last executing test programs:

4m16.551139347s ago: executing program 2 (id=3):
preadv(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x5, 0xb)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000000004000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0300000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x38}}, 0x20000000)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x800, 0x501000)
socket$packet(0x11, 0xc2340cf684d20d18, 0x300)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xffffffff}, 0x3, 0x3, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4})

4m16.490529589s ago: executing program 2 (id=7):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd8847", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) (async)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r4, &(0x7f0000000240)) (async)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x1d) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

4m16.33081229s ago: executing program 2 (id=11):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7cc6c8704f8176ed, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000580), &(0x7f0000000500)}, 0xffffffa7)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x4000040)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x34, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_KEYS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)

4m14.750108913s ago: executing program 2 (id=27):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002"], 0x104}}, 0x0)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global'])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x78, 0x1, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x100}, @CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xa742}]}, 0x78}, 0x1, 0x0, 0x0, 0x801}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x54}, 0x1, 0xba01, 0x0, 0x44844}, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0)

4m14.684128714s ago: executing program 2 (id=29):
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) (async)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
io_setup(0x2, &(0x7f0000000040)=<r1=>0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000f3ccaf29000000000000000000008c19da864333e663e1a5e838f164f3ede841aa4d2f5887c0a106473ad1b127890cf909b9f5a234b529320f3affb2afc75837595198d60b0efc433370c6134bd5ed0d6f307a5e1a3cdaea9ca0aed858849ccfe6c3750978a86c56f09b62a73953edac9e068b5596120fe20e3d3229c6f0e29f3d2523a2817ba8faae2444c2757b"])
listen(r2, 0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
sendto$inet6(r2, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
pipe2$9p(&(0x7f0000000240), 0x800) (async)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r7, 0x0, 0x0, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYRESHEX=r6, @ANYRES16=r2, @ANYBLOB="b8b49e9ebc0b152f6f6584e9e4b0c3b4a92cd355af61272754b4c288607625b372667ba2da62b806dcd1dd36a48ec8c1f07b42747ede922ffb0a3bb8346fa6c2610ae16616d6bd5d67a4fbe3a2bf6867", @ANYRESHEX=r6], 0x48)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2cf9"]) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2cf9"])
write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) (async)
write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97)

4m1.001881504s ago: executing program 1 (id=234):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000300)={0x7, 0x0, [{0xb42, 0x0, 0x4}, {0x189, 0x0, 0x7}, {0x3af, 0x0, 0x3}, {0xa6c, 0x0, 0x8}, {0xb88, 0x0, 0x4}, {0x95c, 0x0, 0xbd}, {0x391, 0x0, 0x8}]}) (async)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="9b40f912a1"], 0xa) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x200) (async)
socket(0x15, 0x5, 0x3) (async)
ioctl$BLKRRPART(r4, 0x125f, 0x0) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000500)=[0x4], 0x0, 0x0, 0x1}}, 0x40) (async)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0xa000}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil})

4m1.001477732s ago: executing program 1 (id=235):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

4m0.93082914s ago: executing program 1 (id=236):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
unshare(0x62040200)
r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000640)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = socket$unix(0x1, 0x2, 0x0)
recvfrom$unix(r5, &(0x7f00000002c0)=""/35, 0x23, 0x12140, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0xc, 0x0, 0x4}]}, 0x10)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600054e2300000000000000000000810000000000000001000000fdffffff00000100000000", @ANYRES32=0x0, @ANYBLOB="0000a37bc4d24bfedeff"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r2, 0x22d2, 0x20, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00001e7000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000002a000/0x2000)=nil, &(0x7f00000af000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000c1000/0x1000)=nil, &(0x7f00004e1000/0x1000)=nil, &(0x7f000012c000/0x2000)=nil, &(0x7f0000000040)="37ec3736ab3a022f32267dde61e09e445fd72af70127e735d78e1c6b7891550f2b57d1d84021af74a5bcdc970cf7824da49e3533aa30973c76aba036e1228bee0f892ea4dff0f24760c30f3fe4a887d748a0b76efaacba379aeb6b0da2bc2f6c94520d9594dad530c99e186249cc5ef109eca3dcdf62bb3c4e5c666d00d23c726ba3bfc128ce1a0adad4f88d", 0x8c, r2}, 0x68)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04220776"], 0xa)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0xce8f04130a2b64b5, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x0, 0x8, 0xe, 0x1, 0xfffffffffffffffc, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000380)='GPL\x00', 0xfffffff3, 0xc0, &(0x7f0000000500)=""/192, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x6, 0xfffffff7, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x0, 0x1, 0x8}, {0x2, 0x2, 0x2, 0x4}], 0x10, 0xffff}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000740)=r9, 0x4)

3m59.981698412s ago: executing program 1 (id=245):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
openat(0xffffffffffffffff, 0x0, 0x44880, 0x6d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x8000000000000001, 0x3, 0x0, 0xfffffffb})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000, 0x3}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080080004608f0ff76000000bf9810000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup3(r4, r5, 0x80000)
recvmmsg(r6, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000480)=""/28, 0x1c}], 0x1, &(0x7f0000001780)=""/109, 0x6d}}], 0x1, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x1, 0x40000000}]})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f0000000180)="3cbd6cee", &(0x7f0000000300)=""/211}, 0x20)
r9 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', <r10=>0x0})
ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000200)={&(0x7f000001a000/0x1000)=nil, 0x1000})
bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14)

3m59.583436712s ago: executing program 32 (id=29):
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) (async)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
io_setup(0x2, &(0x7f0000000040)=<r1=>0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000f3ccaf29000000000000000000008c19da864333e663e1a5e838f164f3ede841aa4d2f5887c0a106473ad1b127890cf909b9f5a234b529320f3affb2afc75837595198d60b0efc433370c6134bd5ed0d6f307a5e1a3cdaea9ca0aed858849ccfe6c3750978a86c56f09b62a73953edac9e068b5596120fe20e3d3229c6f0e29f3d2523a2817ba8faae2444c2757b"])
listen(r2, 0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
sendto$inet6(r2, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
pipe2$9p(&(0x7f0000000240), 0x800) (async)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r7, 0x0, 0x0, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYRESHEX=r6, @ANYRES16=r2, @ANYBLOB="b8b49e9ebc0b152f6f6584e9e4b0c3b4a92cd355af61272754b4c288607625b372667ba2da62b806dcd1dd36a48ec8c1f07b42747ede922ffb0a3bb8346fa6c2610ae16616d6bd5d67a4fbe3a2bf6867", @ANYRESHEX=r6], 0x48)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2cf9"]) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2cf9"])
write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) (async)
write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97)

3m58.989869385s ago: executing program 1 (id=255):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x12f, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x32}, 0x28) (async)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newtaction={0x18, 0x31, 0x3d, 0x500, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) (async)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000001640)={{0xd000, 0xeeee8000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0x0, 0x5, 0xff, 0x0, 0x0, 0x2, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xb, 0x0, 0x3, 0x6, 0x0, 0x1, 0xb, 0x3, 0x4, 0xfa}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0xd, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x4, 0x78, 0x5, 0x5, 0x2, 0x0, 0x0, 0x5, 0x5}, {0xeeef0000, 0x0, 0x4, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x80a0000, 0xc, 0x40, 0x0, 0x2, 0x8, 0x40, 0x26, 0x0, 0xff, 0x2}, {0x8000000, 0x3}, {0xdddd1000, 0x3}, 0xc0040005, 0x0, 0x0, 0x100, 0x0, 0xf801, 0xeeee8000, [0x80000001, 0x0, 0x1]})
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f0000000480)=""/228, 0xe4) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10)

3m58.351237652s ago: executing program 1 (id=257):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000004844fd43000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000900)={0x58, 0x9, 0x0, 0x4cf22, 0xa, 0x8003, 0x6, 0x1, r6}, 0x20)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x8}, 0x8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
r7 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0)

3m58.308733866s ago: executing program 33 (id=257):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000004844fd43000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000900)={0x58, 0x9, 0x0, 0x4cf22, 0xa, 0x8003, 0x6, 0x1, r6}, 0x20)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x8}, 0x8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
r7 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0)

3m49.639012478s ago: executing program 0 (id=388):
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='m', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

3m49.571833379s ago: executing program 0 (id=390):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020)
writev(r0, &(0x7f0000002140)=[{&(0x7f0000000040)='T01\n', 0x4}, {&(0x7f0000000080)="37c870ef0c000000e20ecbf61fc3", 0xe}], 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=@framed={{}, [@exit]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, r0}, 0x94)

3m49.571685146s ago: executing program 0 (id=391):
r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000580), 0x8000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000006c0)={0x400, 0x400, 0xa00, 0x600, 0x1800, 0x8, 0x0, 0x1, {0x3ff, 0x90c, 0x10000001}, {0x1c9, 0x7, 0x1}, {0x80f7, 0x0, 0x800001}, {0x3, 0x100, 0x40001}, 0x1, 0x1dd, 0x8, 0x201, 0x0, 0x8, 0x1f, 0x10000, 0x2, 0x101, 0x0, 0x53b0, 0xfbaebe444cba4e0a, 0x2, 0x2, 0x5})

3m49.553304963s ago: executing program 0 (id=392):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
syslog(0x4, &(0x7f0000001c80)=""/128, 0x80)
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'exfat\x00', 0x3a, 'exfat\x00', 0x3a, '\xe9\x1fq\x89Y\x1e\x923aK', 0x3a, [0x43]}, 0x37)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000))
symlinkat(&(0x7f0000000200)='./file0/file0\x00', r4, &(0x7f0000000240)='./file0\x00')
ioctl(r3, 0x541b, 0x0)
syz_usbip_server_init(0x3)
ioctl(r3, 0x5451, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind(r5, &(0x7f0000000100)=@in6={0xa, 0x4e20, 0xffffffff, @remote, 0xd}, 0x80)
mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c756e616d653d5e2c6e6f657874656e642c64656275671d3078303030303030303030303030303030362c6163636573733d757365722c63616368653d6c6f6f7365"])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')
bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x2, {0x2, 0xf0, 0x3}}, 0x18)
clock_gettime(0x0, &(0x7f0000000040))
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000080000009500000000000000675eda567088c083bcc3474a0023129644ed13c54abc28be9b65d168d0a8f2bbb71b2214672cd83885aaed93e9fee452301c070853d931592415b01b8d11c24e4c193c9c20c649dd9bc2c490580340b0a1e2f92750a9259ae6e5dbb164d54339fbbc307a0ff08f5d379e94ede57a1c4e5a3d1acd528d4287f3c7db"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
utimensat(r4, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x100)

3m48.951544527s ago: executing program 0 (id=401):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
clock_gettime(0x7, &(0x7f00000003c0)) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x14100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x833, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) (async)
r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xa2200) (async)
r9 = getpid()
syz_pidfd_open(r9, 0x0) (async)
sendmsg$AUDIT_SET(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, 0x3e9, 0x10, 0x70bd27, 0x25dfdbfc, {0x50, 0x0, 0x2, r9, 0x9, 0xfff, 0x0, 0x5, 0x0, 0x314, 0x8}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) (async)
r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r10, 0x40000000af01, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) (async)
r11 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911c0006a141178f15043af050000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000340)) (async)
r12 = dup(r11)
mkdir(&(0x7f0000000280)='./file0\x00', 0x8f)
ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f0000000000)={0x1, r12}) (async)
ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, &(0x7f00000001c0)=0x304008000) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000008000000000000000000001989"], 0x50) (async)
ioctl$VHOST_NET_SET_BACKEND(r10, 0xaf02, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c00000001300e999000000000080000020010000000000000000000000000002ac3300010000000000000000000000000000000004000a006000000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000100030000000008001f0001000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

3m48.65029691s ago: executing program 0 (id=405):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0xc00}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86"], 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000"])
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x285, 0x6, 0x0, 0x2, 0x10003, 0x41, 0x1400200cbb, 0xffd, 0x4, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x19c5})
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000001c0)={0x0, 0x0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x5)
landlock_restrict_self(r0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "c0adf9730c497f2f7b0a755258cb90e5f42576cc0386f975710600ef795aaa53", "39161cfd481d4fc5b8e54eca21107ba28fa5ddad802edfc40d887da4200f32df", "b99d94bc132ed02bcfb97ff25677c672d0292a76ea9ae71082d5b12ae9e66036", "d98364d0de265a7dd90ad758220a2a74039fbea229a67a57b0f83a37a9f94a12", "2d2a6f06f54fea82a6845dbadd71ee9beedd10bbd1f4c21592674a056eed5839", "8d5739ad9197de8e51c057bb", 0x0, 0x7ff, 0x5, 0x9, 0x2}})
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)

3m48.570012612s ago: executing program 34 (id=405):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0xc00}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86"], 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000"])
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x285, 0x6, 0x0, 0x2, 0x10003, 0x41, 0x1400200cbb, 0xffd, 0x4, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x19c5})
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000001c0)={0x0, 0x0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x5)
landlock_restrict_self(r0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "c0adf9730c497f2f7b0a755258cb90e5f42576cc0386f975710600ef795aaa53", "39161cfd481d4fc5b8e54eca21107ba28fa5ddad802edfc40d887da4200f32df", "b99d94bc132ed02bcfb97ff25677c672d0292a76ea9ae71082d5b12ae9e66036", "d98364d0de265a7dd90ad758220a2a74039fbea229a67a57b0f83a37a9f94a12", "2d2a6f06f54fea82a6845dbadd71ee9beedd10bbd1f4c21592674a056eed5839", "8d5739ad9197de8e51c057bb", 0x0, 0x7ff, 0x5, 0x9, 0x2}})
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)

2m32.547536484s ago: executing program 4 (id=1537):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000300)="09000000e700140000007ef52f55", 0xe, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r4, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14)
ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x9, 0x4ce, 0x3, 0x9dff, 0xf, "800300eb00cbe600"})
write$binfmt_aout(r1, &(0x7f0000000780)=ANY=[], 0xff2e)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000100))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r6 = syz_open_pts(r1, 0x0)
r7 = dup3(r6, r1, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x800)
r10 = syz_genetlink_get_family_id$devlink(0x0, r9)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r10, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10000800}, 0x4800)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17)

2m32.499887365s ago: executing program 4 (id=1539):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f00000007c0)='./file1\x00', 0x0, 0x11)
mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x21)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0)
lgetxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffffffffe84)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
r3 = dup2(r0, r0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200), 0x2, 0x2)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f0000000100)=@tcp6=r3, 0x1}, 0x20)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000800)={0x9, 0x0, 0x2e1d, 0x543f}, 0xffffffffffffff91)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x29b63}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x10}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x44}}, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ea2b0000006c0066bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0xfffffcad}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24)
sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="eaede58c8e85e32da42fa111fa0687d4729e0fab9041e6898d13ecd565f85cabd8b6fc0c207b3a540626bc77315f30e8066633e7ed7ebef0ac24064a43cca369504588932c721f9837a8f51f7f340f183c402996af7c6fec86db64e63cf34cf016b9aefa5fa43dd84d7fe6a711afd4db49cbf73dc5df5dc459c2449591fb271ba9d1465fc039956247d8cf5c86f06efae4a52367f632f214bf09dc8323a2968f750800d7ded3a4", 0xa7}, {&(0x7f00000003c0)="9d6b4d9a", 0x4}, {&(0x7f0000000480)="7ed395c3b2ed79fd78f3eabd92506b69834d1bfd2542ca268209923fac437670e438bff45700dce899d3371a4aeb6af99b0443e45a40debd26fd7e07f24ececfd78c76e5358e657f0c05017a8ad938a8b9e1debc49f396050f818f14b2f72a67bd6542385dcc6e05984cfac18b160ec7fe", 0x71}, {&(0x7f0000000500)="bc75ba50112949700565e258fb256cd2022f2ecc907ddef0093af0b025761e5225286fcbe5b7873a6396e740058be9c573ef4574afaef544fda60d53a1c64e6b91db56bb9f892f0951895888a4073d059819ced5ebc3c3c76cb0640fedc9ce858116d63e5cb63b94b92654df2400b0dc9a1822ebbf555ebab4354bb205d9332be4ee065f426c30f713e850e9cff9f1f04d47", 0x92}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1b8}}], 0x1, 0x801)

2m32.440117072s ago: executing program 4 (id=1541):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async)
connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='writeback_bdi_register\x00', r5}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='writeback_bdi_register\x00', r0}, 0x18)
r6 = dup(r2) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000240), 0x4) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})

2m32.39189786s ago: executing program 4 (id=1544):
unshare(0x28000600)
r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x0, 0x0)
unshare(0x8000280)
openat$cgroup_ro(r2, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)

2m32.390550239s ago: executing program 4 (id=1546):
mkdir(&(0x7f0000000100)='./file0\x00', 0x1bd)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[])

2m32.030909676s ago: executing program 4 (id=1551):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x24, 0x8, r0, 0x1, 0x0) (async)
getpgid(r0)

2m31.99181793s ago: executing program 35 (id=1551):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x24, 0x8, r0, 0x1, 0x0) (async)
getpgid(r0)

34.269591052s ago: executing program 5 (id=2692):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x63)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68)
r4 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x78, 0x0, &(0x7f0000000180)=[@enter_looper, @free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x9, 0x0, 0x3a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}, @dead_binder_done, @clear_death={0x400c630f, 0x2}], 0x2b, 0x0, &(0x7f0000000200)="a86e4fd1adf8de8da4de9cce09960b62960c8b4af5d8caa42c1b21eacec0d79140c91453f1265185f68a9c"})

34.119040348s ago: executing program 5 (id=2693):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9f"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000}, 0x28) (async, rerun: 64)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (rerun: 64)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) (rerun: 32)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x6, 0x8, '\x00', 0x6}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async, rerun: 64)
mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x73) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = fsmount(r0, 0x0, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) (async)
sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}], 0x20}, 0x2142) (async)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80080)
syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00')
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x26e1, 0x0)
close(r9) (async)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r9, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async, rerun: 64)
read$FUSE(r7, &(0x7f0000000b00)={0x2020}, 0x2020)
write$P9_RAUTH(r8, &(0x7f0000000040)={0x14, 0x67, 0x2002, {0x8, 0x2, 0x6}}, 0x14)

