nla_validate_parse: 133 callbacks suppressed
[  190.405552][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1774'.
[  190.587057][T12502] mtd partition "" doesn't have enough space: 0x20003 < 0x6000000000000, disabled
[  190.608356][T12502] ftl_cs: FTL header not found.
[  190.640677][T12537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.672610][T12537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.684157][   T40] audit: type=1400 audit(2000000051.860:942): avc:  denied  { write } for  pid=12542 comm="syz.8.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  190.700148][ T6020] usb 12-1: USB disconnect, device number 6
[  190.703466][   T40] audit: type=1400 audit(2000000051.860:943): avc:  denied  { ioctl } for  pid=12542 comm="syz.8.1776" path="socket:[51524]" dev="sockfs" ino=51524 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  190.735038][ T6020] ldusb 12-1:0.55: LD USB Device #2 now disconnected
[  190.746739][T12547] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1777'.
[  190.749866][T12547] 0·: renamed from hsr0 (while UP)
[  190.762600][T12547] 0·: entered allmulticast mode
[  190.764777][T12547] hsr_slave_0: entered allmulticast mode
[  190.767117][T12547] hsr_slave_1: entered allmulticast mode
[  190.769911][T12547] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  190.821770][ T1927] usb 9-1: USB disconnect, device number 23
[  190.849787][   T40] audit: type=1400 audit(2000000052.020:944): avc:  denied  { shutdown } for  pid=12556 comm="syz.7.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  190.874421][ T1927] yurex 9-1:0.0: USB YUREX #0 now disconnected
[  190.919066][T12561] netlink: 'syz.4.1781': attribute type 61 has an invalid length.
[  191.105481][   T40] audit: type=1400 audit(2000000052.280:945): avc:  denied  { write } for  pid=12582 comm="syz.7.1787" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  191.122086][T12585] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1788'.
[  191.150738][   T34] kernel read not supported for file /swradio5 (pid: 34 comm: kworker/3:0)
[  191.215154][ T1927] usb 11-1: USB disconnect, device number 13
[  191.234825][T12588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.344681][T12604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=12604 comm=syz.7.1794
[  191.529029][   T40] audit: type=1400 audit(2000000052.700:946): avc:  denied  { rmdir } for  pid=12613 comm="syz.7.1798" name="file2" dev="9p" ino=80478269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  191.613564][ T1927] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  191.785825][ T1927] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  191.789375][ T1927] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  191.794974][T12617] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  191.798254][ T1927] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  191.802666][ T1927] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  191.809219][ T1927] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  191.814635][ T1927] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  191.824279][ T1927] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  191.828166][ T1927] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  191.831555][ T1927] usb 9-1: Product: syz
[  191.833447][ T1927] usb 9-1: Manufacturer: syz
[  191.839915][T12606] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  191.846485][ T1927] cdc_wdm 9-1:1.0: skipping garbage
[  191.848728][ T1927] cdc_wdm 9-1:1.0: skipping garbage
[  191.857566][ T1927] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  191.860183][ T1927] cdc_wdm 9-1:1.0: Unknown control protocol
[  191.973725][T12631] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1803'.
[  192.019742][   T40] audit: type=1400 audit(2000000053.190:947): avc:  denied  { bind } for  pid=12634 comm="syz.8.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  192.046850][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  192.049593][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  192.052280][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  192.054887][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  192.057504][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  192.060103][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  192.065831][   T34] usb 9-1: USB disconnect, device number 24
[  192.174294][ T1205] Bluetooth: Error in BCSP hdr checksum
[  192.427775][T12650] netlink: 'syz.8.1811': attribute type 5 has an invalid length.
[  192.434748][ T1205] Bluetooth: Error in BCSP hdr checksum
[  192.442229][ T6018] usb 11-1: new low-speed USB device number 14 using dummy_hcd
[  192.622893][ T6018] usb 11-1: config 0 has an invalid interface number: 55 but max is 0
[  192.625907][ T6018] usb 11-1: config 0 has no interface number 0
[  192.628306][ T6018] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  192.631880][ T6018] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  192.636275][ T6018] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  192.640654][ T6018] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  192.644012][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1812'.
[  192.644715][ T6018] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  192.653871][ T6018] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  192.658282][ T6018] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  192.661185][ T6018] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.665903][ T6018] usb 11-1: config 0 descriptor??
[  192.668787][T12643] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  192.671681][T12643] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  192.677239][ T6018] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  192.692646][   T13] Bluetooth: Error in BCSP hdr checksum
[  192.721494][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1815'.
[  192.745689][T12663] hsr_slave_1 (unregistering): left promiscuous mode
[  192.838969][T12665] netlink: 'syz.8.1816': attribute type 1 has an invalid length.
