last executing test programs:

1m35.434158092s ago: executing program 0 (id=103):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x3)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a843500680601fe8000000000000000000000000000bbfe8000000000000500000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7c3bf760"], 0x0)

1m35.432001318s ago: executing program 0 (id=107):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0xa000400)
shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-neon)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000100)='ro\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffedf, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x480)
ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x2)
close(r6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x0)

1m35.103917813s ago: executing program 0 (id=113):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="a080000000000100080004004400000008001b0000000000"], 0x30}}, 0x0)
r1 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe)
keyctl$read(0xb, r1, 0x0, 0x0)
r2 = add_key$keyring(&(0x7f00000014c0), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)=@secondary)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000001480)={&(0x7f0000002000)={[{&(0x7f0000000180)="c86629f68a196fa459c3c919c37d99124d4ade584a398e86860e31c68ba4ce66edd058c4c4e1d71b53786549530b00eab28faaf7c36d9979f3858f76686157e6ce0140996f91887d593a9f7d09d9fc6a203a38b01f02e2a788bb94ca50ce5cfce7f0b57ffc6367d47ca34f33c297efc4993c767acd59553d21411b29bfe655c6a3e570668a7a697bf8fd31364821d8a6389b52954f81ec661df9ffecff2445ea9d245f388744a30df69f48aae15853f138bc9ac45ecc64c2d09c8e3eb530ff5e5abdcc5c12ff6716325194286b", 0xcd, 0x1}, {&(0x7f0000000280)="040768f2ffe937d63f992ef360241475ea39f349971dbd56a9ad00d8ab99b800ea45fef9498256e8f886af4688d28522bd7f86f06232c5066bed2a651ead37b1d650090c2254ccfa203a8d54c989b00eb7fab711ccd0ca23e3dd937151183a4016115478fc6796de0f2854fb9363537d66d4c91beb430f4fad84d8a9976cb015aff8e39658382861947b3eca8656d4b4471810ffc26fc978ca1a0750d4042d03ccf6de19d2e3d3a7f666085add0a22e0209401e1f50ab05649861f6cd652d5f8fd9778c3c529aa64a03ca7666586f7e78ad2b04431137b8a4a1454be182e08e81c5ca9f7cdb1c2da07b9625037431f7a9f9165", 0xf3}, {&(0x7f0000000380)="7c2985bf95c02a9de77be9ba4075762103b6fee201", 0x15}, {&(0x7f00000003c0)="5410b5a7f9c406d12c7ab11da03ac9a80a6805a576d6939b1eab916293345649ad674263fcbd998f4ef0c5ab47a7e14cb4a5bff51574f38ca70e8e84d3a58a43c9bda2536db965dc9de1ce683d93bbc1377e39b84130ca3081f9d2bf31afa28cc26749dd41abc8a0624fa2fa74d5db52533f9768c574d990d0feead09d72b5a07c287d1600cb78b5b28af348fe3fe12b71ed1ed644c7725d7f5c730c8351b0d062727a1742d2ff2276a869b19e7ba617e31c53c60755f560fe4c3f6979de27", 0xbf, 0x3}, {&(0x7f0000000480)="65722ea44930691a62fd9f6f7396c625f0cae2f92328910888d295b4c9207dccc5a0bc9b2dc3604eb2a189bd46da63379387c4949b99c9685abf50c241ce057e37e12667a09bbfb36a727456d7053942ac02b2c9a688e41526246b1b4f336e856f325b0177ff31f74e4217d8e412fdf502449c5ed541c11b8d00e8197c5c7fa7f8c65b123eb83729e1b7c958f3592635ff8cbee641bc99e217f1b82b76c929ca7b28a82a3551d24b3aceffff2b4f90c4816701dfc306b871ecce199bc5e29df253b7cbbdad43f446b22e24b7c630c77f5abd6be11c759cc30559165bd8c7d67bc409eb927a05ccf5d5cd95a9a7c93d62eb79014cff7fc17a8903dbb74ed8f7568467ca0e596502b1c2d4574589c5e3ea5c2eebf8bf50813e1f90006b6551b09808c471d95f2b836e13aab3b549ca0172d675f605224d2f36a0879a8654be9d29613eeb64d042ff2fee51a7da94f1123691b26b717cf55ad7e1735b90b380fd06f36fddb98209d91c58459e0aadb5db14411e61fa1dda14ae21d401ad980fb0e571ecffddd34b63c5d18be3eab938c2c44021b0c6d293c9edd1db7bcf291fd3d8529fc7878f4c249e888dc84cc79475ba2d0f5cfe74e3b914ae368c998e793f566fc80fe22b77ab786601430d286df12c77265c55017600979920e78a94631195e7985127a253f3d57c468ae18b5ac0a83bf5b98d1f3c6d15d216795e4a0918df5d604fdc9f52be58e24e77b5471ed7e12722d980aed68e7fc8c39fcffa3c4fd6325b6ecc24313e9f14645773c8e4ae23a58c1522aac29dfd86557db3d8c0736b2375f19d1c056982fda7dd8fe6530bdc92da1c139bfcafffd2ebc25cbebcde77a9c057b5a1e510bcd581e2ce267aa5edd0d66900e2131261efedfa682b2a82a0b5feb98fbd7e29c74faa914887fc46446d35809a769cb3bd84214e24b8bfb7faa56689516191463360453252d5626280da05686e1073614ac2f3a9177f3619e4ed8911d4fda5db0857c60f71ab8c6f429b0c27e423ed9239794f1abf69a715e9f2d2399b0e399fe24e6278dbe4bb991022a57f93e33c360bc6357200aab4253cd1e320eedff188a7e4d216a4addace99475e3f12e357c3aa27fcea3c98e5102a99f2e086c4a31c40adec7b6500c1bbaa939d3c8a41c0f443f92bbf303b9f60722c901f902876b872cb1cff247c15235fe424c2f01cde7ff286d95e2b67ddaa90445de876789ead72d329314c22a1a63ba694b9160622232f4cd6ec4820d612aeb142b0c82b6582250ca2a344322d9d5816ab03dcdcedb4c94ee930e6072426a782599950dd75cca20f2cfce216cbf549ac10d80546bc6928a7bbd5e5d3d26856f0b7beea77e990ba9061fe56cd5b4a5b024f832eaf1253fcdc5973a8805b72e02e9ae9fa3086b264c45c3ad4f82c6b550ba3990c2ed72670beca32a2fbb793ecb0ea2c0edf08dabf998e813a951f6f524c2ee294d2980637dd706ba41eed313d6256406b8a8ed02aab6a0913a989118750f648e2fdc43ab661957710c91157a343e5c5dfde3596718a830c4a8afc489b67e61d3ecd958c8a89447a492e94f580bf34016143da366141fd8ea6493ebfd1b21ede974c061d763572f92b897277d8961461dd4744c23894a44ab52dcef9b73bc7645a8bc963087b8a557b04a698c0ce074820e1456fb2712c78163a1200b8829e6c354c8c749e8ed288bb9ff5439e0a04c679eb56783fa9898afb5f79bf392d59b8a0fe894a7fa78ac92a814ffbff59bcde41acd8d9a3a66ea1faa4c6a0df15ae355f97e44437851381f393af2611bc94f4fb9e740b87b5f01d07045d386ef118583d8241539db243a60170af045cdb5d02e039ada15dfdede117318d2fcd49893b64591cc74979c62a73babe72035a8a91561b9ca78819d9705bcb63227a48c278a81b14415da6fd84b7ffaf38197f88d5fc30553c705da0e82724fc2e3ddefe46e5b906855d5d2c3a268c596958c493a5a23a6947cb63b1d8f9ed451c0b76d39fa39e3c87bc6453d485548d4026485a578dd1433c2e257aafd19127057de591f865fe6138f68bd057e0f3e4a245166a15e4d3fafe48c8bf1fab5c4530e933c31bcc9c0f86c51695d2aad27228707bdd22e40680ae57214bcefc571ea812ab5d98ba2e61a1288cd655a81fca6e2238afff13d56386546382f698be89f9d32294993bb7079db2428bd6f0d96db42825b003d02612fbe3feb19a745cbb0a06ab5f8bb1f28da97db671956273a36e5e6833846ceb0b818ca5b39b229f26137da7f496bf2e420d65524b7b6b135f4fd36475d158b1f6d4daeb283719d76e028447611ca795378c1ae0c9440615563a90941f6ad073893131c8673fe4b09de1ba4e0d75a2667420a860dac2a20b45e860f13bb37dd834ae123f709e5e819c29a80c669924225dcec6739fc4dd6686a7c5b1e7f23b4035c27af31a76a01fb3b65563f40262ebf17034bbc2eba81dd41ec7fe94a163105f471a69604a0078cc2a6337e038adad69892ae177c6d3a2efdf7719f47e7aff9e13135405ed8fba2083f0c1a5e44c9f4a021527ec3d958d012803d8e80e84922f47463ccc87366998a6e182de5001597191a36ec7db1bc458bb64c389a0388acc304fec586b39291383840d9d921b503043069f27a62fd2c638cf129cef343439c9c2566f5280c94ccd41ebbcb2539a0493861e9229a7c8dbcbdde14a41555436948907c2e176944523841ad084c3ed3bd3aaf8f2dafaa223a13c44df63913f0efc3982d1368d062ebf30226ae4ce921a91540fc4289d0ebab5a830e163ca795ecd2b665cc7e8da94c486c3f8cdac42c59220a62e4102fa880b7ae809963ccc33bcd3e694bbd8ee3ae0959b9e373fa0981bab6e3de69f8db9f273be8f6d09f0ea98aea4904957faa86dc50811597cdb38949fe3ace6e1735d659a5bd68ab8479e92cad446989adbbeeb5bc7f3b4aa9318f55ddc0f7759a9920922bea4c2568108c8b3ee3dc3323a6c6a66c25b44ce992bf5bd2641008a049735bc330cb1687fd785a78995bf64b8cb9a5a64acd7a63cd1ec0c4d2c602ced7d75f3f1ef8cd96596e89238b8078662d3e1773c6dfb34e3fdb44bfb9c24541a02a38cb79e3c6fcf6ec8795e93147a20b6a04830db9f92d34c734f85fd3c4aed560123a5f3c295c566f47d7d46ddff0c103ffd094c89f8010579aef5ab63dc3f142458a52ec9403673f65a87e512f1a0dc425a875dabfdb1ecdb1daea836c71ed69ad2d04e1b10744eaa5b1c0c9c673bb662ffd957b39066bfb10b4e696eafdea26d1fadfb4c99b19db288ba5a4c06942ab2c98e5d3975a9b8d34d8dc0efb56ff985eaef6957c50adb335ebe270ff025d3f54102f65270c00b32aa2bb511662219e3835b40d5436dad3f49c313d1bbaa8888f762185950b282ecac94c72b4d66e0cf724272306ad6831829d9d463cac5935ef7d142f0e64af739565a13d4cbde1d38a401dda58500144da1a367d64d689e87b02a4aba8d9f127568a005c2e6405886b3e51f0fd4cb9d0ecabed77e0597ba97ede058475d9a59ed1210a7eda6dad7ee20474aa2dd2f958f8071d621f72262993f282af1b77c091eef4c62dfb5144218873aebeeea0cad265deee5363df5dd06bd3cb51dae2a05a3ba1f44a9ab22f15e93e13c212def33ea176815524843a22931177aa78e5f44be58b6fc5c478ea0a59bd2259a05a9668cbae14999ddf0508f208827a9f75d2587a19ca4c69da91846b3d17000425a58b9d73b740c0b0e8fdeec95b4bdb17c014d22f5aaf445191022e3ceecd0a1ef454dc1f32c62060b513c9666f71dc483cbe1f438502e0c5ccfb61d9c939872ef13ab28941e460e384884fa0045ac3fb1f5d274e3a4f2dae59e5ababddbb23a6424bafffe606a7bb2dab3ea5fbdc64ca5b8aa5cf71e036b830cad88dc6d31acf382eb25cb172d5079bc4f2b8e437e86dbe4e18b1d952a3cfac5ef50dd6499c02645827c8261dc006bb58b4862d97dc23680fdab5b2a302393f701acb1fe4be2151f832000fd43b6bb61ef68e06a35223368e2dfc3cbf2915d67facf5fe1bbde02569f463ec8eefd23d1fa2df97d234bf284833a631810b7b48b22606ea4371d460881a3ad390c02530c18200b840166010b640740a923eaae7baf8be7e24e6f4e2e89087c42b0896fccd9b14107627a59c392da82e3e2d100903c2cffbdbc27a0b62a9f1b474053e05110b814ee03587d22bed6dea58468271cccdf3bd68919edf03f9587b4609d626d95bcd3162c65bc51d14ec629add05c814df55d90279cd0bee183315ae8c9ffe1047fcacd537ca42cd945399fe20c6db260500834c97f9a298585f2f3e393da8175199b98f139d39bad238145471d59f269706871ad4960454abb82da30c7de2ae4e105f85be53b023293c7eea31e8da98237b2834864b8c3e953b6e5c314f3f6a723f9509837e72045eba81d7d023f3c583418e7682ff918e2712099550694ba485e158c536223e9c2a0e857e42ef4b29ffa5c2db2f09aec23cc1d92f2678dd7acc6058f71adb40d874004d9893e291467abd7db0c0be0e57e74231bc0d3228fb1c453a8b51a4d2757c743e2e4ea6c2605e12914315eb137f9f94beab193f806086294f987051b3a13353f7cf979ad855163a9a4b71baa0913c47b2830b9229918b3ec7a54aa68b1b219d35f664598b5ffa012633f43904f556e637fad1b55f2ad6196b4737b746c9d6829e4cdc831353c33f44ed2565e8d9bab83ecc1f9f80cddc82d2ebd53020aa141da8645b3d38cb3c04e36a54f672728fdaaf53e1ddaddd4107a310923499a4e06e9e021bddae24784889210be7c6a9dc84c841ee9b8ca85ba0e96aa9eb0f6c33e9c50bde9fd9667fa5d606e6881a60ac39e2c0d9f8fe31a80649250e5597ccce6970f2450cf88a60ba8c16d73045353c508f2d6ad0f23416029fa27fe906420e18d33d2755e45f020698bc6fc23cecb05004fe438f7854711662b7b336a153e3aa36fd5600ea792ef44e269d634a5428f77ef0569458736926a0b1e11df3de395a75dfa30495ec51771a9a2f5609351ce6114b34696a96e138e16bcbd654e263313e8e8d53721d1e8371fce606cb402251d8a813035c6f2104a20b38ea82fdb61d531bc1e7b45013a5854cb8d12e38ed39bc3504595d70b7d8ea2b3497c416c629c8d01accf3b2ddd4444b0a34cce1f40f9cc73fc3f4ffce31c7acce35a2a8d1f0d94a277dc213aed2cbce00be4fab24618cd179c13e1786cf2b946aa6bb33ad1b1414a9b49111acd03adf609a842d082cb5b24174676ab9f5c40f85593493efce286f516ea68575a48912a201673d5417ae33a672fa7a405acbceee9e5e56fb35de47ed8eb977fa33f181c151f8de25bcd95d66237bb6e987eb5901de3bbe54768012e2e7eac320d6e7717fff65db207b068301dc0fb2319c027c3ef1cb85a94b046fe206d9c8b9828c0756df45e48711ec57be0dc3f8365e2bf25e99b7fe941a117032fb6872a9bb4013c5d98bbf4568a05eadfb793f9eeb5acff343fc4fd62320208e8fa95781ee1cde54498d1afd0e24aa8569e7c9cc491b8bf2510ea374925c794a5317c83f031efd02a70f5d5110bcf8e9a83b9e9681cea0fe316853c8dcd5e81eb28c6a2c6a39708aed194b1e5c6f05e25781e2195ff0cd140a3f649b963ed18fefa8efa34326dff75c030118b810070aee06f2266f1f330db16dab2729138cc38fd97a101661a246f90f0a90de06a840dbc0617e4358ffe7592ec747a6bf1e5a5ebdec716", 0x1000, 0x3}]}, 0x5, 0x3, 0x3}, 0x1)