33.487725771s ago: executing program 5 (id=2699):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3f, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x3c, r2, 0x1, 0x1070bd2c, 0x1000004, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x77}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x30)

18.798826528s ago: executing program 3 (id=2740):
syz_io_uring_submit(0x0, 0x0, 0x0)
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always'])
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r2, 0x0)
mlockall(0x3)
mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
munlockall()

18.156231618s ago: executing program 3 (id=2744):
r0 = io_uring_setup(0x1de3, &(0x7f0000000440)={0x0, 0x2, 0x40, 0xfffffff9, 0xd4})
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1d, 0x20000038, r1)

18.009729659s ago: executing program 3 (id=2745):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, 0x0, 0x0)
shutdown(r0, 0x0)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB], 0x70}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r5}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[<r8=>0x0], 0x1})
pread64(r7, 0x0, 0x0, 0x1)
ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000040)={r8, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, 0x0, 0x0, 0x1f5, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000008dfff00"}})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0xc)

15.528509859s ago: executing program 3 (id=2752):
kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000)

15.52836331s ago: executing program 3 (id=2753):
r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc0405668, &(0x7f0000000040)={0xa, 0x100, 0x3, {0x8000, 0x80001000, 0x1, 0x870}})

15.47986795s ago: executing program 3 (id=2754):
unshare(0x6a040000)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000)
close_range(r1, 0xffffffffffffffff, 0x0)

15.308482168s ago: executing program 6 (id=2755):
syz_open_dev$usbfs(0x0, 0x12, 0x80801)
socket$packet(0x11, 0x2, 0x300)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f2401000308"], 0x7)

15.04697934s ago: executing program 6 (id=2756):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @local, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000000c0)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d0, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)

15.001382766s ago: executing program 5 (id=2701):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x4008031, 0xffffffffffffffff, 0x7dfeb000)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
r1 = socket$kcm(0x2, 0x2, 0x73)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
r3 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
fcntl$lock(r5, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r6 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000000)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000100)={r7, 0x1, r6, 0x7, 0x80000})
write$tun(r6, &(0x7f00000002c0)={@void, @val={0x3, 0x1, 0x0, 0x6, 0x1000, 0x1}, @llc={@llc={0xf4, 0xff, "a180", "ccb5c1bb5b9623338fe23d7e2f323b0563f7af0ecd4d4a871c1336a8b5198fd9f90c0bf273669268f4752020ecd8c003b53499d83a28f6"}}}, 0x45)
getsockopt$inet_opts(r4, 0x0, 0xb, 0x0, &(0x7f0000000280))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r8, &(0x7f0000000240)={&(0x7f0000000000)=@isdn={0x22, 0x3, 0x0, 0x3, 0x6d}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="6e7422a1549aca6f75a9c034d1fad4355ae9610dddd1ac6b3f0ead6fd12b84c331baaae1a4f6204f227cf3e29e3ec6011312c5774052680dd274674905b21e013def6d048e81e6e09fdfa95570791b83fccf52d4a667522008f15a2b8f9068829096dcc59df779958a439f98708f87563abeae39715ab32650a6833c", 0x7c}], 0x1, &(0x7f0000000140)=[{0x30, 0x84, 0x81, "8af418ce9e0b3789c7a0630d84b8ed189b5cd865e993f03272"}, {0xb0, 0x11, 0xde99, "601c957eebf92d1a8f3c287a6a3340d252d8e3e8f3cd1f2299cdef5212c4a6086f5c5be32d56491efb0181402e0658638d78d43be5ea3d3f5f0307dab4d0784812a0e51732d2857653eef8d447bf42b101c8cf327436d17fe6188b9bfd7867039035d06ed039426323aa426cdb8ebe195db5b37b9d07643b890a4e4bee296e90afe3f6fafbece73b8d3b030fa529341ec14ea334dc632cf10de117cebb"}], 0xe0}, 0x404c000)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00009ba000/0x1000)=nil)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
munmap(&(0x7f00001ca000/0x4000)=nil, 0x4000)
syz_clone(0x8a32400, 0x0, 0x0, 0x0, 0x0, 0x0)

14.919840921s ago: executing program 5 (id=2757):
syz_emit_ethernet(0x46, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}}}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0xaa57b7031652f610, 0x361202})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x6, 0xe, 0x10, 0x0, 0xb, 0x28, 0x2, 0x9, 0xff, 0x9, 0x1a, 0xc, 0x0, 0x401, 0x80000010, 0xff, 0xb, 0x2, 0x7, '\x00', 0x6, 0x4080000000000005})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10.008686008s ago: executing program 6 (id=2761):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x7, 0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
close(r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000))

4.014215571s ago: executing program 7 (id=2763):
syz_open_dev$usbfs(0x0, 0x12, 0x80801)
socket$packet(0x11, 0x2, 0x300)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f2401000308"], 0x7)

3.637597647s ago: executing program 6 (id=2764):
socket$alg(0x26, 0x5, 0x0)
munmap(&(0x7f0000901000/0x3000)=nil, 0x3000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x800, 0xff, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="cd9b45bf31b898b6bb11efb4942c5706f8f450a0042f90bc9001c449997d8d995a96ff3f5cf6f3824cc509e6b5b235ea0603a3c9ae64743888cb7dd7fcd1b1300a88c3fae201452dc552f75e8ab8ac0fdaf2db8e8f54e856cc6f0b4a2b0fe9cdd26047025c409a99de8bc65abb2d3b6583c5522979", 0x75, 0x4000000, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x400c040}, 0x40000)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x158, 0x10, 0x717, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7ffffffffffffffd, 0x0, 0x1}, {0xfffffffb}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r3, 0x3}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
readv(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/218, 0xda}, {0x0, 0x20}], 0x2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r8, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x40)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100080f, 0x0)

3.466361167s ago: executing program 5 (id=2765):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="316281641e5c49d3f3f7dad8323a11e60e0f2a84e39213b0b7328521a0dc07cb5d76803e44d2b771f20b5b9f652925d1113001427163"], 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x10, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0, <r4=>0x0})
sched_setscheduler(r4, 0x2, &(0x7f0000000280)=0x3)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_pid(r1, 0x0, 0x0)
r8 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10})
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0)
open(&(0x7f0000000000)='\x00', 0x40440, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x60}, {0x700}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)
r9 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r9, &(0x7f0000000340)='p', 0x300}])

2.908092382s ago: executing program 7 (id=2766):
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x15)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r2, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000c6835807974b5da7297f4b32f0293ba1d7eb8f37f4f769a60696a546f0020fa9bc3291e2f8adcf5aa9c6751adf187cfbf734e932cb8fa82af330f3d40bf6f5d11ab8153568c3778791fa6fcf71825a4cc528288480d079b5f224ceba0462f8aafffbdefe0157492a9801a1ebc732929b4079ec245eabefcd88feb738ed8422352083c680683f3cc320227663aa1423"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401002cbd7000fddbdf250900020073798d3000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800)

2.669269558s ago: executing program 6 (id=2767):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)

2.669088098s ago: executing program 7 (id=2768):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)

2.566117969s ago: executing program 7 (id=2769):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xb, 0x0, 0x0, 0x8, 0xb6, 0x7f, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'})

2.449598481s ago: executing program 7 (id=2770):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x14, 0x0, 0x6, 0x101, 0x70bd25, 0x25dfdbfe, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4008008}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x4, 0x0, @void}, 0x10)
r4 = socket$rds(0x15, 0x5, 0x0)
getpeername(r4, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, 0x0, 0x0)
r7 = socket(0x13, 0x2, 0xfffff198)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_uring_setup(0x7625, &(0x7f00000003c0)={0x0, 0x9678, 0x2, 0x0, 0xf7})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='io_uring_cqring_wait\x00', r8}, 0x18)
r9 = syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140))
io_uring_enter(r9, 0x2241, 0x1b86, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)