[  192.853570][T12665] 8021q: adding VLAN 0 to HW filter on device bond2
[  192.865676][T12665] bond2: (slave geneve3): making interface the new active one
[  192.869957][T12665] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  192.877869][T12665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12665 comm=syz.8.1816
[  192.878666][T12643] /dev/sg0: Can't lookup blockdev
[  192.899692][ T6068] usb 11-1: USB disconnect, device number 14
[  192.916323][ T6068] ldusb 11-1:0.55: LD USB Device #0 now disconnected
[  192.931586][ T5943] Bluetooth: hci1: unexpected event for opcode 0x0402
[  193.101018][T12679] binder: BINDER_SET_CONTEXT_MGR already set
[  193.103723][T12679] binder: 12678:12679 ioctl 4018620d 200000000040 returned -16
[  193.117636][   T40] audit: type=1400 audit(2000000054.290:948): avc:  denied  { module_load } for  pid=12678 comm="syz.8.1821" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1
[  193.117959][T12679] kernel read not supported for file /policy (pid: 12679 comm: syz.8.1821)
[  193.299545][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1823'.
[  193.304095][T12684] openvswitch: netlink: Flow actions attr not present in new flow.
[  193.483363][T11289] Bluetooth: (null): Invalid header checksum
[  193.595217][T11286] Bluetooth: (null): Too short H5 packet
[  193.599110][T11286] Bluetooth: (null): Invalid header checksum
[  193.703872][T11286] Bluetooth: (null): Invalid header checksum
[  193.773786][T12717] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  193.777374][T12717] overlayfs: missing 'lowerdir'
[  193.858144][T12722] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  193.864563][T12722] netlink: 'syz.4.1831': attribute type 8 has an invalid length.
[  193.867147][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'.
[  193.908529][T12725] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=12725 comm=syz.4.1832
[  193.922580][ T5943] Bluetooth: hci3: command 0x1003 tx timeout
[  193.924715][   T63] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  193.981634][T12732] nfs4: Unknown parameter '0x0000000000000003'
[  193.992689][T12729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.999196][T12729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.052917][T12737] input: syz1 as /devices/virtual/input/input27
[  194.069131][T12737] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1837'.
[  194.092237][   T50] usb 11-1: new high-speed USB device number 15 using dummy_hcd
[  194.146274][T12749] ------------[ cut here ]------------
[  194.148723][T12749] kernel BUG at fs/netfs/iterator.c:248!
[  194.151165][T12749] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  194.154592][T12749] CPU: 2 UID: 0 PID: 12749 Comm: syz.4.1833 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  194.159977][T12749] Tainted: [L]=SOFTLOCKUP
[  194.161805][T12749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  194.166072][T12749] RIP: 0010:netfs_limit_iter+0x100d/0x1100
[  194.168702][T12749] Code: ff e9 a4 f4 ff ff 48 89 de 48 c7 c7 e0 c6 ab 8e e8 c8 f3 73 fe e9 59 f6 ff ff e8 2e e5 b1 ff e9 6f f6 ff ff e8 84 56 45 ff 90 <0f> 0b e8 8c e4 b1 ff e9 cd f9 ff ff 4c 89 f6 48 c7 c7 60 c7 ab 8e
[  194.176555][T12749] RSP: 0000:ffffc9000f3e6d18 EFLAGS: 00010293
[  194.179332][T12749] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff82c3902b
[  194.182785][T12749] RDX: ffff888024758000 RSI: ffffffff82c39f5c RDI: ffff888024758000
[  194.186163][T12749] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000005
[  194.189541][T12749] R10: 0000000000000003 R11: 0000000000000000 R12: 000000007fffffff
[  194.192921][T12749] R13: 1ffff92001e7cda9 R14: ffff88801c32d960 R15: ffff888022f3a580
[  194.196199][T12749] FS:  00007f6ae77fc6c0(0000) GS:ffff8880d653f000(0000) knlGS:0000000000000000
[  194.199983][T12749] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  194.202984][T12749] CR2: 00001ffffffff700 CR3: 000000004417a000 CR4: 0000000000352ef0
[  194.206440][T12749] Call Trace:
[  194.207957][T12749]  <TASK>
[  194.209244][T12749]  ? do_raw_spin_lock+0x128/0x260
[  194.211424][T12749]  ? find_held_lock+0x2b/0x80
[  194.213417][T12749]  ? __pfx_netfs_limit_iter+0x10/0x10
[  194.215687][T12749]  ? do_raw_spin_unlock+0x145/0x1e0
[  194.217901][T12749]  ? _raw_spin_unlock+0x28/0x50
[  194.220002][T12749]  ? netfs_prepare_write+0x486/0x7a0
[  194.222203][T12749]  netfs_unbuffered_write+0x25d/0x2080
[  194.224467][T12749]  netfs_unbuffered_write_iter_locked+0x801/0xab0
[  194.227181][T12749]  netfs_unbuffered_write_iter+0x40c/0x710