1m35.103767135s ago: executing program 0 (id=114):
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
socket$inet6(0xa, 0x800000000000002, 0x0)
mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001302000000010000000000000000000000005f"], 0x0, 0x35}, 0x1f)
syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
fanotify_init(0x2, 0x1000)

1m35.051455941s ago: executing program 0 (id=118):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x121401, 0x0)
write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '.', [{0x20, '\xbdN\x04\x92\xfa\xc9\xe7}y\x9d\v\xaf\x80\xb92\xc0C\xc72\x96\xb8b|B\xff\xf2\xa25y\xec\x92\xecQ\xcdUG\x8dJ1\xd2K\xfa\x9eH\x86*\x96\vv\x1c\xc2J\x8e\xdf\x96\xbd8K\xe3 *\xc0\xc7}>_]\x7f\xd5&X7\xfdr \xd8\x14\xe3\xff\x0f\x90\x85\xea\x16\xa1\xbd\xde\xa4\xa7\x81D\xb7\xa8\xd3\x88\x809\xc7\x94\xeb\a\xb5\xa1&\x1e\xc5|\xf8\x18\xfdl\xb8\xb2\xa6\xc6s\xf6@\x12\x8d9\xea>~\x18\xe5\xa8]\x93\x01\xb1|\xc2\x94\r\xf3Ei\xb1\xb0\n)<b1\xaa>u\xcdM\x86\xea{\xbe`\x84\xfa\xf2\x7f\f\xe0~\x13R\xb4\b\x94\x17\xf2{\x9bR^\xfc\x1e\xe0\x9d\xea\xb5\xcep\xbc\xdb!;\x1c\xad'}, {0x20, '\x13\xfa\t\x88\xe8\x86\xfb\x85\xcd {B,,\'@\x00\x00'}, {0x20, 'o\xa5\xfc2\xe9\x91!\x04\x10\xc0w\xf1\x84n,\xab:[Y\x8a\x1c\x97\xeb\xf0\xbd\x03*\f\xbe[\xb4\n^\xab\xc4K\xef\xdc\xfb\xdb\xb4\xab\x1e\xbe\xa8C\x86:(;A3H\x01W\x01v=?\x86}\xc0oL%n(\xc9q&l\x9a\xf9\xd3\xaa\n\xb7\xd8\xc3M\xb0|\xe9>uz\xea\xd6\xe8*$\xa1\xb3\xa6\x93d5\xccX\x94\xe2\xbeE\xeb@\xf3\xe8\'\xbeE\x04F\xf0\x92\xe13R\xe4'}, {0x20, '\x02'}, {0x20, 'proc\x00'}], 0xa, "1116fcabb70157755c3825d8fa4efa11f9b7a81789561a811c003421eac7e746d4554ba8acd244e85a2ab8a25e9d4e9a92d35fcce0d5d2ee35aac07cc9cbfb18db1b17b25eadb98947153747bd67c7a94cd851ab9e5c54e43f80464de385ad3ffcbb7b9df8f5cbaa191ac83c5a6b059e3ba6ea162c6136b821533764e9d5fceed583fcf5088261175e63ee7f75f00d934b4f3e3e1dd062207f63736450336e0dd2d3e4fa7ff2c7db53b8b3dd20b21bc1ea099d50792ab532a92329653426c6e2899e5502ce74488e48d43ba615cef8bb4298c01603560a4b58faf818e1a7efea1d248de50ae647d091"}, 0x23c)

1m34.99294296s ago: executing program 0 (id=120):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x8, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x80a0000, 0x205044})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m19.864913263s ago: executing program 32 (id=120):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x8, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x80a0000, 0x205044})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.030208312s ago: executing program 1 (id=1589):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0xc850)
umount2(&(0x7f0000000280)='./debug\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3a, 0x2d6e, 0xc0ea, 0x6, 0x200000005, 0x2000000000e, 0x400, 0xd})
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0)
read(r5, &(0x7f0000000180)=""/100, 0x64)

801.780335ms ago: executing program 1 (id=1597):
syz_emit_ethernet(0x35, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c20000000200000000010027424203000000000000000000000000000000000040000080ffffffffffffff"], 0x0)

732.972943ms ago: executing program 1 (id=1599):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x20}, 0x94)

731.222876ms ago: executing program 1 (id=1602):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001800)={0x0, &(0x7f0000001c40)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x9, 0x7fffffff, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0xb8a}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xaa, 0xc2d, 0x7, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x8, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5b2, 0xb, 0xfffffffffffffffc}}, @nested_load_syzos={0x136, 0x20, {0x0, 0xf}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xf9, 0x8000000000000001, 0x1}}, @rdmsr={0x66, 0x18}, @nested_load_code={0x12e, 0x74, {0x1, "66ba4000b800980000efb9020a00000f320f01ca410f005bdc670f97c42e6766460f7c8600000000660f381d4d110f01d166baf80cb88085e88cef66bafc0cedc7442400d97d0000c7442402fbc4ad4cc7442406000000000f011424"}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_load_syzos={0x136, 0x95, {0x2, 0x1, [@nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @code={0xa, 0x4d, {"3e440f20430f01c20f0766baf80cb8de7ca383ef66bafc0cb080ee420f0f48deae65674781e9002000000f01c8c422712d29b9e80800000f320f2190"}}]}}, @code={0xa, 0x4a, {"0f07650f79f440d9f40f5c58c9430f06b9d00400000f32b9a10800000f32b903020000b8750f0000ba000000000f300bc2b8010000000f01d9"}}, @rdmsr={0x66, 0x18, {0x821}}, @nested_amd_set_intercept={0x181, 0x30, {0x8, 0xae, 0x9}}, @set_irq_handler={0xc8, 0x20, {0x14, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x80b8}}, @nested_load_code={0x12e, 0x59, {0x1, "66baf80cb8ee554984ef66bafc0cb000eec4c24d9dad0eced112f244ab650f06653e4f0fc76e028f2858a6c340260f01d10f011bc421ff2d500836f36526470f30"}}], 0x3cc})
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x8, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x0, 0x0, 0x1ef, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x4082f0b980d8a9a6, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240), 0x1a1700, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
creat(&(0x7f00000002c0)='./file0\x00', 0x104)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

388.309732ms ago: executing program 2 (id=1608):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800001c0012adb2000e006d616373656300000c00028005000b000000000008000500", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4c890}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x6}}, @fwd={0x4}, @enum={0x8, 0x8, 0x0, 0x6, 0x4, [{0xb, 0x2}, {0xc, 0xf}, {0x4, 0x3}, {0x8, 0x1000}, {0x10, 0x5}, {0xd, 0x6}, {0xa}, {0x1, 0x7}]}, @func={0x6, 0x0, 0x0, 0xc, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x5f, 0x61, 0x2e, 0x0, 0x0, 0x61, 0x5f]}}, &(0x7f00000002c0)=""/14, 0xc1, 0xe, 0x1, 0xfffff000}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x400, <r7=>0x0}, 0x8)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f00000003c0)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000000400)='syzkaller\x00', 0x54ffa8b7, 0xae, &(0x7f0000000440)=""/174, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0x4, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r1], &(0x7f0000000580)=[{0x0, 0x2, 0x4, 0x7}, {0x0, 0x2, 0x7, 0x6}], 0x10, 0xddf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0x6, 0x9, 0x79f33dacccd80e3f, 0xffffffffffffffc0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x80, &(0x7f0000000140)=""/128, 0x40f00, 0x0, '\x00', r5, @fallback=0x2f, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x3, 0x5, 0x9}, 0x10, r7, r8, 0x5, 0x0, &(0x7f0000000680)=[{0x2, 0x4, 0xf, 0xb}, {0x1, 0x1, 0x2, 0xc}, {0x2, 0x4, 0xb, 0x6}, {0x3, 0x5, 0x8, 0x3}, {0x2, 0x2, 0xc, 0x2}], 0x10, 0x4260}, 0x94)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r9 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x40)
setsockopt$inet6_buf(r9, 0x29, 0x39, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
connect$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e24, 0x6, @private2, 0x7ff}, 0x4b)

385.702787ms ago: executing program 3 (id=1609):
syz_emit_ethernet(0x35, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c20000000200000000010027424203000000000000000000000000000000000060000080ffffffffffffff"], 0x0)

385.407236ms ago: executing program 2 (id=1610):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x28}, 0x94)

385.166627ms ago: executing program 1 (id=1611):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='vegas', 0x5)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030005000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'pim6reg\x00', {0x2, 0x0, @initdev}})

385.058882ms ago: executing program 2 (id=1612):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)

333.354832ms ago: executing program 3 (id=1613):
r0 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="e00000001100010000000000000000004015143f4529d72384a65b0f683ca0a21fdf11444d7bbf3bc8d961bdc2e3267150aaca5d87ea3a2d0572f6a7882ef366b38649334f9e14aa669004dbd601f7a573479bda64d8212bf58224968c420b2358508e8b0e65ea507a9d564c6e29ad53eb774cd5a8114674850d36744c882033716525c99530fc100d4a5998ba6bdfed725c35ced379c91e5d395b09e24054fac066b0d60932a7fb2f4423642b16de2b91a996c389e0cb74f8f1dbe67149fdad4cbe11380128a4d403799666fbe091ac999b1c7ec800cbbf61d13ab1b9000000fd3caea3b63fc12d597860f14bf726095cec0510e950d2d6434a1c249447886f2d10f1739bcdab6a01d9b55f273677f9e1d96351ebd316db039f02f10a51f06791d54d0dd5d2d8e54c61f1f90951f2e2aff53c9d9ca623bdfe7e2eaaf630bbaa88bdd61d7f9737b8bb327077"], 0xe0}], 0x1}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x9, 0x0, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfa}, 0x10}}, 0x4084)
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead)
syz_ublk_setup_io_uring(0x7bc0, &(0x7f0000000000)={0x0, 0x1c1a, 0x0, 0x3, 0x2b7}, &(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000140))
open(&(0x7f0000000400)='./file0\x00', 0x40020, 0x24)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x47, 0x0, 0x0, 0x9, &(0x7f00000001c0)={r3, r4+60000000}, 0x1, 0x4, 0x0, {0x0, r5}})

332.701282ms ago: executing program 1 (id=1615):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0xe, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x1007e, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x5, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x5, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000180)={0x0, 0xffff0000, 0x40, '\x00', &(0x7f0000000080)=0x4})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000001c0)={0xdddd0000, 0x16000})
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x98c, 0x4, 0x5, 0x0, 0x3e0, 0x3, 0x1, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1cd78784, 0x1000, 0x80000001, 0x5, 0x100}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x4202, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x0)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})
r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/1:0:0:0\x00', 0xc0, 0x0)
ioctl$BSG_IO(r11, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x16, &(0x7f00000001c0)="f8f369864b6316adde6eed77faa895d6b9d4558a4b49", 0x6, 0x0, 0xfffffffe, 0x7, 0x60, &(0x7f0000000200), 0x0, 0x44, 0x0, 0x26, &(0x7f0000000280)="11cc570bd5a50b9d924cc525982399ba02fe6f00b6c05e63e535832ff136a6a791b2699f20cbfb32e05b6f61554861d0f36a5f62f5c9e2be20b4502e84daa43b89b892fa", &(0x7f0000000300)=""/38, 0x7, 0x0, &(0x7f0000000340)="ea5615f4767f9e", 0x3d})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xcc, &(0x7f0000000440)=""/204, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x94)

331.940854ms ago: executing program 2 (id=1616):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc_dir\x00', 0x1ff)
mount(&(0x7f0000000040)=@sg0, &(0x7f0000000000)='./proc_dir/acpi/wakeup\x00', &(0x7f00000010c0)='proc\x00', 0x10, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc_dir/acpi/wakeup\x00', 0x0, 0x0)
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000280)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="a5810a50", 0x4}, {&(0x7f0000000300)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f", 0x19}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
read(r0, &(0x7f0000001140)=""/4096, 0x1000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x468, 0xffffffff, 0xf8, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@private2, @mcast2, [0xff, 0xff, 0xffffff00, 0xff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'vlan0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x8, 0x1, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x4, "03b6"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x4, 0x6}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xff, 0xff000000], 'veth1_to_batadv\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x5530656f0c715e48, 0x4, 0x2}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x7, 0x2, 0x0, [0x3, 0xa43, 0xffff, 0x7082, 0x7, 0x0, 0x80, 0x9, 0x9, 0xe, 0x7, 0x9, 0x6, 0x4, 0x40, 0x8], 0xe}}, @common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x8, 0x4, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5, 0x2}, {0xffffffffffffffff, 0x6, 0x6}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [0xffffff00, 0xff, 0xff000000, 0xff], [0xff, 0x80ffff80], 'pimreg\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x2, 0x2, 0x20}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@eui64={{0x28}}, @common=@dst={{0x48}, {0x6, 0x4, 0x1, [0x200, 0x3, 0x6, 0x1, 0x6, 0x34b3, 0x9, 0x10, 0x2, 0xc, 0x1ff, 0x5, 0x0, 0x8, 0x7], 0xb}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7ff, 0xf27, 0x7, 0xfffffffe, 0xb02, 0x9, 0x2, 0x1ff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8)

