last executing test programs:

8.060320471s ago: executing program 0 (id=1741):
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf256f00000008000300", @ANYRES32=r0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2010)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r4, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r5, r4, 0x0, 0x578410eb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_team\x00'}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

6.559588025s ago: executing program 0 (id=1745):
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf256f00000008000300", @ANYRES32=r0, @ANYBLOB="0a00060008021100000000000a00060f0000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2010)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r4, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r5, r4, 0x0, 0x578410eb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_team\x00'}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

6.123801569s ago: executing program 1 (id=1747):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xc8143, 0x0)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
r2 = openat$autofs(0xffffff9c, &(0x7f0000000500), 0x80000, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYRES64=r5])
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x17c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x150, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xb4, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xa4, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_DYNSET_EXPRESSIONS={0x90, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x22}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x6614}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfff}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1a4}}, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, 0x0)
ioctl$TCSETS(r8, 0x89f2, &(0x7f0000000100)={0x40003, 0x0, 0x9, 0x4, 0x14, "bb40af00008000"})
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0xa000000, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000040))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r9, &(0x7f0000000180)='syz1\x00', 0x1ff)
sendfile(r10, r10, 0x0, 0x9)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})

5.61060124s ago: executing program 0 (id=1748):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0)
r1 = epoll_create(0xde5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000001})
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0xfffff000, 0xd, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2", 0x0, 0x7ffc, 0x0, 0x0, 0x7d, &(0x7f0000001100), &(0x7f0000000640)="e08550722bc41eb8c4e405cf1b9bfd2d6c49f81eb441b81a3c0a517e64af151ba98a4be3a5e9818958286dfd93eb6f1901b3ff70a02e1cd6ccf0ce55d52bb00781273315dd664976f4af3e70a4871a713c99f1ca9e0e5409db9314a8ecb61474e6575832730fb7f0c1121fff28330fa8f6c80a8594e4a648da5c8629be", 0x0, 0x0, 0x100000}, 0x4c)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_open_dev$cec(&(0x7f00000009c0), 0x0, 0xc8801)
ioctl$CEC_ADAP_G_CAPS(r9, 0xc04c6100, &(0x7f0000000a00))
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xf, 0x1, 0x0, 0x0, @str='/dev/iommu\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r11 = eventfd(0x0)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000380)={r11, 0xfffffffd, 0x2, r11})
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000080)={r11, 0x1, 0x2, r11})
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f00000008c0)=""/82, 0x52}, {0x0}, {&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f0000000100)=""/19, 0x13}], 0x7, 0x2, 0xffffff61)
write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
ioctl$VT_DISALLOCATE(r6, 0x5608)

5.310177795s ago: executing program 0 (id=1749):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xc8143, 0x0)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
r2 = openat$autofs(0xffffff9c, &(0x7f0000000500), 0x80000, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYRES64=r5])
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x184, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x158, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xac, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x9c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_DYNSET_EXPRESSIONS={0x88, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x22}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x6614}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfff}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1ac}}, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, 0x0)
ioctl$TCSETS(r8, 0x89f2, &(0x7f0000000100)={0x40003, 0x0, 0x9, 0x4, 0x14, "bb40af00008000"})
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0xa000000, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000040))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r9, &(0x7f0000000180)='syz1\x00', 0x1ff)
sendfile(r10, r10, 0x0, 0x9)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})

5.309572934s ago: executing program 3 (id=1750):
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf256f00000008000300", @ANYRES32=r0, @ANYBLOB="0a00060008021100000000000a00060f0000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2010)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r4, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r5, r4, 0x0, 0x578410eb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_team\x00'}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

5.127571684s ago: executing program 1 (id=1751):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0)
r1 = epoll_create(0xde5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000001})
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0xfffff000, 0xd, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2", 0x0, 0x7ffc, 0x0, 0x0, 0x7d, &(0x7f0000001100), &(0x7f0000000640)="e08550722bc41eb8c4e405cf1b9bfd2d6c49f81eb441b81a3c0a517e64af151ba98a4be3a5e9818958286dfd93eb6f1901b3ff70a02e1cd6ccf0ce55d52bb00781273315dd664976f4af3e70a4871a713c99f1ca9e0e5409db9314a8ecb61474e6575832730fb7f0c1121fff28330fa8f6c80a8594e4a648da5c8629be", 0x0, 0x0, 0x100000}, 0x4c)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_open_dev$cec(&(0x7f00000009c0), 0x0, 0xc8801)
ioctl$CEC_ADAP_G_CAPS(r7, 0xc04c6100, &(0x7f0000000a00))
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xf, 0x1, 0x0, 0x0, @str='/dev/iommu\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r9 = eventfd(0x0)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000380)={r9, 0xfffffffd, 0x2, r9})
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r9, 0x1, 0x2, r9})
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f00000008c0)=""/82, 0x52}, {0x0}, {&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f0000000100)=""/19, 0x13}], 0x7, 0x2, 0xffffff61)
write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
ioctl$VT_DISALLOCATE(r4, 0x5608)

4.50054708s ago: executing program 1 (id=1753):
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf256f00000008000300", @ANYRES32=r0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2010)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r4, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r5, r4, 0x0, 0x578410eb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_team\x00'}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

4.370523162s ago: executing program 3 (id=1754):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0)
r1 = epoll_create(0xde5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000001})
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0xfffff000, 0xd, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2", 0x0, 0x7ffc, 0x0, 0x0, 0x7d, &(0x7f0000001100), &(0x7f0000000640)="e08550722bc41eb8c4e405cf1b9bfd2d6c49f81eb441b81a3c0a517e64af151ba98a4be3a5e9818958286dfd93eb6f1901b3ff70a02e1cd6ccf0ce55d52bb00781273315dd664976f4af3e70a4871a713c99f1ca9e0e5409db9314a8ecb61474e6575832730fb7f0c1121fff28330fa8f6c80a8594e4a648da5c8629be", 0x0, 0x0, 0x100000}, 0x4c)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_open_dev$cec(&(0x7f00000009c0), 0x0, 0xc8801)
ioctl$CEC_ADAP_G_CAPS(r9, 0xc04c6100, &(0x7f0000000a00))
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xf, 0x1, 0x0, 0x0, @str='/dev/iommu\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r11 = eventfd(0x0)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000380)={r11, 0xfffffffd, 0x2, r11})
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000080)={r11, 0x1, 0x2, r11})
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f00000008c0)=""/82, 0x52}, {0x0}, {&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f0000000100)=""/19, 0x13}], 0x7, 0x2, 0xffffff61)
write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
ioctl$VT_DISALLOCATE(r6, 0x5608)

4.090466127s ago: executing program 0 (id=1755):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0x10080)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000240)=0x9)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0)
write$cgroup_subtree(r5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x0)
r7 = socket(0x22, 0x2, 0x1)
r8 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x2000, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)

3.609830829s ago: executing program 3 (id=1756):
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf256f00000008000300", @ANYRES32=r0, @ANYBLOB="0a00060008021100000000000a00060f0000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2010)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r4, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r5, r4, 0x0, 0x578410eb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_team\x00'}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

3.60917331s ago: executing program 1 (id=1757):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r2, 0xfffbfffe)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40046f41, 0x20000502)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x10, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6}, 0x18)
r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xc0842)
r8 = dup(r7)
ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000240)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
io_setup(0x2007, &(0x7f0000000200)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}])
write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x2, &(0x7f00000001c0)={0x77359400})

3.084669327s ago: executing program 2 (id=1758):
gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xfffffffffffffffe)
mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000740)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20008805}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x1ffff9, 0x800, 0x0, 0xfffffffa}, &(0x7f0000000180), &(0x7f0000000240))
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40046104, &(0x7f0000000240))
r5 = socket(0xa, 0x1, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044850}, 0xf942d3a5c2bcdc4f)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
close(r6)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x181)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000003d0007010000000000000000016000000800458004000880080001"], 0x24}}, 0x4040040)
fcntl$setlease(r7, 0x400, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000040))

2.797070767s ago: executing program 2 (id=1759):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xc8143, 0x0)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
r2 = openat$autofs(0xffffff9c, &(0x7f0000000500), 0x80000, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYRES64=r5])
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x17c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x150, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xb4, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xa4, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_DYNSET_EXPRESSIONS={0x90, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x22}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x6614}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfff}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1a4}}, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, 0x0)
ioctl$TCSETS(r8, 0x89f2, &(0x7f0000000100)={0x40003, 0x0, 0x9, 0x4, 0x14, "bb40af00008000"})
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0xa000000, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000040))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r9, &(0x7f0000000180)='syz1\x00', 0x1ff)
sendfile(r10, r10, 0x0, 0x9)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})

2.731980585s ago: executing program 0 (id=1760):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r4 = fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
sendmsg$inet6(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5a6871908ddfe3ee43aa1160a73753ce6cab32d184de576a9f314969c1d7546399a47258ea86bbd3febfc84e58f64d32bb361e0af645bad480a103ab7d7fa2404622f26e7f7e668a4d7e5aee1276dc1d52b170003659e627d012cdf5dcb438b8ae0bf19e6c992c68011b7297da8b53655071195f55e0d68ff3a297520e6cd6b2b46822b62f0fa2c9bd78d970b17a23e4096c1aeb98ba30c29a9003ba384101a9bb1ac802a76ec09284effc42886e77fe283439bc49a035bc4699ea3f5f049025dcb27f3bef88634d63ce70dd8756f4bf3100e3fd83131acc6bf88380dd4b1a277f8381d96c02860d605007f25c76d3893b32f43bca88d104b67b", 0xfa}, {&(0x7f0000000700)="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", 0x2d7}], 0x2}, 0x40001880)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "fd9192068590ef44", "4ded6853efa14266912ec2cb350be183", "15861006", "84d6d4ab8749281f"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4060010}, 0x4080194)

2.180323186s ago: executing program 3 (id=1761):
socket$nl_rdma(0x10, 0x3, 0x14)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x81, 0x100c050, 0x5, 0x0, 0x0, 0x3}}, 0x50)
socket(0x10, 0x80002, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x400)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000140000000c00078008000200ec090000"], 0x20}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)

2.007534154s ago: executing program 1 (id=1762):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f000081c000/0x1000)=nil, 0x1000, 0x8, 0x1010, 0xffffffffffffffff, 0xab880000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$igmp(0x2, 0x3, 0x2)
prctl$PR_SET_SECUREBITS(0x1c, 0x1e)
setreuid(0xee01, 0xee01)
fcntl$setstatus(r3, 0x4, 0x42800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850008000000000000000000000000009500000000000000f3a674f29403ea5dc877d10a1b9ab65fce713fb0281c33639821990ab9c09f402c610c84b54e6f8dbb5bfc1e99ebcd886675cd6134b571e0b2f416faee826b6c6bbbf5e952bb77a2dce071a75c70238e"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f00000002c0)={0x1, 0xff, 0x1, 0x0, 0x5})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f00000003c0)=0x1ff, 0x12)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000001ac0), 0x6)
ioctl$sock_bt_hci(r7, 0x800448d7, &(0x7f0000000000))

1.750374553s ago: executing program 2 (id=1763):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0)
r1 = epoll_create(0xde5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000001})
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0xfffff000, 0xd, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2", 0x0, 0x7ffc, 0x0, 0x0, 0x7d, &(0x7f0000001100), &(0x7f0000000640)="e08550722bc41eb8c4e405cf1b9bfd2d6c49f81eb441b81a3c0a517e64af151ba98a4be3a5e9818958286dfd93eb6f1901b3ff70a02e1cd6ccf0ce55d52bb00781273315dd664976f4af3e70a4871a713c99f1ca9e0e5409db9314a8ecb61474e6575832730fb7f0c1121fff28330fa8f6c80a8594e4a648da5c8629be", 0x0, 0x0, 0x100000}, 0x4c)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_open_dev$cec(&(0x7f00000009c0), 0x0, 0xc8801)
ioctl$CEC_ADAP_G_CAPS(r9, 0xc04c6100, &(0x7f0000000a00))
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xf, 0x1, 0x0, 0x0, @str='/dev/iommu\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r11 = eventfd(0x0)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000380)={r11, 0xfffffffd, 0x2, r11})
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000080)={r11, 0x1, 0x2, r11})
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f00000008c0)=""/82, 0x52}, {0x0}, {&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f0000000100)=""/19, 0x13}], 0x7, 0x2, 0xffffff61)
write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
ioctl$VT_DISALLOCATE(r6, 0x5608)

1.350588321s ago: executing program 2 (id=1764):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0)
r1 = epoll_create(0xde5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000001})
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0xfffff000, 0xd, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2", 0x0, 0x7ffc, 0x0, 0x0, 0x7d, &(0x7f0000001100), &(0x7f0000000640)="e08550722bc41eb8c4e405cf1b9bfd2d6c49f81eb441b81a3c0a517e64af151ba98a4be3a5e9818958286dfd93eb6f1901b3ff70a02e1cd6ccf0ce55d52bb00781273315dd664976f4af3e70a4871a713c99f1ca9e0e5409db9314a8ecb61474e6575832730fb7f0c1121fff28330fa8f6c80a8594e4a648da5c8629be", 0x0, 0x0, 0x100000}, 0x4c)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_open_dev$cec(&(0x7f00000009c0), 0x0, 0xc8801)
ioctl$CEC_ADAP_G_CAPS(r9, 0xc04c6100, &(0x7f0000000a00))
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xf, 0x1, 0x0, 0x0, @str='/dev/iommu\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r11 = eventfd(0x0)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000380)={r11, 0xfffffffd, 0x2, r11})
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000080)={r11, 0x1, 0x2, r11})
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f00000008c0)=""/82, 0x52}, {0x0}, {&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f0000000100)=""/19, 0x13}], 0x7, 0x2, 0xffffff61)
write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
ioctl$VT_DISALLOCATE(r6, 0x5608)

1.303146154s ago: executing program 3 (id=1765):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x8028cf313be5dcba, 0x10, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
semget$private(0x0, 0x207, 0x480)
keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}})
r4 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002800000", 0x2c}, {&(0x7f0000000640)="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", 0xdf2}, {&(0x7f00000000c0)="26fc4bcf8b00c19cd0eed8a91f7c36de44eed2752c4d27ee2e10986d2b", 0x1d}, {&(0x7f0000000280)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d", 0x68}, {&(0x7f0000000200)}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b791e900ba3d654bb44d4402987f407bdbcefe93f535279d99bb839a1", 0x2d}, {&(0x7f00000004c0)="91f0807b6afddf80750c5a560c2081f08de8a721aa5e3cfd5a6bc6cabda994bf8693656d03e1ecd9d468f2d4bb42292991d19fba6097597c9e6f16fdcb2b551f2bfeaaf98a60bc01df68984cf336e2d257b29840e3adfa847b5f420ea7b5e4d1545ae88f63dfbb3ecdfa6633997cbaaa79e2ada80941ed932cbd7a0b11325041f526151f6be00828495864ad9f61c009821728b246b5957891caf322b4a8c97874073ecf48e0cde8e05ba00619d7d90907550d123307265ef06a5ba4a640b82641a834e2684781e4b3e0a93e8d25795a7949e0864c40b8396a01a59b509e34ef484c938c3a677a072a4fba", 0xeb}, {0x0}], 0x8}, 0x0)
openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x5d)
r6 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x40, 0x3, 0x0, 0x46, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x2, 0x3}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0})

900.623743ms ago: executing program 2 (id=1766):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$packet(0x11, 0x2, 0x300)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000480)=ANY=[], 0x118)
socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000340))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000040)=[{0x4, 0x4, 0x1, 0xb}, {0x4, 0x3, 0xb, 0x1}, {0x2, 0x5, 0xd}, {0x0, 0x3, 0x6, 0x4}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4, 0x4}], 0x2000000000000282}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xea}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