932.415691ms ago: executing program 6 (id=2771):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x800, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}])
syz_fuse_handle_req(r0, &(0x7f0000002100)="4d56d8d5eb609237a710679dc6f36df4642c88ca5b4c5a9a22282fa2cc9808571924c9da9a7702327807597d9f0124949a7faa7fafc02a6f9d65d577030afb5fef168d477870754693f0e00f76f38775872991f98b9c976e08ee65c3069d7311270278a89764ce78a0c648cf04d7cb57cfb8a32c79e2196972da1539ec2c1f91180e5db25abc92421bef99032a070fe99708c0975da77ab8f7cb1f1b34200f1c1539c8fe78daab19314b9e60c05f7d08ae0df2ab3c0b5bb2a0cb48add054101a20676163a57abe12c38a6284335c0201b9324f0421e4272c6852e957c1ac9595da28422385e1695fabf6c31b81d0bee3a5288da339ac312586bf6b54787ac00cf286fd9689edb03c7da165cc9ae1cc37e71e9b52110dbbf044ccc81a90a698b771bd092abc37b09b0257fa1c6c174ffdab8e97b3f1d88e97a765c4569c0fd5d35faecb705bf8b0e9a6a4094d6a8f756e7335bedc6d31ebc4c532545bb34f9fc30ec0b0a0cd86f7894c9ee0c514e80e21f0588fd8e721472c6d9312f6f49091a993cdae38fcfb8cea6da44bc8c74b2426d1b586f2a114aca84093734adddc0a8106c48f58751d5fa554b7a477a0c33944555b98d96414ab1daff2bc60885475ced504702aba5f64940ac0099b4221eb4ebb95a42e76e3c58b4ff39c0334cc9b624bb5636fc22ded8025a6ff3649e2df6954c8c7df5f90cf486f42c3635bb4ebe0ac09b34d711e40c2ffd9d1dd766f448c424d057617ecdc7cf9f6f957e6dd73a611949c517fdc310a94ba1430d07f96871cd6079e548181e044bac3395f583df55c7237f3bf691d9e675f67ccf34b953b9b6f2722c7f9fdbc11182affe92b10c3c54c0aa93dff6992d42dd01a4f214303ef978b0bed28211ab27c41ad5e1d3f2846b9322a50ea53c033c611b2f819252c283d4d5df8276b294f421b4ed2c2ab143c5ffdff63165b409821a3ea3d645292ab97be1bf40d8c6893ba7bab1414d56046ce032f3d328d4be3f7c1c13854ac44877830e90dd3c8d66f20f9f5c761b2035d1847ffeb0825e07ae8f7c60b43b6336b0b4dc1173ce6e54c45c2335658fff4a21dc73fb90aa900930da384c3d9bd99ed9fb4ef58ccd1e08e4887a231878a65f3a3b1aaf1d6ff9f075c7b2cb4e9df2dd86099bd36a609995c7e11d5dd651470b05ffa8c80bde02dd608d544091d3ce21eea1670a0f18fa35ed2b4e046b45887c29805b00f77367b5d76e4c4e1b562f8e2619e1cb7f9f0ad5f9d4761c0e7d8b4c1f9c148429ec32471ad99adc4ad1bebb6dd6c2403df81fb25f71dadc1cdec84daf3ada856a91011cd598f86de48311e49fa3b6b304edb2173ec7d5739dc2860535b388ba2ec96d907747f90932336c5b9d5a7eb50855ffbdff6edb652cafd3f1235b02de499be357abae8c140ec8783b9e30be81497b16674ee33d5a315c4bdf7fb64c3de77e23a9cf0bd63f7909c54503af62b54652859f3506e2cd839a7929d5ec96f4fbc61dba197e3cac31cd545fa98d2278eb6614e93a360aff94f4c2ae33cd05beb23262e405bb45ab8bcce6939773e591d4f054f6f996c31f9f5fee8ebd137878ee0b38f7d30b02a4f8b409bd5c80f1c9decf4307256cecba1555b738d7eb21df9e803846873ce18e0576ff58bc89816c9c47e08de35e6f80601a3775dedd12b8e207ee95b8dc411f9560987f4021674a254652229f75979b1ee0bf76a54a4796a99e0b04e4306cc787ce017f8df6625b4c30648554821ddaed34c7d7eeb00f7d5a44692c1f0a9e6cf77f6257c5f92a9554fc20e779608ba84eb00c4e3b7e26eff6fd8498717d87039f5a76f54b61659d06bdf75f4189cd278ccf1e223546a345ee1b10c50b511a680857e2f0ace48d6431793d0fc9a8dab2c7520335e4197bd30b497dc378b6a6bf2b083b83630fde798d1087274028f0bb2b7b1718600b7f864c750985d131d300ab68fec87a0c18f545fc142d804d2e2b2daf1333e867300f39c8cfb8ced8382b5808234d4263ce8c302825f027949ac7ef4c72054855418d3a9f25411b47af01642e4c161745e721c1ec4dcbc0f6d0bc552decc20f9b325ecd9cfc3990ebc3a2e14e7ed5808705c735a47404e96a4c7b45031a111b927a9c377e778f6eef6e68ac9be025bea0f03d757a06c8adf9e6ab3bcfcd1192a08e85365619067071ce703b50a4abe1f2213bcdb914b36056e124d6256faca8d42b8456744e7ea73a830f6af92aab8ca3fbbbabddc90033e6c64707dc59064bbfc2c70014c0d8be55cce98b4f9da17692aab55e21a0bcb6a600d80b76d7bb39af4dc5e7a0ca5633166869b4f0c02ac7d2b0b5e8d2043e8cc3ff669b1482c4a510f104cb53b62d9bccf95ff881febcb11ae01b754ea209fec9d7dd201aa6670a582270cea31c2bbb6d401694d5e009893df7268d9f962ed7de573e5142bcf9299fbed53d0ad410c6d3abd9606edb4942f165012e109411a67da5d908a88746b0b26694576dfafb41cae841e2346bd69a9cff06e4180c6addce7fce82d411cf02d159e235541fcf94ef098c1bc43f0d42f9fab3db8888b88c080cdd60eac749e62988cad9d8bdf8e3dd1e68f2d7a4ed931b3f67c4cb099300b515603422c1096b8c2156000509e81ac243bdb67a342f0f765517c320fc4a394a0e0b99978dc91f9d8291b2d2ba222a4da9a032726c131caf3c4473ef001bdff04de538c312f5617b189ed0f9971f9fa73bf7ce7e153fb92285227df8638fd6668fb0a1fbb7d2c63cedfb54e3121ab0a57902d55b9e0976d8c1bf9155da5c44ac287b81abee4014f8c4439b87257750badef2a7400b36f54284f4d15128645de4fec97873a2b3a072f09ec9edd962f9de98fde13bf5c9ba8f3e96cc7d6e129fdc82c79e6449a43bec2a39a6196917b27ccfd3fccefa3904e9f32bce731fd0b6759b6eaa08864ea87558c850c7c219944fbafe2bdfc057d0fbe0be7f4ded97633058537c0cf8b0800db776e63c4a68826f1db20c24487faa6bc996d016cda7e2016d8f8d839bd6cf8dfb8b7dec377ccc07ba395c4e336fbb30d9404ad7862a790b628fc5922f14f7382392b8b26da75652ffa8de536eafa96d26c47ca9f9caf655ee43d4177450ff7bf985474ec121d593400af04f9d2e7570f23c1d059fc8c0c17d7479ad06d7b8b49eb9505bac0d72bd15dd6c51c6a612c5bead259fc5b24b40216a173a14a047f6474058977ec4215744e74b773063ce809e65ed6be7c82cc1bbc9089792f011dcf00d49d899198feff3179d7e7dc2e23302a7c94c3840f619bb2116a9c823c8c3cf30369293e6a4625f0bcd7541d9301d7676d8e4e968873a28b3a6a316810a3790482c6a492f624b724a97d7e3934d8f14ab9ee2a72826f23d90961df35b41044e0eeaefd66296fb8d8943bc90ded0ca41c713f694b384d8e51b1423882999440ba32908d07a07977455676a7fc23026afe86db2456e6c6bc333dbaf6cda2bcab336c97682148d4a13a4be184673c74483ccb633990a6bd39ee9928e08bccbf802b50ed737ba067a71aff6e5c02376f4f902a860777c0db0925e908f4738113b649f96bcaf55597747ffe82c79ddc2dd18c548cc17553aa107f6d3035a0690bc7bf358ff86a87d95d48114a6a109d8e38c91531424edb5a85b74c37bce82cbb686ae3eeec3890bd51c627111d0bd664dc890815f06f1dba33bd78f7038e25c20ac3054b247e347203819ff9c7cc10038de5cb58a8ce90bf51310aed18c2f8f77c8cab4f80a5994f6d62a5f9047084544300c820ac09cd8325a3781d9fb39442982929ed60039033fc700ead47b691589f28af1069033aa5ffae062502b0fdff7ad8624b82ad7cd7a2dcf68241f0735f561835d972e7415fac9912849ff1601c2cff1a8eda05512260cfb37d5fdc3fd95484d8c94f1b0c568fa3742260ab76baa97b1c50607cddefd6970b20f3ef09547ffd1399087a5ab47bb2c175c8d6949cc62501419fdfce88abc08367021cf7792e88908e8c85769eb1a4e2e2b8e59be77acececff11979adb85c7c69a21d1588a53ac3e04a10ed92d4f239c95c228b3bd9e2137f0232849108a774ebfd40772fa9699ac4c7a74a4f2e940a1828c8eadf04618254e940cc8ff1ca09f2ca47e52922f8206ed3900735027ecd417b40fcc047466af15f174ff373e27acc3a33b46ba906b87884e97633bf36da401557590a5c21ef53a36027f1c9a92b845f3688ee4933c78dbd041da0b1ac3dd6b7f601b73f44c6323f9b56fa3741d5dc928cfd04399d3f83da1252df731212eb00f8708094861565d0ef94849ce51a1b1e83aee0b82f5741a746439923135101ed96abb488eb957cbb514ffbeec79445dd044addd892893ad2459d087645e864f2cedc77a47f75030a2cec1db9b1123ee5f054eb78a554d647b1f583d2a26571dc2430cbd19fa68ed59fa76212d275006639505cc82e6ed5f555dd941175d7a98b664b3feedef9932e4e80a89740df7428c65723a91993c5a3c59b52473e02c5dbf6024d9305e70ca7634e58fb2990eb4d52a5d94a4f5c5a607cd183b0ebda7d5b60f6bf2faf51ddf6b85c79b45e2fa10d255be7f0277a972233207823d4964446572e047af582483257548a0257a541463b4b44b70765733c0d1f7c9daf5e758f26ce962e638b9f866b464f4f82c059a292500fa843977e680a959432a20b1ccc1b8229b91b7ad9ee241ee5751a9593f261f502cdbdc50763fdb0fc94014c33363e2177ddf22064402367fdd829c3474032a830fc7d48c51f17837bc12ed373ea5baafe6794f6b55224a1cb1addc25860e579b0c9e539ae0830542314d3483ed7fbd51682c96f0db4c4dd895494dddac682df79c87f6d8518a5ed324c7a23975ac4add2f178e884df1d7253afc4a7a5e3f07ea78857e6311d94f6224b34f2ec0dd88d7fbb5dcf5e8de40ed92a24d7d7bdd28f9f29c973198441078a0ebf77586af8056049727c63d8efc211432cc7608b2c8150fd9b6456d93a8d5608d098208243fc938b22f8c48a8c00925f187c99a84492789ce6db0f89fd9f06852ac3d5b1fc9dad3198973adf90fc5f3d5e276a53540acc5c81a838de0bc4cf91b2f04d8af318344794f005a3b9f7e83d6adedec034425a141c76fb779303db10ea15c33fb0b23cb711e219b5b49b2061dc49f2f6993c632dbed59dfc95bdc5df6cdeb0ee0c9a019c5f61f4ff572c43eaa918254221d8ada80c04415351cc53ce3df8d0a9a3fa84f93e8377b205c3a7e45fb90887afaf2577464e3036d4a045f5153583c914bc50472ee5bcd1c4f608f5c13558255d3556ad2a33c5b36a791f4f02ce623e08117e7e225da26805e99fcbed349f1ec21baf79dc38202974420a4f45f2a2578d7a1456e5a70bba2792888099bbe672271c47e3e77c58405b0fb17e3995d7f99e03c127eec3d1c7e5775465b5ccd0fb0de38dd5ac2fb96eff092033d4a26ec2825984c2dfc9db903396c72636f43789d538d03bac072c13c33695989cdf6d058eca71be9fbcfd67bee2525dd044b75590c05b804e904b244b48cdc36cf9160e79c2f67ea898c3c11b7b33df75ffd011e40e67bf6167c5f2b053c14536dd4e636498b6a0c9704465bb4fa47d9284390251d3f6014203a28f368084d5b8d2a36431ad16b96dfca154d8a0bb23b86e966942c4863580ddedec25e70bdc3dff0c54fb74b8201d38e78990f4ceb42cdd95e51e82d9fdeba876475537351aef848e64cc940c276261173d9cc7f1cef7ebd593d634026b3c17c4a0b149debd7285c9bf00a7d7a5b345093d4f353ad6551053a9883e2d8b9b074713cf708513dc0e36c9016d2c00521008a930114c4dfb342d9b43d2571f2636a2151d899f97bf56767a8569c3f2337091b8135695ad143587b29706675799af45fb06c4687d20a5f5b3f33ef2f3178870dc20aa862cead74c6b18461f7727e176cf85eb0de6d0c289c42a1856fbaf660b7fea98912b23149d83a6bfadd216c5e7d768965f8f9356c4eab58e8a08e45bb9562a57e2611faac93da095dbd58f0bf837129e7f2701695da3034460e69775dd451868d1b5f462422e2da81cc4245e8b3956e4c30bacfd8638dfa27c1880635b7b0afd1c95d3f70c3e14f20b52759298ebdde1bd06047bb4ea4f267c3150f8e98997ba3e9ff2cbab26f4565401d878f874b66f843ca4b84e5cbb06bc4fe93d6f4dfc6f3c73487c2df8e4b0e6093872397ceb3b60923f9d8cbb1558283cc731f0c9a8a5093852a6c99e97cc4cab6f8cb1edc8c5d4ce43eb2e26b6592e551b6b762b725a291d49f1a1039780139e23d1f66fe541de5acf599acec49c08fe400371aa654c1143da074b5ffdfb530203db79ceb57f302d0a90192b4d177d4d8f142ca6babaf32fd34bac55aa100ed9992f7f049ff81a4e5a35b843009713846d53cc14b2457ef426d27b41b26b03c14d5c678d99d9ad079243c6a6c7e348e63569c34688fb625590e600d80cd6a4be1b23f292fc8fd3d468775c3deb2bac794e16e7708c980475759be4f7aed65cfc0e3ee50f71a2967c9eff1fa69bad76723abf0189688423b1193a9d6ddf9503a8f85f85c58432892bf7d7e0f98df0d7496a4fb0d544dd09577d153162f017c365548cd2a21386627cbe1c65c9456f71fff078ca0122029b2adf9695b764e3e4c95c637e469bf86e052c80baa370c48066ae2b7a2780328ed98ffdf4dda11cbc2e34e3188f3304e4d19a5182d1c9c0ed877395948d244a2c45629243b132b46f17fcd50f336a223814d5c9ff9f949d042662090ba0ae25240526a6a1d1891f0e3b66e42252ffbf2c4eb7b097a5590867b22858dc51262b05d11c2fc66d6674b65fab1d412bdde78af5ac55d0b56697de8819d5791de9def0f37e31b4fdd2c7003b84474df90f0bbf06ded23ee83b0fbcf472eb84fd7842578adfe12d4c4fb7719bd0c5f9586d2c90d0afa0737c0f5bad840c53da90c3a0c75c230315f4eb99434ddc023b8db701e40dd332ff81896c49145d3d15695c5226554769435a209a714978e9ed8070a73e40e22ef351bd2133cd06ccb07ab5d86bb68159799e5357cdb8d8e8a76562e1c5cd771bb80935ca59846025adc1353d3c377763f0199d156b5c1425825c52f919703191b8f90a600a8a827300828d9440810576cc961fa73c27f75978f1e28d7ff35ec075656e921d4f3ed78e889f11030655031094a0ad0b6a8ea22791d157580f61355b1485e3c24574d7c3fbe6d0175d4158aa7bc6757077b899d91915032d4a293774b494e64b6e8e515b003f8d00e6d95913f1543ed00a50d9791ed7264aeacea687f42f989da604940c8153cf8220b6af787f52b319c9a7ffe5d61f96752fd37f41002098139263c373c726bb7659a8b729ad57e6695752434d870bf2cec5546710de07960cab097a7256059359587a809bd2e6c1ca2b2d8b9235ac3f03638d6253068f2ba1370888beeb426c3942e2a87ea821f92fad1033c7c14897bafb53dd2d36880f155cd5de26a55eee23f806c6481cdcef2966ed01b99c7bfc996c02c01a3d5a9f0eeb527280f92370660ef0539e17812bc152325767c28d83e29d58d8d4d9558e357eff22304bdcfe9cbba2a4e78dc8f5fbbe1b830a2d1e1fe5ec2740f73f18ca9cd280c33a883e3a0853f1ca08fed3a222b153b1a35bbf6bdbb89770ff6dfabbf1f9622d2b9f49dcf767199513ed69e6f848c346c0e969ddc52e758664df17313c339e211cceb5108af361887d14c821d397dab1bc82d3e6c2552be7a065bc14dadb43d740c5c9637daea682b35f957831dd7102d2df82956308f8eefdaa2d9446d67f071b55d6749b2767a3573f9fd3797d39431675ed26790c75e22907156a0d8deb269c24136eed016496374dd1f9598d45c25f974d9d2e0626fa17063e0fbd30339d7c6f74e6b31bc57b5f6d952758e7d3fad7e3dae83ede2aa95dd4e1daaf2278e0189c00caba5a0149f172eec1eb49a4817f8245f56ecd4d5a9ef1eed27f7d321b0698c15ea0eb63f3d717e754f2942bf9b51d16bd2e671467307791f1f26089e239426cc27231bba7059f1a05257f9b8abefcf6a2ec599c75a998d12b2c6c208641a6ba813b068620012a5587a8f4cd783a32d2e25bb32bd53d11fb148f62e936b1fc10d4cc9bae3ed9f4a38d1e2bb5bcf518eb144d4c542e76e3f7331f36717d8425af04b619b7716d4f5e475dedd564de3bec4ba36fa6a9a377d7b266dc40ad0b3c31637f22c49f8f81ed7ec260d038aea817e233426974743ee4dda46207b818642aa6f6a987c1ccfec7083aeabcc5d229ae784a407e1981ee99365e606f91e61a50142b2187a8517fcd1088c05540a16134bac50e372f7f7a81041dc027ca27de7169ee759495777ae018396d7febb881945bcba2ab7d3131b7f53f4406acf2d98d7ccc1fbab37eb2a2524425b7f0a5c6c64e60cb0a90805a2e4f8424a2cbd59afb935e8ffe8402718dccea47f02bb460c5a06e62467e5f1af5f15a29b80801786dda364c7d34d411b41dc5e3138c917168eb8c630cadabd3af94878158e15c3ff5e27b67e1671be0caef7ce37c3267ee0374322ca01c5085809a7afc0ff233934b763f04f823be6c98ab4a418efd2fde22f3b8ab0a64044c95c859053711fd780c9490dac41cd40ab715bb1665d9979af98eafef97846cfa920ddeb9f2d81aa89d4a9fb1e3d55821c212b498a48606d341ca20a103b0af66eadb9e73e7f164b4cf21bc29a46e7d5074da9163838762747c9f6f156fac9cb6899d486c0bfb5b2d684777901d0bebc6590fdc133fde90cdc1cb5bf6c81787608c5175bc05d08da59180a86214fb026f1b199928a6224e1b906960abe99c75f0440d4a1c63f6c375be668bd1561d95466fe78586226d2517369c424ab4adab6503a67e4fc54dcffd34da1d470b114dc6d8d514230b17de53e1e23b18dc8a00ed0bf65c9c69bed8226f3f7bb94ca247a50c298f487549250676a7296ada3535b980280d337740fa3fb2ef8f67eae359a8dab3f30ec22d29e98c59e1e5083b00cc3dd64c2d93eaff479fb0a8666005d4cb42f0fbb41ed01306f441ba465b874c2fd428eff446afc33837c1ece54093319de4ac3b6eac959a7b970363269e18ad612e193d991b9beb8c1b7248f7d73caa64bec4870532de2409a5b288f5aa9ff985fdb8704ca426f8e0e1edede29e1a9755701512cafca631c160568ee0919376837439dac1f3cd00bf847fdef541611656097d7bc9081c7858d18909374f874f4c3cae2c8c331446b39403bbfcfd335f4db847cb35406a14954c94a527d78c6b7b165cf9b6efe1b1d9e63f71399cdffc8ebaf63e4cc81d1e9ec2dda1c237acbc3c976752475077c293e1acf3a79faf46e9d7460b20c009b1622b3f539b1495b6093c61354bef1f6d1fcb08c1c24c241bcabcb9b9c85ffbd802bcd2dc4883b08a5566bded0ba752645f7d3346b26919f4e5da1f697ef2758ee62bef6cf74a44e0c7653eb2737faa0da61028dd284273236477e92fa372b336e51aca62e07b44363d729d7e7add4d87c25444646cca02c1bc98b15115d2abfa3aaa028ff0934e8181300e89f9bc615b01e31d80334e0ee3ea5e059c5d4855427c5ff3944da1dd17a0f351ea86c56349e0a0481a27423b4da95c18c26c6ac3e2087ef0fa84148593ec9f2d03d006cd10a516f5f7ba23dafc8795af84a0d93dfc424247eb5bd512d0409c0413a1428c93dc054eaff8e0ccf32b241ded75b4768ef92f23f7a8554b15498f5595d16d8f06e63c49865fac625c8fde51854062cd724e0107219d4c4d1127c118562386381e4841378b29ebca56977ef5056254cd58db06a79d21e79fd3740de852e1beecb540d5ba5756dba3ecba7b584d75a0a9939a00f10de663433f603ac316c38d72fad595c331c2e54f0f792d6d529d4af1547b030e8abff4173295e587a697c595e331fb97e7cf83c4eb662e6b7d358e57ddf30546431f4cfb7011039c9fb7f833e25eefa7eb6c894b41d6657b561d65e96dee93293dc4c73cc04b61cd64679263a4c3f66cd2989fabda0402b1f80077388f71fba4d5884d995e70c06f71786ed9fd80c2203d2cbdec68d9be17ce1bbdbae565660f85ff7f2f192fda50a9208afb2923fdeb1ff4dcb599cd915a8bd63c8124537be2705eeb18de72ecd708742214a7598e7241bd7d48dccb1dff641f41a4d6e026e3f9c2d5a707edfed13c56d917603987fa4e3dd02e88aaba190813ea704ee17f29556cec92ac291cb0a43d940dc85ea2c1b35a0a7e0dfc1af48b76be6675b7a7710bb4736fa476361a78f9efaf51d1ae4ac0f4d8e9fc0db44f06980d537b0f21688f3114638c51a4e0defde09cfded1be36f86926f60e7fb3340116b2f19fc29518766b0c088b373e3f5346aecacc233f79607c788f858fcb2e237138c9d4fc6855c65e7202d0b138babb561d33a728f7cd724973184bd765cccb9cdb0565c74576ede09d58d5c2aa99e937f079b85ad8036c73acdd975489cbd13e46c03a813f76f347a6fa138fb942b92a34d273a48729c9439e89f73227077e1b21e57e9a179ce17d04d8979d030a1a7abd580dc2fd6dbd98fc9d32b0aeb47f1cc6811905c7ea3a388e578180050ea76a2f1578b2a068802ce48218a7aa1f1070a075cca66c35f00a81ca5ce14711711aeddafb7ee339af77ec906236b3b7dcdc7488a57784c6ba894ab5d0af50730c585c39451ca78be6ad4001e07aaf2567fa67336fddf29c9d2c9d2cf9baa12f6cd846604aec05a146db6c039b621c5804025be67afd0beb68b1efa1ddee0a34aa7cdf6be99e7ad54e02ad2875b7690c1390c3fc63fb9d39b2320074388591514c5edaf0f46045fc3f7294aabf2d781c6037dedf52eafeb45fd03fb183a42ad044f778930f914e68f0ee05473a4eaf495a3ca32be23df1dfbea2d97585fe293e9e5baaf9f1a0adea68b03382647919e4c5e62903ae7ebb4d55b09a8f9ae7cb30cd1ecf58b0e7b7c737f5821b309728c2626f8c744d26e9b65741bacbb0d628316131cb261eb3ca781dc4984e8c3ce789059b585bdd69ae8f5709e85b604f5a89256e527821252c6893bd71c561823fe1a1b35d4a4147b20e4abfd812a3bb74e2feb8c6fd2d9bf9383d450d7ceea8f3688b534f91dac20cc0f87dd5b366fd19abf70f0768f15f991b38f741b07d22de73b57fb4906e00177df6843b6232c3c558ea2d6092ce223285a2e9380ee3ebb992780f406ac38988cc674b8b2fe1ed5cdb530f029af292546f20d86fc5315ed25e417dc14d8f67f704b762f0d60872f95a9f77604a54e9fb742921cb254cfbcaf4cb696110c147178bcaf60909451f12f32cb66fd16e868227c0f28e21d414b39c7f03df09d9f05ebb1edeffa59af9e9e1eca7320028c440b2f9e5cba1fdd7eda64c832749b03650abe5129d2fdb8f46f203b2e3661edac76c1853972b1c1f03c9a5ebff6b7df90f66a11214f3456680e75bd0c8d5fcf1a0322b3f41f0ca5dda8563af2e939389c1e932bf0f6a6e35ca7483692e4b00be0bbc38e50e37ea2ab4e6886b87bce08616439473bd225fdda", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x1, {0x400f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 7 (id=2772):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)
r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
read(r1, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000000)={0x1, 0xa, "c2ac93c05f0445be7fc4"})

kernel console output (not intermixed with test programs):