251.237989ms ago: executing program 3 (id=1617):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x3, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f}, 0x94)

192.338407ms ago: executing program 3 (id=1618):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f1, 0x0, 0x9765}]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d60c15f308000240000000010c0001004e465155455545"], 0xd0}}, 0x0)

192.172116ms ago: executing program 4 (id=1619):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140028000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200000f00000016030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

113.089139ms ago: executing program 4 (id=1620):
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = eventfd2(0x100, 0x800)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000100)="dda136dfb2938c66", 0x8}], 0x2) (async)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000100)="dda136dfb2938c66", 0x8}], 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x4d, 0xd832}})
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@delqdisc={0x1c8, 0x25, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0xd}, {0xa, 0x6}, {0x10, 0xfff3}}, [@TCA_STAB={0x1a4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x15, 0x3, 0x101, 0xfffffff7, 0x1, 0x7, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x5, 0xfd, 0x9, 0x5ac78fdd, 0x2, 0x800, 0x92, 0x8}}, {0x14, 0x2, [0x8001, 0x200, 0x25c, 0x9, 0x0, 0x6, 0x3, 0x10]}}, {{0x1c, 0x1, {0x9, 0x1, 0xb, 0x3, 0x1, 0x1, 0x5, 0x3}}, {0xa, 0x2, [0x0, 0x8ec2, 0xa8d]}}, {{0x1c, 0x1, {0x7, 0x7, 0x0, 0x4, 0x0, 0x8, 0x5, 0x6}}, {0x10, 0x2, [0x9, 0x0, 0x8, 0xffd4, 0x5, 0x1]}}, {{0x1c, 0x1, {0x1, 0x2, 0x800, 0x7f, 0x2, 0x8, 0x5, 0x3}}, {0xa, 0x2, [0x100, 0x8, 0x1]}}, {{0x1c, 0x1, {0x7, 0x8, 0x3, 0x7, 0x2, 0x1000, 0xfff, 0x3}}, {0xa, 0x2, [0x380, 0x4, 0x7]}}, {{0x1c, 0x1, {0xa6, 0x1, 0x4c2d, 0x1, 0x2, 0x8000, 0xfa9, 0x6}}, {0x10, 0x2, [0x8001, 0x6, 0x4, 0x4, 0x40, 0x5]}}, {{0x1c, 0x1, {0x7f, 0x3, 0xb6db, 0xab, 0x0, 0x667, 0x3, 0x1}}, {0x6, 0x2, [0xfd]}}, {{0x1c, 0x1, {0x4, 0x6, 0x401, 0x2, 0x1, 0x4, 0x6, 0x8}}, {0x14, 0x2, [0x5, 0x4f, 0xca, 0x5, 0xc, 0x0, 0x2, 0xe]}}, {{0x1c, 0x1, {0x10, 0x96, 0x2, 0x5, 0x2, 0x0, 0x2, 0x6}}, {0x10, 0x2, [0xe, 0x401, 0x4, 0x7, 0x800, 0x4]}}]}]}, 0x1c8}}, 0x44080)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) (async)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0)

112.874146ms ago: executing program 2 (id=1621):
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x8001}, 0x8)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9]}, &(0x7f0000000180)=0x54)

90.081737ms ago: executing program 4 (id=1622):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x61}, 0x94)

89.753789ms ago: executing program 2 (id=1623):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
creat(&(0x7f00000002c0)='./file0\x00', 0x18c)
r3 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect(0x1, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x108242, 0x78e22799f4a46fa9)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf4e)
recvmsg(r4, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x2020)
sendmsg$inet(r4, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x80)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x41, 0x107, 0xfffffffe, 0x1, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c855}, 0xc000)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r6, &(0x7f0000000380)='file0', 0x5)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000400)=0x7e0759ac)
r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r7)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r8 = gettid()
r9 = syz_open_procfs(r8, &(0x7f0000000040)='timerslack_ns\x00')
write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000100)={0x30}, 0x30)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'erspan0\x00'})
syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffbbb8bbbbbbbb88a8090081000800000d0000002027014650f5f3d9041589e1eacfc891b2df5351a067e0a3bb8159cc258581e4bd524aeb5e4f0d1bf2c22e532f62fd11c276993d24950d35b252e19340ddf7000000000000"], &(0x7f0000000440)={0x0, 0x3, [0xa9f, 0xfcd, 0x25a, 0xc1d]})

84.191141ms ago: executing program 4 (id=1624):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)

83.649786ms ago: executing program 3 (id=1625):
syz_open_dev$dri(&(0x7f0000000000), 0x45, 0x905) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x45, 0x905)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x9, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x4, 0x7, 0x8, 0x0, r1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x40050) (async)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x40050)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000005c0)={@broadcast, @initdev}, &(0x7f0000000600)=0xc) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000005c0)={@broadcast, @initdev, <r6=>0x0}, &(0x7f0000000600)=0xc)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=<r7=>0x0, &(0x7f0000000680)=0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f00000006c0)={'erspan0\x00', <r8=>0x0, 0x7, 0x20, 0x2, 0x4d1, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0xfa, 0x4, 0x0, @rand_addr=0x150, @loopback, {[@timestamp_prespec={0x44, 0x14, 0xda, 0x3, 0x7, [{@loopback, 0x1}, {@loopback, 0x4e6}]}, @end, @cipso={0x86, 0xd, 0x1, [{0x6, 0x7, "6fa62c433c"}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x8, 0x7ff, 0x4, @private2, @mcast2, 0x7, 0x20, 0x7, 0x401}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl1\x00', <r9=>0x0, 0x4, 0x6, 0x8, 0x7ff, 0x4, @private2, @mcast2, 0x7, 0x20, 0x7, 0x401}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6_vti0\x00', <r10=>0x0, 0x4, 0x3, 0x1, 0x7, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x8000, 0x8, 0x9, 0xda}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000900)={'wg1\x00', <r11=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x40, 0x80, 0xfffffffc, 0x4, {{0x3d, 0x4, 0x0, 0x9, 0xf4, 0x65, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0x3a, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x5f}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, {@empty, 0x5}, {@local, 0x8}]}, @rr={0x7, 0x1f, 0xd2, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @multicast2, @broadcast, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x72, 0x3, 0x8, [{@multicast1, 0x40000000}, {@remote, 0x9}, {@multicast2, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x1}, {@local, 0x3}]}, @timestamp_addr={0x44, 0x24, 0xfa, 0x1, 0x7, [{@loopback, 0x3}, {@broadcast}, {@rand_addr=0x64010101, 0x48}, {@rand_addr=0x64010101, 0x9}]}, @ssrr={0x89, 0x2b, 0xc9, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010102, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x9, [{@loopback, 0x1}, {@remote, 0xa}]}, @ra={0x94, 0x4}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000940)={'syztnl0\x00', <r12=>0x0, 0x40, 0x80, 0xfffffffc, 0x4, {{0x3d, 0x4, 0x0, 0x9, 0xf4, 0x65, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0x3a, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x5f}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, {@empty, 0x5}, {@local, 0x8}]}, @rr={0x7, 0x1f, 0xd2, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @multicast2, @broadcast, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x72, 0x3, 0x8, [{@multicast1, 0x40000000}, {@remote, 0x9}, {@multicast2, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x1}, {@local, 0x3}]}, @timestamp_addr={0x44, 0x24, 0xfa, 0x1, 0x7, [{@loopback, 0x3}, {@broadcast}, {@rand_addr=0x64010101, 0x48}, {@rand_addr=0x64010101, 0x9}]}, @ssrr={0x89, 0x2b, 0xc9, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010102, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x9, [{@loopback, 0x1}, {@remote, 0xa}]}, @ra={0x94, 0x4}]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000c00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xe8, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20040800}, 0x4048010)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'syztnl1\x00', <r13=>r12, 0x4, 0x8, 0x81, 0x5, 0x6, @private1, @loopback, 0x4318631fdf489e46, 0x10, 0x8, 0x9}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000d40)={<r14=>0x0, @broadcast, @private}, &(0x7f0000000d80)=0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e40)={'syztnl2\x00', &(0x7f0000000dc0)={'ip6_vti0\x00', <r15=>r6, 0x4, 0x0, 0x80, 0x9, 0x41, @dev={0xfe, 0x80, '\x00', 0x3a}, @mcast2, 0x40, 0x8000, 0x0, 0x2}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000e80)={'vxcan1\x00', <r16=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f40)={'ip6_vti0\x00', &(0x7f0000000ec0)={'syztnl1\x00', <r17=>r10, 0x29, 0x5a, 0x8, 0x1ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}, @loopback, 0x40, 0x0, 0xfff, 0xb}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000f80)={@empty, @private}, &(0x7f0000000fc0)=0xc) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000f80)={@empty, @private, <r18=>0x0}, &(0x7f0000000fc0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000010c0)={'sit0\x00', &(0x7f0000001000)={'gretap0\x00', <r19=>r8, 0x8, 0x700, 0x4, 0x7, {{0x1c, 0x4, 0x3, 0x9, 0x70, 0x65, 0x0, 0x26, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x80, 0x3, 0x8, [{@loopback, 0xc00}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0xf}]}, @rr={0x7, 0x1b, 0x14, [@multicast1, @local, @local, @local, @multicast1, @loopback]}, @ssrr={0x89, 0xf, 0xcd, [@multicast1, @dev={0xac, 0x14, 0x14, 0x17}, @remote]}, @rr={0x7, 0x13, 0x26, [@empty, @dev={0xac, 0x14, 0x14, 0x37}, @local, @local]}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000001100), &(0x7f0000001140)=0x14) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x0, <r20=>0x0}, &(0x7f0000001140)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001180)={'wg2\x00', <r21=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000001480)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f00000011c0)={0x248, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000080)
openat2$dir(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x22002, 0x10, 0x21}, 0x18) (async)
r22 = openat2$dir(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x22002, 0x10, 0x21}, 0x18)
file_getattr(r22, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x18, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000015c0)='dctcp', 0x5) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000015c0)='dctcp', 0x5)

973.031µs ago: executing program 3 (id=1626):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
creat(&(0x7f00000002c0)='./file0\x00', 0x104)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

388.445µs ago: executing program 4 (id=1627):
r0 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100)
r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0x1, @capture={0x0, 0x1, {0x3, 0x1}, 0x1, 0x1}})

0s ago: executing program 4 (id=1628):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x89020000}, 0x0)

kernel console output (not intermixed with test programs):