890.318024ms ago: executing program 1 (id=1774):
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf256f00000008000300", @ANYRES32=r0, @ANYBLOB="0a00060008021100000000000a00060f0000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2010)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r4, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r5, r4, 0x0, 0x578410eb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_team\x00'}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

367.969229ms ago: executing program 3 (id=1767):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xc8143, 0x0)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
r2 = openat$autofs(0xffffff9c, &(0x7f0000000500), 0x80000, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYRES64=r5])
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x17c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x150, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xa4, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x94, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_DYNSET_EXPRESSIONS={0x80, 0xa, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x22}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x6614}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfff}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1a4}}, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, 0x0)
ioctl$TCSETS(r8, 0x89f2, &(0x7f0000000100)={0x40003, 0x0, 0x9, 0x4, 0x14, "bb40af00008000"})
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0xa000000, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000040))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r9, &(0x7f0000000180)='syz1\x00', 0x1ff)
sendfile(r10, r10, 0x0, 0x9)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})

0s ago: executing program 2 (id=1768):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000060000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d70002000028008000240000000e30b00038005000100ef00000008000140000000000900010073797a30"], 0xcc}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340), &(0x7f0000000400)=0x4)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1})
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="79f1773e"])
fcntl$lock(r6, 0x26, &(0x7f0000000080))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000fd3eb4f201f1d4ec77d4b5599c73767c0000000000fcffffff00000000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000500"/28], 0x50)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x121180, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0x40186f40, 0x20000502)
r9 = getpid()
process_vm_readv(r9, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f00000018c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r10, 0x2000000, 0x92, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a44ca7b73908b0e0245bb78fefed08041a1231bdb4729d55fa1e5b413df0c757252630588a43d899a24818d78c9b4b148de20b812fd893157d5046238c9c82df5a649a4781baeac4da0bf1151b932a24f43608a48841f8083e2bf008a0c7a6415d630057bde8c3589ec5aad0876bd342598daa8affb10c0bccb023f824d8e9fdc94ab245a", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 change from 0 to 16384
[   55.095688][ T6461] netlink: 'syz.2.57': attribute type 4 has an invalid length.
[   55.097193][ T6462] loop7: detected capacity change from 0 to 16384
[   55.112116][ T6461] netlink: 'syz.2.57': attribute type 4 has an invalid length.
[   55.363513][ T6468] @: renamed from vlan0 (while UP)
[   55.464187][ T6465] loop7: detected capacity change from 16384 to 16383
[   55.828505][ T6479] random: crng reseeded on system resumption
[   55.839952][ T6479] Restarting kernel threads ... done.
[   56.319431][ T6486] : entered promiscuous mode
[   58.981362][ T6521] netlink: 9 bytes leftover after parsing attributes in process `syz.1.70'.
[   59.110381][ T6523] loop0: detected capacity change from 0 to 16384
[   59.466093][ T6531] mkiss: ax0: crc mode is auto.
[   59.534011][ T5943] Bluetooth: hci2: command tx timeout
[   59.632994][ T6541] netlink: 'syz.0.71': attribute type 4 has an invalid length.
[   59.668423][ T6541] netlink: 'syz.0.71': attribute type 4 has an invalid length.
[   60.521581][ T6589] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   60.529146][ T6589] CIFS mount error: No usable UNC path provided in device string!
[   60.529146][ T6589] 
[   60.532192][ T6589] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   60.842554][ T6594] xt_CT: No such helper "snmp_trap"
[   60.992255][ T2033] IPVS: starting estimator thread 0...
[   61.083953][ T6598] IPVS: using max 39 ests per chain, 93600 per kthread
[   61.362398][ T6607] ebtables: wrong size: *len 120, entries_size 48, replsz 48
[   62.044154][ T6625] random: crng reseeded on system resumption
[   62.055140][ T6625] Restarting kernel threads ... done.
[   62.057912][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   62.060684][ T6603] IPVS: Error joining to the multicast group
[   62.112912][ T6629] netlink: 9 bytes leftover after parsing attributes in process `syz.0.81'.
[   62.285471][ T6631] loop0: detected capacity change from 0 to 16384
[   64.604215][ T6666] random: crng reseeded on system resumption
[   64.608837][ T6666] Restarting kernel threads ... done.
[   64.921844][ T6674] ebtables: wrong size: *len 120, entries_size 48, replsz 48
[   65.733272][ T6686] random: crng reseeded on system resumption
[   65.751413][ T6686] Restarting kernel threads ... done.
[   66.010722][ T6693] random: crng reseeded on system resumption
[   66.351483][ T6697] random: crng reseeded on system resumption
[   66.356691][ T6697] Restarting kernel threads ... done.
[   66.741941][ T6702] fuse: Unknown parameter '0x0000000000000007'
[   66.760187][ T6705] overlay: ./file0 is not a directory
[   66.947996][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'.
[   67.295254][ T6717] CIFS mount error: No usable UNC path provided in device string!
[   67.295254][ T6717] 
[   67.298054][ T6717] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   67.559742][ T6719] xt_CT: No such helper "snmp_trap"
[   69.922211][ T6736] ebtables: wrong size: *len 120, entries_size 48, replsz 48
[   70.409662][ T6741] random: crng reseeded on system resumption
[   70.826127][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[   70.828162][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[   70.853913][ T1321] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   71.026447][ T1321] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   71.029689][ T1321] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   71.032620][ T1321] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   71.035293][ T1321] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.040583][ T6752] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   71.044786][ T1321] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[   71.562493][    T9] IPVS: starting estimator thread 0...
[   71.665579][ T6768] IPVS: using max 39 ests per chain, 93600 per kthread
[   72.774669][ T6777] ebtables: wrong size: *len 120, entries_size 48, replsz 48
[   73.555688][   T39] audit: type=1326 audit(1738198265.562:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.3.111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7fc00000
[   73.567373][ T2033] usb 8-1: USB disconnect, device number 3
[   73.739695][ T6796] random: crng reseeded on system resumption
[   75.148826][ T6819] ebtables: wrong size: *len 120, entries_size 48, replsz 48
[   75.956006][ T2298] cfg80211: failed to load regulatory.db
[   76.000819][ T6826] random: crng reseeded on system resumption
[   76.008688][ T6826] Restarting kernel threads ... done.
[   76.010302][ T6822] mkiss: ax0: crc mode is auto.
[   76.146376][ T6835] netlink: 'syz.3.128': attribute type 4 has an invalid length.
[   76.162357][ T6835] netlink: 'syz.3.128': attribute type 4 has an invalid length.
[   77.044067][ T6848] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   77.233886][ T2033] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   77.765897][ T2033] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   77.770722][ T2033] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   77.781359][ T2033] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   77.784245][ T2033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.790370][ T6841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   77.795233][ T2033] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[   78.105432][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'.
[   78.554945][   T39] audit: type=1326 audit(1738198270.562:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7fc00000
[   79.042367][ T6906] netlink: 9 bytes leftover after parsing attributes in process `syz.3.139'.
[   79.219528][ T6909] ebtables: wrong size: *len 120, entries_size 48, replsz 48
[   79.574523][ T6912] loop0: detected capacity change from 0 to 16384
[   79.833105][ T6919] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   79.838091][ T6919] overlayfs: missing 'lowerdir'
[   79.899634][   T39] audit: type=1326 audit(1738198271.902:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000
[   79.924812][ T1321] usb 6-1: USB disconnect, device number 2
[   79.934757][ T6921] mkiss: ax0: crc mode is auto.
[   80.061087][ T6928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.143'.
[   80.075418][ T6928] warning: `syz.1.143' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.124775][ T6931] netlink: 'syz.0.142': attribute type 4 has an invalid length.
[   80.161024][ T6929] netlink: 'syz.0.142': attribute type 4 has an invalid length.
[   81.016456][ T6944] random: crng reseeded on system resumption
[   81.021957][ T6944] Restarting kernel threads ... done.
[   82.216613][ T6964] ebtables: wrong size: *len 120, entries_size 48, replsz 48
[   82.395039][ T6956] ceph: No mds server is up or the cluster is laggy
[   82.397978][ T2298] libceph: connect (1)[c::]:6789 error -101
[   82.400091][ T2298] libceph: mon0 (1)[c::]:6789 connect error
[   82.416019][ T6958] netlink: 9 bytes leftover after parsing attributes in process `syz.0.151'.
[   82.725223][ T2298] libceph: connect (1)[c::]:6789 error -101
[   82.735666][ T2298] libceph: mon0 (1)[c::]:6789 connect error
[   82.852853][ T6958] loop0: detected capacity change from 0 to 16384
[   83.582254][ T6984] random: crng reseeded on system resumption
[   83.587092][ T6984] Restarting kernel threads ... done.
[   83.609399][ T6986] mkiss: ax0: crc mode is auto.
[   83.729448][ T6990] netlink: 'syz.1.156': attribute type 4 has an invalid length.
[   83.744025][ T6990] netlink: 'syz.1.156': attribute type 4 has an invalid length.
[   84.257966][ T7003] random: crng reseeded on system resumption
[   84.262418][ T7003] Restarting kernel threads ... done.
[   84.770641][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.161'.
[   85.193370][   T39] audit: type=1800 audit(1738198277.192:5): pid=7026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.163" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[   85.972041][ T7037] loop7: detected capacity change from 0 to 16384
[   86.215666][ T7052] random: crng reseeded on system resumption
[   86.220040][ T7052] Restarting kernel threads ... done.
[   86.267642][ T7043] loop7: detected capacity change from 16384 to 16383
[   87.700336][ T7072] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   87.707870][ T7072] batman_adv: batadv0: Adding interface: gretap1
[   87.710090][ T7072] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.717292][ T7072] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[   88.039755][ T7074] random: crng reseeded on system resumption
[   88.045142][ T7074] Restarting kernel threads ... done.
[   88.557147][ T7080] overlayfs: failed to resolve './file1': -2
[   89.344883][ T7096] usb 2-1: USB disconnect, device number 2
[   89.478600][ T7103] random: crng reseeded on system resumption
[   89.596347][ T7100] ceph: No mds server is up or the cluster is laggy
[   89.596364][ T7103] Restarting kernel threads ... 
[   89.606692][ T5980] libceph: connect (1)[c::]:6789 error -101
[   89.607017][ T7103] done.
[   89.608297][ T5980] libceph: mon0 (1)[c::]:6789 connect error
[   89.714022][ T7104] hub 2-0:1.0: USB hub found
[   89.715944][ T7104] hub 2-0:1.0: 6 ports detected
[   89.731015][ T7115] random: crng reseeded on system resumption
[   89.736432][ T7115] Restarting kernel threads ... done.
[   89.883971][ T2033] usb 2-1: new high-speed USB device number 3 using ehci-pci
[   90.408271][ T2033] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[   90.411902][ T2033] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[   90.415262][ T2033] usb 2-1: Product: QEMU USB Tablet
[   90.417446][ T2033] usb 2-1: Manufacturer: QEMU
[   90.419291][ T2033] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[   90.443305][ T2033] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input5
[   90.530381][ T2033] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[   90.716374][ T7125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.742357][ T7125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.746030][ T7125] bond0 (unregistering): Released all slaves
[   91.207955][ T7138] random: crng reseeded on system resumption
[   91.219579][ T7138] Restarting kernel threads ... done.
[   92.158015][ T7147] random: crng reseeded on system resumption
[   92.166742][ T7147] Restarting kernel threads ... done.
[   92.245018][ T7149] loop7: detected capacity change from 0 to 16384
[   92.414140][ T7152] loop7: detected capacity change from 16384 to 16383
[   92.803834][    C1] hrtimer: interrupt took 64862 ns
[   93.085371][ T7155] random: crng reseeded on system resumption
[   93.091666][ T7155] Restarting kernel threads ... done.
[   94.592378][ T7166] random: crng reseeded on system resumption
[   94.597113][ T7166] Restarting kernel threads ... done.
[   98.459070][ T7183] CIFS mount error: No usable UNC path provided in device string!
[   98.459070][ T7183] 
[   98.462108][ T7183] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   99.025361][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'.
[   99.070573][ T7192] xt_CT: No such helper "snmp_trap"
[   99.385294][ T7197] random: crng reseeded on system resumption
[   99.392267][ T7197] Restarting kernel threads ... done.
[   99.455855][ T7200] mkiss: ax0: crc mode is auto.
[   99.621618][ T7205] netlink: 'syz.3.197': attribute type 4 has an invalid length.
[   99.642756][ T7205] netlink: 'syz.3.197': attribute type 4 has an invalid length.
[  100.904506][ T5949] Bluetooth: hci1: command 0x0405 tx timeout
[  103.568848][ T7231] loop7: detected capacity change from 0 to 16384
[  103.828896][ T7232] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  103.832094][ T7232] batman_adv: batadv0: Adding interface: gretap1
[  103.833985][ T7232] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.841184][ T7232] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  104.043997][ T7237] loop7: detected capacity change from 16384 to 16383
[  104.691881][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.209'.
[  105.092956][ T7255] ISOFS: Unable to identify CD-ROM format.
[  105.372555][ T7261] random: crng reseeded on system resumption
[  105.382468][ T7261] Restarting kernel threads ... done.
[  106.760376][ T7286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.219'.
[  107.186385][ T7292] random: crng reseeded on system resumption
[  107.383723][ T7299] tap0: tun_chr_ioctl cmd 1074025672
[  107.385744][ T7299] tap0: ignored: set checksum enabled
[  107.397490][   T39] audit: type=1804 audit(1738198299.402:6): pid=7299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.222" name="/newroot/54/file0/file0" dev="9p" ino=35923006 res=1 errno=0
[  108.090592][ T7315] random: crng reseeded on system resumption
[  108.097246][ T7315] Restarting kernel threads ... done.
[  109.098702][ T7335] loop7: detected capacity change from 0 to 16384
[  109.245337][ T7338] loop7: detected capacity change from 16384 to 16383
[  109.647054][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'.
[  111.163251][ T7361] netlink: 'syz.3.233': attribute type 2 has an invalid length.
[  111.166149][ T7361] netlink: 'syz.3.233': attribute type 1 has an invalid length.
[  111.168466][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'.
[  112.461832][ T7376] random: crng reseeded on system resumption
[  112.469703][ T7376] Restarting kernel threads ... done.
[  113.072616][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'.
[  113.206691][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.241'.
[  113.620664][ T7401] ISOFS: Unable to identify CD-ROM format.
[  113.859071][ T6006] IPVS: starting estimator thread 0...
[  113.943961][ T7405] IPVS: using max 38 ests per chain, 91200 per kthread
[  115.762935][ T7435] random: crng reseeded on system resumption
[  115.769797][ T7435] Restarting kernel threads ... done.
[  116.826517][ T7452] random: crng reseeded on system resumption
[  116.831061][ T7452] Restarting kernel threads ... done.
[  117.798529][   T39] audit: type=1326 audit(1738198309.802:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.3.259" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0
[  118.701514][ T7478] random: crng reseeded on system resumption
[  118.706331][ T7478] Restarting kernel threads ... done.
[  119.843424][ T7502] random: crng reseeded on system resumption
[  119.852864][ T7502] Restarting kernel threads ... done.
[  120.635781][ T7513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.636332][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.271'.
[  122.460678][ T7534] bridge0: port 3(hsr_slave_1) entered blocking state
[  122.463458][ T7534] bridge0: port 3(hsr_slave_1) entered disabled state
[  122.466466][ T7534] hsr_slave_1: entered allmulticast mode