10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  180.669334][   T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.876724][   T34] usb 10-1: usb_control_msg returned -32
[  180.879120][   T34] usbtmc 10-1:16.0: can't read capabilities
[  180.886476][   T34] usb 10-1: USB disconnect, device number 24
[  180.951025][T20265] netlink: 'syz.3.1810': attribute type 1 has an invalid length.
[  180.967130][T20265] bond3: entered promiscuous mode
[  180.968878][T20265] 8021q: adding VLAN 0 to HW filter on device bond3
[  180.992419][T20304] program syz.7.1811 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  180.995268][T20303] program syz.7.1811 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  181.131878][T20306] block nbd2: server does not support multiple connections per device.
[  181.136885][T20306] block nbd2: shutting down sockets
[  181.188261][   T34] Process accounting resumed
[  181.215914][   T40] audit: type=1400 audit(1760790536.216:92553): avc:  denied  { accept } for  pid=20319 comm="syz.7.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  181.637885][T20328] Invalid logical block size (-3)
[  181.678635][   T34] usb 11-1: USB disconnect, device number 21
[  181.946983][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  181.947001][   T40] audit: type=1400 audit(1760790536.946:92558): avc:  denied  { read write } for  pid=20364 comm="syz.6.1827" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  181.958025][   T40] audit: type=1400 audit(1760790536.946:92559): avc:  denied  { open } for  pid=20364 comm="syz.6.1827" path="/297/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  182.229829][ T6021] usb 11-1: new high-speed USB device number 22 using dummy_hcd
[  182.277125][T20337] overlayfs: statfs failed on './file0'
[  182.399708][ T6021] usb 11-1: Using ep0 maxpacket: 8
[  182.403995][ T6021] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  182.408622][ T6021] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  182.413276][ T6021] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  182.417315][ T6021] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  182.423125][ T6021] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  182.426895][ T6021] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.561152][  T842] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  182.636007][ T6021] usb 11-1: usb_control_msg returned -32
[  182.637848][ T6021] usbtmc 11-1:16.0: can't read capabilities
[  182.642402][ T6021] usb 11-1: USB disconnect, device number 22
[  182.729962][  T842] usb 10-1: Using ep0 maxpacket: 8
[  182.735024][  T842] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  182.739717][  T842] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  182.743785][  T842] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  182.747824][  T842] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  182.753594][  T842] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  182.757307][  T842] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.838897][   T40] audit: type=1400 audit(1760790537.836:92560): avc:  denied  { read append } for  pid=20402 comm="syz.3.1831" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  182.848402][   T40] audit: type=1400 audit(1760790537.836:92561): avc:  denied  { open } for  pid=20402 comm="syz.3.1831" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  182.858020][   T40] audit: type=1400 audit(1760790537.836:92562): avc:  denied  { ioctl } for  pid=20402 comm="syz.3.1831" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  182.885791][   T40] audit: type=1400 audit(1760790537.886:92563): avc:  denied  { getattr } for  pid=20404 comm="syz.3.1832" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  182.885902][T20405] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  182.903815][   T40] audit: type=1400 audit(1760790537.906:92564): avc:  denied  { mounton } for  pid=20404 comm="syz.3.1832" path="/416/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  182.904125][T20405] overlayfs: failed to resolve 'smackfshat=%': -2
[  182.964570][  T842] usb 10-1: usb_control_msg returned -32
[  182.966848][  T842] usbtmc 10-1:16.0: can't read capabilities
[  182.970119][T20379] FAULT_INJECTION: forcing a failure.
[  182.970119][T20379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  182.975909][T20379] CPU: 1 UID: 0 PID: 20379 Comm: syz.5.1830 Not tainted syzkaller #0 PREEMPT(full) 
[  182.975935][T20379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  182.975946][T20379] Call Trace:
[  182.975953][T20379]  <TASK>
[  182.975960][T20379]  dump_stack_lvl+0x16c/0x1f0
[  182.976015][T20379]  should_fail_ex+0x512/0x640
[  182.976049][T20379]  _copy_to_user+0x32/0xd0
[  182.976075][T20379]  simple_read_from_buffer+0xcb/0x170
[  182.976100][T20379]  proc_fail_nth_read+0x197/0x240
[  182.976136][T20379]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  182.976163][T20379]  ? rw_verify_area+0xcf/0x6c0
[  182.976182][T20379]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  182.976207][T20379]  vfs_read+0x1e4/0xcf0
[  182.976234][T20379]  ? __pfx___mutex_lock+0x10/0x10
[  182.976258][T20379]  ? __pfx_vfs_read+0x10/0x10
[  182.976288][T20379]  ? __fget_files+0x20e/0x3c0
[  182.976320][T20379]  ksys_read+0x12a/0x250
[  182.976342][T20379]  ? __pfx_ksys_read+0x10/0x10
[  182.976370][T20379]  do_syscall_64+0xcd/0xfa0
[  182.976395][T20379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.976413][T20379] RIP: 0033:0x7f47bb58d9dc
[  182.976429][T20379] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  182.976446][T20379] RSP: 002b:00007f47bc497030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  182.976464][T20379] RAX: ffffffffffffffda RBX: 00007f47bb7e5fa0 RCX: 00007f47bb58d9dc
[  182.976477][T20379] RDX: 000000000000000f RSI: 00007f47bc4970a0 RDI: 0000000000000004
[  182.976487][T20379] RBP: 00007f47bc497090 R08: 0000000000000000 R09: 0000000000000000
[  182.976498][T20379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.976509][T20379] R13: 00007f47bb7e6038 R14: 00007f47bb7e5fa0 R15: 00007ffd274c4668
[  182.976536][T20379]  </TASK>
[  183.063608][  T842] usb 10-1: USB disconnect, device number 25
[  183.178817][T20437] ntfs3(sr0): Primary boot signature is not NTFS.
[  183.182364][T20437] ntfs3(sr0): try to read out of volume at offset 0xf800
[  183.336109][   T40] audit: type=1400 audit(1760790538.336:92565): avc:  denied  { getopt } for  pid=20458 comm="syz.5.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  183.396588][T20466] __nla_validate_parse: 137 callbacks suppressed
[  183.396600][T20466] netlink: 700 bytes leftover after parsing attributes in process `syz.3.1843'.
[  183.669863][   T29] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  183.816684][T20474] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1845'.
[  183.820248][T20474] netlink: 'syz.5.1845': attribute type 11 has an invalid length.
[  183.822774][T20474] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1845'.
[  183.831952][   T29] usb 8-1: Using ep0 maxpacket: 8
[  183.836082][   T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  183.843329][   T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  183.848154][   T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  183.852391][   T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  183.857319][   T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  183.860959][   T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.893918][T20480] netlink: 'syz.5.1846': attribute type 5 has an invalid length.
[  183.942082][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1847'.
[  183.945697][T20483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.994781][T20483] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.069723][   T29] usb 8-1: usb_control_msg returned -32
[  184.071555][   T29] usbtmc 8-1:16.0: can't read capabilities
[  184.075672][   T29] usb 8-1: USB disconnect, device number 19
[  184.114818][T20460] overlayfs: statfs failed on './file0'
[  184.207319][T20509] 9pnet_fd: p9_fd_create_tcp (20509): problem connecting socket to 127.0.0.1
[  184.324814][T20524] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1851'.
[  184.343211][   T40] audit: type=1400 audit(1760790539.346:92566): avc:  denied  { accept } for  pid=20525 comm="syz.6.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  184.612222][T20551] mkiss: ax0: crc mode is auto.
[  184.648687][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1859'.
[  184.829664][ T5992] usb 11-1: new high-speed USB device number 23 using dummy_hcd
[  184.924500][   T40] audit: type=1400 audit(1760790539.926:92567): avc:  denied  { write } for  pid=20575 comm="syz.3.1862" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  185.004579][ T5992] usb 11-1: unable to get BOS descriptor or descriptor too short
[  185.006992][ T5992] usb 11-1: no configurations
[  185.008529][ T5992] usb 11-1: can't read configurations, error -22
[  185.029048][T20593] netlink: 292 bytes leftover after parsing attributes in process `syz.6.1864'.
[  185.054882][T20595] lo speed is unknown, defaulting to 1000
[  185.102444][T20602] lo speed is unknown, defaulting to 1000
[  185.104071][T20595] netlink: 'syz.3.1865': attribute type 13 has an invalid length.
[  185.112706][T20595] net_ratelimit: 13 callbacks suppressed
[  185.112716][T20595] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  185.121215][T20595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1865'.
[  185.127376][T20633] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1867'.
[  185.133379][T20633] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1867'.
[  185.155115][T20633] bond3: Unable to set up delay as MII monitoring is disabled
[  185.160768][T20633] bond3 (unregistering): Released all slaves
[  185.521057][   T54] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  185.524348][T20732] bridge0: entered promiscuous mode
[  185.527737][T20732] macsec1: entered allmulticast mode
[  185.529763][T20732] bridge0: entered allmulticast mode
[  185.533948][T20732] bridge0: port 3(macsec1) entered blocking state
[  185.536815][T20732] bridge0: port 3(macsec1) entered disabled state
[  185.543983][T20732] bridge0: left allmulticast mode
[  185.546117][T20732] bridge0: left promiscuous mode
[  185.625800][T20732] cgroup2: Unknown parameter 'm%mory_recursiveprot'
[  185.669587][   T54] usb 8-1: Using ep0 maxpacket: 8
[  185.673724][   T54] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  185.677953][   T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  185.682164][   T54] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 13600, setting to 1024
[  185.686695][   T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  185.690722][   T54] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  185.695704][   T54] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  185.699337][   T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.908472][   T54] usb 8-1: usb_control_msg returned -32
[  185.910529][   T54] usbtmc 8-1:16.0: can't read capabilities
[  185.917055][   T54] usb 8-1: USB disconnect, device number 20
[  186.061667][T20835] netlink: 'syz.6.1879': attribute type 1 has an invalid length.
[  186.074660][T20835] bond3: entered promiscuous mode
[  186.076483][T20835] 8021q: adding VLAN 0 to HW filter on device bond3
[  186.086886][T20836] bond3: (slave bridge4): making interface the new active one
[  186.089320][T20836] bridge4: entered promiscuous mode
[  186.092368][T20836] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  186.102918][T20836] bond3: (slave bridge5): Enslaving as a backup interface with an up link
[  186.112087][T20836] bond3: (slave bridge6): Enslaving as a backup interface with an up link
[  186.124996][T20836] bond3: (slave bridge7): Enslaving as a backup interface with an up link
[  186.140246][T20836] bond3: (slave bridge8): Enslaving as a backup interface with an up link
[  186.151006][T20836] bond3: (slave bridge9): Enslaving as a backup interface with an up link
[  186.166814][T20836] bond3: (slave bridge10): Enslaving as a backup interface with an up link
[  186.180769][T20836] bond3: (slave bridge11): Enslaving as a backup interface with an up link
[  186.194049][T20836] bond3: (slave bridge12): Enslaving as a backup interface with an up link
[  186.207645][T20836] bond3: (slave bridge13): Enslaving as a backup interface with an up link
[  186.219728][T20836] bond3: (slave bridge14): Enslaving as a backup interface with an up link
[  186.228630][T20836] bond3: (slave bridge15): Enslaving as a backup interface with an up link
[  186.238174][T20836] bond3: (slave bridge16): Enslaving as a backup interface with an up link
[  186.247567][T20836] bond3: (slave bridge17): Enslaving as a backup interface with an up link
[  186.258310][T20836] bond3: (slave bridge18): Enslaving as a backup interface with an up link
[  186.269278][T20836] bond3: (slave bridge19): Enslaving as a backup interface with an up link
[  186.281796][T20836] bond3: (slave bridge20): Enslaving as a backup interface with an up link
[  186.295842][T20836] bond3: (slave bridge21): Enslaving as a backup interface with an up link
[  186.306887][T20836] bond3: (slave bridge22): Enslaving as a backup interface with an up link
[  186.320842][T20836] bond3: (slave bridge23): Enslaving as a backup interface with an up link
[  186.334363][T20836] bond3: (slave bridge24): Enslaving as a backup interface with an up link
[  186.341622][T20923] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  186.350933][T20836] bond3: (slave bridge25): Enslaving as a backup interface with an up link
[  186.365288][T20836] bond3: (slave bridge26): Enslaving as a backup interface with an up link
[  186.378823][T20836] bond3: (slave bridge27): Enslaving as a backup interface with an up link
[  186.393833][T20836] bond3: (slave bridge28): Enslaving as a backup interface with an up link
[  186.407552][T20836] bond3: (slave bridge29): Enslaving as a backup interface with an up link
[  186.422778][T20836] bond3: (slave bridge30): Enslaving as a backup interface with an up link
[  186.437502][T20836] bond3: (slave bridge31): Enslaving as a backup interface with an up link
[  186.452246][T20836] bond3: (slave bridge32): Enslaving as a backup interface with an up link
[  186.461037][T20933] lo speed is unknown, defaulting to 1000
[  186.472097][T20836] bond3: (slave bridge33): Enslaving as a backup interface with an up link
[  186.485348][T20836] bond3: (slave bridge34): Enslaving as a backup interface with an up link
[  186.510770][T20836] bond3: (slave bridge35): Enslaving as a backup interface with an up link
[  186.520403][T20836] bond3: (slave bridge36): Enslaving as a backup interface with an up link
[  186.762400][T20982] No such timeout policy "syz1"
[  187.127648][T21000] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  187.412265][T21021] lo: left promiscuous mode
[  187.429107][T21021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.449820][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.454180][T21023] netlink: 'syz.5.1899': attribute type 15 has an invalid length.
[  187.458276][T21023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=21023 comm=syz.5.1899
[  187.466345][T21025] No source specified
[  187.466555][T21023] devpts: Bad value for 'uid'
[  187.471455][T21023] devpts: Bad value for 'uid'
[  187.523458][T21032] syz_tun: entered allmulticast mode
[  187.538747][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  187.538757][   T40] audit: type=1400 audit(5282371626.538:92571): avc:  denied  { ioctl } for  pid=21029 comm="syz.3.1902" path="socket:[42994]" dev="sockfs" ino=42994 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  187.552304][T21029] syz_tun: left allmulticast mode
[  187.756506][T21034] overlayfs: statfs failed on './file0'
[  187.847489][ T6021] libceph: connect (1)[b::]:6789 error -13
[  187.849831][ T6021] libceph: mon0 (1)[b::]:6789 connect error
[  187.855666][T21065] program syz.3.1910 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  187.884761][T21067] syz_tun: entered allmulticast mode
[  187.890435][  T539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.891002][T21067] pimreg: entered allmulticast mode
[  187.893351][  T539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.898028][T21067] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  187.901599][T21067] mroute: pending queue full, dropping entries
[  187.919677][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.933827][T21075] netlink: 'syz.3.1911': attribute type 2 has an invalid length.
[  187.937253][T21077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.940891][   T40] audit: type=1400 audit(5282371626.948:92572): avc:  denied  { listen } for  pid=21074 comm="syz.3.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  187.985019][T21052] syz_tun: left allmulticast mode
[  187.989031][T21052] pimreg: left allmulticast mode
[  188.117191][ T6021] libceph: connect (1)[b::]:6789 error -13
[  188.119158][ T6021] libceph: mon0 (1)[b::]:6789 connect error
[  188.303939][T21119] veth1_macvtap: left promiscuous mode
[  188.305683][T21119] macsec0: entered promiscuous mode
[  188.307321][T21119] macsec0: entered allmulticast mode
[  188.310661][T21119] veth1_macvtap: entered promiscuous mode
[  188.312497][T21119] veth1_macvtap: entered allmulticast mode
[  188.314618][T21119] macsec0: left promiscuous mode
[  188.316213][T21119] macsec0: left allmulticast mode
[  188.317739][T21119] veth1_macvtap: left allmulticast mode
[  188.427824][T21122] __nla_validate_parse: 7 callbacks suppressed
[  188.427834][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1920'.
[  188.630898][  T130] libceph: connect (1)[b::]:6789 error -13
[  188.633546][  T130] libceph: mon0 (1)[b::]:6789 connect error
[  188.663559][T21060] ceph: No mds server is up or the cluster is laggy
[  188.950925][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.954891][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.024857][T21124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.124253][T21147] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1928'.
[  189.214709][T21151] syz_tun: entered allmulticast mode
[  189.227488][T21150] syz_tun: left allmulticast mode
[  189.272903][T21152] overlayfs: failed to resolve './file1': -2
[  189.354904][T21173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1935'.
[  189.467338][   T40] audit: type=1400 audit(5282371628.468:92573): avc:  denied  { watch } for  pid=21184 comm="syz.6.1939" path="/327/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  189.525505][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1941'.
[  189.533085][T21194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1941'.
[  189.539552][T21196] fuse: Bad value for 'fd'
[  189.545173][T21196] overlayfs: failed to resolve './file1': -2
[  189.713333][T21204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1944'.
[  190.120932][   T12] net_ratelimit: 15 callbacks suppressed
[  190.120943][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.120971][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.530023][T21232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1953'.
[  190.654561][T21245] sctp: [Deprecated]: syz.5.1957 (pid 21245) Use of int in max_burst socket option.
[  190.654561][T21245] Use struct sctp_assoc_value instead
[  190.711427][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.715213][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.718855][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.814200][T21256] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1960'.
[  190.853199][   T40] audit: type=1400 audit(5282371629.858:92574): avc:  denied  { map } for  pid=21262 comm="syz.5.1962" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  190.948174][   T40] audit: type=1400 audit(5282371629.948:92575): avc:  denied  { write } for  pid=21273 comm="syz.5.1966" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  190.985356][T21282] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001
[  191.037864][T21284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'.
[  191.047277][T21295] overlayfs: failed to clone upperpath
[  191.050696][T21295] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1971'.
[  191.087678][   T40] audit: type=1400 audit(5282371630.088:92576): avc:  denied  { listen } for  pid=21296 comm="syz.3.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  191.250671][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.253502][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.519837][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.523667][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.526695][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.078895][   T40] audit: type=1326 audit(5282371631.078:92577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21348 comm="syz.5.1986" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47bb58efc9 code=0x0