c T1 USB2.0)
[   90.583883][ T5842] usb 9-1: media controller created
[   90.588032][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   90.588030][ T5784] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.602194][ T5842] dvb-usb: bulk message failed: -22 (6/0)
[   90.610098][ T5842] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   90.640271][ T5842] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input7
[   90.663517][ T5842] dvb-usb: schedule remote query interval to 150 msecs.
[   90.668585][ T1265] wlan1: Creating new IBSS network, BSSID aa:db:63:d9:c4:b7
[   90.675928][ T5842] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   90.758071][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.762398][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.765560][ T8121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.811'.
[   90.765690][ T8088] dvb-usb: bulk message failed: -22 (4/0)
[   90.775534][ T5842] usb 9-1: USB disconnect, device number 3
[   90.812935][ T5842] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[   91.383155][ T8140] syzkaller0: entered promiscuous mode
[   91.385270][ T8140] syzkaller0: entered allmulticast mode
[   91.391112][ T8133] VFS: file-max limit 0 reached
[   91.395284][ T8140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.400618][ T8139] tipc: Resetting bearer <eth:syzkaller0>
[   91.418426][ T8139] tipc: Disabling bearer <eth:syzkaller0>
[   91.579810][ T5843] usbhid 8-1:1.0: can't add hid device: -71
[   91.581825][ T5843] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[   91.607878][ T5843] usb 8-1: USB disconnect, device number 6
[   91.731541][ T8158] bond1: (slave batadv0): Device is not bonding slave
[   91.738494][ T8158] bond1: option active_slave: invalid value (batadv0)
[   91.745743][ T8158] bond1 (unregistering): Released all slaves
[   91.761111][ T8163] e1000e 0000:00:02.0 eth1: removed PHC
[   91.961769][ T8163] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   92.356477][ T8187] syzkaller0: entered promiscuous mode
[   92.358852][ T8187] syzkaller0: entered allmulticast mode
[   94.612335][ T8157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   94.682965][   T42] kauditd_printk_skb: 99 callbacks suppressed
[   94.682983][   T42] audit: type=1800 audit(1785766047.482:24797): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[   94.727516][   T42] audit: type=1800 audit(1785766047.522:24798): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[   94.745699][   T42] audit: type=1400 audit(1785766047.542:24799): avc:  denied  { write } for  pid=8230 comm="syz.2.837" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   94.761076][   T42] audit: type=1800 audit(1785766047.542:24800): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[   94.775668][   T42] audit: type=1400 audit(1785766047.552:24801): avc:  denied  { kexec_image_load } for  pid=8230 comm="syz.2.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   94.785134][   T42] audit: type=1800 audit(1785766047.562:24802): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[   94.811181][   T42] audit: type=1800 audit(1785766047.612:24803): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[   94.837356][   T42] audit: type=1800 audit(1785766047.632:24804): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[   94.868200][   T42] audit: type=1800 audit(1785766047.662:24805): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[   94.921847][ T8236] kvm: pic: non byte write
[   94.934072][   T42] audit: type=1800 audit(1785766047.732:24806): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[   94.947059][ T8256] syzkaller0: entered promiscuous mode
[   94.950589][ T8256] syzkaller0: entered allmulticast mode
[   97.905385][ T8249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   97.942462][ T8272] FAULT_INJECTION: forcing a failure.
[   97.942462][ T8272] name failslab, interval 1, probability 0, space 0, times 1
[   97.947245][ T8272] CPU: 3 UID: 0 PID: 8272 Comm: syz.4.849 Not tainted syzkaller #0 PREEMPT(full) 
[   97.947262][ T8272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   97.947269][ T8272] Call Trace:
[   97.947289][ T8272]  <TASK>
[   97.947293][ T8272]  dump_stack_lvl+0x100/0x190
[   97.947334][ T8272]  should_fail_ex.cold+0x5/0xa
[   97.947356][ T8272]  should_failslab+0xc2/0x120
[   97.947378][ T8272]  __kmalloc_noprof+0xfc/0x820
[   97.947410][ T8272]  ? tomoyo_encode2+0xfb/0x3c0
[   97.947439][ T8272]  tomoyo_encode2+0xfb/0x3c0
[   97.947452][ T8272]  tomoyo_encode+0x29/0x50
[   97.947462][ T8272]  tomoyo_realpath_from_path+0x18c/0x690
[   97.947477][ T8272]  tomoyo_path_number_perm+0x23c/0x580
[   97.947493][ T8272]  ? tomoyo_path_number_perm+0x22e/0x580
[   97.947510][ T8272]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   97.947539][ T8272]  ? find_held_lock+0x2b/0x80
[   97.947556][ T8272]  ? __fget_files+0x215/0x3d0
[   97.947574][ T8272]  ? hook_file_ioctl_common+0x140/0x440
[   97.947587][ T8272]  ? __fget_files+0x215/0x3d0
[   97.947600][ T8272]  ? __fget_files+0x21f/0x3d0
[   97.947614][ T8272]  security_file_ioctl+0xd3/0x230
[   97.947639][ T8272]  __x64_sys_ioctl+0xb7/0x210
[   97.947657][ T8272]  do_syscall_64+0x115/0x870
[   97.947674][ T8272]  ? clear_bhb_loop+0x40/0x90
[   97.947687][ T8272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.947699][ T8272] RIP: 0033:0x7f00eed9e019
[   97.947708][ T8272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.947719][ T8272] RSP: 002b:00007f00efc93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   97.947741][ T8272] RAX: ffffffffffffffda RBX: 00007f00ef025fa0 RCX: 00007f00eed9e019
[   97.947748][ T8272] RDX: 00002000000042c0 RSI: 0000000000001277 RDI: 0000000000000003
[   97.947755][ T8272] RBP: 00007f00efc93090 R08: 0000000000000000 R09: 0000000000000000
[   97.947761][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.947767][ T8272] R13: 00007f00ef026038 R14: 00007f00ef025fa0 R15: 00007ffd659c5a08
[   97.947781][ T8272]  </TASK>
[   98.015493][ T8272] ERROR: Out of memory at tomoyo_realpath_from_path.
[   98.373274][ T8305] syzkaller0: entered promiscuous mode
[   98.375646][ T8305] syzkaller0: entered allmulticast mode
[   98.900346][ T8317] af_packet: tpacket_rcv: packet too big, clamped from 22 to 4294967272. macoff=96
[   99.924260][   T42] kauditd_printk_skb: 26 callbacks suppressed
[   99.924275][   T42] audit: type=1400 audit(1785766052.722:24833): avc:  denied  { accept } for  pid=8323 comm="syz.2.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  101.238391][ T8297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  101.271463][   T42] audit: type=1800 audit(1785766054.072:24834): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  101.300136][   T42] audit: type=1800 audit(1785766054.102:24835): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  101.326312][   T42] audit: type=1800 audit(1785766054.122:24836): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  101.337635][   T42] audit: type=1800 audit(1785766054.142:24837): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  101.350619][ T8343] syzkaller0: entered promiscuous mode
[  101.353771][ T8343] syzkaller0: entered allmulticast mode
[  101.362575][ T8343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.372370][ T8340] tipc: Resetting bearer <eth:syzkaller0>
[  101.391687][ T8340] tipc: Disabling bearer <eth:syzkaller0>
[  101.405445][   T42] audit: type=1800 audit(1785766054.202:24838): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  101.433973][   T42] audit: type=1800 audit(1785766054.232:24839): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  101.440532][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.878'.
[  101.453161][ T8351] syzkaller0: entered promiscuous mode
[  101.455107][ T8351] syzkaller0: entered allmulticast mode
[  101.460900][ T8351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.464887][ T8350] tipc: Resetting bearer <eth:syzkaller0>
[  101.477221][ T8350] tipc: Disabling bearer <eth:syzkaller0>
[  101.486853][ T8349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8349 comm=syz.1.878
[  101.498882][   T42] audit: type=1800 audit(1785766054.302:24840): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  101.545254][   T42] audit: type=1800 audit(1785766054.342:24841): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  101.559662][ T8356] netlink: 164 bytes leftover after parsing attributes in process `syz.4.881'.
[  101.590331][   T42] audit: type=1800 audit(1785766054.392:24842): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  101.622142][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'.
[  101.733337][ T8382] syzkaller0: entered promiscuous mode
[  101.735805][ T8382] syzkaller0: entered allmulticast mode
[  101.783114][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.891'.
[  101.786031][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.891'.
[  101.819630][ T8389] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  101.823548][ T8389] cramfs: wrong magic
[  101.841432][ T8389] capability: warning: `syz.2.892' uses 32-bit capabilities (legacy support in use)
[  102.859851][ T8400] syzkaller0: entered promiscuous mode
[  102.861899][ T8400] syzkaller0: entered allmulticast mode
[  104.586815][ T8359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.638864][ T8403] fuse: fd is not a fuse device
[  104.826991][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'.
[  104.876826][ T8433] syzkaller0: entered promiscuous mode
[  104.881056][ T8433] syzkaller0: entered allmulticast mode
[  104.933618][ T8437] syzkaller0: entered promiscuous mode
[  104.935638][ T8437] syzkaller0: entered allmulticast mode
[  105.004599][   T42] kauditd_printk_skb: 25 callbacks suppressed
[  105.004611][   T42] audit: type=1800 audit(1785766057.802:24868): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  107.824428][ T8428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  107.854267][   T42] audit: type=1800 audit(1785766060.652:24869): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  107.871179][   T42] audit: type=1800 audit(1785766060.672:24870): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  107.882203][   T42] audit: type=1800 audit(1785766060.682:24871): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  107.910817][ T8450] xt_hashlimit: size too large, truncated to 1048576
[  107.923385][   T42] audit: type=1800 audit(1785766060.722:24872): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  107.930563][   T42] audit: type=1400 audit(1785766060.722:24873): avc:  denied  { write } for  pid=8451 comm="syz.3.916" path="socket:[25150]" dev="sockfs" ino=25150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  107.955528][   T42] audit: type=1800 audit(1785766060.752:24874): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  107.978920][   T42] audit: type=1400 audit(1785766060.782:24875): avc:  denied  { search } for  pid=8456 comm="syz.3.918" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  108.007186][   T42] audit: type=1800 audit(1785766060.802:24876): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=136537 res=0 errno=0
[  108.028284][   T42] audit: type=1400 audit(1785766060.822:24877): avc:  denied  { write } for  pid=8461 comm="syz.2.920" name="/" dev="9p" ino=78643831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  108.100382][ T8470] syzkaller0: entered promiscuous mode
[  108.102131][ T8470] syzkaller0: entered allmulticast mode
[  108.106524][ T8471] nft_compat: unsupported protocol 0
[  108.108790][ T8470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.113025][ T8469] tipc: Resetting bearer <eth:syzkaller0>
[  108.144585][ T8469] tipc: Disabling bearer <eth:syzkaller0>
[  108.157541][   T68] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  108.164712][ T8474] 9pnet_virtio: no channels available for device syz
[  108.304444][ T8483] syzkaller0: entered promiscuous mode
[  108.306443][ T8483] syzkaller0: entered allmulticast mode
[  108.315563][ T8483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.320374][ T8482] tipc: Resetting bearer <eth:syzkaller0>
[  108.327336][   T68] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  108.334122][   T68] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.340506][   T68] usb 6-1: Product: syz
[  108.341884][   T68] usb 6-1: Manufacturer: syz
[  108.343396][   T68] usb 6-1: SerialNumber: syz
[  108.351076][ T8482] tipc: Disabling bearer <eth:syzkaller0>
[  108.361949][ T8485] 9pnet_virtio: no channels available for device syz
[  108.580428][   T68] usb 6-1: 1:1 : no cluster descriptor
[  108.591937][   T68] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  108.626947][   T68] usb 6-1: USB disconnect, device number 5
[  108.676281][ T5737] udevd[5737]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  108.817589][   T41] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  108.968360][   T41] usb 8-1: Using ep0 maxpacket: 8
[  108.977858][   T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  108.982425][   T41] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  108.986267][   T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.992847][   T41] usb 8-1: config 0 descriptor??
[  109.210626][   T41] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  109.211035][ T8545] VFS: file-max limit 0 reached
[  109.333394][ T8553] syzkaller0: entered promiscuous mode
[  109.335323][ T8553] syzkaller0: entered allmulticast mode
[  109.344084][ T8553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.354666][ T8552] tipc: Resetting bearer <eth:syzkaller0>
[  109.371371][ T8552] tipc: Disabling bearer <eth:syzkaller0>
[  109.408468][ T8498] netlink: 216 bytes leftover after parsing attributes in process `syz.3.929'.
[  109.417343][   T68] usb 8-1: USB disconnect, device number 7
[  109.651864][ T8578] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  109.674062][ T8573] netlink: 'syz.1.943': attribute type 28 has an invalid length.
[  109.677558][ T8573] netlink: 'syz.1.943': attribute type 3 has an invalid length.
[  109.681408][ T8573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.943'.
[  109.741996][ T8589] syzkaller0: entered promiscuous mode
[  109.743822][ T8589] syzkaller0: entered allmulticast mode
[  109.771247][ T8592] xt_hashlimit: size too large, truncated to 1048576
[  110.256368][ T8603] netlink: 'syz.3.953': attribute type 2 has an invalid length.
[  111.220932][ T8618] xt_hashlimit: size too large, truncated to 1048576
[  111.346793][ T8622] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[  111.359731][   T42] kauditd_printk_skb: 56 callbacks suppressed
[  111.359746][   T42] audit: type=1800 audit(1785766064.162:24934): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=137410 res=0 errno=0
[  111.370496][   T42] audit: type=1800 audit(1785766064.162:24935): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=137421 res=0 errno=0
[  111.373563][ T8622] openvswitch: netlink: Actions may not be safe on all matching packets
[  111.381410][   T60] Bluetooth: hci0: Frame reassembly failed (-84)
[  111.384281][   T60] Bluetooth: hci0: Frame reassembly failed (-84)
[  112.650364][ T8578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  112.683666][   T42] audit: type=1400 audit(1785766065.482:24936): avc:  denied  { unmount } for  pid=6772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  112.692906][   T42] audit: type=1800 audit(1785766065.482:24937): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  112.705212][ T5735] svc: failed to register nfsdv3 RPC service (errno 111).
[  112.707749][   T42] audit: type=1800 audit(1785766065.502:24938): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  112.711220][ T8624] netlink: 68 bytes leftover after parsing attributes in process `syz.1.960'.
[  112.718513][ T5735] svc: failed to register nfsaclv3 RPC service (errno 111).
[  112.721823][ T5735] failed to unregister tcp with rpcbind
[  112.724111][ T5735] svc: failed to register nfsdv3 RPC service (errno 97).
[  112.726445][ T5735] svc: failed to register nfsaclv3 RPC service (errno 97).
[  112.731475][ T5735] failed to unregister tcp with rpcbind
[  112.759579][   T42] audit: type=1800 audit(1785766065.562:24939): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  112.773445][   T42] audit: type=1800 audit(1785766065.572:24940): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  112.784629][   T42] audit: type=1800 audit(1785766065.582:24941): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  112.842587][   T42] audit: type=1800 audit(1785766065.642:24942): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  112.864195][   T42] audit: type=1800 audit(1785766065.662:24943): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  112.880573][ T8640] netlink: 'syz.3.967': attribute type 34 has an invalid length.
[  112.881237][ T8641] xt_hashlimit: size too large, truncated to 1048576
[  112.885699][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'.
[  112.941969][ T8646] fuse: fd is not a fuse device
[  113.102652][ T8655] syzkaller0: entered promiscuous mode
[  113.104868][ T8655] syzkaller0: entered allmulticast mode
[  113.111817][ T8655] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.115040][ T8654] tipc: Resetting bearer <eth:syzkaller0>
[  113.129724][ T8654] tipc: Disabling bearer <eth:syzkaller0>
[  113.348032][ T8670] xt_hashlimit: size too large, truncated to 1048576
[  113.427591][ T5741] Bluetooth: hci0: command 0x1003 tx timeout
[  113.430102][ T5736] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  113.513649][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'.
[  113.516522][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'.
[  113.547117][ T8687] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.548630][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'.
[  113.552944][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'.
[  113.557614][ T5811] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.563284][ T5811] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.576698][ T8689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8689 comm=syz.1.986
[  113.577659][ T5811] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.585271][ T5811] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.660837][ T8695] process 'syz.4.989' launched './file0' with NULL argv: empty string added
[  113.677257][ T8694] process '/newroot/126/file0' started with executable stack
[  113.760259][ T8701] overlayfs: conflicting lowerdir path
[  113.859287][ T8712] fuse: fd is not a fuse device
[  113.874337][ T8715] fuse: fd is not a fuse device
[  113.876150][ T8716] fuse: fd is not a fuse device
[  114.098254][ T8736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1005'.
[  114.351927][ T8747] netlink: ct family unspecified
[  114.353949][ T8747] openvswitch: netlink: Actions may not be safe on all matching packets
[  114.428960][ T8766] comedi comedi4: bad chanlist[0]=0x00008006 chan=32774 range length=2
[  114.502317][ T8766] net2280 0000:00:02.0: PLX NET228x/USB338x USB Peripheral Controller
[  114.506427][ T8766] net2280 0000:00:02.0: irq 22, pci mem ffffc900057a0000, chip rev 0000
[  114.511637][ T8766] net2280 0000:00:02.0: version: 2005 Sept 27/v3.0; legacy mode
[  114.612751][ T8776] zonefs (loop1) ERROR: Not a zoned block device
[  114.717656][   T50] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  114.846813][ T8793] xt_hashlimit: size too large, truncated to 1048576
[  114.848420][   T50] usb 7-1: device descriptor read/64, error -71
[  114.937538][   T68] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  114.945899][ T8801] syzkaller0: entered promiscuous mode
[  114.948447][ T8801] syzkaller0: entered allmulticast mode
[  114.954351][ T8801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.959617][ T8800] tipc: Resetting bearer <eth:syzkaller0>
[  114.974600][ T8800] tipc: Disabling bearer <eth:syzkaller0>
[  115.065375][ T1046] IPVS: starting estimator thread 0...
[  115.087545][   T50] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  115.110585][   T68] usb 6-1: unable to get BOS descriptor or descriptor too short
[  115.116661][   T68] usb 6-1: not running at top speed; connect to a high speed hub
[  115.120986][   T68] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  115.124349][   T68] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  115.127736][   T68] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  115.131542][   T68] usb 6-1: config 14 has no interface number 0
[  115.134015][   T68] usb 6-1: config 14 has no interface number 1
[  115.136508][   T68] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  115.142002][   T68] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  115.146686][   T68] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  115.154316][   T68] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.159217][   T68] usb 6-1: config 14 interface 57 has no altsetting 0
[  115.161892][   T68] usb 6-1: config 14 interface 228 has no altsetting 0
[  115.166473][   T68] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  115.170057][   T68] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.173118][   T68] usb 6-1: Product: syz
[  115.174843][   T68] usb 6-1: Manufacturer: syz
[  115.176405][   T68] usb 6-1: SerialNumber: syz
[  115.177507][ T8807] IPVS: using max 44 ests per chain, 105600 per kthread
[  115.190769][ T8815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1038'.
[  115.218412][   T50] usb 7-1: device descriptor read/64, error -71
[  115.329179][   T50] usb usb7-port1: attempt power cycle
[  115.592367][   T68] legousbtower 6-1:14.57: interrupt endpoints not found
[  115.612583][ T8829] syzkaller0: entered promiscuous mode
[  115.614903][ T8829] syzkaller0: entered allmulticast mode
[  115.622361][ T8829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.626233][ T8828] tipc: Resetting bearer <eth:syzkaller0>
[  115.642047][ T8828] tipc: Disabling bearer <eth:syzkaller0>
[  115.697690][   T50] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  115.728146][   T50] usb 7-1: device descriptor read/8, error -71
[  115.977589][   T50] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  115.998799][   T50] usb 7-1: device descriptor read/8, error -71
[  116.003485][   T68] legousbtower 6-1:14.228: get version request failed: -32