[  122.471733][ T7534] hsr_slave_1: left allmulticast mode
[  123.388639][ T7547] random: crng reseeded on system resumption
[  123.395827][ T7547] Restarting kernel threads ... done.
[  125.192568][   T39] audit: type=1326 audit(1738198317.192:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7fc00000
[  125.453919][ T5949] Bluetooth: hci2: command tx timeout
[  125.582432][ T7570] ISOFS: Unable to identify CD-ROM format.
[  126.376407][ T7589] netlink: 'syz.2.287': attribute type 1 has an invalid length.
[  126.444636][ T7589] bond1: entered promiscuous mode
[  126.447008][ T7589] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.546354][ T7591] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.554525][ T7591] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  126.557449][ T7591] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  126.565341][ T7591] bond1: (slave ip6gre1): making interface the new active one
[  126.567527][ T7591] ip6gre1: entered promiscuous mode
[  126.570436][ T7591] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  126.650569][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'.
[  127.075788][ T7596] random: crng reseeded on system resumption
[  127.081091][ T7596] Restarting kernel threads ... done.
[  129.060381][ T7630] random: crng reseeded on system resumption
[  129.066576][ T7630] Restarting kernel threads ... done.
[  129.385930][ T7624] ISOFS: Unable to identify CD-ROM format.
[  129.876294][ T7640] loop7: detected capacity change from 0 to 16384
[  130.022254][ T7645] random: crng reseeded on system resumption
[  130.030292][ T7645] Restarting kernel threads ... done.
[  130.144155][ T7642] loop7: detected capacity change from 16384 to 16383
[  130.163960][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'.
[  131.172063][ T7657] netlink: 'syz.0.302': attribute type 2 has an invalid length.
[  131.177613][ T7657] netlink: 'syz.0.302': attribute type 1 has an invalid length.
[  131.182238][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'.
[  131.494223][ T7656] syz.0.302 (7656) used greatest stack depth: 20544 bytes left
[  132.256333][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[  132.258839][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  132.831297][ T7680] netlink: 'syz.3.309': attribute type 2 has an invalid length.
[  132.833600][ T7680] netlink: 'syz.3.309': attribute type 1 has an invalid length.
[  132.835967][ T7680] netlink: 'syz.3.309': attribute type 1 has an invalid length.
[  132.840399][ T7680] loop7: detected capacity change from 0 to 16384
[  133.493915][ T7680] loop7: detected capacity change from 16384 to 16383
[  133.864049][ T5949] Bluetooth: Unexpected continuation frame (len 16)
[  133.935343][ T7692] Process accounting resumed
[  133.940751][   T39] audit: type=1326 audit(1738198325.942:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7fc00000
[  134.432379][ T7702] netlink: 'syz.1.314': attribute type 1 has an invalid length.
[  134.451427][ T7702] bond2: entered promiscuous mode
[  134.457096][ T7702] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.495495][ T7702] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.497893][ T7702] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  134.501053][ T7702] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  134.556172][ T7702] bond2: (slave ip6gre1): making interface the new active one
[  134.558491][ T7702] ip6gre1: entered promiscuous mode
[  134.561222][ T7702] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  135.795847][ T7727] netlink: 596 bytes leftover after parsing attributes in process `syz.1.320'.
[  135.799357][ T7726] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  136.521096][ T7738] random: crng reseeded on system resumption
[  136.527262][ T7738] Restarting kernel threads ... done.
[  137.258057][ T7752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'.
[  137.513186][ T7757] random: crng reseeded on system resumption
[  137.520307][ T7757] Restarting kernel threads ... done.
[  137.524537][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'.
[  137.623045][ T7750] process 'syz.3.326' launched '/dev/fd/9' with NULL argv: empty string added
[  138.229353][ T7771] bridge0: port 3(hsr_slave_1) entered blocking state
[  138.232085][ T7771] bridge0: port 3(hsr_slave_1) entered disabled state
[  138.236013][ T7771] hsr_slave_1: entered allmulticast mode
[  138.245986][ T7771] hsr_slave_1: left allmulticast mode
[  138.958488][ T7785] random: crng reseeded on system resumption
[  138.962836][ T7785] Restarting kernel threads ... done.
[  139.326200][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'.
[  140.126126][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.339'.
[  141.605143][ T7821] trusted_key: encrypted_key: key user:syz not found
[  141.893013][ T7825] random: crng reseeded on system resumption
[  141.901293][ T7825] Restarting kernel threads ... done.
[  144.768830][   T39] audit: type=1326 audit(1738198336.772:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.1.351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000
[  144.818990][ T7872] ipvlan1: entered allmulticast mode
[  144.820599][ T7872] veth0_vlan: entered allmulticast mode
[  145.312720][ T7876] netlink: 'syz.0.359': attribute type 1 has an invalid length.
[  145.332934][ T7876] bond1: entered promiscuous mode
[  145.339641][ T7876] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.393359][ T7876] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.395772][ T7876] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  145.398874][ T7876] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  145.406835][ T7876] bond1: (slave ip6gre1): making interface the new active one
[  145.408948][ T7876] ip6gre1: entered promiscuous mode
[  145.411579][ T7876] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  145.564340][ T6801] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  145.606660][ T7885] random: crng reseeded on system resumption
[  145.618768][ T7885] Restarting kernel threads ... done.
[  145.674827][ T7889] [U] 
[  145.676198][ T7889] [U] 
[  145.677343][ T7889] [U] 
[  145.678450][ T7889] [U] 
[  145.679592][ T7889] [U] 
[  145.680718][ T7889] [U] 
[  145.681865][ T7889] [U] 
[  145.682987][ T7889] [U] 
[  145.689229][ T7889] [U] 
[  145.690354][ T7889] [U] 
[  145.691454][ T7889] [U] 
[  145.692593][ T7889] [U] 
[  145.693743][ T7889] [U] 
[  145.694837][ T7889] [U] 
[  145.695974][ T7889] [U] 
[  145.697111][ T7889] [U] 
[  145.698836][ T7889] [U] 
[  145.699976][ T7889] [U] 
[  145.701116][ T7889] [U] 
[  145.702270][ T7889] [U] 
[  145.703417][ T7889] [U] 
[  145.704664][ T7889] [U] 
[  145.705528][ T7889] [U] 
[  145.706343][ T7889] [U] 
[  145.709021][ T7889] [U] 
[  145.709884][ T7889] [U] 
[  145.710717][ T7889] [U] 
[  145.711521][ T7889] [U] 
[  145.712352][ T7889] [U] 
[  145.713174][ T7889] [U] 
[  145.713987][ T7889] [U] 
[  145.714794][ T7889] [U] 
[  145.715688][ T7889] [U] 
[  145.716505][ T7889] [U] 
[  145.717326][ T7889] [U] 
[  145.718130][ T7889] [U] 
[  145.718943][ T7889] [U] 
[  145.719751][ T7889] [U] 
[  145.720584][ T7889] [U] 
[  145.721414][ T7889] [U] 
[  145.722284][ T7889] [U] 
[  145.723095][ T7889] [U] 
[  145.723915][ T7889] [U] 
[  145.724235][ T6801] usb 6-1: device descriptor read/64, error -71
[  145.726521][ T7889] [U] 
[  145.728149][ T7889] [U] 
[  145.728968][ T7889] [U] 
[  145.729789][ T7889] [U] 
[  145.730626][ T7889] [U] 
[  145.731452][ T7889] [U] 
[  145.732280][ T7889] [U] 
[  145.733099][ T7889] [U] 
[  145.733910][ T7889] [U] 
[  145.735088][ T7889] [U] 
[  145.735934][ T7889] [U] 
[  145.736723][ T7889] [U] 
[  145.737530][ T7889] [U] 
[  145.738355][ T7889] [U] 
[  145.739168][ T7889] [U] 
[  145.739973][ T7889] [U] 
[  145.740824][ T7889] [U] 
[  145.741666][ T7889] [U] 
[  145.742475][ T7889] [U] 
[  145.743282][ T7889] [U] 
[  145.744102][ T7889] [U] 
[  145.745374][ T7889] [U] 
[  145.746241][ T7889] [U] 
[  145.747062][ T7889] [U] 
[  145.747893][ T7889] [U] 
[  145.748793][ T7889] [U] 
[  145.749647][ T7889] [U] 
[  145.750492][ T7889] [U] 
[  145.751311][ T7889] [U] 
[  145.752718][ T7889] [U] 
[  145.753587][ T7889] [U] 
[  145.754415][ T7889] [U] 
[  145.755236][ T7889] [U] 
[  145.756270][ T7889] [U] 
[  145.757121][ T7889] [U] 
[  145.757955][ T7889] [U] 
[  145.758778][ T7889] [U] 
[  145.759677][ T7889] [U] 
[  145.760496][ T7889] [U] 
[  145.761326][ T7889] [U] 
[  145.762143][ T7889] [U] 
[  145.762957][ T7889] [U] 
[  145.763789][ T7889] [U] 
[  145.764607][ T7889] [U] 
[  145.765437][ T7889] [U] 
[  145.766347][ T7889] [U] 
[  145.767169][ T7889] [U] 
[  145.767998][ T7889] [U] 
[  145.768804][ T7889] [U] 
[  145.769637][ T7889] [U] 
[  145.770463][ T7889] [U] 
[  145.771276][ T7889] [U] 
[  145.772102][ T7889] [U] 
[  145.772980][ T7889] [U] 
[  145.773828][ T7889] [U] 
[  145.774649][ T7889] [U] 
[  145.775468][ T7889] [U] 
[  145.776369][ T7889] [U] 
[  145.777211][ T7889] [U] 
[  145.778046][ T7889] [U] 
[  145.778854][ T7889] [U] 
[  145.779679][ T7889] [U] 
[  145.780499][ T7889] [U] 
[  145.781334][ T7889] [U] 
[  145.782174][ T7889] [U] 
[  145.782994][ T7889] [U] 
[  145.783816][ T7889] [U] 
[  145.784634][ T7889] [U] 
[  145.785462][ T7889] [U] 
[  145.786332][ T7889] [U] 
[  145.787154][ T7889] [U] 
[  145.787990][ T7889] [U] 
[  145.788805][ T7889] [U] 
[  145.789632][ T7889] [U] 
[  145.790455][ T7889] [U] 
[  145.791268][ T7889] [U] 
[  145.792097][ T7889] [U] 
[  145.792923][ T7889] [U] 
[  145.793757][ T7889] [U] 
[  145.794583][ T7889] [U] 
[  145.795395][ T7889] [U] 
[  145.796265][ T7889] [U] 
[  145.797092][ T7889] [U] 
[  145.797918][ T7889] [U] 
[  145.828127][ T7882] [U] 
[  146.063855][ T6801] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  146.363949][ T6801] usb 6-1: device descriptor read/64, error -71
[  146.491436][ T6801] usb usb6-port1: attempt power cycle
[  147.082710][ T6801] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  147.152637][ T6801] usb 6-1: device descriptor read/8, error -71
[  147.873973][ T6801] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  147.894110][ T6801] usb 6-1: device descriptor read/8, error -71
[  148.048556][ T6801] usb usb6-port1: unable to enumerate USB device
[  148.113933][   T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  148.275286][   T35] usb 7-1: config 0 has an invalid interface number: 176 but max is 0
[  148.278397][   T35] usb 7-1: config 0 has no interface number 0
[  148.283078][   T35] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice=5e.d2
[  148.286569][   T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.289053][   T35] usb 7-1: Product: syz
[  148.290268][   T35] usb 7-1: Manufacturer: syz
[  148.291704][   T35] usb 7-1: SerialNumber: syz
[  148.294004][   T35] usb 7-1: config 0 descriptor??
[  148.516430][ T7926] random: crng reseeded on system resumption
[  149.565103][   T35] rtl8150 7-1:0.176: couldn't reset the device
[  149.567097][   T35] rtl8150 7-1:0.176: probe with driver rtl8150 failed with error -5
[  149.570379][ T7926] Restarting kernel threads ... done.
[  151.178388][ T6163] usb 7-1: USB disconnect, device number 2
[  151.783236][ T7967] netlink: 'syz.1.379': attribute type 2 has an invalid length.
[  151.786348][ T7967] netlink: 'syz.1.379': attribute type 1 has an invalid length.
[  151.789395][ T7967] netlink: 'syz.1.379': attribute type 1 has an invalid length.
[  151.795237][ T7967] loop7: detected capacity change from 0 to 16384
[  152.226963][ T7971] loop7: detected capacity change from 16384 to 16383
[  152.254896][ T7976] random: crng reseeded on system resumption
[  152.286229][ T5943] Bluetooth: Unexpected continuation frame (len 16)
[  152.312120][ T7976] Restarting kernel threads ... done.
[  152.357428][ T7977] Process accounting resumed
[  153.231798][ T7991] overlayfs: missing 'workdir'
[  153.252773][ T7991] syz.2.387: attempt to access beyond end of device
[  153.252773][ T7991] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0
[  153.258976][ T7991] hfsplus: unable to find HFS+ superblock
[  153.722391][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'.
[  153.725736][ T8002] unsupported nlmsg_type 40
[  153.747397][ T8002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  154.176789][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'.
[  154.227866][ T8001] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  154.267245][ T8010] netlink: 596 bytes leftover after parsing attributes in process `syz.3.391'.
[  154.724323][ T8018] random: crng reseeded on system resumption
[  154.729337][ T8018] Restarting kernel threads ... done.
[  155.272508][ T5943] Bluetooth: Unexpected continuation frame (len 16)
[  155.284686][ T8031] Process accounting resumed
[  156.527566][ T8055] veth1_to_team: entered promiscuous mode
[  156.885512][ T8054] veth1_to_team: left promiscuous mode
[  157.759143][ T8071] netlink: 596 bytes leftover after parsing attributes in process `syz.2.406'.
[  158.510613][ T8076] netlink: 'syz.3.405': attribute type 1 has an invalid length.
[  158.561515][ T8076] bond1: entered promiscuous mode
[  158.563688][ T8076] 8021q: adding VLAN 0 to HW filter on device bond1
[  158.579282][ T8083] random: crng reseeded on system resumption
[  158.579354][ T8082] 8021q: adding VLAN 0 to HW filter on device bond1
[  158.583187][ T8082] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  158.583557][ T8083] Restarting kernel threads ... 
[  158.586677][ T8082] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  158.587410][ T8083] done.
[  158.590885][ T8082] bond1: (slave ip6gre1): making interface the new active one
[  158.593863][ T8082] ip6gre1: entered promiscuous mode
[  158.598092][ T8082] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  159.934159][   T66] Bluetooth: hci0: command 0x0406 tx timeout
[  159.936958][ T5303] Bluetooth: hci3: command 0x0406 tx timeout
[  159.939469][ T5947] Bluetooth: hci2: command 0x0406 tx timeout
[  159.995766][ T8107] loop7: detected capacity change from 0 to 16384
[  160.454525][ T8116] loop7: detected capacity change from 16384 to 16383
[  162.816718][ T8121] overlayfs: missing 'workdir'
[  162.825755][ T8121] syz.3.419: attempt to access beyond end of device
[  162.825755][ T8121] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0
[  162.830665][ T8121] hfsplus: unable to find HFS+ superblock
[  163.005320][ T5949] Bluetooth: Unexpected continuation frame (len 16)
[  163.018809][ T8133] Process accounting resumed
[  163.296267][ T8135] 8021q: adding VLAN 0 to HW filter on device bond2
[  163.305868][ T8139] dlm: no local IP address has been set
[  163.308200][ T8139] dlm: cannot start dlm midcomms -107
[  164.454226][ T8147] netlink: 'syz.2.423': attribute type 2 has an invalid length.
[  164.464130][ T8147] netlink: 'syz.2.423': attribute type 1 has an invalid length.
[  164.466736][ T8147] netlink: 'syz.2.423': attribute type 1 has an invalid length.
[  164.481751][ T8147] loop7: detected capacity change from 0 to 16384
[  164.665037][ T8149] loop7: detected capacity change from 16384 to 16383
[  164.710003][ T8159] netlink: 'syz.3.427': attribute type 1 has an invalid length.
[  164.762245][ T8159] bond2: entered promiscuous mode
[  164.771370][ T8159] 8021q: adding VLAN 0 to HW filter on device bond2
[  165.422643][ T8177] usb usb7: check_ctrlrecip: process 8177 (syz.3.429) requesting ep 01 but needs 81
[  165.443303][ T8177] usb usb7: usbfs: process 8177 (syz.3.429) did not claim interface 0 before use
[  166.098355][ T8188] random: crng reseeded on system resumption
[  166.102768][ T8188] Restarting kernel threads ... done.
[  166.286555][ T8196] ISOFS: Unable to identify CD-ROM format.
[  167.375522][ T8212] 8021q: adding VLAN 0 to HW filter on device bond2
[  168.069536][ T8220] netlink: 596 bytes leftover after parsing attributes in process `syz.0.436'.
[  169.040631][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'.
[  169.067372][ T8229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.441'.
[  169.072215][ T8229] bridge1: the hash_elasticity option has been deprecated and is always 16
[  169.205540][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  169.214800][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'.
[  169.420999][ T8242] random: crng reseeded on system resumption
[  169.427971][ T8242] Restarting kernel threads ... done.
[  169.847393][ T8249] dlm: no local IP address has been set
[  169.849172][ T8249] dlm: cannot start dlm midcomms -107
[  171.108929][ T8265] random: crng reseeded on system resumption
[  171.116857][ T8265] Restarting kernel threads ... done.
[  171.384926][ T6415] Bluetooth: hci4: Frame reassembly failed (-84)
[  172.321264][ T8280] random: crng reseeded on system resumption
[  172.325800][ T8280] Restarting kernel threads ... done.
[  172.783285][ T8294] tipc: Started in network mode
[  172.789943][ T8294] tipc: Node identity , cluster identity 4711
[  173.453979][ T5943] Bluetooth: hci4: command 0x1003 tx timeout
[  173.456670][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  174.217017][ T8329] random: crng reseeded on system resumption
[  174.222459][ T8329] Restarting kernel threads ... done.
[  174.669567][ T8338] netlink: 596 bytes leftover after parsing attributes in process `syz.2.460'.
[  175.098230][ T5949] Bluetooth: hci1: unexpected event for opcode 0x2042
[  175.766486][ T8358] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  175.787374][ T8357] 8021q: adding VLAN 0 to HW filter on device bond3
[  176.696694][ T8369] e1000e 0000:00:02.0 eth1: NIC Link is Down
[  176.900093][ T8382] random: crng reseeded on system resumption
[  176.907200][ T8382] Restarting kernel threads ... done.