[  192.228923][T21367] unsupported nlmsg_type 40
[  192.234160][T21367] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.237651][T21367] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.241000][T21367] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.243333][T21367] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.286939][T21373] netlink: 'syz.7.1994': attribute type 12 has an invalid length.
[  192.289459][T21373] netlink: 'syz.7.1994': attribute type 29 has an invalid length.
[  192.350885][  T539] tipc: Subscription rejected, illegal request
[  192.379625][   T54] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  192.434333][   T40] audit: type=1400 audit(5282371631.438:92578): avc:  denied  { setopt } for  pid=21376 comm="syz.7.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  192.529665][   T54] usb 10-1: Using ep0 maxpacket: 8
[  192.533924][   T54] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  192.538513][   T54] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  192.543212][   T54] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  192.547369][   T54] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  192.554006][   T54] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  192.557784][   T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.641887][   T40] audit: type=1400 audit(5282371631.648:92579): avc:  denied  { override_creds } for  pid=21390 comm="syz.3.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  192.766248][   T54] usb 10-1: usb_control_msg returned -32
[  192.768791][   T54] usbtmc 10-1:16.0: can't read capabilities
[  192.826691][T21417] lo speed is unknown, defaulting to 1000
[  192.919603][   T40] audit: type=1326 audit(5282371631.918:92580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.7.2005" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f942b38efc9 code=0x0
[  192.923054][T21444] trusted_key: encrypted_key: master key parameter is missing
[  193.022553][T21460] netlink: 'syz.3.2010': attribute type 1 has an invalid length.
[  193.043233][T21460] 8021q: adding VLAN 0 to HW filter on device bond4
[  193.094015][T21460] veth7: entered promiscuous mode
[  193.097710][T21460] bond4: (slave veth7): Enslaving as an active interface with a down link
[  193.111027][T21460] bond4: entered allmulticast mode
[  193.214218][   T40] audit: type=1400 audit(5282371632.218:92581): avc:  denied  { setopt } for  pid=21574 comm="syz.6.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  193.222544][   T40] audit: type=1400 audit(5282371632.218:92582): avc:  denied  { accept } for  pid=21574 comm="syz.6.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  193.360161][T21587] netlink: 'syz.3.2019': attribute type 10 has an invalid length.
[  193.373612][T21587] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  193.442025][   T40] audit: type=1400 audit(5282371632.448:92583): avc:  denied  { read } for  pid=21593 comm="syz.3.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  193.449168][   T40] audit: type=1400 audit(5282371632.448:92584): avc:  denied  { connect } for  pid=21593 comm="syz.3.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  193.612750][T21600] 8021q: VLANs not supported on ip_vti0
[  193.841315][T21616] overlayfs: failed to clone upperpath
[  193.885798][T21618] nfs: Unknown parameter 'noac»'
[  194.075421][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  194.237792][T21650] overlayfs: failed to clone upperpath
[  194.278960][T21659] libceph: resolve '4' (ret=-3): failed
[  194.324517][   T40] audit: type=1400 audit(5282371633.328:92585): avc:  denied  { listen } for  pid=21661 comm="syz.3.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  194.384678][T21707] netlink: 'syz.7.2043': attribute type 28 has an invalid length.
[  194.387340][T21707] netlink: 'syz.7.2043': attribute type 3 has an invalid length.
[  194.390500][T21707] __nla_validate_parse: 6 callbacks suppressed
[  194.390510][T21707] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2043'.
[  194.559744][  T842] usb 8-1: new full-speed USB device number 21 using dummy_hcd
[  194.570372][T21735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2045'.
[  194.577399][T21735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2045'.
[  194.653438][T21744] program syz.7.2047 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  194.715940][  T842] usb 8-1: not running at top speed; connect to a high speed hub
[  194.723244][  T842] usb 8-1: config 13 has an invalid interface number: 7 but max is 2
[  194.726717][  T842] usb 8-1: config 13 has an invalid interface number: 46 but max is 2
[  194.730958][  T842] usb 8-1: config 13 has an invalid interface number: 157 but max is 2
[  194.733812][  T842] usb 8-1: config 13 has no interface number 0
[  194.736287][  T842] usb 8-1: config 13 has no interface number 1
[  194.738642][  T842] usb 8-1: config 13 has no interface number 2
[  194.741570][  T842] usb 8-1: config 13 interface 7 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  194.745753][  T842] usb 8-1: config 13 interface 7 altsetting 3 has a duplicate endpoint with address 0x3, skipping
[  194.750799][  T842] usb 8-1: config 13 interface 7 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  194.755227][  T842] usb 8-1: config 13 interface 46 altsetting 85 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  194.761632][  T842] usb 8-1: config 13 interface 46 altsetting 85 has a duplicate endpoint with address 0xF, skipping
[  194.766110][  T842] usb 8-1: config 13 interface 46 altsetting 85 has a duplicate endpoint with address 0xB, skipping
[  194.770797][  T842] usb 8-1: config 13 interface 157 altsetting 5 has a duplicate endpoint with address 0x7, skipping
[  194.775643][  T842] usb 8-1: config 13 interface 157 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[  194.780202][  T842] usb 8-1: config 13 interface 157 altsetting 5 has a duplicate endpoint with address 0xA, skipping
[  194.784278][  T842] usb 8-1: config 13 interface 157 altsetting 5 has a duplicate endpoint with address 0x87, skipping
[  194.788049][  T842] usb 8-1: config 13 interface 157 altsetting 5 has an endpoint descriptor with address 0xEA, changing to 0x8A
[  194.792419][  T842] usb 8-1: config 13 interface 157 altsetting 5 has a duplicate endpoint with address 0x8A, skipping
[  194.796655][  T842] usb 8-1: config 13 interface 157 altsetting 5 has a duplicate endpoint with address 0x7, skipping
[  194.801522][  T842] usb 8-1: config 13 interface 157 altsetting 5 has a duplicate endpoint with address 0x4, skipping
[  194.806181][  T842] usb 8-1: config 13 interface 157 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  194.810923][  T842] usb 8-1: config 13 interface 157 altsetting 5 has a duplicate endpoint with address 0x9, skipping
[  194.815481][  T842] usb 8-1: config 13 interface 157 altsetting 5 has a duplicate endpoint with address 0x9, skipping
[  194.820828][  T842] usb 8-1: config 13 interface 157 altsetting 5 has 11 endpoint descriptors, different from the interface descriptor's value: 10
[  194.826203][  T842] usb 8-1: config 13 interface 7 has no altsetting 0
[  194.829110][  T842] usb 8-1: config 13 interface 46 has no altsetting 0
[  194.832028][  T842] usb 8-1: config 13 interface 157 has no altsetting 0
[  194.836654][  T842] usb 8-1: language id specifier not provided by device, defaulting to English
[  194.841519][  T842] usb 8-1: Dual-Role OTG device on HNP port
[  194.844219][  T842] usb 8-1: New USB device found, idVendor=03f0, idProduct=5039, bcdDevice=8d.35
[  194.847663][  T842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.848355][   T40] audit: type=1400 audit(5282371633.848:92586): avc:  denied  { accept } for  pid=21758 comm="syz.7.2052" path="socket:[47397]" dev="sockfs" ino=47397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  194.851165][  T842] usb 8-1: Product: syz
[  194.863010][  T842] usb 8-1: Manufacturer: syz
[  194.865030][  T842] usb 8-1: SerialNumber: syz
[  194.876095][T21764] 9pnet_virtio: no channels available for device syz
[  194.884341][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2053'.
[  194.887816][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2053'.
[  194.978420][T21767] hsr_slave_1 (unregistering): left promiscuous mode
[  195.077253][T21664] netlink: 'syz.3.2039': attribute type 10 has an invalid length.
[  195.083974][T21664] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  195.087317][T21833] IPv6: NLM_F_CREATE should be specified when creating new route
[  195.090093][T21832] tmpfs: Unknown parameter 'quota-grpquota_block_'
[  195.123469][T21842] overlay: Unknown parameter 'subj_user'
[  195.132283][ T6021] usb 10-1: USB disconnect, device number 26
[  195.267720][  T842] pl2303 8-1:13.7: required endpoints missing
[  195.275217][  T842] pl2303 8-1:13.46: required endpoints missing
[  195.281850][  T842] pl2303 8-1:13.157: required endpoints missing
[  195.287656][  T842] usb 8-1: USB disconnect, device number 21
[  195.316540][T21883] 9pnet_fd: p9_fd_create_tcp (21883): problem connecting socket to 127.0.0.1
[  195.398548][T21889] netlink: 'syz.5.2065': attribute type 1 has an invalid length.
[  195.401835][T21889] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2065'.
[  195.421461][T21884] overlayfs: statfs failed on './file0'
[  195.512111][T21911] x_tables: ip6_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 40
[  195.719882][   T13] net_ratelimit: 23 callbacks suppressed
[  195.719901][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.725732][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.849590][ T6001] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  195.981804][   T40] audit: type=1400 audit(5282371634.988:92587): avc:  denied  { remount } for  pid=21927 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  196.010175][ T6001] usb 12-1: Using ep0 maxpacket: 8
[  196.014801][ T6001] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  196.019110][ T6001] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  196.022635][ T6001] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  196.025642][ T6001] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  196.030503][ T6001] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  196.034303][ T6001] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.095486][T21940] pimreg3: entered allmulticast mode
[  196.113466][T21944] vlan3: entered allmulticast mode
[  196.115293][T21944] bridge_slave_0: entered allmulticast mode
[  196.168867][   T40] audit: type=1400 audit(5282371635.168:92588): avc:  denied  { nlmsg_read } for  pid=21951 comm="syz.6.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  196.244030][ T6001] usb 12-1: usb_control_msg returned -32
[  196.246410][ T6001] usbtmc 12-1:16.0: can't read capabilities
[  196.253307][ T6001] usb 12-1: USB disconnect, device number 3
[  196.301435][T21978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2083'.
[  196.303875][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2083'.
[  196.304368][T21978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2083'.
[  196.308607][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2083'.
[  196.434266][T21967] syz.3.2081 (21967): drop_caches: 2
[  196.524100][T21993] comedi comedi3: comedi_config --init_data is deprecated
[  196.689217][T22008] overlayfs: failed to clone upperpath
[  196.720185][T22012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.725215][T22012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.754525][T22024] bpf: Bad value for 'uid'
[  196.802232][T22041] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  196.806130][T22041] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  196.821245][T22041] openvswitch: netlink: Flow key attr not present in new flow.
[  196.826921][T22041] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  196.831949][T22041] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  196.851936][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.855108][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.914518][T22055] Cannot find map_set index 768 as target
[  197.029821][ T6021] usb 8-1: new full-speed USB device number 22 using dummy_hcd
[  197.083642][T22082] 0·: renamed from hsr0 (while UP)
[  197.087543][T22082] 0·: entered allmulticast mode
[  197.089198][T22082] hsr_slave_0: entered allmulticast mode
[  197.091803][T22082] hsr_slave_1: entered allmulticast mode
[  197.093926][T22082] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  197.200570][  T842] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  197.349665][  T842] usb 12-1: Using ep0 maxpacket: 8
[  197.353160][  T842] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  197.357228][  T842] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  197.361447][  T842] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  197.365263][  T842] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.370719][  T842] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  197.374048][  T842] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.408098][ T6021] usb 8-1: unable to read config index 0 descriptor/start: -71
[  197.411153][ T6021] usb 8-1: can't read configurations, error -71
[  197.487597][T22117] overlayfs: failed to clone lowerpath
[  197.504765][T22117] bond5: Removing last arp target with arp_interval on
[  197.584177][  T842] usb 12-1: usb_control_msg returned -32
[  197.585978][  T842] usbtmc 12-1:16.0: can't read capabilities
[  197.618142][  T130] usb 12-1: USB disconnect, device number 4
[  197.755121][T22169] netlink: 'syz.6.2123': attribute type 2 has an invalid length.
[  197.757687][T22169] nbd: must specify a device to reconfigure
[  197.970614][  T539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.974251][  T539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.030202][T22101] overlayfs: statfs failed on './file0'
[  198.054330][T22171] vcan1: entered allmulticast mode
[  198.279763][   T40] kauditd_printk_skb: 2 callbacks suppressed
[  198.279780][   T40] audit: type=1400 audit(5282371637.278:92591): avc:  denied  { bind } for  pid=22222 comm="syz.5.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  198.282994][T22223] netlink: 'syz.5.2131': attribute type 10 has an invalid length.
[  198.582484][T22223] team0: entered promiscuous mode
[  198.584140][T22223] team_slave_0: entered promiscuous mode
[  198.586265][T22223] team_slave_1: entered promiscuous mode
[  198.589664][T22223] bond0: (slave team0): Releasing backup interface
[  198.601076][   T67] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.604880][   T67] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.608511][   T67] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  198.612817][   T67] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.616500][   T67] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.620520][   T67] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  198.624976][   T67] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.629243][   T67] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.633800][   T67] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  198.637595][   T67] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.641671][   T67] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.645359][   T67] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  198.684814][T22242] siw: device registration error -23
[  198.687386][T22244] x_tables: ip6_tables: mh match: only valid for protocol 135
[  198.903981][T22257] bond5: entered allmulticast mode
[  198.941842][T22292] dvmrp0: left allmulticast mode
[  198.959333][T22293] pimreg: entered allmulticast mode
[  199.009893][T22299] SELinux:  Context system_u:object_r:var_run_t:s0 is not valid (left unmapped).
[  199.013523][   T40] audit: type=1400 audit(5282371638.018:92592): avc:  denied  { relabelto } for  pid=22298 comm="syz.7.2142" name="ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:var_run_t:s0"
[  199.023546][   T40] audit: type=1400 audit(5282371638.018:92593): avc:  denied  { associate } for  pid=22298 comm="syz.7.2142" name="ptmx" dev="devtmpfs" ino=623 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_run_t:s0"
[  199.186919][   T40] audit: type=1400 audit(5282371638.188:92594): avc:  denied  { ioctl } for  pid=22308 comm="syz.5.2146" path="socket:[47737]" dev="sockfs" ino=47737 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  199.433004][T22326] veth1_to_batadv: entered promiscuous mode
[  199.774087][T22293] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  199.776182][T22293] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  199.778521][T22293] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  199.824363][T22343] ksmbd: Unknown IPC event: 1, ignore.
[  200.024696][   T29] usb 10-1: new low-speed USB device number 27 using dummy_hcd
[  200.054042][T22359] 9pnet_virtio: no channels available for device /dev/md0
[  200.172103][   T29] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  200.175470][   T29] usb 10-1: config 0 has no interface number 0
[  200.178070][   T29] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  200.182818][   T29] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  200.187189][   T29] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  200.190925][   T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.195962][   T29] usb 10-1: config 0 descriptor??
[  200.198921][T22310] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  200.207902][   T29] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  200.299877][   T54] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  200.405624][   T24] usb 10-1: USB disconnect, device number 27
[  200.452242][   T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.456360][   T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.460317][   T54] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  200.461856][T22400] __nla_validate_parse: 11 callbacks suppressed
[  200.461868][T22400] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.2167'.
[  200.464852][   T54] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  200.464870][   T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.466085][   T54] usb 8-1: config 0 descriptor??
[  200.469388][T22400] netlink: 'syz.6.2167': attribute type 1 has an invalid length.
[  200.508796][T22400] bond6 (unregistering): Released all slaves
[  200.538456][T22468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22468 comm=syz.6.2167
[  200.539605][   T29] usb 12-1: new low-speed USB device number 5 using dummy_hcd
[  200.543530][T22468] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2167'.
[  200.609585][T22470] netlink: 'syz.6.2168': attribute type 62 has an invalid length.
[  200.694579][   T29] usb 12-1: config 0 has an invalid interface number: 1 but max is 0
[  200.697803][   T29] usb 12-1: config 0 has no interface number 0
[  200.701676][   T29] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  200.706032][   T29] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  200.710967][   T29] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  200.714233][   T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.718884][   T29] usb 12-1: config 0 descriptor??
[  200.721313][T22382] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  200.728501][   T29] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  200.742407][T22484] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2171'.
[  200.877919][   T54] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd
[  200.888791][   T54] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  200.932022][T22382] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  200.936555][   T29] usb 12-1: USB disconnect, device number 5
[  200.953270][T22503] ieee802154 phy1 wpan1: encryption failed: -22
[  201.076933][   T54] usb 8-1: USB disconnect, device number 24
[  201.099700][T22531] loop2: detected capacity change from 0 to 7
[  201.103325][T22531] Dev loop2: unable to read RDB block 7
[  201.105674][T22531]  loop2: AHDI p1 p2 p3
[  201.107459][T22531] loop2: partition table partially beyond EOD, truncated
[  201.110555][   T63] Bluetooth: hci4: command 0x0c1a tx timeout
[  201.114353][T22531] loop2: p1 start 1601398130 is beyond EOD, truncated
[  201.117183][T22531] loop2: p2 start 1702059890 is beyond EOD, truncated
[  201.141291][T22537] 9p filesystem being mounted at /417/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  201.474972][   T40] audit: type=1400 audit(5282371640.478:92595): avc:  denied  { connect } for  pid=22565 comm="syz.7.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  201.481273][   T40] audit: type=1400 audit(5282371640.478:92596): avc:  denied  { bind } for  pid=22565 comm="syz.7.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  201.518599][T22566] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.521282][T22566] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.630152][T22579] bad cache= option: none