[  116.006125][   T68] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -32
[  116.016831][   T68] usb 6-1: USB disconnect, device number 6
[  116.107729][   T50] usb usb7-port1: unable to enumerate USB device
[  116.532225][   T42] kauditd_printk_skb: 113 callbacks suppressed
[  116.532244][   T42] audit: type=1800 audit(1785766069.332:25057): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  116.550258][ T8851] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1054'.
[  116.557756][   T41] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  116.582571][   T42] audit: type=1800 audit(1785766069.382:25058): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  116.614671][   T42] audit: type=1800 audit(1785766069.412:25059): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  116.719262][   T41] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 98, changing to 10
[  116.723980][   T41] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26122, setting to 1024
[  116.730020][   T41] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 98, changing to 10
[  116.734700][   T41] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26122, setting to 1024
[  116.742084][   T41] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  116.745686][   T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.749010][   T41] usb 8-1: Product: syz
[  116.750744][   T41] usb 8-1: Manufacturer: syz
[  116.752606][   T41] usb 8-1: SerialNumber: syz
[  116.757871][   T42] audit: type=1800 audit(1785766069.562:25060): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=139252 res=0 errno=0
[  116.757949][ T8849] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  116.764398][   T42] audit: type=1800 audit(1785766069.562:25061): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=139284 res=0 errno=0
[  116.769717][   T41] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected
[  116.775431][   T42] audit: type=1800 audit(1785766069.562:25062): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=139259 res=0 errno=0
[  116.784352][   T42] audit: type=1800 audit(1785766069.562:25063): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=139260 res=0 errno=0
[  116.786774][   T41] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  116.804830][   T41] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  116.821703][   T42] audit: type=1800 audit(1785766069.622:25064): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=139281 res=0 errno=0
[  116.828538][   T42] audit: type=1800 audit(1785766069.622:25065): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=139282 res=0 errno=0
[  116.836106][   T42] audit: type=1800 audit(1785766069.622:25066): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=139261 res=0 errno=0
[  116.909949][ T8862] fuse: fd is not a fuse device
[  116.988022][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  116.990881][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  116.994086][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  116.997018][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  116.999630][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.002167][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.004655][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.007218][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.009784][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.012277][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.014846][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.017356][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.019969][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.022480][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.025138][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.027633][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.030106][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.032611][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.035071][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.037613][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.040120][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.044302][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.046878][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.049439][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.051971][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.054477][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.056995][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.059553][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.062506][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.065078][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.067509][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.069885][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.072398][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.074873][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.077365][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.079863][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.082235][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.084623][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.087004][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.089376][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.091742][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.094155][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.096566][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.099116][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.101524][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.103989][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.106446][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.109008][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.111457][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.114319][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.117257][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.120343][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.123401][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.126346][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.129301][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.132394][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.135444][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.138490][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.141502][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.144404][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.147419][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.150583][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.153879][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.157070][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.160336][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.163508][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.166640][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.169778][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.172841][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.175936][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.179142][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.182322][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.185529][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.188749][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.191725][ T5736] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  117.194588][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.197676][ T5741] Bluetooth: hci0: command 0x1003 tx timeout
[  117.197828][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.200390][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.203471][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.206568][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.209743][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.212858][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.215978][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.218769][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.221143][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.223489][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.225852][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.228437][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.231479][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.234619][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.237186][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.239636][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.242109][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.244562][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.247553][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.250675][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.253213][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.258302][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.260739][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.263632][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.266663][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.269631][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.272218][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.275117][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.278136][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.281124][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.284206][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.287176][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.290395][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.293449][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.296557][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.299694][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.302649][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.305728][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.308880][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.312007][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.315101][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.318258][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.321364][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.324453][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.327599][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.330701][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.333794][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.336903][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.340157][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.343264][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.346287][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.349699][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.352755][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.355843][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.359249][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.362336][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.365430][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.368556][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.371636][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.374707][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.377877][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.381064][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.384176][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.387229][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.390308][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.393335][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.396308][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.399456][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.402588][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.405619][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.408735][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.411798][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.414756][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.417808][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.420643][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.422972][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.425590][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.428482][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.431343][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.434216][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.436693][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.439247][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.442138][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.445019][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.447464][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.450304][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.452569][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.454961][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.457426][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.457664][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.460445][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.463025][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.465824][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.468600][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.471709][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.474132][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.476455][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.479263][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.482394][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.485468][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.488386][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.490556][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.492791][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.495075][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.497514][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.499893][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.502273][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.504598][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.506841][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.509300][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.512337][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.515336][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.518496][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.521554][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.524572][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.527696][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.530681][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.533654][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.536345][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.539308][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.542256][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.545170][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.548144][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.551126][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.554061][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.556921][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.559788][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.562694][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.568771][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.571774][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.574725][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.577740][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.580651][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.583594][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.586506][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.589512][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.592442][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.595628][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.598822][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.601934][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.605002][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.608186][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.611313][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.614423][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.617542][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.620722][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.623875][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.627028][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.630007][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.633096][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.636218][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.639343][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.642456][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.645542][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.648681][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.651792][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.654890][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.658036][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.661182][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.664245][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.667795][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.670896][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.673992][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.677084][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.680307][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.683400][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.686503][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.689649][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.692715][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.695867][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.699019][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.702150][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.705228][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.708355][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.711483][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.714579][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.717579][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.720698][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.723801][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.726774][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.729913][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.732988][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.736081][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.739270][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.742451][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.745643][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.748900][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.752007][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.755115][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.758229][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.761168][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.764071][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.767013][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.770340][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.773342][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.776332][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.779457][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.782466][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.785561][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.788655][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.791761][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.794830][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.797834][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.800918][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.803992][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.807066][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.810191][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.813251][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.816334][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.819452][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.822572][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.825611][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.828821][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.831949][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.835038][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.838187][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.841272][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.844330][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.847349][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.850408][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.853547][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.856698][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.859844][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.863006][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.866089][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.869186][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.873067][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.876310][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.879588][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.882806][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.886018][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.889143][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.892351][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.895456][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.906005][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.909680][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.914847][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.917999][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.921112][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.924182][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.936222][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.938984][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.941511][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.944045][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.946756][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.949390][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.951958][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.954474][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.956990][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.959718][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.962224][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.964854][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.967453][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.970348][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.972891][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.975434][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.977996][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.980491][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.982977][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.985497][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.988757][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.991912][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.995010][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  117.998308][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.000784][ T8878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1062'.