[  178.283955][ T1321] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  178.438015][ T1321] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  178.441133][ T1321] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  178.443938][ T1321] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  178.446568][ T1321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.450934][ T8417] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  178.454612][ T1321] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  178.993409][ T5980] usb 7-1: USB disconnect, device number 3
[  179.144923][ T5949] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  179.148426][ T5949] Bluetooth: hci1: Injecting HCI hardware error event
[  179.152860][ T5943] Bluetooth: hci1: hardware error 0x00
[  180.819251][ T8463] random: crng reseeded on system resumption
[  180.823845][ T8463] Restarting kernel threads ... done.
[  180.826714][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'.
[  181.133654][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'.
[  181.214044][ T5943] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  182.081874][ T8478] random: crng reseeded on system resumption
[  182.102633][ T8478] Restarting kernel threads ... done.
[  184.270030][ T8508] random: crng reseeded on system resumption
[  184.274887][ T8508] Restarting kernel threads ... done.
[  184.277848][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.493'.
[  184.371293][ T8500] syz.2.490 (8500): drop_caches: 2
[  184.700442][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'.
[  184.992176][ T8521] IPVS: length: 46 != 8
[  185.448063][ T8529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'.
[  187.310838][ T8552] random: crng reseeded on system resumption
[  187.317266][ T8552] Restarting kernel threads ... done.
[  187.878718][ T8563] random: crng reseeded on system resumption
[  188.061617][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'.
[  188.502839][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'.
[  188.840246][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'.
[  189.861231][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.507'.
[  193.694855][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[  193.696820][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  194.348118][ T8641] random: crng reseeded on system resumption
[  194.352895][ T8641] Restarting kernel threads ... done.
[  195.047152][ T8661] netlink: 596 bytes leftover after parsing attributes in process `syz.0.531'.
[  195.269937][ T8667] random: crng reseeded on system resumption
[  195.280626][ T8667] Restarting kernel threads ... done.
[  196.276326][ T8682] random: crng reseeded on system resumption
[  196.283335][ T8682] Restarting kernel threads ... done.
[  198.080157][ T8705] netlink: 56 bytes leftover after parsing attributes in process `syz.0.533'.
[  199.622371][ T8726] netlink: 596 bytes leftover after parsing attributes in process `syz.3.537'.
[  200.214785][ T8736] random: crng reseeded on system resumption
[  200.220168][ T8736] Restarting kernel threads ... done.
[  201.255808][ T8750] random: crng reseeded on system resumption
[  201.260725][ T8750] Restarting kernel threads ... done.
[  201.279049][ T8751] ip6gretap0: entered promiscuous mode
[  201.502437][ T8755] loop9: detected capacity change from 0 to 7
[  201.510094][ T8755] Dev loop9: unable to read RDB block 7
[  201.703340][ T8755]  loop9: unable to read partition table
[  201.705419][ T8755] loop9: partition table beyond EOD, truncated
[  201.707363][ T8755] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  201.707363][ T8755] 
) failed (rc=-5)
[  201.933877][   T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  202.099128][   T35] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  202.101683][   T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  202.107099][   T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  202.110315][   T35] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  202.125541][   T35] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  202.128551][   T35] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  202.130841][   T35] usb 5-1: Product: syz
[  202.133921][   T35] usb 5-1: Manufacturer: syz
[  202.139646][   T35] cdc_wdm 5-1:1.0: skipping garbage
[  202.141196][   T35] cdc_wdm 5-1:1.0: skipping garbage
[  202.142687][   T35] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  203.462682][ T8780] random: crng reseeded on system resumption
[  203.467279][ T8780] Restarting kernel threads ... done.
[  203.490154][   T35] usb 5-1: USB disconnect, device number 2
[  203.583058][ T8783] IPVS: length: 46 != 8
[  205.275857][ T8802] random: crng reseeded on system resumption
[  205.282346][ T8802] Restarting kernel threads ... done.
[  206.000785][ T8812] syz.3.558 (8812): drop_caches: 2
[  206.225480][ T8818] random: crng reseeded on system resumption
[  206.230022][ T8818] Restarting kernel threads ... done.
[  206.866696][ T8832] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  207.255067][ T8838] random: crng reseeded on system resumption
[  207.260656][ T8838] Restarting kernel threads ... done.
[  208.537353][ T8866] random: crng reseeded on system resumption
[  208.541760][ T8866] Restarting kernel threads ... done.
[  209.482920][ T8883] input: syz1 as /devices/virtual/input/input9
[  209.501796][ T8885] random: crng reseeded on system resumption
[  209.507236][ T8885] Restarting kernel threads ... done.
[  209.601696][ T6437] Bluetooth: hci4: Frame reassembly failed (-84)
[  209.618586][ T8886] Bluetooth: hci4: Frame reassembly failed (-84)
[  209.687475][ T8887] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  209.690111][ T8887] overlayfs: failed to set xattr on upper
[  209.691973][ T8887] overlayfs: ...falling back to redirect_dir=nofollow.
[  209.696509][ T8887] overlayfs: ...falling back to index=off.
[  209.698345][ T8887] overlayfs: ...falling back to uuid=null.
[  209.747174][ T8887] evm: overlay not supported
[  211.613956][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  211.614062][ T5949] Bluetooth: hci4: command 0x1003 tx timeout
[  212.248994][ T8914] syz.1.583 uses obsolete (PF_INET,SOCK_PACKET)
[  212.754234][ T8925] random: crng reseeded on system resumption
[  212.759304][ T8925] Restarting kernel threads ... done.
[  214.202314][ T8949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.591'.
[  215.880004][ T8964] random: crng reseeded on system resumption
[  215.888501][ T8964] Restarting kernel threads ... done.
[  216.528287][ T2033] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  216.677578][ T2033] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  216.681302][ T2033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.004443][ T2033] usb 5-1: Product: syz
[  217.005708][ T2033] usb 5-1: Manufacturer: syz
[  217.007049][ T2033] usb 5-1: SerialNumber: syz
[  217.011732][ T2033] usb 5-1: config 0 descriptor??
[  217.129168][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'.
[  217.131816][ T8982] bridge_slave_1: left allmulticast mode
[  217.133470][ T8982] bridge_slave_1: left promiscuous mode
[  217.137128][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.146356][ T8982] bridge_slave_0: left allmulticast mode
[  217.148044][ T8982] bridge_slave_0: left promiscuous mode
[  217.149797][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.801613][ T8978] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  217.839733][ T8990] random: crng reseeded on system resumption
[  217.844862][ T8990] Restarting kernel threads ... done.
[  217.847859][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'.
[  219.133928][ T5943] Bluetooth: hci0: command 0x0406 tx timeout
[  219.252199][ T2298] usb 5-1: USB disconnect, device number 3
[  219.772983][ T9014] random: crng reseeded on system resumption
[  219.779849][ T9014] Restarting kernel threads ... done.
[  219.927234][ T9016] netlink: 56 bytes leftover after parsing attributes in process `syz.2.607'.
[  220.701968][ T9010] block nbd3: shutting down sockets
[  220.744143][ T9029] random: crng reseeded on system resumption
[  220.780173][ T9029] Restarting kernel threads ... done.
[  220.876001][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'.
[  221.872275][ T9047] random: crng reseeded on system resumption
[  221.877798][ T9047] Restarting kernel threads ... done.
[  221.970718][ T9048] NILFS (nbd1): device size too small
[  223.122127][ T9065] random: crng reseeded on system resumption
[  223.130627][ T9065] Restarting kernel threads ... done.
[  224.218289][ T9085] random: crng reseeded on system resumption
[  224.231046][ T9085] Restarting kernel threads ... done.
[  224.240670][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'.
[  225.266262][ T9099] random: crng reseeded on system resumption
[  225.272538][ T9099] Restarting kernel threads ... done.
[  226.137368][ T9110] random: crng reseeded on system resumption
[  226.145057][ T9110] Restarting kernel threads ... done.
[  227.575710][ T9127] input: syz1 as /devices/virtual/input/input10
[  227.591912][ T9129] random: crng reseeded on system resumption
[  227.598146][ T9129] Restarting kernel threads ... done.
[  227.672306][ T9132] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  227.674847][ T9132] overlayfs: failed to set xattr on upper
[  227.676618][ T9132] overlayfs: ...falling back to redirect_dir=nofollow.
[  227.678651][ T9132] overlayfs: ...falling back to index=off.
[  227.680439][ T9132] overlayfs: ...falling back to uuid=null.
[  228.296299][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  228.300073][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  228.303067][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  228.306363][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  228.309298][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  228.312416][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  228.315423][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  228.318401][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  228.321354][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  228.324559][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  228.548219][ T9147] random: crng reseeded on system resumption
[  228.558836][ T9147] Restarting kernel threads ... done.
[  228.751733][ T9152] random: crng reseeded on system resumption
[  228.759352][ T9152] Restarting kernel threads ... done.
[  230.653962][ T5949] Bluetooth: hci2: command 0x0406 tx timeout
[  230.707397][ T9179] random: crng reseeded on system resumption
[  230.714622][ T9179] Restarting kernel threads ... done.
[  230.814486][ T9181] netlink: zone id is out of range
[  230.824689][ T5949] Bluetooth: hci3: command 0x0406 tx timeout
[  231.087225][ T9190] random: crng reseeded on system resumption
[  231.092111][ T9190] Restarting kernel threads ... done.
[  231.692210][ T9201] random: crng reseeded on system resumption
[  231.699506][ T9201] Restarting kernel threads ... done.
[  232.867055][ T9219] random: crng reseeded on system resumption
[  232.872400][ T9219] Restarting kernel threads ... done.
[  235.609547][ T9256] netlink: zone id is out of range
[  235.956636][ T9258] random: crng reseeded on system resumption
[  235.964895][ T9258] Restarting kernel threads ... done.
[  236.346075][ T9272] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  237.474370][ T9287] IPVS: length: 46 != 8
[  237.609305][ T9279] Bluetooth: hci4: Frame reassembly failed (-84)
[  237.611663][ T6389] Bluetooth: hci4: Frame reassembly failed (-84)
[  239.195474][ T9307] NILFS (nbd0): device size too small
[  239.614305][ T5949] Bluetooth: hci4: command 0x1003 tx timeout
[  239.614324][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  240.586762][ T9329] random: crng reseeded on system resumption
[  240.593194][ T9329] Restarting kernel threads ... done.
[  242.388648][ T9358] loop9: detected capacity change from 0 to 7
[  242.465559][ T9358] Dev loop9: unable to read RDB block 7
[  242.467264][ T9358]  loop9: unable to read partition table
[  242.468962][ T9358] loop9: partition table beyond EOD, truncated
[  242.490578][ T9358] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  242.490578][ T9358] 
) failed (rc=-5)
[  243.224374][   T39] audit: type=1326 audit(1738198435.222:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9369 comm="syz.0.690" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc3579 code=0x0
[  244.246510][ T9383] random: crng reseeded on system resumption
[  244.252597][ T9383] Restarting kernel threads ... done.
[  244.269486][ T9381] sctp: [Deprecated]: syz.3.692 (pid 9381) Use of struct sctp_assoc_value in delayed_ack socket option.
[  244.269486][ T9381] Use struct sctp_sack_info instead
[  245.867455][ T9418] IPVS: length: 46 != 8
[  247.215458][ T9431] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  247.233948][ T9431] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  248.061503][ T9448] random: crng reseeded on system resumption
[  248.066569][ T9448] Restarting kernel threads ... done.
[  248.267174][ T9452] input: syz1 as /devices/virtual/input/input14
[  248.363732][ T9455] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  248.367094][ T9455] overlayfs: failed to set xattr on upper
[  248.369417][ T9455] overlayfs: ...falling back to redirect_dir=nofollow.
[  248.371601][ T9455] overlayfs: ...falling back to index=off.
[  248.373544][ T9455] overlayfs: ...falling back to uuid=null.
[  249.034091][    T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  249.183897][    T8] usb 7-1: Using ep0 maxpacket: 8
[  249.188342][    T8] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  249.191409][    T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  249.195133][    T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  249.198665][    T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  249.201713][    T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  249.207865][    T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  249.210690][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.063876][    T8] usb 7-1: usb_control_msg returned -32
[  250.065580][    T8] usbtmc 7-1:16.0: can't read capabilities
[  250.199331][ T9488] random: crng reseeded on system resumption
[  250.205717][ T9488] Restarting kernel threads ... done.
[  250.454850][ T9473] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  251.100715][ T9502] random: crng reseeded on system resumption
[  251.103737][ T9502] Restarting kernel threads ... done.
[  251.851223][    T8] usb 7-1: USB disconnect, device number 4
[  252.420216][ T9531] random: crng reseeded on system resumption
[  252.424918][ T9531] Restarting kernel threads ... done.
[  253.879678][ T9573] input: syz1 as /devices/virtual/input/input15
[  254.007164][ T9579] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  254.009306][ T9579] overlayfs: failed to set xattr on upper
[  254.011091][ T9579] overlayfs: ...falling back to redirect_dir=nofollow.
[  254.013099][ T9579] overlayfs: ...falling back to index=off.
[  254.015362][ T9579] overlayfs: ...falling back to uuid=null.
[  254.964258][ T9592] random: crng reseeded on system resumption
[  254.967172][ T9592] Restarting kernel threads ... done.
[  255.139983][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[  255.140059][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  257.040628][ T9632] random: crng reseeded on system resumption
[  257.043707][ T9632] Restarting kernel threads ... done.
[  257.956461][ T9644] random: crng reseeded on system resumption
[  257.968142][ T9644] Restarting kernel threads ... done.
[  261.050235][ T9688] tc_dump_action: action bad kind
[  261.146326][ T9688] __nla_validate_parse: 32 callbacks suppressed
[  261.146382][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'.
[  263.602050][ T9737] random: crng reseeded on system resumption
[  263.612616][ T9737] Restarting kernel threads ... done.
[  264.804412][ T9760] random: crng reseeded on system resumption
[  264.809373][ T9760] Restarting kernel threads ... done.
[  265.710500][ T9775] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  266.574653][ T9786] random: crng reseeded on system resumption
[  266.579406][ T9786] Restarting kernel threads ... done.
[  268.836171][ T9816] input: syz0 as /devices/virtual/input/input18
[  269.642526][ T9854] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[  269.645890][ T9852] IPVS: stopping backup sync thread 9854 ...
[  269.689459][ T9852] xt_CT: You must specify a L4 protocol and not use inversions on it
[  270.281020][ T9860] random: crng reseeded on system resumption
[  270.285138][ T9860] Restarting kernel threads ... done.
[  271.025957][ T9872] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  272.228304][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.825'.
[  272.359271][ T9895] netlink: 148 bytes leftover after parsing attributes in process `syz.1.825'.
[  272.548065][ T9910] random: crng reseeded on system resumption
[  272.552835][ T9910] Restarting kernel threads ... done.
[  274.401575][ T9943] random: crng reseeded on system resumption
[  274.408148][ T9943] Restarting kernel threads ... done.
[  274.424214][ T5949] Bluetooth: hci3: command 0x0406 tx timeout
[  274.609273][ T9944] infiniband syz0: set active
[  274.609364][ T9944] infiniband syz0: added bond0
[  274.648299][ T9944] RDS/IB: syz0: added
[  274.648601][ T9944] smc: adding ib device syz0 with port count 1
[  274.648654][ T9944] smc:    ib device syz0 port 1 has pnetid 
[  274.967485][ T9955] sctp: [Deprecated]: syz.0.837 (pid 9955) Use of int in max_burst socket option deprecated.
[  274.967485][ T9955] Use struct sctp_assoc_value instead
[  275.112818][ T9944] syz.1.834 (9944) used greatest stack depth: 20512 bytes left
[  276.258152][ T9977] Bluetooth: MGMT ver 1.23
[  278.113916][T10014] random: crng reseeded on system resumption