[  201.630152][T22579] 
[  201.630263][T22581] bad cache= option: none

[  201.630263][T22581] 
[  201.633400][T22579] CIFS: VFS: bad cache= option: none

[  201.637031][T22581] CIFS: VFS: bad cache= option: none

[  201.657216][T22566] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.672106][T22566] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.726739][T22581] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2189' sets config #0
[  201.885391][   T46] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.889882][   T46] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.893514][   T46] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.896328][   T46] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.899421][   T46] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.904094][   T46] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.909489][   T12] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.913567][   T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.991342][T22601] overlayfs: statfs failed on './file0'
[  202.102203][T22604] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2197'.
[  202.170748][T22617] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2201'.
[  202.184989][T22614] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  202.265059][T22617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.272188][T22617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.277371][T22617] bond0 (unregistering): Released all slaves
[  202.589780][ T6101] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  202.739652][ T6101] usb 12-1: Using ep0 maxpacket: 8
[  202.749656][ T6101] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  202.754301][ T6101] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  202.758464][ T6101] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  202.763007][ T6101] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  202.768060][ T6101] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  202.771932][ T6101] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.978754][ T6101] usb 12-1: GET_CAPABILITIES returned 0
[  202.980632][ T6101] usbtmc 12-1:16.0: can't read capabilities
[  202.988257][T22679] overlayfs: statfs failed on './file0'
[  203.116964][T22687] netlink: 'syz.3.2207': attribute type 1 has an invalid length.
[  203.132666][T22687] 8021q: adding VLAN 0 to HW filter on device bond6
[  203.167769][T22687] veth9: entered promiscuous mode
[  203.173216][T22687] bond6: (slave veth9): Enslaving as an active interface with a down link
[  203.186506][T22687] vlan3: entered allmulticast mode
[  203.188190][T22687] bond6: entered allmulticast mode
[  203.190445][   T63] Bluetooth: hci4: command 0x0c1a tx timeout
[  203.190952][T22687] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  203.353769][   T40] audit: type=1400 audit(5282371642.358:92597): avc:  denied  { set_context_mgr } for  pid=22797 comm="syz.7.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  203.404637][T22809] rdma_op ffff888054a9e9f0 conn xmit_rdma 0000000000000000
[  203.461347][T22811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2211'.
[  203.510874][ T6001] usb 12-1: USB disconnect, device number 6
[  203.572329][   T40] audit: type=1400 audit(5282371642.578:92598): avc:  denied  { connect } for  pid=22829 comm="syz.7.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  203.673645][T22839] overlayfs: statfs failed on './file0'
[  203.722368][T22844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2216'.
[  203.725240][T22844] netlink: 'syz.7.2216': attribute type 30 has an invalid length.
[  203.733098][  T539] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  203.735872][  T539] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  203.738711][  T539] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  203.741896][  T539] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  203.783287][T22843] kvm: kvm [22841]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  203.786416][T22850] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2218'.
[  203.787847][T22843] kvm: kvm [22841]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  203.791434][T22850] xt_cgroup: invalid path, errno=-2
[  204.117347][   T40] audit: type=1400 audit(5282371643.118:92599): avc:  denied  { mounton } for  pid=22884 comm="syz.6.2227" path="/428/file0" dev="tmpfs" ino=2312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  204.135659][T22892] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.2226'.
[  204.187894][   T40] audit: type=1400 audit(5282371643.188:92600): avc:  denied  { append } for  pid=22901 comm="syz.5.2230" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  204.187941][T22904] random: crng reseeded on system resumption
[  204.223784][T22895] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2229'.
[  204.306053][   T40] audit: type=1400 audit(5282371643.308:92601): avc:  denied  { map } for  pid=22927 comm="syz.5.2235" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  204.315199][   T40] audit: type=1400 audit(5282371643.308:92602): avc:  denied  { write execute } for  pid=22927 comm="syz.5.2235" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  204.694421][T22962] overlayfs: statfs failed on './file0'
[  204.855388][   T40] audit: type=1400 audit(5282371643.858:92603): avc:  denied  { setopt } for  pid=22983 comm="syz.6.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  204.962611][T22993] overlayfs: failed to resolve './file0': -2
[  205.279698][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout
[  205.356926][T23030] 9p filesystem being mounted at /510 supports timestamps until 2106-02-07 (0xffffffff)
[  205.371942][T23029] vlan2: entered promiscuous mode
[  205.374112][T23029] erspan0: entered promiscuous mode
[  205.413558][T23030] macvtap1: entered allmulticast mode
[  205.415659][T23030] veth0_macvtap: entered allmulticast mode
[  205.503849][T23042] 9pnet_fd: Insufficient options for proto=fd
[  205.829230][T23065] __nla_validate_parse: 4 callbacks suppressed
[  205.829247][T23065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2275'.
[  205.957243][T23073] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2278'.
[  206.229702][ T5947] Bluetooth: hci5: command 0xfc11 tx timeout
[  206.230532][   T63] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  206.248504][T22894] sp0: Synchronizing with TNC
[  206.703497][T23118] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23118 comm=syz.6.2291
[  206.784302][T23122] fuse: Bad value for 'fd'
[  206.788373][T23122] overlayfs: failed to clone upperpath
[  206.853144][T23124] netlink: 'syz.6.2294': attribute type 2 has an invalid length.
[  206.856434][T23124] netlink: 46 bytes leftover after parsing attributes in process `syz.6.2294'.
[  207.022765][   T40] audit: type=1400 audit(5282371646.028:92604): avc:  denied  { read } for  pid=23140 comm="syz.7.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  207.039890][T23143] net_ratelimit: 5 callbacks suppressed
[  207.039906][T23143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.046268][T23143] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2300'.
[  207.053365][T23144] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2300'.
[  207.075885][   T40] audit: type=1400 audit(5282371646.078:92605): avc:  denied  { getopt } for  pid=23140 comm="syz.7.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  207.086064][T23147] SELinux:  Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped).
[  207.091662][   T40] audit: type=1400 audit(5282371646.098:92606): avc:  denied  { relabelto } for  pid=23140 comm="syz.7.2299" name="failed_transaction_log" dev="debugfs" ino=3552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0"
[  207.117278][T23151] block nbd3: not configured, cannot reconfigure
[  207.152754][T23153] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2303'.
[  207.155962][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'.
[  207.423430][T23165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2306'.
[  207.423435][T23167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2306'.
[  207.475915][T23169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'.
[  207.537122][T23167] hsr_slave_1 (unregistering): left promiscuous mode
[  207.790698][T23181] SELinux:  Context Ü is not valid (left unmapped).
[  207.832133][T23183] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  207.869809][T23185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=23185 comm=syz.6.2310
[  207.935722][T23191] netlink: 'syz.7.2313': attribute type 5 has an invalid length.
[  208.430046][T23218] cifs: Unknown parameter 'c'
[  208.448206][T23225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=23225 comm=syz.6.2321
[  208.463998][T23228] No source specified
[  208.561760][T23243] lo speed is unknown, defaulting to 1000
[  208.700886][T23279] bond0: entered promiscuous mode
[  208.942492][T23330] ieee802154 phy1 wpan1: encryption failed: -22
[  208.960004][T23331] ieee802154 phy1 wpan1: encryption failed: -22
[  209.189728][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout
[  209.278245][T23360] bond3: entered promiscuous mode
[  209.372869][T23408] netlink: 'syz.7.2347': attribute type 2 has an invalid length.
[  209.376668][T23408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  209.559154][T23436] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  209.577153][T23440] Falling back ldisc for ttyS3.
[  209.678589][   T40] kauditd_printk_skb: 2 callbacks suppressed
[  209.678600][   T40] audit: type=1400 audit(5282371648.678:92609): avc:  denied  { accept } for  pid=23458 comm="syz.3.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  209.679387][T23459] netlink: 'syz.3.2361': attribute type 1 has an invalid length.
[  209.693679][T23459] netlink: 'syz.3.2361': attribute type 4 has an invalid length.
[  209.697006][T23459] netlink: 'syz.3.2361': attribute type 1 has an invalid length.
[  209.699470][T23459] netlink: 'syz.3.2361': attribute type 4 has an invalid length.
[  209.729371][T23465] netlink: 'syz.6.2363': attribute type 1 has an invalid length.
[  209.745293][T23465] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  209.750425][T23465] bond6 (unregistering): Released all slaves
[  209.892556][T23547] netlink: 'syz.3.2368': attribute type 2 has an invalid length.
[  209.896363][T23547] nbd: must specify a device to reconfigure
[  209.916077][T23551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.923938][T23550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.928811][T23552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.469590][   T40] audit: type=1400 audit(5282371649.468:92610): avc:  denied  { ioctl } for  pid=23582 comm="syz.6.2376" path="socket:[51589]" dev="sockfs" ino=51589 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  210.477362][   T40] audit: type=1400 audit(5282371649.478:92611): avc:  denied  { connect } for  pid=23582 comm="syz.6.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  210.502999][T23588] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  210.506277][T23588] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock
[  210.509103][T23588] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  210.516745][T23588] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock
[  210.529135][T23593] lo speed is unknown, defaulting to 1000
[  210.565981][   T40] audit: type=1804 audit(5282371649.568:92612): pid=23615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2382" name="/newroot/174/file0" dev="tmpfs" ino=954 res=1 errno=0
[  210.575479][   T40] audit: type=1800 audit(5282371649.568:92613): pid=23615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2382" name="file0" dev="tmpfs" ino=954 res=0 errno=0
[  210.579739][T23614] netlink: 'syz.5.2381': attribute type 21 has an invalid length.
[  210.716268][T23630] geneve2: entered promiscuous mode
[  210.718157][T23630] geneve2: entered allmulticast mode
[  210.760001][   T40] audit: type=1400 audit(5282371649.768:92614): avc:  denied  { listen } for  pid=23637 comm="syz.6.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  210.767832][   T40] audit: type=1400 audit(5282371649.768:92615): avc:  denied  { map } for  pid=23629 comm="syz.5.2386" path="socket:[51137]" dev="sockfs" ino=51137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  210.854194][T23653] __nla_validate_parse: 17 callbacks suppressed
[  210.854209][T23653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2391'.
[  211.015097][T23657] netlink: 'syz.5.2392': attribute type 32 has an invalid length.
[  211.017738][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2392'.
[  211.036302][T23657] bond3: Setting coupled_control to off (0)
[  211.105516][   T40] audit: type=1400 audit(5282371650.108:92616): avc:  denied  { remount } for  pid=23717 comm="syz.5.2399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  211.105557][T23718] binder: Binderfs stats mode cannot be changed during a remount
[  211.572740][T23770] binder: 23769:23770 ioctl 4018620d 0 returned -22
[  211.580352][T23770] comedi comedi1: board detection failed
[  211.673169][T23783] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2411'.
[  211.777544][   T40] audit: type=1400 audit(5282371650.778:92617): avc:  denied  { ioctl } for  pid=23785 comm="syz.7.2412" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  211.873961][T23808] veth0: entered promiscuous mode
[  211.881279][T23790] veth0: left promiscuous mode
[  211.927492][T23806] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  211.963046][   T40] audit: type=1400 audit(5282371650.968:92618): avc:  denied  { bind } for  pid=23811 comm="syz.7.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  212.061724][T23824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.168624][T23820] infiniband syz1: set down
[  212.172128][T23820] infiniband syz1: added syz_tun
[  212.196939][T23820] RDS/IB: syz1: added
[  212.200330][T23820] smc: adding ib device syz1 with port count 1
[  212.203202][T23820] smc:    ib device syz1 port 1 has no pnetid
[  212.222794][T23839] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2425'.
[  212.225709][T23841] dns_resolver: Unsupported server list version (0)
[  212.229329][T23841] openvswitch: netlink: Unknown key attributes 1
[  212.324572][T23850] new mount options do not match the existing superblock, will be ignored
[  212.328646][T23851] dns_resolver: Unsupported server list version (0)
[  212.372471][T23856] bridge0: port 3(veth0_to_bridge) entered blocking state
[  212.375053][T23856] bridge0: port 3(veth0_to_bridge) entered disabled state
[  212.378214][T23856] veth0_to_bridge: entered allmulticast mode
[  212.382439][T23856] veth0_to_bridge: entered promiscuous mode
[  212.383915][T23844] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  212.385052][T23856] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  212.387436][T23844] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  212.387767][T23844] vhci_hcd vhci_hcd.0: Device attached
[  212.393314][T23856] bridge0: port 3(veth0_to_bridge) entered blocking state
[  212.399786][T23856] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  212.402708][T23857] vhci_hcd: connection closed
[  212.402949][  T539] vhci_hcd: stop threads
[  212.406662][  T539] vhci_hcd: release socket
[  212.408138][  T539] vhci_hcd: disconnect device
[  212.629982][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.634182][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.638348][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.642497][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.646520][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.651148][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.655216][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.659130][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  213.715430][T23924] bond4: peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms
[  213.721959][T23924] 8021q: adding VLAN 0 to HW filter on device bond4
[  213.907943][T23971] ntfs3(nbd3): try to read out of volume at offset 0x0
[  213.995505][T23973] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2447'.
[  214.210699][T24003] SET target dimension over the limit!
[  214.405231][T24018] netlink: 'syz.7.2462': attribute type 2 has an invalid length.
[  214.505116][T24025] netlink: 'syz.6.2463': attribute type 8 has an invalid length.
[  214.508199][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2463'.
[  214.511792][T24025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2463'.
[  214.907009][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  214.907023][   T40] audit: type=1400 audit(5282371653.908:92625): avc:  denied  { read write } for  pid=24036 comm="syz.5.2466" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  214.919579][   T40] audit: type=1400 audit(5282371653.918:92626): avc:  denied  { open } for  pid=24036 comm="syz.5.2466" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  214.927716][T24037] option changes via remount are deprecated (pid=24036 comm=syz.5.2466)
[  214.928898][   T40] audit: type=1400 audit(5282371653.928:92627): avc:  denied  { remount } for  pid=24036 comm="syz.5.2466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  214.950420][   T40] audit: type=1400 audit(5282371653.948:92628): avc:  denied  { unmount } for  pid=8223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  217.069722][    C2] net_ratelimit: 27065 callbacks suppressed
[  217.069733][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  217.069781][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  217.072422][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  217.076512][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  217.080355][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  217.084135][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  217.087851][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  217.091823][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  217.095393][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  217.099224][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  222.079675][    C2] net_ratelimit: 48289 callbacks suppressed
[  222.079682][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  222.079689][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  222.079873][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  222.082494][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  222.085766][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  222.090595][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  222.093825][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  222.098740][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  222.103533][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  222.106953][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  227.089562][    C3] net_ratelimit: 47065 callbacks suppressed
[  227.089575][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  227.089670][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  227.091709][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  227.095312][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  227.099002][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  227.102655][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  227.106460][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  227.110168][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  227.113810][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  227.117380][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  229.693594][   T40] audit: type=1400 audit(5282371668.698:92629): avc:  denied  { read } for  pid=24044 comm="syz.3.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  229.710282][   T40] audit: type=1400 audit(5282371668.708:92630): avc:  denied  { ioctl } for  pid=24044 comm="syz.3.2470" path="socket:[53777]" dev="sockfs" ino=53777 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  230.027417][    C1] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  230.030574][    C1] sr 2:0:0:0: [sr0] tag#14 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5
[  230.039740][T24069] fuseblk: Unknown parameter 'b0Ž0000000'
[  230.698561][T24081] bridge4: entered promiscuous mode
[  230.714682][T24081] bridge4: entered allmulticast mode
[  231.572801][T24112] snd_dummy snd_dummy.0: control 1:4095:0:syz0:0 is already present
[  231.814630][T24107] lo speed is unknown, defaulting to 1000
[  232.082157][T24148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2490'.
[  232.085270][T24148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2490'.
[  232.099563][    C2] net_ratelimit: 41971 callbacks suppressed
[  232.099564][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  232.099580][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  232.102301][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  232.105860][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  232.110512][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  232.114825][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  232.119108][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  232.122810][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  232.126626][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  232.130573][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  232.863752][T24190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2493'.
[  233.826153][T24211] "syz.6.2499" (24211) uses obsolete ecb(arc4) skcipher
[  233.884066][T24218] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2500'.
[  234.177781][T24224] sctp: [Deprecated]: syz.5.2502 (pid 24224) Use of int in max_burst socket option deprecated.
[  234.177781][T24224] Use struct sctp_assoc_value instead
[  234.532788][T24235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2506'.
[  234.623582][   T29] IPVS: starting estimator thread 0...
[  234.706561][T24248] xt_connbytes: Forcing CT accounting to be enabled
[  234.708938][T24248] xt_CT: You must specify a L4 protocol and not use inversions on it
[  234.721637][T24242] IPVS: using max 44 ests per chain, 105600 per kthread
[  234.754404][T24252] netlink: 'syz.3.2511': attribute type 6 has an invalid length.
[  234.756971][T24252] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2511'.
[  234.796942][T24252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2511'.
[  235.041878][T24259] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2513'.
[  235.088550][   T40] audit: type=1400 audit(5282371674.088:92631): avc:  denied  { getattr } for  pid=24264 comm="syz.7.2514" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  235.099169][T24265] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2514'.
[  235.103516][T24265] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2514'.
[  235.160063][   T40] audit: type=1400 audit(5282371674.168:92632): avc:  denied  { append } for  pid=24264 comm="syz.7.2514" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  235.894038][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  235.939637][   T29] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  236.029941][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  236.106199][   T29] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  236.119572][   T29] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  236.123513][   T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  236.126387][   T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.131222][T24281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  236.132087][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  236.136184][   T29] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  236.574333][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  236.607360][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  236.618345][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  236.679560][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  236.683047][T24281] x_tables: ip_tables: osf match: only valid for protocol 6
[  236.695856][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  236.748634][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  236.781857][T24335] CIFS mount error: No usable UNC path provided in device string!
[  236.781857][T24335] 
[  236.795588][T24335] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  236.861662][ T6001] usb 8-1: USB disconnect, device number 25
[  237.109705][    C2] net_ratelimit: 43935 callbacks suppressed
[  237.109717][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  237.109911][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  237.111930][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  237.115706][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  237.119742][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  237.123517][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  237.126972][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  237.131052][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  237.134709][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  237.138500][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  237.849394][T24372] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2529'.
[  239.164678][T24377] binder: 24376:24377 ioctl c0306201 200000000540 returned -22
[  239.851369][T24375] netlink: 'syz.5.2530': attribute type 12 has an invalid length.
[  240.016437][T24391] xt_cluster: node mask cannot exceed total number of nodes
[  242.088417][   T40] audit: type=1400 audit(5282371681.088:92633): avc:  denied  { unmount } for  pid=8223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  242.119636][    C2] net_ratelimit: 45276 callbacks suppressed
[  242.119649][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  242.119738][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  242.121783][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  242.125495][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  242.129200][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  242.133080][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  242.136693][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  242.140600][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  242.144431][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  242.148002][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  245.261099][T24422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2539'.
[  245.312013][T24423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2539'.
[  245.519444][T24429] overlayfs: failed to clone upperpath
[  245.580926][T24430] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2541'.
[  245.584141][T24430] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2541'.
[  246.998439][T24451] netlink: 'syz.7.2544': attribute type 11 has an invalid length.
[  247.035226][T24453] block nbd7: shutting down sockets
[  247.105712][T24466] SET target dimension over the limit!
[  247.129563][    C3] net_ratelimit: 47116 callbacks suppressed
[  247.129576][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  247.129685][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  247.131683][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  247.136190][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  247.139864][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  247.144642][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  247.148073][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  247.152823][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  247.156537][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  247.160458][T24467] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2548'.
[  247.161089][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  247.171271][T24467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2548'.
[  247.202930][T24469] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  247.215756][T24469] SELinux: failed to load policy
[  247.248971][T24470] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  247.490085][   T40] audit: type=1400 audit(5282371686.478:92634): avc:  denied  { name_bind } for  pid=24460 comm="syz.6.2547" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  247.606537][   T40] audit: type=1400 audit(5282371686.608:92635): avc:  denied  { read } for  pid=24484 comm="syz.3.2553" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  247.620131][   T40] audit: type=1400 audit(5282371686.618:92636): avc:  denied  { open } for  pid=24484 comm="syz.3.2553" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  247.652222][   T40] audit: type=1400 audit(5282371686.618:92637): avc:  denied  { ioctl } for  pid=24484 comm="syz.3.2553" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  249.160595][   T40] audit: type=1400 audit(5282371688.168:92638): avc:  denied  { read } for  pid=24517 comm="syz.3.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  249.235730][T24518] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2560'.
[  249.347278][T24524] netlink: 'syz.7.2562': attribute type 13 has an invalid length.
[  250.040857][T24544] netlink: 'syz.5.2567': attribute type 1 has an invalid length.
[  250.098800][T24545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2567'.
[  252.139670][    C3] net_ratelimit: 46874 callbacks suppressed
[  252.139682][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  252.139725][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  252.142347][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  252.146917][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  252.151674][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  252.156491][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  252.161061][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  252.165969][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  252.170672][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  252.175395][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  252.526721][T24524] 0ªî{X¹¦: refused to change device tx_queue_len
[  252.550453][T24544] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  252.617712][T24552] netlink: 'syz.3.2568': attribute type 1 has an invalid length.
[  252.645833][T24552] 8021q: adding VLAN 0 to HW filter on device bond7
[  252.689615][T24552] vlan3: entered allmulticast mode
[  252.691850][T24552] bond7: entered allmulticast mode
[  252.789370][   T40] audit: type=1400 audit(5282371691.788:92639): avc:  denied  { connect } for  pid=24589 comm="syz.6.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  252.860396][T24596] overlayfs: failed to clone lowerpath
[  252.862952][T24595] overlayfs: failed to clone lowerpath
[  252.941471][T24596] overlayfs: failed to clone lowerpath
[  252.944621][T24595] overlayfs: failed to clone lowerpath
[  253.002204][T24598] netlink: 'syz.5.2570': attribute type 11 has an invalid length.
[  253.163575][T24597] block nbd5: shutting down sockets
[  253.290148][   T40] audit: type=1400 audit(5282371692.298:92640): avc:  denied  { name_connect } for  pid=24609 comm="syz.7.2571" dest=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  253.550235][T24614] SELinux: failed to load policy
[  253.572283][T24628] overlayfs: failed to clone upperpath
[  253.903029][T24638] comedi comedi0: Minor 126 is invalid!
[  254.055320][T24635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2578'.
[  254.076880][T24635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2578'.
[  254.081836][T24635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2578'.
[  254.267826][   T40] audit: type=1400 audit(5282371693.268:92641): avc:  denied  { bind } for  pid=24644 comm="syz.3.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  254.342139][   T40] audit: type=1400 audit(5282371693.348:92642): avc:  denied  { listen } for  pid=24644 comm="syz.3.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  254.595030][T24662] 8021q: adding VLAN 0 to HW filter on device bond4
[  255.207894][T24702] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2587'.
[  255.466779][T24702] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2587'.
[  255.530362][T24663] block nbd3: shutting down sockets
[  255.587786][   T40] audit: type=1400 audit(5282371694.588:92643): avc:  denied  { write } for  pid=24703 comm="syz.6.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  255.727524][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  256.107658][T24729] lo speed is unknown, defaulting to 1000
[  256.356259][T24726] netlink: 'syz.6.2594': attribute type 6 has an invalid length.
[  256.367506][T24726] netlink: 'syz.6.2594': attribute type 6 has an invalid length.
[  257.005828][T24775] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2598'.
[  257.042777][   T40] audit: type=1326 audit(5282371696.048:92644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24774 comm="syz.6.2599" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88a998efc9 code=0x0
[  257.149646][    C3] net_ratelimit: 43603 callbacks suppressed
[  257.149658][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  257.149663][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  257.151964][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  257.155511][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  257.160694][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  257.165098][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  257.170045][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  257.173767][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  257.178859][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  257.182579][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  257.963555][   T40] audit: type=1400 audit(5282371696.918:92645): avc:  denied  { getopt } for  pid=24788 comm="syz.5.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  258.041533][   T40] audit: type=1400 audit(5282371697.008:92646): avc:  denied  { accept } for  pid=24786 comm="syz.7.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  258.143330][   T40] audit: type=1326 audit(5282371697.068:92647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24774 comm="syz.6.2599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a998efc9 code=0x7ff00000
[  258.151241][T24798] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP)
[  258.153672][   T40] audit: type=1326 audit(5282371697.068:92648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24774 comm="syz.6.2599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a998efc9 code=0x7ff00000
[  258.161719][   T40] audit: type=1326 audit(5282371697.068:92649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24774 comm="syz.6.2599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a998efc9 code=0x7ff00000