[  118.001577][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.005022][ T8877] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1064'.
[  118.007475][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.013831][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.017039][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.020250][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.023432][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.026657][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.029872][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.033037][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.036295][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.039693][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.042888][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.046060][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.049252][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.052472][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.055666][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.058810][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.062045][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.065282][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.068529][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.071819][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.075084][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.078412][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.081631][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.084789][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.088020][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.091368][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.094642][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.098059][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.101332][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.104536][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.107739][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.110935][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.114142][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.117295][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.120512][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.123690][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.126877][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.130095][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.133299][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.136439][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.139663][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.142349][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'.
[  118.142953][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.149455][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.152715][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.156029][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.159337][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.169342][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.172760][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.176265][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.179760][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.182989][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.186225][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.189491][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.192774][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.195953][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.199182][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.202430][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.205625][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.208839][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.212022][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.215229][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.218590][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.221836][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.225054][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.228425][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.231691][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.234932][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.238350][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.241571][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.244797][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.248008][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.251194][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.254083][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.257537][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.260691][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.263897][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.266965][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.270094][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.273293][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.276549][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.280297][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.283662][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.286731][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.290126][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.293207][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.296423][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.299630][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.302683][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.305723][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.308837][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.312029][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.315418][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.318591][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.321785][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.325025][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.328161][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.331167][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.334543][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.337816][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.340982][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.344248][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.347408][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.350660][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.353736][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.356764][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.359810][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.362876][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.365948][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.369044][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.371840][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.374414][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.377003][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.380086][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.383119][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.386103][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.389098][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.391769][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.394756][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.397728][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.400486][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.403168][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.406272][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.409380][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.412470][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.415599][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.418628][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.421506][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.424022][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.426507][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.428982][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.431659][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.434358][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.436780][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.439375][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.441976][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.444654][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.447526][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.450478][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.453051][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.455844][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.458954][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.461542][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.464087][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.466508][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.469390][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.472532][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.475579][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.478043][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.480612][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.483633][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.486330][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.488767][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.491257][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.494017][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.497214][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.500434][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.503600][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.506715][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.510136][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.513256][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.516503][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.519683][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.522335][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.525287][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.528434][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.531641][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.534828][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.538046][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.541417][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.544640][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.547823][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.551042][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.554257][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.557521][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.560352][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.563097][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.565895][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.568948][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.572126][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.575246][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.578369][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.581593][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.584978][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.588894][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.592129][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.595304][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.597977][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.600300][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.602653][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.605409][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.608145][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.610657][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.612365][ T8907] loop5: detected capacity change from 0 to 7
[  118.613119][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.617555][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.620627][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.623779][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.627011][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.628970][ T8907] Dev loop5: unable to read RDB block 7
[  118.630629][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.635002][ T8907]  loop5: AHDI p1
[  118.635081][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.639355][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.642223][ T8907] loop5: partition table partially beyond EOD, truncated
[  118.642392][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.647804][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.650220][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.653019][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.656260][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.662737][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.666768][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.669546][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.672307][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.675477][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.679625][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.682721][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.685654][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.689043][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.692304][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.695448][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.698480][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.701556][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.704642][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.707976][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.708378][   T41] libceph: connect (1)[c::]:6789 error -101
[  118.711216][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.711434][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.711646][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.711871][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.712081][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.727103][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.730075][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.732964][   T41] libceph: mon0 (1)[c::]:6789 connect error
[  118.733100][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.739518][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.742651][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.746720][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.749890][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.752938][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.753741][   T41] libceph: connect (1)[c::]:6789 error -101
[  118.755907][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.758670][   T41] libceph: mon0 (1)[c::]:6789 connect error
[  118.760197][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.764758][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.767935][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.771061][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.774145][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.776894][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.779663][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.782703][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.785720][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.788950][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.792173][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.795416][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.798657][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.801458][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.804067][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.806496][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.808960][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.811426][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.814159][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.817218][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.820479][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.823211][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.826403][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.829499][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.832518][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.835659][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.838801][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.841962][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.845177][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.847714][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.850066][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.852463][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.854824][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.857177][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.859622][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.862125][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.864568][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.866929][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.869463][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.871989][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.874535][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.877041][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.879457][ T8849] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110
[  118.884161][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.884392][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.884571][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.884777][    C0] usb 8-1: ti_interrupt_callback - nonzero urb status, -71
[  118.896114][    C0] usb 8-1: ti_interrupt_callback - resubmit interrupt urb failed, -1
[  118.901813][    T9] usb 8-1: USB disconnect, device number 8
[  118.925208][    T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  118.931393][    T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  118.936098][    T9] ti_usb_3410_5052 8-1:2.0: device disconnected
[  119.031009][   T41] libceph: connect (1)[c::]:6789 error -101
[  119.042987][   T41] libceph: mon0 (1)[c::]:6789 connect error
[  119.054057][ T8927] kvm: kvm [8926]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  119.227376][ T8922] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint
[  119.234723][ T8922] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref]
[  119.239957][ T8922] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]
[  119.243559][ T8922] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff]
[  119.246512][ T8922] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  119.272495][ T8922] pci 0000:00:01.0: Adding to iommu group 1
[  119.280615][ T8922] pci 0000:00:01.0: vgaarb: bridge control possible
[  119.282934][ T8922] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none
[  119.299071][ T8922] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned
[  119.302633][ T8922] pci 0000:00:01.0: ROM [mem 0x80800000-0x8080ffff pref]: assigned
[  119.306192][ T8922] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned
[  119.310436][ T8922] pci 0000:00:01.0: BAR 4 [mem 0x80810000-0x80810fff]: assigned
[  119.315885][ T8922] virtio-pci 0000:00:01.0: enabling device (0100 -> 0102)
[  119.369401][ T8922] [drm] pci: virtio-vga detected at 0000:00:01.0
[  119.373330][ T8922] [drm] features: -virgl +edid -resource_blob -host_visible
[  119.373353][ T8922] [drm] features: -context_init -blob_alignment
[  119.389678][ T8922] [drm] number of scanouts: 1
[  119.391734][ T8922] [drm] number of cap sets: 0
[  119.452788][ T8922] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2
[  119.468283][ T8907] ceph: No mds server is up or the cluster is laggy
[  119.472046][ T8942] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1087'.
[  119.472283][ T8943] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1087'.
[  119.519244][ T8945] IPVS: dh: FWM 3 0x00000003 - no destination available
[  119.522896][ T5825] IPVS: starting estimator thread 0...
[  119.592157][ T8922] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device
[  119.618223][ T8946] IPVS: using max 44 ests per chain, 105600 per kthread
[  119.717234][ T8965] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1096'.
[  119.763421][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1098'.