[  278.121924][T10014] Restarting kernel threads ... done.
[  279.677586][T10038] ceph: No mds server is up or the cluster is laggy
[  280.029283][T10053] random: crng reseeded on system resumption
[  280.034048][T10053] Restarting kernel threads ... done.
[  281.364976][T10078] fuse: Unknown parameter 'ÿ'
[  281.701896][T10086] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  282.666520][T10103] random: crng reseeded on system resumption
[  282.768310][T10103] Restarting kernel threads ... done.
[  283.641693][T10119] random: crng reseeded on system resumption
[  283.648684][T10119] Restarting kernel threads ... done.
[  284.926616][T10143] ptrace attach of "/syz-executor exec"[5934] was attempted by "/syz-executor exec"[10143]
[  285.888564][T10158] random: crng reseeded on system resumption
[  285.894366][T10158] Restarting kernel threads ... done.
[  286.111769][T10166] input: syz0 as /devices/virtual/input/input19
[  288.293975][T10226] random: crng reseeded on system resumption
[  288.298401][T10226] Restarting kernel threads ... done.
[  290.242871][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'.
[  292.086940][T10283] random: crng reseeded on system resumption
[  292.091700][T10283] Restarting kernel threads ... done.
[  293.000525][T10293] random: crng reseeded on system resumption
[  293.007370][T10293] Restarting kernel threads ... done.
[  293.865068][   T58] libceph: connect (1)[c::]:6789 error -101
[  293.866885][   T58] libceph: mon0 (1)[c::]:6789 connect error
[  293.897025][T10308] ceph: No mds server is up or the cluster is laggy
[  294.439964][T10327] tracefs: Unknown parameter '0x0000000000000000'
[  295.952885][T10346] ptrace attach of "/syz-executor exec"[5933] was attempted by "/syz-executor exec"[10346]
[  296.054723][T10349] random: crng reseeded on system resumption
[  296.067142][T10349] Restarting kernel threads ... done.
[  298.304473][    T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  298.344779][T10376] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  298.347520][T10376] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  298.350199][T10376] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  298.356300][T10376] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  298.360329][T10376] geneve2: entered promiscuous mode
[  298.361878][T10376] geneve2: entered allmulticast mode
[  298.515788][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  298.521876][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  298.529400][    T9] usb 6-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  298.532627][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.535341][    T9] usb 6-1: Product: Ф
[  298.540035][    T9] usb 6-1: Manufacturer: 轧ꥊ榬�丞጗ῼ뗶耲�ꗓ脥穄蕗샵ﵿꑵ逗练蕱ዱ釬믌�픺≼앸䉀Ͳ㚑ﴂ鋪溙煯⦂�忰��鸡洣㜅ਗ਼�庤빟튃걨�
[  298.545509][    T9] usb 6-1: SerialNumber: à ”
[  298.782743][T10371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  299.041352][    T9] usbhid 6-1:1.0: can't add hid device: -71
[  299.043675][    T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  299.050189][    T9] usb 6-1: USB disconnect, device number 7
[  300.067319][T10401] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  301.235243][T10410] overlayfs: statfs failed on './file0'
[  301.814924][T10425] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  301.817497][T10425] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  301.820033][T10425] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  301.822629][T10425] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  301.825734][T10425] geneve2: entered promiscuous mode
[  301.827254][T10425] geneve2: entered allmulticast mode
[  302.104855][T10428] tipc: Can't bind to reserved service type 0
[  302.792022][T10440] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  302.792094][T10440] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  305.838166][T10477] random: crng reseeded on system resumption
[  305.850588][T10477] Restarting kernel threads ... done.
[  306.732105][T10492] random: crng reseeded on system resumption
[  306.736744][T10492] Restarting kernel threads ... done.
[  307.630060][ T5980] libceph: connect (1)[c::]:6789 error -101
[  307.632386][ T5980] libceph: mon0 (1)[c::]:6789 connect error
[  307.636040][ T5980] libceph: connect (1)[c::]:6789 error -101
[  307.637854][ T5980] libceph: mon0 (1)[c::]:6789 connect error
[  307.691598][T10509] ceph: No mds server is up or the cluster is laggy
[  308.256699][T10523] random: crng reseeded on system resumption
[  308.261104][T10523] Restarting kernel threads ... done.
[  308.560638][T10516] overlayfs: statfs failed on './file0'
[  309.167810][T10536] random: crng reseeded on system resumption
[  309.172684][T10536] Restarting kernel threads ... done.
[  310.022728][T10554] random: crng reseeded on system resumption
[  310.027771][T10554] Restarting kernel threads ... done.
[  312.324202][ T2033] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  312.486873][ T2033] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  312.489493][ T2033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.491760][ T2033] usb 5-1: Product: syz
[  312.492952][ T2033] usb 5-1: Manufacturer: syz
[  312.494686][ T2033] usb 5-1: SerialNumber: syz
[  312.497448][ T2033] usb 5-1: config 0 descriptor??
[  312.514843][T10589] capability: warning: `syz.1.977' uses 32-bit capabilities (legacy support in use)
[  312.517779][T10589] ucma_write: process 959 (syz.1.977) changed security contexts after opening file descriptor, this is not allowed.
[  312.654326][    T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  312.715684][ T2033] usb 5-1: USB disconnect, device number 4
[  312.934856][    T9] usb 7-1: not running at top speed; connect to a high speed hub
[  312.958524][T10600] input: syz0 as /devices/virtual/input/input21
[  312.969741][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  313.074941][    T9] usb 7-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  313.078474][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.083056][    T9] usb 7-1: Product: Ф
[  313.085852][    T9] usb 7-1: Manufacturer: 轧ꥊ榬�丞጗ῼ뗶耲�ꗓ脥穄蕗샵ﵿꑵ逗练蕱ዱ釬믌�픺≼앸䉀Ͳ㚑ﴂ鋪溙煯⦂�忰��鸡洣㜅ਗ਼�庤빟튃걨�
[  313.094112][    T9] usb 7-1: SerialNumber: à ”
[  313.185609][T10590] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  313.578491][    T9] usbhid 7-1:1.0: can't add hid device: -71
[  313.580500][    T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  313.593883][    T9] usb 7-1: USB disconnect, device number 5
[  314.208839][T10615] random: crng reseeded on system resumption
[  314.213375][T10615] Restarting kernel threads ... done.
[  314.863657][T10624] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  316.424889][T10653] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  316.424959][T10653] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  316.702445][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[  316.702470][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  316.817833][T10659] random: crng reseeded on system resumption
[  316.822736][T10659] Restarting kernel threads ... done.
[  318.021841][T10680] random: crng reseeded on system resumption
[  318.030383][T10680] Restarting kernel threads ... done.
[  319.485486][T10708] random: crng reseeded on system resumption
[  319.488310][T10708] Restarting kernel threads ... done.
[  322.198917][T10753] random: crng reseeded on system resumption
[  322.203833][T10753] Restarting kernel threads ... done.
[  322.298765][T10755] netdevsim netdevsim3: Direct firmware load for .
[  322.298765][T10755]  failed with error -2
[  322.302499][T10755] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  322.302499][T10755] 
[  325.109559][ T5980] libceph: connect (1)[c::]:6789 error -101
[  325.134068][ T5949] Bluetooth: hci0: command 0x0406 tx timeout
[  325.136726][ T5943] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  325.138616][ T5980] libceph: mon0 (1)[c::]:6789 connect error
[  325.232084][T10792] ceph: No mds server is up or the cluster is laggy
[  325.669402][T10802] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  325.669453][T10802] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  325.671789][T10802] vhci_hcd vhci_hcd.0: Device attached
[  325.853948][ T2033] vhci_hcd: vhci_device speed not set
[  325.923854][ T2033] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  326.647755][T10811] random: crng reseeded on system resumption
[  326.652533][T10811] Restarting kernel threads ... done.
[  327.104558][T10803] vhci_hcd: connection reset by peer
[  327.110869][ T6424] vhci_hcd: stop threads
[  327.113711][ T6424] vhci_hcd: release socket
[  327.118083][ T6424] vhci_hcd: disconnect device
[  327.986802][    T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  328.169024][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  328.172480][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  328.181405][    T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  328.184090][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.186560][    T9] usb 5-1: Product: Ф
[  328.186568][    T9] usb 5-1: Manufacturer: 轧ꥊ榬�丞጗ῼ뗶耲�ꗓ脥穄蕗샵ﵿꑵ逗练蕱ዱ釬믌�픺≼앸䉀Ͳ㚑ﴂ鋪溙煯⦂�忰��鸡洣㜅ਗ਼�庤빟튃걨�
[  328.186794][    T9] usb 5-1: SerialNumber: à ”
[  328.191941][T10836] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  328.507284][    T9] usbhid 5-1:1.0: can't add hid device: -71
[  328.507355][    T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  328.508307][    T9] usb 5-1: USB disconnect, device number 5
[  328.838740][T10854] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  329.551891][T10862] random: crng reseeded on system resumption
[  329.556624][T10862] Restarting kernel threads ... done.
[  330.702005][T10877] CIFS: VFS: Malformed UNC in devname
[  330.702904][T10877] IPv6: NLM_F_CREATE should be specified when creating new route
[  331.044158][ T2033] vhci_hcd: vhci_device speed not set
[  331.750565][   T58] libceph: connect (1)[c::]:6789 error -101
[  331.752265][   T58] libceph: mon0 (1)[c::]:6789 connect error
[  331.800888][T10885] ceph: No mds server is up or the cluster is laggy
[  333.248687][T10901] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  333.803864][    T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  333.995191][    T9] usb 8-1: not running at top speed; connect to a high speed hub
[  334.025776][    T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  334.073946][    T9] usb 8-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  334.073962][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.073970][    T9] usb 8-1: Product: Ф
[  334.073977][    T9] usb 8-1: Manufacturer: 轧ꥊ榬�丞጗ῼ뗶耲�ꗓ脥穄蕗샵ﵿꑵ逗练蕱ዱ釬믌�픺≼앸䉀Ͳ㚑ﴂ鋪溙煯⦂�忰��鸡洣㜅ਗ਼�庤빟튃걨�
[  334.073987][    T9] usb 8-1: SerialNumber: à ”
[  334.081521][T10908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  334.573158][    T9] usbhid 8-1:1.0: can't add hid device: -71
[  334.573673][    T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  334.584730][    T9] usb 8-1: USB disconnect, device number 4
[  335.773932][ T5949] Bluetooth: hci0: command 0x0406 tx timeout
[  335.774012][ T5943] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  339.329026][T10981] random: crng reseeded on system resumption
[  339.331964][T10981] Restarting kernel threads ... done.
[  342.600260][T11044] random: crng reseeded on system resumption
[  342.603269][T11044] Restarting kernel threads ... done.
[  343.985094][T11063] input: syz1 as /devices/virtual/input/input23
[  344.065982][T11065] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  344.066057][T11065] overlayfs: failed to set xattr on upper
[  344.066063][T11065] overlayfs: ...falling back to redirect_dir=nofollow.
[  344.066068][T11065] overlayfs: ...falling back to index=off.
[  344.066071][T11065] overlayfs: ...falling back to uuid=null.
[  345.668362][ T5980] libceph: connect (1)[c::]:6789 error -101
[  345.668465][ T5980] libceph: mon0 (1)[c::]:6789 connect error
[  345.714497][T11088] ceph: No mds server is up or the cluster is laggy
[  345.909094][T11093] random: crng reseeded on system resumption
[  345.922713][T11093] Restarting kernel threads ... done.
[  346.767631][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  346.785627][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  346.794621][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  346.797963][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  346.802782][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  346.806783][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  346.810618][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  346.815279][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  346.819264][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  346.822639][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  347.543911][ T5949] Bluetooth: hci3: command 0x0406 tx timeout
[  349.260926][T11141] random: crng reseeded on system resumption
[  349.264642][T11141] Restarting kernel threads ... done.
[  349.877194][T11157] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  349.880602][T11157] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  350.978782][T11174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  352.183847][T11193] CIFS: VFS: Malformed UNC in devname
[  352.186859][T11193] IPv6: NLM_F_CREATE should be specified when creating new route
[  352.982352][T11204] random: crng reseeded on system resumption
[  353.078086][T11204] Restarting kernel threads ... done.
[  353.270593][ T6389] Bluetooth: hci4: Frame reassembly failed (-84)
[  353.282843][T11213] __nla_validate_parse: 30 callbacks suppressed
[  353.282860][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1119'.
[  353.289429][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1119'.
[  354.103107][T11226] random: crng reseeded on system resumption
[  354.112868][T11226] Restarting kernel threads ... done.
[  355.193911][  T834] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  355.303977][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  355.596711][  T834] usb 5-1: not running at top speed; connect to a high speed hub
[  355.600674][  T834] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  355.609194][  T834] usb 5-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  355.611902][  T834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.614334][  T834] usb 5-1: Product: Ф
[  355.615605][  T834] usb 5-1: Manufacturer: 轧ꥊ榬�丞጗ῼ뗶耲�ꗓ脥穄蕗샵ﵿꑵ逗练蕱ዱ釬믌�픺≼앸䉀Ͳ㚑ﴂ鋪溙煯⦂�忰��鸡洣㜅ਗ਼�庤빟튃걨�
[  355.622416][  T834] usb 5-1: SerialNumber: à ”
[  355.629252][T11236] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  356.095687][  T834] usbhid 5-1:1.0: can't add hid device: -71
[  356.097726][  T834] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  356.105630][  T834] usb 5-1: USB disconnect, device number 6
[  356.387252][   T58] libceph: connect (1)[c::]:6789 error -101
[  356.391312][   T58] libceph: mon0 (1)[c::]:6789 connect error
[  356.393338][T11248] ceph: No mds server is up or the cluster is laggy
[  356.396556][   T58] libceph: connect (1)[c::]:6789 error -101
[  356.398646][   T58] libceph: mon0 (1)[c::]:6789 connect error
[  357.321297][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1134'.
[  357.344786][T11260] geneve0: entered allmulticast mode
[  357.486308][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'.
[  358.274008][T11271] random: crng reseeded on system resumption
[  358.290876][T11271] Restarting kernel threads ... done.
[  359.436255][T11294] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  360.242021][T11314] random: crng reseeded on system resumption
[  360.248854][T11314] Restarting kernel threads ... done.
[  360.538651][T11320] ieee802154 phy0 wpan0: encryption failed: -22
[  362.263948][  T834] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[  362.424561][  T834] usb 7-1: too many configurations: 33, using maximum allowed: 8
[  362.428509][  T834] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  362.431556][  T834] usb 7-1: config 16 has an invalid interface number: 0 but max is -1
[  362.433330][   T58] libceph: connect (1)[c::]:6789 error -101
[  362.435124][  T834] usb 7-1: config 16 has 1 interface, different from the descriptor's value: 0
[  362.437127][   T58] libceph: mon0 (1)[c::]:6789 connect error
[  362.440313][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  362.440332][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  362.449984][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt
[  362.453675][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  362.457415][  T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  362.463182][  T834] usb 7-1: config index 1 descriptor too short (expected 301, got 45)
[  362.466334][  T834] usb 7-1: config 16 has an invalid interface number: 0 but max is -1
[  362.469344][  T834] usb 7-1: config 16 has 1 interface, different from the descriptor's value: 0
[  362.472732][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  362.476470][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  362.480061][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt
[  362.483760][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  362.487475][  T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  362.493201][  T834] usb 7-1: config index 2 descriptor too short (expected 301, got 45)
[  362.496628][  T834] usb 7-1: config 16 has an invalid interface number: 0 but max is -1
[  362.499703][  T834] usb 7-1: config 16 has 1 interface, different from the descriptor's value: 0
[  362.503029][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  362.505406][T11348] ceph: No mds server is up or the cluster is laggy
[  362.506738][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  362.513640][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt
[  362.517420][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  362.521003][  T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  362.527155][  T834] usb 7-1: config index 3 descriptor too short (expected 301, got 45)
[  362.530194][  T834] usb 7-1: config 16 has an invalid interface number: 0 but max is -1
[  362.533248][  T834] usb 7-1: config 16 has 1 interface, different from the descriptor's value: 0
[  362.537111][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  362.540795][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  362.544763][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt
[  362.548508][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  362.551903][  T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  362.556679][  T834] usb 7-1: config index 4 descriptor too short (expected 301, got 45)
[  362.559335][  T834] usb 7-1: config 16 has an invalid interface number: 0 but max is -1
[  362.562639][  T834] usb 7-1: config 16 has 1 interface, different from the descriptor's value: 0
[  362.566673][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  362.570582][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  362.574855][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt
[  362.578893][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  362.582784][  T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  362.589410][  T834] usb 7-1: config index 5 descriptor too short (expected 301, got 45)
[  362.592730][  T834] usb 7-1: config 16 has an invalid interface number: 0 but max is -1
[  362.596308][  T834] usb 7-1: config 16 has 1 interface, different from the descriptor's value: 0
[  362.599963][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  362.603564][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  362.606463][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt
[  362.609774][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  362.613568][  T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  362.619899][  T834] usb 7-1: config index 6 descriptor too short (expected 301, got 45)
[  362.623228][  T834] usb 7-1: config 16 has an invalid interface number: 0 but max is -1
[  362.626793][  T834] usb 7-1: config 16 has 1 interface, different from the descriptor's value: 0
[  362.630344][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  362.634387][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  362.638261][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt
[  362.641994][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  362.646239][  T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  362.653027][  T834] usb 7-1: config index 7 descriptor too short (expected 301, got 45)
[  362.659032][  T834] usb 7-1: config 16 has an invalid interface number: 0 but max is -1
[  362.662220][  T834] usb 7-1: config 16 has 1 interface, different from the descriptor's value: 0
[  362.665960][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  362.669703][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  362.673381][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt
[  362.677555][  T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  362.680876][  T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  362.685965][  T834] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  362.689749][  T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.702373][  T834] usbtmc 7-1:16.0: bulk endpoints not found
[  362.936005][T11354] CIFS mount error: No usable UNC path provided in device string!
[  362.936005][T11354] 
[  362.939883][T11354] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  363.011771][T11357] random: crng reseeded on system resumption
[  363.016602][T11357] Restarting kernel threads ... done.
[  363.269327][T11363] xt_CT: No such helper "snmp_trap"
[  363.295203][T11339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.300592][T11339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.317102][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1159'.
[  363.415132][ T5986] usb 7-1: USB disconnect, device number 6
[  363.957022][T11378] input: syz1 as /devices/virtual/input/input24
[  364.124816][T11382] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  364.127208][T11382] overlayfs: failed to set xattr on upper
[  364.129345][T11382] overlayfs: ...falling back to redirect_dir=nofollow.
[  364.133333][T11382] overlayfs: ...falling back to index=off.
[  364.137140][T11382] overlayfs: ...falling back to uuid=null.
[  366.086526][T11407] random: crng reseeded on system resumption
[  366.089458][T11407] Restarting kernel threads ... done.
[  366.277947][T11413] random: crng reseeded on system resumption
[  366.282417][T11413] Restarting kernel threads ... done.
[  367.378096][T11434] random: crng reseeded on system resumption
[  367.381501][T11434] Restarting kernel threads ... done.
[  368.412584][T11455] random: crng reseeded on system resumption
[  368.426052][T11455] Restarting kernel threads ... done.
[  369.306669][T11469] rdma_rxe: rxe_newlink: failed to add bond0
[  369.603898][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  369.764389][    T9] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  369.765163][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  369.765182][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10
[  369.765194][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024
[  369.765205][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  369.765917][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  369.765933][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10
[  369.765944][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024
[  369.765955][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  369.766642][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  369.766657][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10
[  369.766668][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024
[  369.766678][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  369.767449][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  369.767466][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10
[  369.767476][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024
[  369.767487][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  369.768263][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  369.768279][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10
[  369.768290][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024
[  369.768300][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  369.769248][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  369.769277][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10
[  369.769297][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024
[  369.769318][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  369.770288][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  369.770313][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10
[  369.770330][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024
[  369.770349][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  369.771334][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  369.771361][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10
[  369.771381][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024
[  369.771401][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  369.773420][    T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  369.773440][    T9] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  369.773457][    T9] usb 7-1: Product: syz
[  369.773468][    T9] usb 7-1: Manufacturer: syz
[  369.773481][    T9] usb 7-1: SerialNumber: syz
[  369.779789][    T9] usb 7-1: config 0 descriptor??
[  369.780254][T11469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  369.782647][    T9] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  370.043697][    C3] usb 7-1: yurex_control_callback - control failed: -71
[  370.044732][ T5986] usb 7-1: USB disconnect, device number 7
[  370.046452][ T5986] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  372.713183][T11533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1203'.
[  373.906483][T11558] random: crng reseeded on system resumption
[  373.911216][T11558] Restarting kernel threads ... done.
[  375.639832][T11586] random: crng reseeded on system resumption
[  375.644727][T11586] Restarting kernel threads ... done.
[  376.932433][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'.
[  376.932500][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'.
[  377.194865][  T834] libceph: connect (1)[c::]:6789 error -101
[  377.200043][  T834] libceph: mon0 (1)[c::]:6789 connect error
[  377.332892][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'.
[  377.339897][T11610] ceph: No mds server is up or the cluster is laggy
[  377.344995][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'.
[  377.347639][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'.
[  377.350275][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'.
[  377.352922][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'.
[  377.361816][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'.
[  377.369159][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'.
[  377.573045][T11622] random: crng reseeded on system resumption
[  377.579736][T11622] Restarting kernel threads ... done.
[  378.024836][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  378.034603][T11630] __nla_validate_parse: 34 callbacks suppressed
[  378.034614][T11630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1224'.
[  378.343980][T11641] netlink: 'syz.3.1226': attribute type 29 has an invalid length.
[  378.346243][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'.
[  378.650010][T11644] random: crng reseeded on system resumption
[  378.657977][T11644] Restarting kernel threads ... done.
[  379.579539][T11662] random: crng reseeded on system resumption
[  379.585639][T11662] Restarting kernel threads ... done.
[  380.759908][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'.
[  380.762609][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'.
[  381.401553][T11691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1238'.
[  382.207701][T11707] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1241'.
[  382.262951][T11707] =======================================================
[  382.262951][T11707] WARNING: The mand mount option has been deprecated and
[  382.262951][T11707]          and is ignored by this kernel. Remove the mand
[  382.262951][T11707]          option from the mount to silence this warning.
[  382.262951][T11707] =======================================================
[  382.660913][T11716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1242'.
[  382.899530][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'.
[  384.159519][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  384.164367][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  384.167335][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  384.178305][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  384.183669][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  384.188266][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  384.217056][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  384.225924][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  384.234589][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  384.242912][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  384.825606][T11756] random: crng reseeded on system resumption
[  384.845982][T11756] Restarting kernel threads ... done.
[  389.600561][T11811] random: crng reseeded on system resumption
[  389.613507][T11811] Restarting kernel threads ... done.
[  390.333994][ T5949] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  390.334156][ T5949] Bluetooth: hci0: command 0x0406 tx timeout
[  390.447051][T11824] __nla_validate_parse: 32 callbacks suppressed
[  390.447091][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1265'.
[  390.451492][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1265'.
[  390.806576][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'.
[  390.810164][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'.
[  390.812881][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'.
[  390.816799][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'.
[  390.819924][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'.
[  390.822767][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'.
[  390.826242][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'.
[  390.829259][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'.
[  391.111036][T11842] random: crng reseeded on system resumption
[  391.116169][T11842] Restarting kernel threads ... done.
[  393.317245][T11874] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  393.319976][T11874] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  393.322619][T11874] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  393.328046][T11874] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  393.331153][T11874] geneve2: entered promiscuous mode
[  393.332799][T11874] geneve2: entered allmulticast mode
[  393.487710][T11876] random: crng reseeded on system resumption
[  393.494721][T11876] Restarting kernel threads ... done.
[  393.984551][T11882] ip6gretap0: entered promiscuous mode
[  395.549512][T11909] syz.2.1287 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  398.327718][T11945] random: crng reseeded on system resumption
[  398.332368][T11945] Restarting kernel threads ... done.
[  398.853284][T11958] __nla_validate_parse: 33 callbacks suppressed
[  398.853295][T11958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1300'.
[  400.587137][T11987] random: crng reseeded on system resumption
[  400.591849][T11987] Restarting kernel threads ... done.
[  401.608071][T12002] input: syz1 as /devices/virtual/input/input25
[  401.784433][T12005] random: crng reseeded on system resumption
[  401.789093][T12005] Restarting kernel threads ... done.
[  401.837726][T12006] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  405.437028][T12057] netlink: 'syz.0.1321': attribute type 1 has an invalid length.
[  405.715514][T12059] random: crng reseeded on system resumption
[  405.721770][T12059] Restarting kernel threads ... done.
[  406.646212][T12072] random: crng reseeded on system resumption
[  406.651405][T12072] Restarting kernel threads ... done.
[  407.556071][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'.
[  408.005055][T12106] random: crng reseeded on system resumption
[  408.009749][T12106] Restarting kernel threads ... done.
[  408.415674][T12118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1336'.
[  409.566769][T12135] random: crng reseeded on system resumption
[  409.571116][T12135] Restarting kernel threads ... done.
[  409.991960][T12153] tipc: Started in network mode
[  409.991977][T12153] tipc: Node identity 7f000001, cluster identity 4711
[  409.992690][T12153] tipc: Enabled bearer <udp:syz1>, priority 10
[  409.993655][T12153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  411.023989][   T25] tipc: Node number set to 2130706433
[  411.064794][T12175] random: crng reseeded on system resumption
[  411.070535][T12175] Restarting kernel threads ... done.
[  412.783429][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'.
[  414.322296][T12227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.325000][T12227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  414.393945][   T25] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  417.625416][ T5949] Bluetooth: hci0: command 0x0406 tx timeout
[  417.627314][ T5943] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  417.847509][T12294] random: crng reseeded on system resumption
[  417.851960][T12294] Restarting kernel threads ... done.
[  417.885054][T12292] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  417.887058][T12292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  417.889381][T12292] vhci_hcd vhci_hcd.0: Device attached
[  418.114558][T12200] vhci_hcd: vhci_device speed not set
[  418.181324][T12200] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  418.476706][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'.
[  419.862109][T12295] vhci_hcd: connection reset by peer
[  419.871984][ T6415] vhci_hcd: stop threads
[  419.873697][ T6415] vhci_hcd: release socket
[  419.879336][ T6415] vhci_hcd: disconnect device
[  421.351635][T12364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1391'.
[  421.600808][T12370] random: crng reseeded on system resumption
[  421.609545][T12370] Restarting kernel threads ... done.
[  423.134699][T12411] Dead loop on virtual device ip6_vti0, fix it urgently!
[  423.135283][T12411] Dead loop on virtual device ip6_vti0, fix it urgently!
[  423.135468][T12411] Dead loop on virtual device ip6_vti0, fix it urgently!
[  423.135646][T12411] Dead loop on virtual device ip6_vti0, fix it urgently!
[  423.135820][T12411] Dead loop on virtual device ip6_vti0, fix it urgently!
[  423.135987][T12411] Dead loop on virtual device ip6_vti0, fix it urgently!
[  423.454389][T12200] vhci_hcd: vhci_device speed not set
[  423.990503][T12421] random: crng reseeded on system resumption
[  423.996232][T12421] Restarting kernel threads ... done.
[  424.528313][T12432] netlink: 'syz.3.1406': attribute type 1 has an invalid length.
[  424.528355][T12432] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1406'.
[  425.393982][   T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  425.582982][   T25] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  425.586202][   T25] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  425.589091][   T25] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  425.591648][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.605535][T12451] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  425.609654][   T25] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  425.972563][T12448] input: syz0 as /devices/virtual/input/input26