[  194.229642][T12749]  ? __pfx_v9fs_file_write_iter+0x10/0x10
[  194.232069][T12749]  v9fs_file_write_iter+0xbf/0x100
[  194.234241][T12749]  __kernel_write_iter+0x2ac/0x920
[  194.236430][T12749]  ? __pfx___kernel_write_iter+0x10/0x10
[  194.238829][T12749]  ? kasan_save_stack+0x3f/0x50
[  194.240884][T12749]  ? kasan_save_stack+0x30/0x50
[  194.242927][T12749]  ? irqentry_exit+0x1f8/0x670
[  194.244951][T12749]  ? asm_exc_page_fault+0x26/0x30
[  194.247076][T12749]  __kernel_write+0xf6/0x140
[  194.249065][T12749]  ? __pfx___kernel_write+0x10/0x10
[  194.251274][T12749]  dump_emit+0x21f/0x330
[  194.253100][T12749]  ? __pfx_dump_emit+0x10/0x10
[  194.255144][T12749]  elf_core_dump+0x2127/0x3d10
[  194.257179][T12749]  ? __pfx_elf_core_dump+0x10/0x10
[  194.259411][T12749]  ? kasan_save_stack+0x3f/0x50
[  194.261492][T12749]  ? kasan_save_stack+0x30/0x50
[  194.263472][T12749]  ? __kasan_kmalloc+0xaa/0xb0
[  194.265151][T12749]  ? __kvmalloc_node_noprof+0x360/0xa00
[  194.267002][T12749]  ? vfs_coredump+0x2105/0x5570
[  194.268639][T12749]  ? asm_exc_page_fault+0x26/0x30
[  194.270391][T12749]  ? vfs_coredump+0x27bc/0x5570
[  194.272012][T12749]  vfs_coredump+0x27bc/0x5570
[  194.273566][T12749]  ? __pfx_vfs_coredump+0x10/0x10
[  194.275265][T12749]  ? __lock_acquire+0x4a5/0x2630
[  194.276883][T12749]  ? lock_acquire+0x1cf/0x380
[  194.278485][T12749]  ? is_bpf_text_address+0x8a/0x1a0
[  194.280276][T12749]  ? bpf_ksym_find+0x128/0x1c0
[  194.281849][T12749]  ? __kernel_text_address+0xd/0x30
[  194.283585][T12749]  ? unwind_get_return_address+0x59/0xa0
[  194.285441][T12749]  ? arch_stack_walk+0xa6/0xf0
[  194.287032][T12749]  ? __sigqueue_free+0xbe/0x2a0
[  194.288701][T12749]  ? stack_trace_save+0x8e/0xc0
[  194.290303][T12749]  ? __pfx_stack_trace_save+0x10/0x10
[  194.292091][T12749]  ? stack_depot_save_flags+0x27/0x9d0
[  194.293870][T12749]  ? __lock_acquire+0x4a5/0x2630
[  194.295588][T12749]  ? proc_coredump_connector+0x2d3/0x4f0
[  194.297406][T12749]  ? __pfx_proc_coredump_connector+0x10/0x10
[  194.299387][T12749]  ? rcu_is_watching+0x12/0xc0
[  194.301140][T12749]  get_signal+0x1f2a/0x21e0
[  194.302714][T12749]  ? __pfx_get_signal+0x10/0x10
[  194.304326][T12749]  arch_do_signal_or_restart+0x91/0x7a0
[  194.306200][T12749]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  194.308293][T12749]  ? do_user_addr_fault+0x8d6/0x12f0
[  194.310254][T12749]  irqentry_exit+0x1f8/0x670
[  194.312146][T12749]  asm_exc_page_fault+0x26/0x30
[  194.313793][T12749] RIP: 0033:0x0
[  194.314936][T12749] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  194.317240][T12749] RSP: 002b:0000200000000008 EFLAGS: 00010217
[  194.319210][T12749] RAX: 0000000000000000 RBX: 00007f6ae6c16270 RCX: 00007f6ae699c799
[  194.321817][T12749] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000022000000
[  194.324324][T12749] RBP: 00007f6ae6a32c99 R08: 0000000000000000 R09: 0000000000000000
[  194.326877][T12749] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  194.329418][T12749] R13: 00007f6ae6c16308 R14: 00007f6ae6c16270 R15: 00007ffc1ad73d48
[  194.332014][T12749]  </TASK>
[  194.333040][T12749] Modules linked in:
[  194.334882][T12749] ---[ end trace 0000000000000000 ]---
[  194.337806][T12749] RIP: 0010:netfs_limit_iter+0x100d/0x1100
[  194.340046][T12749] Code: ff e9 a4 f4 ff ff 48 89 de 48 c7 c7 e0 c6 ab 8e e8 c8 f3 73 fe e9 59 f6 ff ff e8 2e e5 b1 ff e9 6f f6 ff ff e8 84 56 45 ff 90 <0f> 0b e8 8c e4 b1 ff e9 cd f9 ff ff 4c 89 f6 48 c7 c7 60 c7 ab 8e
[  194.342930][   T50] usb 11-1: Using ep0 maxpacket: 8
[  194.346887][T12749] RSP: 0000:ffffc9000f3e6d18 EFLAGS: 00010293
[  194.351296][T12749] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff82c3902b
[  194.354042][T12749] RDX: ffff888024758000 RSI: ffffffff82c39f5c RDI: ffff888024758000
[  194.356581][T12749] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000005
[  194.358317][   T50] usb 11-1: config index 0 descriptor too short (expected 301, got 45)
[  194.359264][T12749] R10: 0000000000000003 R11: 0000000000000000 R12: 000000007fffffff
[  194.359276][T12749] R13: 1ffff92001e7cda9 R14: ffff88801c32d960 R15: ffff888022f3a580
[  194.359283][T12749] FS:  00007f6ae77fc6c0(0000) GS:ffff8880d653f000(0000) knlGS:0000000000000000
[  194.363121][   T50] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  194.365449][T12749] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  194.368601][   T50] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  194.371549][T12749] CR2: 00001ffffffff700 CR3: 000000004417a000 CR4: 0000000000352ef0