[  119.985733][ T8986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8986 comm=syz.4.1102
[  120.027839][ T8990] netlink: 'syz.3.1104': attribute type 1 has an invalid length.
[  120.030574][ T8990] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1104'.
[  120.259776][ T9015] __nla_validate_parse: 1 callbacks suppressed
[  120.259823][ T9015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'.
[  120.335060][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9015 comm=syz.1.1114
[  120.347280][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'.
[  120.527118][ T9034] openvswitch: netlink: Flow actions attr not present in new flow.
[  120.536947][ T9034] syz.3.1115 (9034): /proc/9032/oom_adj is deprecated, please use /proc/9032/oom_score_adj instead.
[  120.738709][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  120.914617][ T9052] libceph: resolve '0' (ret=-3): failed
[  120.976499][ T9055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9055 comm=syz.3.1130
[  121.133196][ T9059] MPI: mpi too large (16392 bits)
[  122.252218][ T9072] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9072 comm=syz.2.1136
[  122.252941][ T9055] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.259638][ T9072] netlink: 'syz.2.1136': attribute type 1 has an invalid length.
[  122.274635][ T9055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.327134][ T9055] veth0_vlan: left promiscuous mode
[  122.409594][ T9060] tipc: MTU too low for tipc bearer
[  122.430704][ T9072] 8021q: adding VLAN 0 to HW filter on device bond3
[  122.451029][   T42] kauditd_printk_skb: 90 callbacks suppressed
[  122.451047][   T42] audit: type=1800 audit(1785766075.247:25157): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  122.463229][ T9073] bond3: (slave dummy0): making interface the new active one
[  122.467444][ T9073] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  122.474925][   T42] audit: type=1800 audit(1785766075.257:25158): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  122.478424][ T5811] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.491560][   T42] audit: type=1400 audit(1785766075.267:25159): avc:  denied  { write } for  pid=9075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.492676][ T5811] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.503203][ T5811] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.512937][ T5811] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.516896][ T5811] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.520695][ T5811] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.521518][   T42] audit: type=1800 audit(1785766075.317:25160): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  122.524301][ T5811] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.534347][ T5811] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.546787][   T42] audit: type=1400 audit(1785766075.347:25161): avc:  denied  { getopt } for  pid=9084 comm="syz.3.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  122.560604][   T42] audit: type=1400 audit(1785766075.347:25162): avc:  denied  { write } for  pid=9084 comm="syz.3.1139" name="usb_gadget" dev="configfs" ino=5842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  122.578808][   T42] audit: type=1400 audit(1785766075.347:25163): avc:  denied  { write } for  pid=9083 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.592706][   T42] audit: type=1400 audit(1785766075.347:25164): avc:  denied  { write } for  pid=9084 comm="syz.3.1139" name="functions" dev="configfs" ino=31212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  122.604248][   T42] audit: type=1400 audit(1785766075.347:25165): avc:  denied  { write } for  pid=9084 comm="syz.3.1139" name="uncompressed" dev="configfs" ino=31233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  122.611791][   T42] audit: type=1800 audit(1785766075.367:25166): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  122.625509][ T5842] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  122.796019][ T5842] usb 7-1: Using ep0 maxpacket: 8
[  122.808075][ T5842] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.814950][ T5842] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.820358][ T5842] usb 7-1: config 0 interface 0 has no altsetting 0
[  122.823239][ T5842] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  122.830871][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.837125][ T5842] usb 7-1: config 0 descriptor??
[  122.966845][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'.
[  123.044397][ T9149] fuse: fd is not a fuse device
[  123.090151][ T9154] syzkaller0: entered promiscuous mode
[  123.091973][ T9154] syzkaller0: entered allmulticast mode
[  123.098297][ T9154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.102769][ T9153] tipc: Resetting bearer <eth:syzkaller0>
[  123.122896][ T9153] tipc: Disabling bearer <eth:syzkaller0>
[  123.258350][ T5842] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  123.260772][ T5842] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  123.262974][ T5842] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  123.269641][ T5842] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  123.271824][ T5842] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  123.282796][ T5842] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  123.452260][ T9168] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1164'.
[  123.499086][ T5825] usb 7-1: USB disconnect, device number 11
[  123.505995][ T9173] ieee802154 phy0 wpan0: encryption failed: -22
[  123.542107][ T9177] binder: 9176:9177 ioctl c0306201 200000000680 returned -14
[  123.582713][ T9180] xt_hashlimit: size too large, truncated to 1048576
[  123.711428][ T9184] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  123.717333][ T9184] fuse: fd is not a fuse device
[  123.717353][ T9185] fuse: fd is not a fuse device
[  123.722313][ T9184] fuse: fd is not a fuse device
[  124.119858][ T9195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.176984][ T9200] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1176'.
[  124.179982][ T9200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1176'.
[  124.182928][ T9200] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1176'.
[  124.187488][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'.
[  124.305188][ T9203] nicvf0: renamed from team0 (while UP)
[  124.319549][ T9203] nicvf0: Cannot enslave team device to itself
[  124.322241][ T9203] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[  124.475720][ T9206] xt_hashlimit: size too large, truncated to 1048576
[  124.645195][ T9216] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1181'.
[  124.654509][ T9218] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1182'.
[  124.865048][ T9241] xt_hashlimit: size too large, truncated to 1048576
[  125.028198][ T9255] sctp: [Deprecated]: syz.2.1194 (pid 9255) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.028198][ T9255] Use struct sctp_sack_info instead
[  125.301883][ T9280] netlink: 'syz.4.1203': attribute type 1 has an invalid length.
[  125.321584][ T9280] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.551672][ T9306] __nla_validate_parse: 2 callbacks suppressed
[  125.551685][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'.
[  125.665552][ T9321] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1218'.
[  125.753107][ T9323] pci_bus 0000:01: busn_res: [bus 01] is released
[  125.801310][ T9328] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port
[  125.812437][ T9328] pci 0000:00:04.0: PCI bridge to [bus 01]
[  125.814959][ T9328] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  125.818096][ T9328] pci 0000:00:04.0:   bridge window [mem 0xfe800000-0xfe9fffff]
[  125.822152][ T9328] pci 0000:00:04.0:   bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref]
[  125.826022][ T9328] pci 0000:00:04.0: enabling Extended Tags
[  125.839467][ T9328] pci 0000:00:04.0: Adding to iommu group 4
[  125.858223][ T9328] pci 0000:00:04.0: PCI bridge to [bus 01]
[  125.863464][ T9328] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000
[  125.869684][ T9328] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000
[  125.874313][ T9328] pci 0000:00:04.0: bridge window [mem 0x80900000-0x80afffff]: assigned
[  125.877387][ T9328] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned
[  125.881009][ T9328] pci 0000:00:04.0: bridge window [io  0x1000-0x1fff]: assigned
[  125.883693][ T9328] pci 0000:00:04.0: PCI bridge to [bus 01]
[  125.885782][ T9328] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  125.889675][ T9328] pci 0000:00:04.0:   bridge window [mem 0x80900000-0x80afffff]
[  125.895504][ T9328] pci 0000:00:04.0:   bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]
[  125.951904][ T9328] pcieport 0000:00:04.0: PME: Signaling with IRQ 25
[  125.960590][ T9328] aer 0000:00:04.0:pcie002: error -EINTR: request_irq(26) aer_irq aer_isr aerdrv
[  125.964017][ T9328] pcieport 0000:00:04.0: AER: request AER IRQ 26 failed
[  125.966394][ T9328] aer 0000:00:04.0:pcie002: probe with driver aer failed with error -4
[  126.487508][ T9374] sit0: entered promiscuous mode
[  126.489780][ T9374] netlink: 'syz.3.1237': attribute type 1 has an invalid length.
[  126.492945][ T9374] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1237'.
[  126.796677][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'.
[  127.014149][ T9413] xt_hashlimit: size too large, truncated to 1048576
[  127.038410][ T9412] trusted_key: encrypted_key: insufficient parameters specified
[  127.116985][ T9424] tc_dump_action: action bad kind
[  127.340498][ T9452] xt_hashlimit: size too large, truncated to 1048576
[  127.461502][   T42] kauditd_printk_skb: 161 callbacks suppressed
[  127.461520][   T42] audit: type=1800 audit(1785766080.259:25328): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  127.468983][ T9461] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1271'.
[  127.473770][   T42] audit: type=1400 audit(1785766080.259:25329): avc:  denied  { create } for  pid=9460 comm="syz.2.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  127.519562][ T9467] program syz.2.1273 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  127.523502][ T9466] openvswitch: netlink: Missing key (keys=c0, expected=500)
[  127.528963][   T42] audit: type=1400 audit(1785766080.329:25330): avc:  denied  { read } for  pid=9465 comm="syz.2.1273" dev="nsfs" ino=4026532935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  127.536373][   T42] audit: type=1400 audit(1785766080.329:25331): avc:  denied  { open } for  pid=9465 comm="syz.2.1273" path="net:[4026532935]" dev="nsfs" ino=4026532935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  127.588662][   T42] audit: type=1800 audit(1785766080.389:25332): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  127.592632][ T9472] FAULT_INJECTION: forcing a failure.
[  127.592632][ T9472] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  127.600206][ T9472] CPU: 1 UID: 0 PID: 9472 Comm: syz.3.1275 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  127.600233][ T9472] Tainted: [L]=SOFTLOCKUP
[  127.600239][ T9472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  127.600251][ T9472] Call Trace:
[  127.600275][ T9472]  <TASK>
[  127.600282][ T9472]  dump_stack_lvl+0x100/0x190
[  127.600346][ T9472]  should_fail_ex.cold+0x5/0xa
[  127.600377][ T9472]  _copy_from_user+0x2e/0xd0
[  127.600413][ T9472]  do_handle_open+0xeb/0xf20
[  127.600451][ T9472]  ? __fget_files+0x21f/0x3d0
[  127.600477][ T9472]  ? __pfx_do_handle_open+0x10/0x10
[  127.600504][ T9472]  ? ksys_write+0x1ac/0x250
[  127.600550][ T9472]  ? do_syscall_64+0x115/0x870
[  127.600634][ T9472]  do_syscall_64+0x115/0x870
[  127.600654][ T9472]  ? clear_bhb_loop+0x40/0x90
[  127.600675][ T9472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.600694][ T9472] RIP: 0033:0x7f389279e019
[  127.600709][ T9472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.600725][ T9472] RSP: 002b:00007f3893635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  127.600753][ T9472] RAX: ffffffffffffffda RBX: 00007f3892a25fa0 RCX: 00007f389279e019
[  127.600760][ T9472] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  127.600768][ T9472] RBP: 00007f3893635090 R08: 0000000000000000 R09: 0000000000000000
[  127.600777][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.600786][ T9472] R13: 00007f3892a26038 R14: 00007f3892a25fa0 R15: 00007ffc2a8a1f98
[  127.600809][ T9472]  </TASK>
[  127.676998][ T9474] openvswitch: netlink: Actions may not be safe on all matching packets
[  127.680742][   T42] audit: type=1800 audit(1785766080.479:25333): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  127.931305][ T9487] xt_hashlimit: size too large, truncated to 1048576
[  128.135887][   T42] audit: type=1400 audit(1785766080.939:25334): avc:  denied  { unmount } for  pid=6772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  128.159257][   T42] audit: type=1800 audit(1785766080.959:25335): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  128.179326][   T42] audit: type=1800 audit(1785766080.979:25336): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  128.196957][   T42] audit: type=1800 audit(1785766080.999:25337): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  128.206520][ T9499] FAULT_INJECTION: forcing a failure.
[  128.206520][ T9499] name failslab, interval 1, probability 0, space 0, times 0
[  128.210536][ T9499] CPU: 0 UID: 0 PID: 9499 Comm: syz.2.1286 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  128.210558][ T9499] Tainted: [L]=SOFTLOCKUP
[  128.210562][ T9499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  128.210569][ T9499] Call Trace:
[  128.210573][ T9499]  <TASK>
[  128.210578][ T9499]  dump_stack_lvl+0x100/0x190
[  128.210599][ T9499]  should_fail_ex.cold+0x5/0xa
[  128.210613][ T9499]  should_failslab+0xc2/0x120
[  128.210640][ T9499]  __kmalloc_noprof+0xfc/0x820
[  128.210658][ T9499]  ? path_get+0x61/0x80
[  128.210672][ T9499]  ? do_handle_open+0x62b/0xf20
[  128.210690][ T9499]  do_handle_open+0x62b/0xf20
[  128.210705][ T9499]  ? __fget_files+0x21f/0x3d0
[  128.210716][ T9499]  ? __pfx_do_handle_open+0x10/0x10
[  128.210734][ T9499]  ? ksys_write+0x1ac/0x250
[  128.210755][ T9499]  ? do_syscall_64+0x115/0x870
[  128.210768][ T9499]  do_syscall_64+0x115/0x870
[  128.210780][ T9499]  ? clear_bhb_loop+0x40/0x90
[  128.210793][ T9499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.210805][ T9499] RIP: 0033:0x7f258019e019
[  128.210814][ T9499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.210825][ T9499] RSP: 002b:00007f25810d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  128.210841][ T9499] RAX: ffffffffffffffda RBX: 00007f2580425fa0 RCX: 00007f258019e019
[  128.210850][ T9499] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  128.210859][ T9499] RBP: 00007f25810d1090 R08: 0000000000000000 R09: 0000000000000000
[  128.210867][ T9499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.210877][ T9499] R13: 00007f2580426038 R14: 00007f2580425fa0 R15: 00007ffc3b0caec8
[  128.210892][ T9499]  </TASK>
[  128.314307][ T9505] program syz.2.1289 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.486451][ T9521] xt_hashlimit: size too large, truncated to 1048576
[  128.650062][ T9531] FAULT_INJECTION: forcing a failure.
[  128.650062][ T9531] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.658832][ T9531] CPU: 2 UID: 0 PID: 9531 Comm: syz.2.1298 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  128.658862][ T9531] Tainted: [L]=SOFTLOCKUP
[  128.658868][ T9531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  128.658893][ T9531] Call Trace:
[  128.658902][ T9531]  <TASK>
[  128.658910][ T9531]  dump_stack_lvl+0x100/0x190
[  128.658937][ T9531]  should_fail_ex.cold+0x5/0xa
[  128.658960][ T9531]  _copy_from_user+0x2e/0xd0
[  128.658987][ T9531]  do_handle_open+0x6ba/0xf20
[  128.659012][ T9531]  ? __fget_files+0x21f/0x3d0
[  128.659031][ T9531]  ? __pfx_do_handle_open+0x10/0x10
[  128.659057][ T9531]  ? ksys_write+0x1ac/0x250
[  128.659091][ T9531]  ? do_syscall_64+0x115/0x870
[  128.659112][ T9531]  do_syscall_64+0x115/0x870
[  128.659130][ T9531]  ? clear_bhb_loop+0x40/0x90
[  128.659152][ T9531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.659170][ T9531] RIP: 0033:0x7f258019e019
[  128.659186][ T9531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.659203][ T9531] RSP: 002b:00007f25810d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  128.659222][ T9531] RAX: ffffffffffffffda RBX: 00007f2580425fa0 RCX: 00007f258019e019
[  128.659234][ T9531] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  128.659242][ T9531] RBP: 00007f25810d1090 R08: 0000000000000000 R09: 0000000000000000
[  128.659253][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.659263][ T9531] R13: 00007f2580426038 R14: 00007f2580425fa0 R15: 00007ffc3b0caec8
[  128.659289][ T9531]  </TASK>
[  128.795394][ T9538] gfs2: error -5 reading superblock
[  129.497850][ T9551] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1305'.
[  129.510627][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'.
[  129.516778][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1305'.
[  129.617452][ T9560] FAULT_INJECTION: forcing a failure.
[  129.617452][ T9560] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  129.621917][ T9560] CPU: 1 UID: 0 PID: 9560 Comm: syz.2.1309 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  129.621935][ T9560] Tainted: [L]=SOFTLOCKUP
[  129.621939][ T9560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  129.621945][ T9560] Call Trace:
[  129.621964][ T9560]  <TASK>
[  129.621969][ T9560]  dump_stack_lvl+0x100/0x190
[  129.621988][ T9560]  should_fail_ex.cold+0x5/0xa
[  129.622003][ T9560]  _copy_to_user+0x32/0xd0
[  129.622020][ T9560]  simple_read_from_buffer+0xcb/0x170
[  129.622035][ T9560]  proc_fail_nth_read+0x1af/0x230
[  129.622060][ T9560]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  129.622077][ T9560]  ? rw_verify_area+0xce/0x6d0
[  129.622093][ T9560]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  129.622109][ T9560]  vfs_read+0x1e4/0xb40
[  129.622127][ T9560]  ? __pfx_vfs_read+0x10/0x10
[  129.622143][ T9560]  ? __fget_files+0x215/0x3d0
[  129.622158][ T9560]  ? __fget_files+0x21f/0x3d0
[  129.622172][ T9560]  ksys_read+0x12a/0x250
[  129.622188][ T9560]  ? __pfx_ksys_read+0x10/0x10
[  129.622208][ T9560]  do_syscall_64+0x115/0x870
[  129.622222][ T9560]  ? clear_bhb_loop+0x40/0x90
[  129.622235][ T9560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.622246][ T9560] RIP: 0033:0x7f258015e84e
[  129.622256][ T9560] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  129.622266][ T9560] RSP: 002b:00007f25810d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  129.622278][ T9560] RAX: ffffffffffffffda RBX: 00007f25810d16c0 RCX: 00007f258015e84e
[  129.622285][ T9560] RDX: 000000000000000f RSI: 00007f25810d10a0 RDI: 0000000000000006
[  129.622291][ T9560] RBP: 00007f25810d1090 R08: 0000000000000000 R09: 0000000000000000
[  129.622297][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.622303][ T9560] R13: 00007f2580426038 R14: 00007f2580425fa0 R15: 00007ffc3b0caec8
[  129.622318][ T9560]  </TASK>
[  129.805217][ T9568] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1313'.
[  129.835430][ T9570] xt_hashlimit: size too large, truncated to 1048576
[  130.077440][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1319'.
[  130.259925][ T9612] xt_hashlimit: size too large, truncated to 1048576
[  130.716044][ T9649] xt_hashlimit: size too large, truncated to 1048576
[  131.210097][ T9676] xt_hashlimit: size too large, truncated to 1048576
[  131.534328][ T9705] __nla_validate_parse: 1 callbacks suppressed
[  131.534347][ T9705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1364'.
[  131.556865][ T9707] xt_hashlimit: size too large, truncated to 1048576
[  131.700883][ T5825] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  131.830974][ T5825] usb 6-1: device descriptor read/64, error -71
[  132.042360][ T9726] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1369'.
[  132.092363][ T5825] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  132.230533][ T5825] usb 6-1: device descriptor read/64, error -71
[  132.350672][ T5825] usb usb6-port1: attempt power cycle
[  132.550671][ T9746] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  132.553892][   T42] kauditd_printk_skb: 74 callbacks suppressed
[  132.553902][   T42] audit: type=1400 audit(1785766085.362:25411): avc:  denied  { block_suspend } for  pid=9744 comm="syz.2.1378" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  132.569082][   T42] audit: type=1800 audit(1785766085.372:25412): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143903 res=0 errno=0
[  132.576845][   T42] audit: type=1800 audit(1785766085.372:25413): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143918 res=0 errno=0
[  132.623764][   T42] audit: type=1400 audit(1785766085.432:25414): avc:  denied  { create } for  pid=9744 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  132.690275][ T5825] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  132.702738][ T1442] ieee802154 phy0 wpan0: encryption failed: -22
[  132.710885][ T5825] usb 6-1: device descriptor read/8, error -71
[  132.771127][   T42] audit: type=1800 audit(1785766085.582:25415): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  132.938692][   T42] audit: type=1800 audit(1785766085.742:25416): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  132.950285][ T5825] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  132.959640][ T9753] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1380'.
[  132.970929][ T5825] usb 6-1: device descriptor read/8, error -71
[  132.983505][   T42] audit: type=1800 audit(1785766085.792:25417): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  132.999200][ T9755] syzkaller0: entered promiscuous mode
[  133.002984][ T9755] syzkaller0: entered allmulticast mode
[  133.080622][ T5825] usb usb6-port1: unable to enumerate USB device