[  427.438947][T12478] random: crng reseeded on system resumption
[  427.452443][T12478] Restarting kernel threads ... done.
[  428.244720][  T834] usb 8-1: USB disconnect, device number 6
[  428.711966][T12510] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  428.713814][T12510] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  428.720872][T12510] vhci_hcd vhci_hcd.0: Device attached
[  428.903966][ T5986] vhci_hcd: vhci_device speed not set
[  428.963882][ T5986] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  429.984352][T12532] random: crng reseeded on system resumption
[  429.987053][T12532] Restarting kernel threads ... done.
[  430.125740][T12511] vhci_hcd: connection reset by peer
[  430.128808][ T6415] vhci_hcd: stop threads
[  430.130197][ T6415] vhci_hcd: release socket
[  430.133869][ T6415] vhci_hcd: disconnect device
[  430.533952][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  430.557457][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'.
[  430.562498][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'.
[  430.832369][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  430.835108][    T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  430.838380][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  430.841677][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  430.845770][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  430.887698][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  430.893587][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  430.896626][    T9] usb 5-1: Product: syz
[  430.898150][    T9] usb 5-1: Manufacturer: syz
[  430.909895][T12549] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.1434'.
[  430.914035][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  430.917122][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  430.925219][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  430.927568][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  431.590597][T12551] program syz.2.1434 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  432.619475][ T1321] usb 5-1: USB disconnect, device number 7
[  433.139287][T12574] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  433.142728][T12574] batman_adv: batadv0: Adding interface: gretap1
[  433.145032][T12574] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.152368][T12574] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  433.187429][T12583] random: crng reseeded on system resumption
[  433.192391][T12583] Restarting kernel threads ... done.
[  433.622650][T12587] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.635852][T12587] batman_adv: batadv0: Adding interface: dummy0
[  433.637790][T12587] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.646213][T12587] batman_adv: batadv0: Interface activated: dummy0
[  433.661160][T12587] batadv0: mtu less than device minimum
[  433.663689][T12587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.669002][T12587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.674559][T12587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.679810][T12587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.685245][T12587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.689367][T12587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.694123][T12587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  433.699715][T12587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  434.017593][T12600] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  434.017593][T12600]    program syz.2.1443 not setting count and/or reply_len properly
[  434.084035][ T5986] vhci_hcd: vhci_device speed not set
[  435.033748][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'.
[  435.036563][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'.
[  435.047279][T12610] loop7: detected capacity change from 0 to 16384
[  435.114033][T12610] loop7: detected capacity change from 16384 to 16383
[  436.325649][T12634] random: crng reseeded on system resumption
[  436.330194][T12634] Restarting kernel threads ... done.
[  437.319684][T12655] random: crng reseeded on system resumption
[  437.326806][T12655] Restarting kernel threads ... done.
[  438.524243][T12676] random: crng reseeded on system resumption
[  438.527106][T12676] Restarting kernel threads ... done.
[  439.467444][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  439.553540][T12700] random: crng reseeded on system resumption
[  439.561240][T12700] Restarting kernel threads ... done.
[  441.298522][T12726] random: crng reseeded on system resumption
[  441.303418][T12726] Restarting kernel threads ... done.
[  442.287869][T12749] random: crng reseeded on system resumption
[  442.293919][T12749] Restarting kernel threads ... done.
[  442.430749][T12757] netlink: 'syz.1.1486': attribute type 1 has an invalid length.
[  442.432834][T12757] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1486'.
[  442.525173][T12765] vivid-003: disconnect
[  442.817582][T12752] vivid-003: reconnect
[  443.309708][T12781] random: crng reseeded on system resumption
[  443.314542][T12781] Restarting kernel threads ... done.
[  444.981464][T12806] random: crng reseeded on system resumption
[  444.984516][T12806] Restarting kernel threads ... done.
[  445.153861][T12812] netlink: 'syz.1.1498': attribute type 1 has an invalid length.
[  445.158322][T12812] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1498'.
[  447.336843][T12200] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  447.524628][T12200] usb 8-1: Using ep0 maxpacket: 8
[  447.536474][T12200] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  447.562065][T12200] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  447.582321][T12200] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  447.586279][T12200] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.570279][T12859] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  448.572764][T12859] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  448.647039][T12864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1508'.
[  448.754053][T12859] vhci_hcd vhci_hcd.0: Device attached
[  448.800003][T12858] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  448.802690][T12858] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  448.807276][T12858] vhci_hcd vhci_hcd.0: Device attached
[  449.063129][    T9] vhci_hcd: vhci_device speed not set
[  449.123952][    T9] usb 37-1: new full-speed USB device number 3 using vhci_hcd
[  449.181874][T12200] vhci_hcd: vhci_device speed not set
[  449.244939][T12200] usb 41-1: new full-speed USB device number 3 using vhci_hcd
[  449.333097][T12865] vhci_hcd: connection reset by peer
[  449.339138][ T6389] vhci_hcd: stop threads
[  449.342222][ T6389] vhci_hcd: release socket
[  449.345404][ T6389] vhci_hcd: disconnect device
[  449.998485][T12862] vhci_hcd: connection reset by peer
[  450.002382][ T6389] vhci_hcd: stop threads
[  450.004246][ T6389] vhci_hcd: release socket
[  450.017882][ T6389] vhci_hcd: disconnect device
[  450.461674][T11194] usb 8-1: USB disconnect, device number 7
[  450.588792][T12885] random: crng reseeded on system resumption
[  450.593345][T12885] Restarting kernel threads ... done.
[  451.519463][T12902] random: crng reseeded on system resumption
[  451.545831][T12902] Restarting kernel threads ... done.
[  452.042848][T12912] netlink: 'syz.2.1520': attribute type 1 has an invalid length.
[  452.046237][T12912] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1520'.
[  452.896227][T12924] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  452.896256][T12924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  452.899255][T12924] vhci_hcd vhci_hcd.0: Device attached
[  453.050570][T12929] fuse: Bad value for 'fd'
[  454.275711][T12944] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  454.280849][T12944] batman_adv: batadv0: Adding interface: gretap1
[  454.282819][T12944] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.290318][T12944] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  454.402842][T12927] vhci_hcd: connection closed
[  454.405700][ T6405] vhci_hcd: stop threads
[  454.408909][ T6405] vhci_hcd: release socket
[  454.421809][ T6405] vhci_hcd: disconnect device
[  454.643903][T12200] vhci_hcd: vhci_device speed not set
[  454.646275][    T9] vhci_hcd: vhci_device speed not set
[  454.773594][T12951] net_ratelimit: 11 callbacks suppressed
[  454.773605][T12951] Dead loop on virtual device ip6_vti0, fix it urgently!
[  454.777647][T12951] Dead loop on virtual device ip6_vti0, fix it urgently!
[  454.779769][T12951] Dead loop on virtual device ip6_vti0, fix it urgently!
[  454.781861][T12951] Dead loop on virtual device ip6_vti0, fix it urgently!
[  454.784063][T12951] Dead loop on virtual device ip6_vti0, fix it urgently!
[  454.786182][T12951] Dead loop on virtual device ip6_vti0, fix it urgently!
[  455.566585][T12953] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  455.566585][T12953]    program syz.3.1529 not setting count and/or reply_len properly
[  456.806723][T12968] random: crng reseeded on system resumption
[  456.827289][T12968] Restarting kernel threads ... done.
[  456.869979][T12971] netlink: 'syz.0.1532': attribute type 1 has an invalid length.
[  456.870000][T12971] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1532'.
[  459.148820][T13011] bridge0: port 3(hsr_slave_1) entered blocking state
[  459.151037][T13011] bridge0: port 3(hsr_slave_1) entered disabled state
[  459.153493][T13011] hsr_slave_1: entered allmulticast mode
[  459.157828][T13011] hsr_slave_1: left allmulticast mode
[  459.273914][T12526] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  459.423951][T12526] usb 8-1: Using ep0 maxpacket: 8
[  459.426847][T12526] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  459.429281][T12526] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  459.432255][T12526] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  459.435571][T12526] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  459.438504][T12526] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  459.442538][T12526] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  459.445312][T12526] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.610284][T13017] random: crng reseeded on system resumption
[  459.709086][T12526] usb 8-1: GET_CAPABILITIES returned 0
[  459.710809][T12526] usbtmc 8-1:16.0: can't read capabilities
[  459.715756][T13017] Restarting kernel threads ... done.
[  460.095435][T13023] ipt_ECN: cannot use operation on non-tcp rule
[  460.510287][    T9] usb 8-1: USB disconnect, device number 8
[  460.535955][T13030] random: crng reseeded on system resumption
[  460.540808][T13030] Restarting kernel threads ... done.
[  461.198854][T13037] random: crng reseeded on system resumption
[  461.203973][T13037] Restarting kernel threads ... done.
[  462.374969][T13059] random: crng reseeded on system resumption
[  462.379936][T13059] Restarting kernel threads ... done.
[  463.313320][T13069] random: crng reseeded on system resumption
[  463.319798][T13069] Restarting kernel threads ... done.
[  464.652510][T13084] fuse: Bad value for 'fd'
[  465.289552][T13096] random: crng reseeded on system resumption
[  465.302854][T13096] Restarting kernel threads ... done.
[  465.731228][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'.
[  467.642755][T13143] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  467.642769][T13143] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  467.642846][T13143] vhci_hcd vhci_hcd.0: Device attached
[  467.823990][T12526] vhci_hcd: vhci_device speed not set
[  467.884187][T12526] usb 43-1: new full-speed USB device number 3 using vhci_hcd
[  468.573921][T13158] random: crng reseeded on system resumption
[  468.581360][T13158] Restarting kernel threads ... done.
[  468.669690][T13164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'.
[  469.007835][T13170] random: crng reseeded on system resumption
[  469.019985][T13170] Restarting kernel threads ... done.
[  469.389121][T13144] vhci_hcd: connection reset by peer
[  469.392719][ T6383] vhci_hcd: stop threads
[  469.394496][ T6383] vhci_hcd: release socket
[  469.396544][ T6383] vhci_hcd: disconnect device
[  470.031012][T13188] random: crng reseeded on system resumption
[  470.058304][T13188] Restarting kernel threads ... done.
[  470.109428][T13191] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  470.110398][T13192] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  470.111625][T13191] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  470.114132][T13192] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  470.117347][T13191] vhci_hcd vhci_hcd.0: Device attached
[  470.123876][T13192] vhci_hcd vhci_hcd.0: Device attached
[  470.293921][ T5986] vhci_hcd: vhci_device speed not set
[  470.355821][ T5986] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  471.003033][T13194] vhci_hcd: connection closed
[  471.003383][ T6437] vhci_hcd: stop threads
[  471.007651][ T6437] vhci_hcd: release socket
[  471.009004][ T6437] vhci_hcd: disconnect device
[  471.284295][T13211] random: crng reseeded on system resumption
[  471.287059][T13211] Restarting kernel threads ... done.
[  471.435342][T13195] vhci_hcd: connection reset by peer
[  471.437200][ T6405] vhci_hcd: stop threads
[  471.438459][ T6405] vhci_hcd: release socket
[  471.439972][ T6405] vhci_hcd: disconnect device
[  471.596947][T13217] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  471.598939][T13217] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  471.601304][T13217] vhci_hcd vhci_hcd.0: Device attached
[  472.216810][T13231] random: crng reseeded on system resumption
[  472.227463][T13231] Restarting kernel threads ... done.
[  472.973959][T12526] vhci_hcd: vhci_device speed not set
[  473.165628][T13222] vhci_hcd: connection closed
[  473.166619][ T6389] vhci_hcd: stop threads
[  473.166659][ T6389] vhci_hcd: release socket
[  473.166734][ T6389] vhci_hcd: disconnect device
[  474.639557][T13271] fuse: Bad value for 'fd'
[  475.163953][T13280] random: crng reseeded on system resumption
[  475.166612][T13280] Restarting kernel threads ... done.
[  475.443960][ T5986] vhci_hcd: vhci_device speed not set
[  475.540415][T13290] overlayfs: missing 'lowerdir'
[  476.005602][T13297] random: crng reseeded on system resumption
[  476.010237][T13297] Restarting kernel threads ... done.
[  478.070207][T13334] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  478.072211][T13334] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  478.074851][T13334] vhci_hcd vhci_hcd.0: Device attached
[  478.303921][ T5982] vhci_hcd: vhci_device speed not set
[  478.341159][T13340] random: crng reseeded on system resumption
[  478.349204][T13340] Restarting kernel threads ... done.
[  478.373935][ T5982] usb 39-1: new full-speed USB device number 3 using vhci_hcd
[  478.787294][T13337] vhci_hcd: connection reset by peer
[  478.789443][ T6437] vhci_hcd: stop threads
[  478.790825][ T6437] vhci_hcd: release socket
[  478.792259][ T6437] vhci_hcd: disconnect device
[  480.106707][T13376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  480.802494][T13384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1624'.
[  480.997712][T13395] random: crng reseeded on system resumption
[  481.000340][T13395] Restarting kernel threads ... done.
[  482.374345][T13421] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  482.511938][T13425] random: crng reseeded on system resumption
[  482.514686][T13425] Restarting kernel threads ... done.
[  483.533947][ T5982] vhci_hcd: vhci_device speed not set
[  484.877810][T13466] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  484.880259][T13466] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  484.883706][T13466] vhci_hcd vhci_hcd.0: Device attached
[  485.139295][   T25] vhci_hcd: vhci_device speed not set
[  485.193958][   T25] usb 41-1: new full-speed USB device number 4 using vhci_hcd
[  485.415716][T13474] Driver unsupported XDP return value 0 on prog  (id 622) dev N/A, expect packet loss!
[  486.007857][ T2033] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  486.019535][T13484] random: crng reseeded on system resumption
[  486.024562][T13484] Restarting kernel threads ... done.
[  486.153921][ T2033] usb 5-1: Using ep0 maxpacket: 8
[  486.157161][ T2033] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  486.161339][ T2033] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  486.164792][ T2033] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  486.167728][ T2033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.171997][ T2033] usb 5-1: config 0 descriptor??
[  486.387301][ T2033] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  486.415735][T13467] vhci_hcd: connection reset by peer
[  486.419745][ T6437] vhci_hcd: stop threads
[  486.425902][ T6437] vhci_hcd: release socket
[  486.427223][ T6437] vhci_hcd: disconnect device
[  486.947325][T13497] input: syz1 as /devices/virtual/input/input27
[  487.046231][T13497] iowarrior 5-1:0.0: Error -90 while submitting URB
[  487.281327][T13502] bridge0: port 3(hsr_slave_1) entered blocking state
[  487.283224][T13502] bridge0: port 3(hsr_slave_1) entered disabled state
[  487.285564][T13502] hsr_slave_1: entered allmulticast mode
[  487.287653][T13502] hsr_slave_1: left allmulticast mode
[  487.566295][T13512] netlink: 'syz.1.1658': attribute type 10 has an invalid length.
[  487.577505][T13512] team0: Port device netdevsim0 added
[  487.958796][T13517] random: crng reseeded on system resumption