[  258.174098][   T40] audit: type=1326 audit(5282371697.068:92650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24774 comm="syz.6.2599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a998efc9 code=0x7ff00000
[  258.189005][   T40] audit: type=1326 audit(5282371697.068:92651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24774 comm="syz.6.2599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a998efc9 code=0x7ff00000
[  258.200332][   T40] audit: type=1326 audit(5282371697.068:92652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24774 comm="syz.6.2599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a998efc9 code=0x7ff00000
[  258.209141][   T40] audit: type=1326 audit(5282371697.068:92653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24774 comm="syz.6.2599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a998efc9 code=0x7ff00000
[  258.218837][   T40] audit: type=1326 audit(5282371697.068:92654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24774 comm="syz.6.2599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a998efc9 code=0x7ff00000
[  259.377128][T24815] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2610'.
[  259.516617][T24822] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  259.519050][T24822] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 1th superblock
[  259.572585][T24822] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  259.575372][T24822] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 2th superblock
[  260.206754][T24851] 9pnet_fd: Insufficient options for proto=fd
[  260.306921][T24853] netlink: 'syz.3.2621': attribute type 1 has an invalid length.
[  260.351045][T24853] 8021q: adding VLAN 0 to HW filter on device bond8
[  260.359372][T24853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2621'.
[  260.519792][   T29] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  260.693483][   T29] usb 10-1: config index 0 descriptor too short (expected 39, got 27)
[  260.696659][   T29] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  260.701309][   T29] usb 10-1: config 0 interface 0 has no altsetting 0
[  260.703495][T24853] bond8 (unregistering): Released all slaves
[  260.710019][   T29] usb 10-1: string descriptor 0 read error: -22
[  260.712155][   T29] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  260.718535][   T29] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  260.730578][   T29] usb 10-1: config 0 descriptor??
[  260.738084][   T29] hub 10-1:0.0: bad descriptor, ignoring hub
[  260.741109][   T29] hub 10-1:0.0: probe with driver hub failed with error -5
[  260.748273][   T29] usb 10-1: selecting invalid altsetting 0
[  260.754740][T24898] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2623'.
[  260.875938][T24948] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2626'.
[  261.041749][   T29] usb 10-1: USB disconnect, device number 28
[  262.159588][    C3] net_ratelimit: 44537 callbacks suppressed
[  262.159601][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  262.159807][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  262.161961][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  262.165578][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  262.169426][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  262.173189][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  262.176965][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  262.180596][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  262.184634][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  262.188302][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  263.163783][T25052] netlink: 'syz.5.2647': attribute type 4 has an invalid length.
[  263.166863][T25052] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2647'.
[  263.173035][T25052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=25052 comm=syz.5.2647
[  264.072750][   T40] kauditd_printk_skb: 14166 callbacks suppressed
[  264.072770][   T40] audit: type=1400 audit(5282371703.068:106821): avc:  denied  { read } for  pid=25062 comm="syz.3.2651" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  264.097716][   T40] audit: type=1400 audit(5282371703.068:106822): avc:  denied  { open } for  pid=25062 comm="syz.3.2651" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  264.097751][   T40] audit: type=1400 audit(5282371703.068:106823): avc:  denied  { ioctl } for  pid=25062 comm="syz.3.2651" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  265.272224][T25068] EXT4-fs (nbd3): unable to read superblock
[  265.529244][T25073] netlink: 'syz.6.2655': attribute type 15 has an invalid length.
[  265.541081][T25073] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2655'.
[  266.730972][T25078] netlink: 'syz.6.2657': attribute type 1 has an invalid length.
[  266.857529][   T40] audit: type=1400 audit(5282371705.858:106824): avc:  denied  { setopt } for  pid=25085 comm="syz.6.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  266.901966][T25087] overlay: Unknown parameter 'appraise'
[  266.942759][T25087] netlink: 'syz.3.2659': attribute type 1 has an invalid length.
[  266.952982][T25094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=25094 comm=syz.5.2660
[  266.966786][T25087] 8021q: adding VLAN 0 to HW filter on device bond8
[  266.989001][T25094] netlink: 'syz.5.2660': attribute type 28 has an invalid length.
[  266.991875][T25094] netlink: 'syz.5.2660': attribute type 3 has an invalid length.
[  266.994329][T25094] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2660'.
[  267.169753][    C3] net_ratelimit: 34300 callbacks suppressed
[  267.169768][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  267.176863][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  267.179641][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  267.181804][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  267.185222][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  267.189870][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  267.194008][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  267.198336][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  267.202079][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  267.206725][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  267.340038][T25099] sit0: entered promiscuous mode
[  267.345371][T25099] netlink: 'syz.7.2661': attribute type 1 has an invalid length.
[  267.348235][T25099] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2661'.
[  267.504812][T25152] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2666'.
[  267.507571][T25152] netlink: 35 bytes leftover after parsing attributes in process `syz.6.2666'.
[  267.511973][T25152] netlink: 'syz.6.2666': attribute type 5 has an invalid length.
[  267.515141][T25152] netlink: 'syz.6.2666': attribute type 6 has an invalid length.
[  267.518116][T25152] netlink: 35 bytes leftover after parsing attributes in process `syz.6.2666'.
[  267.568983][T25156] dlm: non-version read from control device 0
[  268.115370][   T40] audit: type=1400 audit(5282371707.118:106825): avc:  denied  { write } for  pid=25178 comm="syz.5.2674" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  269.259523][    C0] sched: DL replenish lagged too much
[  269.383532][   T40] audit: type=1326 audit(5282371708.248:106826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.6.2676" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88a998efc9 code=0x0
[  270.123473][T25206] netlink: 'syz.5.2678': attribute type 6 has an invalid length.
[  270.136297][T25206] netlink: 'syz.5.2678': attribute type 6 has an invalid length.
[  270.206493][   T40] audit: type=1400 audit(5282371709.208:106827): avc:  denied  { accept } for  pid=25209 comm="syz.5.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  270.217427][T25210] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  270.219520][T25210] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  270.235926][T25210] vhci_hcd vhci_hcd.0: Device attached
[  270.252868][T25215] vhci_hcd: connection closed
[  270.253108][ T1213] vhci_hcd: stop threads
[  270.256008][ T1213] vhci_hcd: release socket
[  270.257424][ T1213] vhci_hcd: disconnect device
[  270.451071][   T40] audit: type=1400 audit(5282371709.458:106828): avc:  denied  { connect } for  pid=25224 comm="syz.5.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  270.483810][T25213] dvmrp0: entered allmulticast mode
[  270.621952][T25237] cgroup: Invalid name
[  270.803127][T25249] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2692'.
[  270.819192][T25248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2691'.
[  270.823022][T25248] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2691'.
[  270.844355][T25248] geneve4: entered promiscuous mode
[  270.846630][T25248] geneve4: entered allmulticast mode
[  270.874054][   T46] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.877630][   T46] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.889660][   T46] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.893066][   T46] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.015095][T25290] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  272.026101][ T5947] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  272.031213][ T5947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  272.034062][ T5947] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  272.036674][ T5947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  272.039148][ T5947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  272.179644][    C2] net_ratelimit: 43379 callbacks suppressed
[  272.179657][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  272.179672][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  272.181713][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  272.185526][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  272.189057][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  272.192946][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  272.196483][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  272.200716][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  272.204158][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  272.207748][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  272.997579][T25305] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  273.100767][   T40] audit: type=1400 audit(5282371712.108:106829): avc:  denied  { call } for  pid=25306 comm="syz.7.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  273.106494][   T40] audit: type=1400 audit(5282371712.108:106830): avc:  denied  { transfer } for  pid=25306 comm="syz.7.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  273.114901][    C3] SELinux: failure in sel_netif_sid_slow(), invalid network interface (11)
[  273.167125][T25284] lo speed is unknown, defaulting to 1000
[  273.622634][T25284] chnl_net:caif_netlink_parms(): no params data found
[  274.069812][ T5947] Bluetooth: hci5: command tx timeout
[  275.390274][T25284] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.433360][T25284] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.450535][T25284] bridge_slave_0: entered allmulticast mode
[  275.475808][T25284] bridge_slave_0: entered promiscuous mode
[  275.814218][T25284] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.842611][T25284] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.852065][T25284] bridge_slave_1: entered allmulticast mode
[  275.882074][T25284] bridge_slave_1: entered promiscuous mode
[  276.150016][ T5947] Bluetooth: hci5: command tx timeout
[  276.916720][T25284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.118598][T25284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.189624][    C3] net_ratelimit: 41288 callbacks suppressed
[  277.189637][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  277.189711][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  277.191825][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  277.195550][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  277.199349][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  277.202962][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  277.206830][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  277.210372][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  277.214347][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  277.217777][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  277.771431][T25284] team0: Port device team_slave_0 added
[  277.776036][T25284] team0: Port device team_slave_1 added
[  277.894867][T25977] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  277.943706][T25284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  277.951936][T25284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  277.956393][T25935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2714'.
[  277.960379][T25284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  277.961719][T25284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  277.961728][T25284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  277.961742][T25284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.229854][ T5947] Bluetooth: hci5: command tx timeout
[  278.239826][T26119] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2718'.
[  278.313074][T25284] hsr_slave_0: entered promiscuous mode
[  278.315207][T25284] hsr_slave_1: entered promiscuous mode
[  278.438403][T26208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2716'.
[  279.145853][T26360] x_tables: duplicate underflow at hook 1
[  279.319944][T26373] Sensor A: =================  START STATUS  =================
[  279.322787][T26373] Sensor A: Test Pattern: 75% Colorbar
[  279.336828][T26373] Sensor A: Show Information: All
[  279.338541][T26373] Sensor A: Vertical Flip: false
[  279.340843][T26373] Sensor A: Horizontal Flip: false
[  279.342591][T26373] Sensor A: Brightness: 7
[  279.344038][T26373] Sensor A: Contrast: 128
[  279.345537][T26373] Sensor A: Hue: 0
[  279.346782][T26373] Sensor A: Saturation: 128
[  279.359687][T26373] Sensor A: ==================  END STATUS  ==================
[  279.371086][T26373] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2722'.
[  280.328751][ T5947] Bluetooth: hci5: command tx timeout
[  282.199590][    C2] net_ratelimit: 41996 callbacks suppressed
[  282.199602][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  282.199797][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  282.201713][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  282.206726][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  282.210225][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  282.214738][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  282.217905][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  282.222675][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  282.226007][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  282.230351][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.508547][T25284] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.531910][T26353] macsec0: entered promiscuous mode
[  283.534550][T26353] macsec0: entered allmulticast mode
[  283.536914][T26353] veth1_macvtap: entered allmulticast mode
[  283.604465][T26376] vcan1: entered allmulticast mode
[  283.726051][T25284] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.907521][T25284] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.661285][T25284] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.884701][T26427] lo speed is unknown, defaulting to 1000
[  285.125671][T25284] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  285.222482][T25284] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  285.266576][T25284] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  285.339299][T25284] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  285.834897][T26474] NILFS (nbd3): device size too small
[  285.913455][T25284] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.932232][T25284] 8021q: adding VLAN 0 to HW filter on device team0
[  285.950816][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.953116][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.986929][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.989191][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.175349][T26496] 9p filesystem being mounted at /278/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  286.206137][T26499] tipc: Cannot configure node identity twice
[  286.623354][T25284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.144992][   T40] audit: type=1400 audit(5282371726.148:106831): avc:  denied  { write } for  pid=26520 comm="syz.7.2741" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  287.209564][    C3] net_ratelimit: 47162 callbacks suppressed
[  287.209576][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  287.209612][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  287.211698][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  287.215413][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  287.219136][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  287.222869][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  287.226922][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  287.230289][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  287.233954][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  287.237868][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  287.239230][T26527] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2745'.
[  287.257712][T26527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2745'.
[  287.509952][T26527] veth1_macvtap (unregistering): left allmulticast mode
[  287.834885][T26527] veth0_macvtap (unregistering): left allmulticast mode
[  289.212212][T25284] veth0_vlan: entered promiscuous mode
[  289.218317][T25284] veth1_vlan: entered promiscuous mode
[  289.367780][T25284] veth0_macvtap: entered promiscuous mode
[  289.371751][T25284] veth1_macvtap: entered promiscuous mode
[  289.397430][T25284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.598622][   T40] audit: type=1326 audit(5282371728.598:106832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26566 comm="syz.3.2754" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f375c98efc9 code=0x0
[  289.613902][T25284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.629087][   T88] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.632231][   T88] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.635045][   T88] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.647955][   T88] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.765048][T26567] lo speed is unknown, defaulting to 1000
[  289.792734][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.795182][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.850931][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.853381][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.114452][T26612] tipc: Started in network mode
[  290.116104][T26612] tipc: Node identity 4, cluster identity 4711
[  290.118086][T26612] tipc: Node number set to 4
[  292.219562][    C2] net_ratelimit: 49544 callbacks suppressed
[  292.219575][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  292.219673][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  292.221669][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  292.225319][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  292.229273][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  292.233100][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  292.236619][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  292.240331][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  292.243941][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  292.247579][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.229606][    C3] net_ratelimit: 45718 callbacks suppressed
[  297.229620][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.229650][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  297.231770][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.235520][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  297.239178][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.242862][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  297.246537][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.250205][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  297.253861][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.257545][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  301.184830][   T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.188658][   T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.192391][   T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.199419][   T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.203787][   T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  301.254680][T26635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26635 comm=syz.6.2764
[  301.273841][T26635] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2764'.
[  301.345228][T26636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2764'.
[  301.683060][T26643] /dev/sr0: Can't lookup blockdev
[  301.799165][T26628] lo speed is unknown, defaulting to 1000
[  301.853577][   T63] Bluetooth: hci4: unexpected event for opcode 0x0803
[  302.078636][T26628] chnl_net:caif_netlink_parms(): no params data found
[  302.184164][T26791] siw: device registration error -23
[  302.185982][   T40] audit: type=1400 audit(5282371741.188:106833): avc:  denied  { listen } for  pid=26790 comm="syz.7.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  302.239632][    C2] net_ratelimit: 46808 callbacks suppressed
[  302.239645][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  302.239655][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  302.241814][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  302.245548][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  302.249121][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  302.252927][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  302.256616][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  302.260386][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  302.263998][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  302.267573][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  302.448938][T26857] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input24
[  302.455229][   T40] audit: type=1400 audit(5282371741.458:106834): avc:  denied  { ioctl } for  pid=5332 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3287 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  303.060722][T26915] random: crng reseeded on system resumption
[  303.289836][   T63] Bluetooth: hci2: command tx timeout
[  304.778657][T26628] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.798014][T26628] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.800747][T26628] bridge_slave_0: entered allmulticast mode
[  304.808142][T26628] bridge_slave_0: entered promiscuous mode
[  304.817772][T26628] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.823459][T26628] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.840093][T26628] bridge_slave_1: entered allmulticast mode
[  304.845373][T26628] bridge_slave_1: entered promiscuous mode
[  304.949029][T26961] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  304.971826][T26961] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  304.973737][T26961] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  305.031846][T26961] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  305.081275][T26961] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  305.083213][T26961] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  305.607925][T26628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.614143][T26961] 
[  305.614964][T26961] ======================================================
[  305.617146][T26961] WARNING: possible circular locking dependency detected
[  305.619339][T26961] syzkaller #0 Not tainted
[  305.620885][T26961] ------------------------------------------------------
[  305.624463][T26961] syz.7.2772/26961 is trying to acquire lock:
[  305.626359][T26961] ffff888012daa840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0
[  305.629925][T26961] 
[  305.629925][T26961] but task is already holding lock:
[  305.632301][T26961] ffff888012daab38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730
[  305.635102][T26961] 
[  305.635102][T26961] which lock already depends on the new lock.
[  305.635102][T26961] 
[  305.637961][T26961] 
[  305.637961][T26961] the existing dependency chain (in reverse order) is:
[  305.640476][T26961] 
[  305.640476][T26961] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[  305.642619][T26961]        __mutex_lock+0x193/0x1060
[  305.644118][T26961]        l2cap_info_timeout+0x79/0xa0
[  305.645632][T26961]        process_one_work+0x9cf/0x1b70
[  305.647148][T26961]        worker_thread+0x6c8/0xf10
[  305.648584][T26961]        kthread+0x3c5/0x780
[  305.649883][T26961]        ret_from_fork+0x675/0x7d0
[  305.651487][T26961]        ret_from_fork_asm+0x1a/0x30
[  305.653204][T26961] 
[  305.653204][T26961] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[  305.656397][T26961]        __lock_acquire+0x126f/0x1c90
[  305.658095][T26961]        lock_acquire+0x179/0x350
[  305.659706][T26961]        __flush_work+0x4e4/0xcc0
[  305.661569][T26961]        __cancel_work_sync+0x10c/0x130
[  305.663381][T26961]        l2cap_conn_del+0x5af/0x730
[  305.665044][T26961]        l2cap_connect_cfm+0x9e1/0xf80
[  305.666760][T26961]        hci_conn_failed+0x1bd/0x330
[  305.668456][T26961]        hci_abort_conn_sync+0x76a/0xb20
[  305.670523][T26961]        hci_disconnect_all_sync.constprop.0+0x104/0x3c0
[  305.673017][T26961]        hci_suspend_sync+0x821/0xb20
[  305.675063][T26961]        hci_suspend_dev+0x308/0x500
[  305.676718][T26961]        hci_suspend_notifier+0x28d/0x2f0
[  305.678496][T26961]        notifier_call_chain+0xbc/0x410
[  305.680241][T26961]        blocking_notifier_call_chain_robust+0xc8/0x160
[  305.682410][T26961]        pm_notifier_call_chain_robust+0x27/0x60
[  305.684370][T26961]        snapshot_open+0x189/0x2b0
[  305.685962][T26961]        misc_open+0x26d/0x450
[  305.687482][T26961]        chrdev_open+0x234/0x6a0
[  305.689033][T26961]        do_dentry_open+0x982/0x1530
[  305.690716][T26961]        vfs_open+0x82/0x3f0
[  305.692229][T26961]        path_openat+0x1de4/0x2cb0
[  305.693820][T26961]        do_filp_open+0x20b/0x470
[  305.695415][T26961]        do_sys_openat2+0x11b/0x1d0
[  305.697079][T26961]        __x64_sys_openat+0x174/0x210
[  305.699097][T26961]        do_syscall_64+0xcd/0xfa0
[  305.701217][T26961]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.703884][T26961] 
[  305.703884][T26961] other info that might help us debug this:
[  305.703884][T26961] 
[  305.708041][T26961]  Possible unsafe locking scenario:
[  305.708041][T26961] 
[  305.711113][T26961]        CPU0                    CPU1
[  305.713043][T26961]        ----                    ----
[  305.714723][T26961]   lock(&conn->lock#2);
[  305.716072][T26961]                                lock((work_completion)(&(&conn->info_timer)->work));
[  305.719047][T26961]                                lock(&conn->lock#2);
[  305.721176][T26961]   lock((work_completion)(&(&conn->info_timer)->work));
[  305.723457][T26961] 
[  305.723457][T26961]  *** DEADLOCK ***
[  305.723457][T26961] 
[  305.725954][T26961] 8 locks held by syz.7.2772/26961:
[  305.727560][T26961]  #0: ffffffff8f08ac68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[  305.730177][T26961]  #1: ffffffff8e287968 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0
[  305.733346][T26961]  #2: ffffffff8e2c7c30 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160
[  305.736945][T26961]  #3: ffff88802c5d4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_suspend_dev+0x300/0x500
[  305.739971][T26961]  #4: ffff88802c5d40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb20
[  305.742970][T26961]  #5: ffffffff9036e788 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330
[  305.745987][T26961]  #6: ffff888012daab38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730
[  305.748830][T26961]  #7: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0
[  305.751587][T26961] 
[  305.751587][T26961] stack backtrace:
[  305.753533][T26961] CPU: 3 UID: 0 PID: 26961 Comm: syz.7.2772 Not tainted syzkaller #0 PREEMPT(full) 
[  305.753548][T26961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  305.753555][T26961] Call Trace:
[  305.753560][T26961]  <TASK>
[  305.753565][T26961]  dump_stack_lvl+0x116/0x1f0
[  305.753581][T26961]  print_circular_bug+0x275/0x350
[  305.753596][T26961]  check_noncircular+0x14c/0x170
[  305.753612][T26961]  __lock_acquire+0x126f/0x1c90
[  305.753629][T26961]  lock_acquire+0x179/0x350
[  305.753642][T26961]  ? __flush_work+0x4d0/0xcc0
[  305.753660][T26961]  ? mark_held_locks+0x49/0x80
[  305.753673][T26961]  ? __flush_work+0x4d0/0xcc0
[  305.753688][T26961]  __flush_work+0x4e4/0xcc0
[  305.753704][T26961]  ? __flush_work+0x4d0/0xcc0
[  305.753720][T26961]  ? detach_if_pending+0x221/0x280
[  305.753733][T26961]  ? __pfx___flush_work+0x10/0x10
[  305.753750][T26961]  ? __pfx_wq_barrier_func+0x10/0x10
[  305.753764][T26961]  ? __pfx___might_resched+0x10/0x10
[  305.753776][T26961]  __cancel_work_sync+0x10c/0x130
[  305.753793][T26961]  l2cap_conn_del+0x5af/0x730
[  305.753805][T26961]  l2cap_connect_cfm+0x9e1/0xf80
[  305.753817][T26961]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  305.753830][T26961]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  305.753841][T26961]  hci_conn_failed+0x1bd/0x330
[  305.753857][T26961]  hci_abort_conn_sync+0x76a/0xb20
[  305.753873][T26961]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  305.753890][T26961]  ? find_held_lock+0x2b/0x80
[  305.753899][T26961]  ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0
[  305.753915][T26961]  ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0
[  305.753931][T26961]  hci_disconnect_all_sync.constprop.0+0x104/0x3c0
[  305.753948][T26961]  hci_suspend_sync+0x821/0xb20
[  305.753964][T26961]  ? __pfx_enable_work+0x10/0x10
[  305.753980][T26961]  ? __pfx_hci_suspend_sync+0x10/0x10
[  305.754004][T26961]  hci_suspend_dev+0x308/0x500
[  305.754033][T26961]  ? __pfx_hci_suspend_dev+0x10/0x10
[  305.754048][T26961]  ? rcu_barrier+0x341/0x6e0
[  305.754063][T26961]  ? kobject_get+0xbb/0x150
[  305.754077][T26961]  hci_suspend_notifier+0x28d/0x2f0
[  305.754093][T26961]  notifier_call_chain+0xbc/0x410
[  305.754105][T26961]  ? __pfx_hci_suspend_notifier+0x10/0x10
[  305.754120][T26961]  blocking_notifier_call_chain_robust+0xc8/0x160
[  305.754135][T26961]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[  305.754150][T26961]  ? do_raw_spin_unlock+0x172/0x230
[  305.754167][T26961]  pm_notifier_call_chain_robust+0x27/0x60
[  305.754181][T26961]  snapshot_open+0x189/0x2b0
[  305.754193][T26961]  ? __pfx_snapshot_open+0x10/0x10
[  305.754205][T26961]  misc_open+0x26d/0x450
[  305.754218][T26961]  ? __pfx_misc_open+0x10/0x10
[  305.754231][T26961]  chrdev_open+0x234/0x6a0
[  305.754247][T26961]  ? __pfx_chrdev_open+0x10/0x10
[  305.754262][T26961]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  305.754280][T26961]  do_dentry_open+0x982/0x1530
[  305.754296][T26961]  ? __pfx_chrdev_open+0x10/0x10
[  305.754312][T26961]  vfs_open+0x82/0x3f0
[  305.754322][T26961]  path_openat+0x1de4/0x2cb0
[  305.754338][T26961]  ? __pfx_path_openat+0x10/0x10
[  305.754352][T26961]  ? __lock_acquire+0xb8a/0x1c90
[  305.754366][T26961]  do_filp_open+0x20b/0x470
[  305.754380][T26961]  ? __pfx_do_filp_open+0x10/0x10
[  305.754399][T26961]  ? alloc_fd+0x471/0x7d0
[  305.754414][T26961]  do_sys_openat2+0x11b/0x1d0
[  305.754424][T26961]  ? __pfx_do_sys_openat2+0x10/0x10
[  305.754433][T26961]  ? find_held_lock+0x2b/0x80
[  305.754443][T26961]  ? handle_mm_fault+0x2ab/0xd10
[  305.754455][T26961]  __x64_sys_openat+0x174/0x210
[  305.754465][T26961]  ? __pfx___x64_sys_openat+0x10/0x10
[  305.754478][T26961]  do_syscall_64+0xcd/0xfa0
[  305.754491][T26961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.754502][T26961] RIP: 0033:0x7f942b38efc9
[  305.754512][T26961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.754523][T26961] RSP: 002b:00007f942c2c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  305.754533][T26961] RAX: ffffffffffffffda RBX: 00007f942b5e5fa0 RCX: 00007f942b38efc9
[  305.754540][T26961] RDX: 0000000000040000 RSI: 0000200000000680 RDI: ffffffffffffff9c
[  305.754547][T26961] RBP: 00007f942b411f91 R08: 0000000000000000 R09: 0000000000000000
[  305.754553][T26961] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000000
[  305.754559][T26961] R13: 00007f942b5e6038 R14: 00007f942b5e5fa0 R15: 00007fff2ba0d168
[  305.754570][T26961]  </TASK>
[  307.249614][    C2] net_ratelimit: 56248 callbacks suppressed
[  307.249632][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  307.249643][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.249781][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.252303][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  307.255827][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.260802][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  307.264216][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.269150][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  307.272744][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.277750][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  310.194658][ T5298] Bluetooth: hci4: command 0x0c1a tx timeout
[  310.196854][ T5298] Bluetooth: hci5: command 0x0c1a tx timeout
[  310.199367][ T5298] Bluetooth: hci2: command 0x040f tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  312.234423][ T5947] Bluetooth: hci2: command 0x040f tx timeout
[  312.237048][ T5947] Bluetooth: hci5: command 0x0c1a tx timeout
[  312.259622][    C3] net_ratelimit: 82072 callbacks suppressed
[  312.259635][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.259674][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  312.261619][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.266758][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  312.270293][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.275373][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:3f:73:49:e5:a5, vlan:0)
[  312.279005][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.283953][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  312.287608][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.292566][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  314.314789][ T5947] Bluetooth: hci2: command 0x040f tx timeout
[  314.317875][ T5937] Bluetooth: hci5: command 0x0c1a tx timeout