[  134.478892][   T42] audit: type=1800 audit(1785766087.282:25418): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  135.263376][ T9733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.307824][   T42] audit: type=1800 audit(1785766088.113:25419): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  135.317471][ T9759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.322248][   T42] audit: type=1800 audit(1785766088.123:25420): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  135.368843][ T9768] syzkaller0: entered promiscuous mode
[  135.371289][ T9768] syzkaller0: entered allmulticast mode
[  135.378404][ T9768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.384106][ T9767] tipc: Resetting bearer <eth:syzkaller0>
[  135.406697][ T9767] tipc: Disabling bearer <eth:syzkaller0>
[  135.570471][ T9782] batman_adv: batadv0: Adding interface: macvtap1
[  135.573028][ T9782] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.585654][ T9782] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  136.283573][ T9797] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20001
[  136.603538][ T9813] xt_hashlimit: size too large, truncated to 1048576
[  136.975986][ T9821] kernel read not supported for file /policy (pid: 9821 comm: syz.2.1403)
[  137.042823][ T9822] SELinux: ebitmap start bit (202309632) is beyond the end of the bitmap (1472)
[  137.046565][ T9822] SELinux:  invalid class
[  137.053028][ T9822] SELinux: failed to load policy
[  138.629305][ T9785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  138.687132][   T42] kauditd_printk_skb: 16 callbacks suppressed
[  138.687145][   T42] audit: type=1800 audit(1785766091.483:25437): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  138.704536][   T42] audit: type=1800 audit(1785766091.503:25438): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  138.724810][   T42] audit: type=1800 audit(1785766091.533:25439): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  138.786650][   T42] audit: type=1800 audit(1785766091.593:25440): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  138.847030][   T42] audit: type=1800 audit(1785766091.653:25441): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  138.866670][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'.
[  138.868121][   T42] audit: type=1800 audit(1785766091.673:25442): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  138.893502][   T42] audit: type=1800 audit(1785766091.703:25443): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  138.906366][   T42] audit: type=1400 audit(1785766091.703:25444): avc:  denied  { getopt } for  pid=9843 comm="syz.1.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  138.928552][   T42] audit: type=1800 audit(1785766091.733:25445): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  138.953570][ T9850] syzkaller0: entered promiscuous mode
[  138.955386][ T9850] syzkaller0: entered allmulticast mode
[  138.961515][ T9850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.965795][ T9847] tipc: Resetting bearer <eth:syzkaller0>
[  138.978695][   T42] audit: type=1800 audit(1785766091.783:25446): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  138.980187][ T9856] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  139.016093][ T9847] tipc: Disabling bearer <eth:syzkaller0>
[  139.041596][ T9856] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  139.123173][ T9871] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  139.265047][ T9883] syzkaller0: entered promiscuous mode
[  139.302448][ T9883] syzkaller0: entered allmulticast mode
[  139.312923][ T9883] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.319043][ T9882] tipc: Resetting bearer <eth:syzkaller0>
[  139.350551][ T9882] tipc: Disabling bearer <eth:syzkaller0>
[  139.499488][ T6914] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  139.555537][ T9900] loop5: detected capacity change from 0 to 7
[  139.591114][ T9902] syzkaller0: entered promiscuous mode
[  139.592939][ T9902] syzkaller0: entered allmulticast mode
[  139.598348][ T9902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.610872][ T9901] tipc: Resetting bearer <eth:syzkaller0>
[  139.626748][ T9901] tipc: Disabling bearer <eth:syzkaller0>
[  139.629538][ T6914] usb 6-1: device descriptor read/64, error -71
[  139.719423][ T9912] xt_hashlimit: size too large, truncated to 1048576
[  139.857586][ T9919] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  139.871367][ T6914] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  139.999567][ T6914] usb 6-1: device descriptor read/64, error -71
[  140.109639][ T6914] usb usb6-port1: attempt power cycle
[  140.373519][ T9934] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  140.449908][ T6914] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  140.479960][ T6914] usb 6-1: device descriptor read/8, error -71
[  140.577934][ T9944] xt_hashlimit: size too large, truncated to 1048576
[  140.719634][ T6914] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  140.742022][ T6914] usb 6-1: device descriptor read/8, error -71
[  140.810950][ T9955] fuse: fd is not a fuse device
[  140.850208][ T6914] usb usb6-port1: unable to enumerate USB device
[  140.922316][ T9968] netlink: 'syz.2.1455': attribute type 10 has an invalid length.
[  140.925001][ T9968] ipvlan0: entered allmulticast mode
[  140.927808][ T9968] veth0_vlan: entered allmulticast mode
[  140.931945][ T9968] nicvf0: Device ipvlan0 failed to register rx_handler
[  141.556008][ T9998] binfmt_misc: register: failed to install interpreter file ./file1
[  142.333691][T10012] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1470'.
[  142.879677][T10020] syzkaller0: entered promiscuous mode
[  142.881545][T10020] syzkaller0: entered allmulticast mode
[  142.884767][T10025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.908146][T10017] tipc: Resetting bearer <eth:syzkaller0>
[  142.923357][T10017] tipc: Disabling bearer <eth:syzkaller0>
[  143.017921][T10037] xt_hashlimit: size too large, truncated to 1048576
[  143.466014][T10068] xt_time: unknown flags 0x78
[  143.501117][T10069] synth uevent: /devices/platform/pcspkr: unknown uevent action string
[  143.510718][T10069] platform pcspkr: uevent: failed to send synthetic uevent: -22
[  143.514692][T10069] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1490'.
[  143.540994][T10073] bond0: option ad_select: unable to set because the bond device is up
[  143.754611][T10086] loop5: detected capacity change from 0 to 2640
[  143.768925][ T5751] buffer_io_error: 5 callbacks suppressed
[  143.768952][ T5751] Buffer I/O error on dev loop5, logical block 0, async page read
[  143.775925][ T5751] Buffer I/O error on dev loop5, logical block 0, async page read
[  143.786744][ T5751] Buffer I/O error on dev loop5, logical block 0, async page read
[  143.790681][ T5751] Buffer I/O error on dev loop5, logical block 0, async page read
[  143.796444][ T5751] Buffer I/O error on dev loop5, logical block 0, async page read
[  143.811014][   T42] kauditd_printk_skb: 66 callbacks suppressed
[  143.811033][   T42] audit: type=1800 audit(1785766096.613:25513): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  143.868988][T10093] program syz.3.1499 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  143.879852][T10086] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  143.883565][T10086] Buffer I/O error on dev loop5, logical block 1, lost async page write
[  143.887062][T10086] Buffer I/O error on dev loop5, logical block 2, lost async page write
[  143.891115][T10086] Buffer I/O error on dev loop5, logical block 3, lost async page write
[  143.894697][T10086] Buffer I/O error on dev loop5, logical block 4, lost async page write
[  143.926053][   T42] audit: type=1800 audit(1785766096.733:25514): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  143.994862][   T42] audit: type=1800 audit(1785766096.803:25515): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  144.018546][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1502'.
[  144.030150][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1502'.
[  144.038377][   T42] audit: type=1800 audit(1785766096.843:25516): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  144.100626][   T42] audit: type=1800 audit(1785766096.913:25517): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  144.130757][   T42] audit: type=1800 audit(1785766096.943:25518): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  144.178134][   T42] audit: type=1800 audit(1785766096.983:25519): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  144.205144][T10116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1509'.
[  144.210698][   T42] audit: type=1800 audit(1785766097.013:25520): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  144.245263][   T42] audit: type=1800 audit(1785766097.053:25521): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  144.268827][   T42] audit: type=1400 audit(1785766097.073:25522): avc:  denied  { unmount } for  pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  144.600764][T10155] syzkaller0: entered promiscuous mode
[  144.602597][T10155] syzkaller0: entered allmulticast mode
[  144.629201][T10155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.633550][T10154] tipc: Resetting bearer <eth:syzkaller0>
[  144.659825][T10154] tipc: Disabling bearer <eth:syzkaller0>
[  144.967662][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'.
[  145.105785][T10187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1529'.
[  145.109826][T10187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1529'.
[  145.405154][T10205] usb3503 0-0008: unknown mode is requested
[  145.407727][T10205] usb3503 0-0008: usb3503_probe: probed in standby mode
[  145.425420][T10208] i2c i2c-0: delete_device: Can't find device in list
[  145.437023][T10205] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08
[  145.796004][T10233] netlink: 'syz.1.1546': attribute type 21 has an invalid length.
[  145.798584][T10233] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1546'.
[  145.802004][T10233] netlink: 'syz.1.1546': attribute type 5 has an invalid length.
[  145.804560][T10233] netlink: 'syz.1.1546': attribute type 6 has an invalid length.
[  145.807079][T10233] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1546'.
[  145.810780][T10233] netlink: 'syz.1.1546': attribute type 21 has an invalid length.
[  145.813458][T10233] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1546'.
[  145.816564][T10233] netlink: 'syz.1.1546': attribute type 5 has an invalid length.
[  145.820802][T10233] netlink: 'syz.1.1546': attribute type 6 has an invalid length.
[  145.823325][T10233] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1546'.
[  145.914256][T10237] xt_hashlimit: size too large, truncated to 1048576
[  146.120031][T10246] nbd: must specify an index to disconnect
[  146.281034][T10272] fuse: fd is not a fuse device
[  146.358067][T10279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=10279 comm=syz.4.1561
[  146.366716][T10277] xt_hashlimit: size too large, truncated to 1048576
[  146.384861][T10281] binder: 10280:10281 ioctl c0306201 200000000040 returned -11
[  146.388508][T10281] binder: 10280:10281 ioctl c0306201 200000000640 returned -22
[  146.792361][T10320] xt_hashlimit: size too large, truncated to 1048576
[  146.855047][T10324] netlink: 'syz.2.1577': attribute type 15 has an invalid length.
[  146.921327][ T6914] hid (null): report_id 33474 is invalid
[  146.949514][ T6914] hid-generic 0005:04F3:5505.0004: collection stack underflow
[  146.953365][ T6914] hid-generic 0005:04F3:5505.0004: item 0 2 0 12 parsing failed
[  146.961320][ T6914] hid-generic 0005:04F3:5505.0004: probe with driver hid-generic failed with error -22
[  146.968510][T10340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  146.972344][T10340] IPv6: NLM_F_CREATE should be set when creating new route
[  147.167342][T10368] xt_hashlimit: size too large, truncated to 1048576
[  147.289846][T10378] libceph: resolve '0' (ret=-3): failed
[  147.335748][ T1046] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  147.345530][ T1046] hid-generic 0000:0000:0000.0005: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  147.386377][T10390] fido_id[10390]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  147.496369][T10404] xt_hashlimit: size too large, truncated to 1048576
[  147.804706][T10429] xt_hashlimit: size too large, truncated to 1048576
[  148.157377][T10466] openvswitch: netlink: ct_state flags 0001010a unsupported
[  148.163768][T10466] Mass Storage Function, version: 2009/09/11
[  148.166435][T10466] LUN: removable file: (no medium)
[  148.176035][T10466] 
[  148.176899][T10466] ======================================================
[  148.179342][T10466] WARNING: possible circular locking dependency detected
[  148.181975][T10466] syzkaller #0 Tainted: G             L     
[  148.184292][T10466] ------------------------------------------------------
[  148.186809][T10466] syz.2.1623/10466 is trying to acquire lock:
[  148.188917][T10466] ffff88803854cfd8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350
[  148.192517][T10466] 
[  148.192517][T10466] but task is already holding lock:
[  148.195006][T10466] ffff8880391af120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450
[  148.197782][T10466] 
[  148.197782][T10466] which lock already depends on the new lock.
[  148.197782][T10466] 
[  148.200678][T10466] 
[  148.200678][T10466] the existing dependency chain (in reverse order) is:
[  148.203514][T10466] 
[  148.203514][T10466] -> #2 (&common->filesem){++++}-{4:4}:
[  148.205723][T10466]        lock_acquire+0x1b9/0x370
[  148.207201][T10466]        down_read+0x99/0x4c0
[  148.208580][T10466]        fsg_show_file+0x20/0x180
[  148.210029][T10466]        configfs_read_iter+0x426/0x6f0
[  148.211631][T10466]        __kernel_read+0x397/0xad0
[  148.213146][T10466]        integrity_kernel_read+0x7e/0xb0
[  148.214787][T10466]        ima_calc_file_hash_tfm+0x25e/0x350
[  148.216498][T10466]        ima_calc_file_hash+0x1e3/0x380
[  148.218086][T10466]        ima_collect_measurement+0x94f/0xb30
[  148.219802][T10466]        process_measurement+0xdfe/0x2350
[  148.221448][T10466]        ima_file_check+0xc3/0x110
[  148.222914][T10466]        security_file_post_open+0xc4/0x210
[  148.224645][T10466]        path_openat+0x985/0x4280
[  148.226109][T10466]        do_file_open+0x20e/0x430
[  148.227547][T10466]        do_sys_openat2+0x10f/0x1e0
[  148.229031][T10466]        __x64_sys_openat+0x12d/0x210
[  148.230589][T10466]        do_syscall_64+0x115/0x870
[  148.232054][T10466]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.233878][T10466] 
[  148.233878][T10466] -> #1 (&p->frag_sem){.+.+}-{4:4}:
[  148.235984][T10466]        lock_acquire+0x1b9/0x370
[  148.237431][T10466]        down_read+0x99/0x4c0
[  148.238790][T10466]        __configfs_open_file+0xe8/0x9c0
[  148.240380][T10466]        do_dentry_open+0x6ab/0x14d0
[  148.241916][T10466]        vfs_open+0x82/0x3f0
[  148.243247][T10466]        dentry_open+0x71/0xd0
[  148.244621][T10466]        ima_calc_file_hash+0xe1/0x380
[  148.246191][T10466]        ima_collect_measurement+0x94f/0xb30
[  148.247909][T10466]        process_measurement+0xdfe/0x2350
[  148.249542][T10466]        ima_file_check+0xc3/0x110
[  148.251038][T10466]        security_file_post_open+0xc4/0x210
[  148.252739][T10466]        path_openat+0x985/0x4280
[  148.254212][T10466]        do_file_open+0x20e/0x430
[  148.255671][T10466]        do_sys_openat2+0x10f/0x1e0
[  148.257178][T10466]        __x64_sys_openat+0x12d/0x210
[  148.258743][T10466]        do_syscall_64+0x115/0x870
[  148.260247][T10466]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.262083][T10466] 
[  148.262083][T10466] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  148.264513][T10466]        check_prev_add+0xeb/0xe60
[  148.265993][T10466]        __lock_acquire+0x136c/0x1a40
[  148.267530][T10466]        lock_acquire+0x1b9/0x370
[  148.268976][T10466]        __mutex_lock+0x1a4/0x1bd0
[  148.270486][T10466]        process_measurement+0x5ab/0x2350
[  148.272125][T10466]        ima_file_check+0xc3/0x110
[  148.273597][T10466]        security_file_post_open+0xc4/0x210
[  148.275313][T10466]        path_openat+0x985/0x4280
[  148.276763][T10466]        do_file_open+0x20e/0x430
[  148.278252][T10466]        file_open_name+0x1c3/0x3e0
[  148.279777][T10466]        filp_open+0x2e/0x50
[  148.281179][T10466]        fsg_lun_open+0x6b/0x7b0
[  148.282598][T10466]        fsg_store_file+0x1e7/0x450
[  148.284113][T10466]        configfs_write_iter+0x302/0x4e0
[  148.285708][T10466]        vfs_write+0x6ac/0x1050
[  148.287119][T10466]        ksys_write+0x12a/0x250
[  148.288522][T10466]        do_syscall_64+0x115/0x870
[  148.290002][T10466]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.291862][T10466] 
[  148.291862][T10466] other info that might help us debug this:
[  148.291862][T10466] 
[  148.294743][T10466] Chain exists of:
[  148.294743][T10466]   &ima_iint_mutex_key[depth] --> &p->frag_sem --> &common->filesem
[  148.294743][T10466] 
[  148.298601][T10466]  Possible unsafe locking scenario:
[  148.298601][T10466] 
[  148.300729][T10466]        CPU0                    CPU1
[  148.302267][T10466]        ----                    ----
[  148.303701][T10466]   lock(&common->filesem);
[  148.304974][T10466]                                lock(&p->frag_sem);
[  148.306757][T10466]                                lock(&common->filesem);
[  148.308697][T10466]   lock(&ima_iint_mutex_key[depth]);
[  148.310203][T10466] 
[  148.310203][T10466]  *** DEADLOCK ***
[  148.310203][T10466] 
[  148.312386][T10466] 5 locks held by syz.2.1623/10466:
[  148.313832][T10466]  #0: ffff88802d7ae630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  148.316483][T10466]  #1: ffff888023b40450 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  148.318987][T10466]  #2: ffff88802d797a80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0
[  148.321706][T10466]  #3: ffff88803fe8cc70 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0
[  148.324833][T10466]  #4: ffff8880391af120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450
[  148.327517][T10466] 
[  148.327517][T10466] stack backtrace:
[  148.329185][T10466] CPU: 2 UID: 0 PID: 10466 Comm: syz.2.1623 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  148.329214][T10466] Tainted: [L]=SOFTLOCKUP
[  148.329221][T10466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  148.329233][T10466] Call Trace:
[  148.329257][T10466]  <TASK>
[  148.329266][T10466]  dump_stack_lvl+0x100/0x190
[  148.329312][T10466]  print_circular_bug.cold+0x178/0x1c7
[  148.329366][T10466]  check_noncircular+0x146/0x160
[  148.329388][T10466]  ? arch_stack_walk+0xa6/0xf0
[  148.329427][T10466]  check_prev_add+0xeb/0xe60
[  148.329449][T10466]  ? stack_trace_save+0x8e/0xc0
[  148.329478][T10466]  __lock_acquire+0x136c/0x1a40
[  148.329502][T10466]  lock_acquire+0x1b9/0x370
[  148.329518][T10466]  ? process_measurement+0x5ab/0x2350
[  148.329535][T10466]  ? __pfx___might_resched+0x10/0x10
[  148.329566][T10466]  __mutex_lock+0x1a4/0x1bd0
[  148.329588][T10466]  ? process_measurement+0x5ab/0x2350
[  148.329606][T10466]  ? process_measurement+0x5ab/0x2350
[  148.329624][T10466]  ? __pfx___mutex_lock+0x10/0x10
[  148.329644][T10466]  ? __pfx___might_resched+0x10/0x10
[  148.329665][T10466]  ? down_write+0x146/0x1f0
[  148.329693][T10466]  ? process_measurement+0x5ab/0x2350
[  148.329711][T10466]  process_measurement+0x5ab/0x2350
[  148.329732][T10466]  ? find_held_lock+0x2b/0x80
[  148.329748][T10466]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  148.329768][T10466]  ? __pfx_process_measurement+0x10/0x10
[  148.329786][T10466]  ? avc_has_perm+0x135/0x1e0
[  148.329801][T10466]  ? __pfx_avc_has_perm+0x10/0x10
[  148.329817][T10466]  ? hook_file_open+0x24f/0x8f0
[  148.329844][T10466]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  148.329881][T10466]  ima_file_check+0xc3/0x110
[  148.329901][T10466]  ? __pfx_ima_file_check+0x10/0x10
[  148.329920][T10466]  security_file_post_open+0xc4/0x210
[  148.329948][T10466]  path_openat+0x985/0x4280
[  148.329969][T10466]  ? __pfx_path_openat+0x10/0x10
[  148.329984][T10466]  ? kasan_save_stack+0x30/0x50
[  148.330015][T10466]  ? kasan_save_track+0x14/0x30
[  148.330036][T10466]  ? __kasan_slab_alloc+0x89/0x90
[  148.330056][T10466]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  148.330077][T10466]  ? do_getname_kernel+0x5d/0x250
[  148.330089][T10466]  ? filp_open+0x1d/0x50
[  148.330102][T10466]  ? fsg_lun_open+0x6b/0x7b0
[  148.330116][T10466]  ? fsg_store_file+0x1e7/0x450
[  148.330132][T10466]  do_file_open+0x20e/0x430
[  148.330145][T10466]  ? __pfx_do_file_open+0x10/0x10
[  148.330166][T10466]  ? rcu_is_watching+0x12/0xc0
[  148.330183][T10466]  file_open_name+0x1c3/0x3e0
[  148.330200][T10466]  ? __pfx_file_open_name+0x10/0x10
[  148.330212][T10466]  ? do_getname_kernel+0x5d/0x250
[  148.330225][T10466]  ? __asan_memcpy+0x3c/0x60
[  148.330236][T10466]  ? do_getname_kernel+0x1be/0x250
[  148.330249][T10466]  filp_open+0x2e/0x50
[  148.330262][T10466]  fsg_lun_open+0x6b/0x7b0
[  148.330274][T10466]  ? __pfx_down_read+0x10/0x10
[  148.330289][T10466]  fsg_store_file+0x1e7/0x450
[  148.330302][T10466]  configfs_write_iter+0x302/0x4e0
[  148.330316][T10466]  vfs_write+0x6ac/0x1050
[  148.330332][T10466]  ? __pfx_configfs_write_iter+0x10/0x10
[  148.330344][T10466]  ? __pfx_vfs_write+0x10/0x10
[  148.330364][T10466]  ksys_write+0x12a/0x250
[  148.330381][T10466]  ? __pfx_ksys_write+0x10/0x10
[  148.330404][T10466]  do_syscall_64+0x115/0x870
[  148.330421][T10466]  ? clear_bhb_loop+0x40/0x90
[  148.330439][T10466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.330458][T10466] RIP: 0033:0x7f258019e019
[  148.330472][T10466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  148.330483][T10466] RSP: 002b:00007f25810b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  148.330503][T10466] RAX: ffffffffffffffda RBX: 00007f2580426090 RCX: 00007f258019e019
[  148.330511][T10466] RDX: 0000000000000005 RSI: 0000200000000380 RDI: 000000000000000b
[  148.330517][T10466] RBP: 00007f258023500c R08: 0000000000000000 R09: 0000000000000000
[  148.330524][T10466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  148.330530][T10466] R13: 00007f2580426128 R14: 00007f2580426090 R15: 00007ffc3b0caec8
[  148.330542][T10466]  </TASK>
[  148.445244][T10466] mass_storage.0/lun.0: file too small: file0
[  151.753821][ T7788] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)