[  194.377292][   T50] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  194.377855][T12749] Kernel panic - not syncing: Fatal exception
[  194.382651][T12749] Kernel Offset: disabled

VM DIAGNOSIS:
00:23:58  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81fc9222 RDX=ffff88802cd8c980
RSI=ffffffff81fc91fc RDI=ffff88802cd8c980 RBP=ffff88806a640da0 RSP=ffffc90004aef878
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000002
R12=0000000000000003 R13=ffffed100d4c81b5 R14=0000000000000001 R15=ffff88806a43c440
RIP=ffffffff81fc9203 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d633f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000001b31b23ffc CR3=000000000e598000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3a55d2a6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3a55d2a6 00007ffe3a55d2ac
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a0bc3327c
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a0bc332bc
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a0bc33420
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a0bc332ae
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000013b6bc RBX=ffff88801e6ca4c0 RCX=ffffffff8b90ac75 RDX=0000000000000001
RSI=ffffffff8c1b1220 RDI=ffffffff81dea654 RBP=0000000000000000 RSP=ffffc90000177df0
R8 =0000000000000000 R9 =ffffed100d4a679d R10=ffff88806a533ceb R11=0000000000000001
R12=0000000000000001 R13=ffffed1003cd9498 R14=0000000000000001 R15=ffffffff90d9b010
RIP=ffffffff8b9095df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d643f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f6ae6bc0d70 CR3=000000005c816000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6465636976726573 5f6f692e7166622e
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1a681c56
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1a681c56 00007ffc1a681c5c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfb923327c
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfb92332bc
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfb9233420
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfb92332ae
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff857a5bb5 RDI=ffffffff9b4a6b80 RBP=ffffffff9b4a6b40 RSP=ffffc9000f3e65f8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043
R12=0000000000000000 R13=0000000000000035 R14=0000000000000010 R15=ffffffff857a5b50
RIP=ffffffff857a5bdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6ae77fc6c0 ffffffff 00c00000
GS =0000 ffff8880d653f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00001ffffffff700 CR3=000000004417a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffff00 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1ad74236
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1ad74236 00007ffc1ad7423c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ae6a3327c
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ae6a332bc
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ae6a33420
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ae6a332ae
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3067732f7665642f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1344500c5546470c
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ae6bec5f8 00007f6ae6bec5c8 00007f6ae6bec600 00007f6ae6bec5e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000000e672c RBX=ffff88801eaf24c0 RCX=ffffffff8b90ac75 RDX=0000000000000001
RSI=ffffffff8c1b1220 RDI=ffffffff81dea654 RBP=0000000000000000 RSP=ffffc90000197df0
R8 =0000000000000000 R9 =ffffed100d4e679d R10=ffff88806a733ceb R11=0000000000000003
R12=0000000000000003 R13=ffffed1003d5e498 R14=0000000000000003 R15=ffffffff90d9b010
RIP=ffffffff8b9095df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d663f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f6ae69e9e80 CR3=000000002dca3000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ae774d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1ad74236
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1ad74236 00007ffc1ad7423c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ae6a3327c
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ae6a332bc
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ae6a33420
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ae6a332ae
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0000ad0dd8fbd3 c3f4155efc000000 01ff06fff5004500 000fff9100001400
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ae6bec5f8 00007f6ae6bec5c8 00007f6ae6bec600 00007f6ae6bec5e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000