VM DIAGNOSIS:
12:31:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff91b6fa74 RDX=ffffc90000006915
RSI=0000000000000001 RDI=ffffffff90fe5e14 RBP=ffffc90000006928 RSP=ffffc90000006870
R8 =ffffffff91b6fa78 R9 =0000000000000000 R10=ffffc900000068e0 R11=00000000000940e3
R12=ffffc90000006930 R13=ffffc900000068e0 R14=ffffc90000006915 R15=0000000000000000
RIP=ffffffff816c4aca RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555559f6a500 ffffffff 00c00000
GS =0000 ffff8880d69d6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fabcebec24c CR3=0000000032170000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555559f899ff 0000555559f895e0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555559f82914 0000555559f82910
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555559f9120a 0000555559f90fa0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0422 10000c0172d60c10 0001800401000000 0806060101c00604
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 081a80030fffffff ffffff040fffffff ffffff040fffffff 00080007000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c7100008014b8c 00746f687370616e 732f7665642f01ff ffffffffffffffe3
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732f636f72702f01 ffffffffffffffff c308568003320400 20808008001a8004
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100041880a39a8c 0800010000040806 060119c2c47fbe45 045fc093acc21408
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0803140400040302 0400000328080006 1000201000060471 9e0010000fffffff
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0401000002 0806060151be0004 0004080056800401 c710000802498a00
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 317a79732f637369 6d5f746d666e6962 2f73662f7379732f 636f72702f01ffff
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000016a6a4 RBX=0000000000000001 RCX=ffffffff8b6692a9 RDX=ffffed100d4a6656
RSI=ffffffff8bf1e9c0 RDI=ffffffff819285cd RBP=ffffed1003b59490 RSP=ffffc90000177de8
R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000001
R12=0000000000000001 R13=ffff88801daca480 R14=ffffffff908339d0 R15=0000000000000000
RIP=ffffffff8b667d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6ad6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f88a9bb2d58 CR3=000000005f311000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000070300 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2ba0d4f0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f942b412fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f942b412fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f942b412fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f942b412ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f942b41307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f942b41315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000002afea0 000000000000c48c 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=ffffffff91a7cdc2 RBX=0000000000000002 RCX=0000000000191e9f RDX=0000000000191ea8
RSI=00000000000a6a69 RDI=0000000000191e9f RBP=ffffc90000647b88 RSP=ffffc90000647ad0
R8 =ffffffff91a7cdf8 R9 =0000000000000000 R10=ffffc90000647b40 R11=00000000000831a9
R12=ffffc90000647b90 R13=ffffc90000647b40 R14=ffffc90000647b75 R15=ffffffff8931a9d1
RIP=ffffffff816c47f7 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6bd6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f942b5b2698 CR3=000000005c32d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1efb4ab502793ff1 d6b9c9fae27fe163
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 530681bd77f95e79 858122aa5f584052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e44f642053c9c73 07fcc1560c0d4c8f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6356ff57fabaf3db 0b6c9be6a0743a99
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 89bcc42242277be9 5c5c5c5c5c5c5c5c
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e997210e5c5c5c5c 5c5c5c5c5c5c5c5c
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 086efa5032c81fd2 139af28e75057ee3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c5c5c5c5c5c5c5c 5c5c5c5caffbec98
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856b08e647
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000080fe 4002001480010018 8007004c00000007 0001000500000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000fc 4002001480140018 aa00000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8403010000000ca4 0607e00340050006 0000008400070005 00001f4e40040006
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0bc0030210000bb0 0301e81000099003 0100000210060894 030100000e100608
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001001000 0b80040100000e08 0606015ba40280a0 808608000be00300
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000bd003001000 0bc0030210000bb0 0301e81000099003 0100000210060894
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030100000e100608 8403010000000ca4 0607e00340050006 0000008400070005
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00001f4e40040006 0000000000000000 00000000000000fc 4002001480140018
ZMM25=0b4a102a0b4a102a 0b4a102a0b4a102a 0b4a102a0b4a102a 0b4a102a0b4a102a 0b4a102a0b4a102a 0b4a102a0b4a102a 0b4a102a0b4a102a 0b4a102a0b4a102a
ZMM26=25ae978125ae9781 25ae978125ae9781 25ae978125ae9781 25ae978125ae9781 25ae978125ae9781 25ae978125ae9781 25ae978125ae9781 25ae978125ae9781
ZMM27=01c0f1bd01c0f1bd 01c0f1bd01c0f1bd 01c0f1bd01c0f1bd 01c0f1bd01c0f1bd 01c0f1bd01c0f1bd 01c0f1bd01c0f1bd 01c0f1bd01c0f1bd 01c0f1bd01c0f1bd
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=a50c0000a50c0000 a50c0000a50c0000 a50c0000a50c0000 a50c0000a50c0000 a50c0000a50c0000 a50c0000a50c0000 a50c0000a50c0000 a50c0000a50c0000
info registers vcpu 3

CPU#3
RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8530e555 RDI=ffffffff9ae0a820 RBP=ffffffff9ae0a7e0 RSP=ffffc9002073eaa8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d
R12=0000000000000000 R13=000000000000000d R14=ffffffff9ae0a7e0 R15=ffffffff8530e4f0
RIP=ffffffff8530e57f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f942c2c96c0 ffffffff 00c00000
GS =0000 ffff8880d6cd6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055555b508808 CR3=000000005c32d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000fff Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 370fbb85fef2cdd1 155757100d18d0fd
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e72b10bfee90ea77 062cdef3173b142e
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 923ec9bb5882757c a53346bf67e13e15
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9274123618e00280 379ebac35c686d42
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000014c0
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 22f417b000000000 00000000000000ba
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000002365c328 00000000236ae2a8
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 22fd1c32000000ba 00000000000000ba
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ba 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4fd20d1e1bf31a75 9345cd3a78880711
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d79b6b4e71f06ecb 7b4142301227efc5
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 66b00d2500000000 0000003200000008
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8779fc74e77d77ee c37ed04c7b3ddee3
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 c200000000000000 0000000000000001