[  487.963742][T13517] Restarting kernel threads ... done.
[  488.222365][T13525] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  488.224876][T13525] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  488.228230][T13525] vhci_hcd vhci_hcd.0: Device attached
[  488.774669][   T58] usb 5-1: USB disconnect, device number 8
[  489.204910][   T39] audit: type=1326 audit(1738198681.212:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13538 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  489.212669][   T39] audit: type=1326 audit(1738198681.212:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13538 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  489.219106][   T39] audit: type=1326 audit(1738198681.212:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13538 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  489.225289][   T39] audit: type=1326 audit(1738198681.212:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13538 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  489.225307][   T39] audit: type=1326 audit(1738198681.212:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13538 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  489.225323][   T39] audit: type=1326 audit(1738198681.212:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  489.225338][   T39] audit: type=1326 audit(1738198681.222:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13538 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  489.225353][   T39] audit: type=1326 audit(1738198681.222:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13538 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  489.225367][   T39] audit: type=1326 audit(1738198681.222:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f65598 code=0x7ffc0000
[  489.225382][   T39] audit: type=1326 audit(1738198681.222:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  489.666826][T13526] vhci_hcd: connection closed
[  489.674781][ T6389] vhci_hcd: stop threads
[  489.677388][ T6389] vhci_hcd: release socket
[  489.678758][ T6389] vhci_hcd: disconnect device
[  489.795274][T13548] netfs: Couldn't get user pages (rc=-14)
[  489.866033][T13548] 9pnet_virtio: no channels available for device syz
[  489.887560][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'.
[  490.615278][   T25] vhci_hcd: vhci_device speed not set
[  491.836062][T13583] random: crng reseeded on system resumption
[  491.839298][T13583] Restarting kernel threads ... done.
[  492.044029][T13588] random: crng reseeded on system resumption
[  492.050618][T13588] Restarting kernel threads ... done.
[  492.151770][T13592] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  492.154070][T13592] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  492.157845][T13592] vhci_hcd vhci_hcd.0: Device attached
[  492.333888][ T2033] vhci_hcd: vhci_device speed not set
[  492.393985][ T2033] usb 41-1: new full-speed USB device number 5 using vhci_hcd
[  493.295766][T13605] random: crng reseeded on system resumption
[  493.302901][T13605] Restarting kernel threads ... done.
[  493.545456][T13593] vhci_hcd: connection reset by peer
[  493.548998][ T6392] vhci_hcd: stop threads
[  493.550452][ T6392] vhci_hcd: release socket
[  493.551791][ T6392] vhci_hcd: disconnect device
[  495.306314][T13638] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  495.462109][ T2298] libceph: connect (1)[c::]:6789 error -101
[  495.464984][ T2298] libceph: mon0 (1)[c::]:6789 connect error
[  495.592383][T13646] random: crng reseeded on system resumption
[  495.863864][    T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  495.958152][T13645] ebtables: wrong size: *len 120, entries_size 48, replsz 48
[  495.962700][T13637] ceph: No mds server is up or the cluster is laggy
[  495.971636][ T2298] libceph: connect (1)[c::]:6789 error -101
[  495.976770][ T2298] libceph: mon0 (1)[c::]:6789 connect error
[  496.023845][    T9] usb 8-1: Using ep0 maxpacket: 8
[  496.026531][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  496.029758][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  496.032549][    T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  496.035303][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.044912][    T9] usb 8-1: config 0 descriptor??
[  496.257553][    T9] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  496.318292][T13658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1691'.
[  496.343981][T13659] netlink: 'syz.1.1693': attribute type 6 has an invalid length.
[  496.825549][T13664] input: syz1 as /devices/virtual/input/input29
[  496.915014][T13664] iowarrior 8-1:0.0: Error -90 while submitting URB
[  497.274128][T13673] random: crng reseeded on system resumption
[  497.279007][T13673] Restarting kernel threads ... done.
[  497.437004][   T39] kauditd_printk_skb: 19 callbacks suppressed
[  497.437014][   T39] audit: type=1800 audit(1738198689.442:41): pid=13681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1695" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  497.543917][ T2033] vhci_hcd: vhci_device speed not set
[  498.671722][T13699] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  498.894627][ T2298] usb 8-1: USB disconnect, device number 9
[  499.444151][T13709] random: crng reseeded on system resumption
[  499.467041][T13709] Restarting kernel threads ... done.
[  499.578193][T13711] netlink: 'syz.0.1702': attribute type 10 has an invalid length.
[  499.585846][T13711] team0: Port device netdevsim0 added
[  500.386337][T13725] random: crng reseeded on system resumption
[  500.389808][T13725] Restarting kernel threads ... done.
[  500.527129][T13728] random: crng reseeded on system resumption
[  500.531534][T13728] Restarting kernel threads ... done.
[  500.896905][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  501.576233][T13739] program syz.0.1711 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  501.637820][T13745] ubi0: attaching mtd0
[  501.645255][T13745] ubi0: scanning is finished
[  501.646662][T13745] ubi0: empty MTD device detected
[  501.799675][T13745] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  501.801914][T13745] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  501.804094][T13745] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  501.806207][T13745] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  501.808429][T13745] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  501.810521][T13745] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  501.812908][T13745] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1392100169
[  501.815886][T13745] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  501.821103][T13752] ubi0: background thread "ubi_bgt0d" started, PID 13752
[  501.821795][T13748] ubi0: detaching mtd0
[  501.855164][T13748] ubi0: mtd0 is detached
[  502.726811][T13759] x86/PAT: syz.2.1714:13759 freeing invalid memtype [mem 0xfed00000-0xfed00fff]
[  502.729353][T13759] netlink: 'syz.2.1714': attribute type 1 has an invalid length.
[  502.730949][T13759] netlink: 'syz.2.1714': attribute type 1 has an invalid length.
[  502.730966][T13759] netlink: 'syz.2.1714': attribute type 3 has an invalid length.
[  502.730977][T13759] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1714'.
[  502.739349][T13759] x86/PAT: syz.2.1714:13759 freeing invalid memtype [mem 0xfed00000-0xfed00fff]
[  502.779597][T13761] random: crng reseeded on system resumption
[  502.801168][T13761] Restarting kernel threads ... done.
[  504.776805][T13790] netlink: 'syz.3.1721': attribute type 11 has an invalid length.
[  505.370201][T13804] netlink: 'syz.2.1724': attribute type 1 has an invalid length.
[  505.865748][T13813] random: crng reseeded on system resumption
[  505.875607][T13813] Restarting kernel threads ... done.
[  506.790225][T13824] random: crng reseeded on system resumption
[  506.795808][T13824] Restarting kernel threads ... done.
[  506.839909][T13825] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  506.841956][T13825] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  506.845790][T13825] vhci_hcd vhci_hcd.0: Device attached
[  507.047329][    T9] vhci_hcd: vhci_device speed not set
[  507.130397][    T9] usb 37-1: new full-speed USB device number 4 using vhci_hcd
[  507.805080][T13827] vhci_hcd: connection reset by peer
[  507.809164][ T6383] vhci_hcd: stop threads
[  507.810814][ T6383] vhci_hcd: release socket
[  507.812512][ T6383] vhci_hcd: disconnect device
[  509.298844][T13846] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  509.692811][T13854] random: crng reseeded on system resumption
[  509.696538][T13854] Restarting kernel threads ... done.
[  512.573893][    T9] vhci_hcd: vhci_device speed not set
[  512.589162][T13900] random: crng reseeded on system resumption
[  512.595896][T13900] Restarting kernel threads ... done.
[  514.124724][T13922] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  514.126805][T13922] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  514.130900][T13922] vhci_hcd vhci_hcd.0: Device attached
[  514.793849][    T9] vhci_hcd: vhci_device speed not set
[  514.980043][    T9] usb 41-1: new full-speed USB device number 6 using vhci_hcd
[  515.019247][T13924] vhci_hcd: connection reset by peer
[  515.021411][   T12] vhci_hcd: stop threads
[  515.022669][   T12] vhci_hcd: release socket
[  515.035243][   T12] vhci_hcd: disconnect device
[  515.902627][T13953] random: crng reseeded on system resumption
[  515.908211][T13953] Restarting kernel threads ... done.
[  517.602039][T13978] netlink: 'syz.3.1765': attribute type 10 has an invalid length.
[  517.613751][T13978] team0: Port device netdevsim0 added
[  518.310767][T13989] random: crng reseeded on system resumption
[  518.318632][T13989] Restarting kernel threads ... done.
[  518.736843][T13994] program syz.2.1768 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  518.792755][T13998] ubi0: attaching mtd0
[  518.795200][T13998] ubi0: scanning is finished
[  518.797392][T13998] ==================================================================
[  518.799725][T13998] BUG: KASAN: slab-out-of-bounds in notifier_chain_register+0x3ac/0x420
[  518.802147][T13998] Read of size 4 at addr ffff888012d998d8 by task syz.2.1768/13998
[  518.805697][T13998] 
[  518.807191][T13998] CPU: 2 UID: 0 PID: 13998 Comm: syz.2.1768 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0
[  518.807218][T13998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  518.807228][T13998] Call Trace:
[  518.807233][T13998]  <TASK>
[  518.807240][T13998]  dump_stack_lvl+0x116/0x1f0
[  518.807295][T13998]  print_report+0xc3/0x620
[  518.807314][T13998]  ? __virt_addr_valid+0x5e/0x590
[  518.807336][T13998]  ? __phys_addr+0xc6/0x150
[  518.807358][T13998]  kasan_report+0xd9/0x110
[  518.807376][T13998]  ? notifier_chain_register+0x3ac/0x420
[  518.807399][T13998]  ? notifier_chain_register+0x3ac/0x420
[  518.807421][T13998]  notifier_chain_register+0x3ac/0x420
[  518.807445][T13998]  blocking_notifier_chain_register+0x76/0xd0
[  518.807468][T13998]  ubi_wl_init+0x1018/0x17b0
[  518.807515][T13998]  ubi_attach+0x1cdd/0x4dc0
[  518.807541][T13998]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  518.807559][T13998]  ? lockdep_init_map_type+0x16d/0x7d0
[  518.807578][T13998]  ? __pfx_ubi_attach+0x10/0x10
[  518.807598][T13998]  ? ubi_attach_mtd_dev+0x1543/0x3590
[  518.807621][T13998]  ubi_attach_mtd_dev+0x158f/0x3590
[  518.807646][T13998]  ? __pfx_ubi_attach_mtd_dev+0x10/0x10
[  518.807666][T13998]  ? __pfx_get_mtd_device+0x10/0x10
[  518.807684][T13998]  ctrl_cdev_ioctl+0x339/0x3d0
[  518.807705][T13998]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  518.807727][T13998]  ? __fget_files+0x206/0x3a0
[  518.807743][T13998]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  518.807763][T13998]  compat_ptr_ioctl+0x6b/0xa0
[  518.807783][T13998]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  518.807801][T13998]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  518.807822][T13998]  __do_fast_syscall_32+0x73/0x120
[  518.807843][T13998]  do_fast_syscall_32+0x32/0x80
[  518.807863][T13998]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  518.807886][T13998] RIP: 0023:0xf7f02579
[  518.807898][T13998] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  518.807911][T13998] RSP: 002b:00000000f4fd455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  518.807925][T13998] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000040186f40
[  518.807935][T13998] RDX: 0000000020000502 RSI: 0000000000000000 RDI: 0000000000000000
[  518.807943][T13998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  518.807952][T13998] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  518.807961][T13998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  518.807975][T13998]  </TASK>
[  518.807981][T13998] 
[  518.895315][T13998] Allocated by task 13994:
[  518.896817][T13998]  kasan_save_stack+0x33/0x60
[  518.898725][T13998]  kasan_save_track+0x14/0x30
[  518.900742][T13998]  __kasan_kmalloc+0xaa/0xb0
[  518.902647][T13998]  sg_open+0x7a8/0x1910
[  518.904290][T13998]  chrdev_open+0x237/0x6a0
[  518.906104][T13998]  do_dentry_open+0x735/0x1c40
[  518.907956][T13998]  vfs_open+0x82/0x3f0
[  518.909629][T13998]  path_openat+0x1e88/0x2d80
[  518.911514][T13998]  do_filp_open+0x20c/0x470
[  518.913400][T13998]  do_sys_openat2+0x17a/0x1e0
[  518.915327][T13998]  __ia32_compat_sys_openat+0x16e/0x210
[  518.917555][T13998]  __do_fast_syscall_32+0x73/0x120
[  518.919626][T13998]  do_fast_syscall_32+0x32/0x80
[  518.921624][T13998]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  518.924179][T13998] 
[  518.925164][T13998] The buggy address belongs to the object at ffff888012d98000
[  518.925164][T13998]  which belongs to the cache kmalloc-8k of size 8192
[  518.930720][T13998] The buggy address is located 520 bytes to the right of
[  518.930720][T13998]  allocated 5840-byte region [ffff888012d98000, ffff888012d996d0)
[  518.936550][T13998] 
[  518.937553][T13998] The buggy address belongs to the physical page:
[  518.940114][T13998] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12d98
[  518.943619][T13998] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  518.946873][T13998] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  518.949982][T13998] page_type: f5(slab)
[  518.951608][T13998] raw: 00fff00000000040 ffff88801b043180 ffffea000048de00 dead000000000005
[  518.955047][T13998] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  518.958407][T13998] head: 00fff00000000040 ffff88801b043180 ffffea000048de00 dead000000000005
[  518.961713][T13998] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  518.964179][T13998] head: 00fff00000000003 ffffea00004b6601 ffffffffffffffff 0000000000000000
[  518.966975][T13998] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  518.969988][T13998] page dumped because: kasan: bad access detected
[  518.972390][T13998] page_owner tracks the page as allocated
[  518.974644][T13998] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5660, tgid 5660 (dhcpcd), ts 421398057962, free_ts 415958897295
[  518.981255][T13998]  post_alloc_hook+0x181/0x1b0
[  518.982704][T13998]  get_page_from_freelist+0xfce/0x2f80
[  518.984305][T13998]  __alloc_frozen_pages_noprof+0x221/0x2470
[  518.986157][T13998]  alloc_pages_mpol+0x1fc/0x540
[  518.987613][T13998]  new_slab+0x23d/0x330
[  518.988845][T13998]  ___slab_alloc+0xbfa/0x1600
[  518.990256][T13998]  __slab_alloc.constprop.0+0x56/0xb0
[  518.992146][T13998]  __kmalloc_node_track_caller_noprof+0x2ee/0x520
[  518.994143][T13998]  kmalloc_reserve+0xef/0x2c0
[  518.995577][T13998]  __alloc_skb+0x164/0x380
[  518.996937][T13998]  netlink_dump+0x2c1/0xd00
[  518.998327][T13998]  __netlink_dump_start+0x6d9/0x980
[  518.999856][T13998]  rtnetlink_rcv_msg+0xb44/0xea0
[  519.001360][T13998]  netlink_rcv_skb+0x165/0x410
[  519.002804][T13998]  netlink_unicast+0x53c/0x7f0
[  519.004223][T13998]  netlink_sendmsg+0x8b8/0xd70
[  519.005697][T13998] page last free pid 12262 tgid 12262 stack trace:
[  519.007634][T13998]  free_frozen_pages+0x6db/0xfb0
[  519.009179][T13998]  __put_partials+0x14c/0x170
[  519.010599][T13998]  qlist_free_all+0x4e/0x120
[  519.011976][T13998]  kasan_quarantine_reduce+0x195/0x1e0
[  519.013062][T14000] bridge0: port 3(syz_tun) entered blocking state
[  519.013653][T13998]  __kasan_slab_alloc+0x69/0x90
[  519.013667][T13998]  kmem_cache_alloc_noprof+0x1c8/0x3b0
[  519.016167][T14000] bridge0: port 3(syz_tun) entered disabled state
[  519.017159][T13998]  getname_flags.part.0+0x4c/0x550
[  519.017176][T13998]  getname_flags+0x93/0xf0
[  519.019493][T14000] syz_tun: entered allmulticast mode
[  519.021529][T13998]  __ia32_sys_symlinkat+0x79/0xc0
[  519.026424][T14000] syz_tun: entered promiscuous mode
[  519.026562][T13998]  __do_fast_syscall_32+0x73/0x120
[  519.029978][T14000] bridge0: port 3(syz_tun) entered blocking state
[  519.031394][T13998]  do_fast_syscall_32+0x32/0x80
[  519.031410][T13998]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  519.033694][T14000] bridge0: port 3(syz_tun) entered forwarding state
[  519.035084][T13998] 
[  519.035088][T13998] Memory state around the buggy address:
[  519.035094][T13998]  ffff888012d99780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  519.035101][T13998]  ffff888012d99800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  519.035107][T13998] >ffff888012d99880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  519.035111][T13998]                                                     ^
[  519.035116][T13998]  ffff888012d99900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  519.035122][T13998]  ffff888012d99980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  519.035127][T13998] ==================================================================
[  519.076087][T13998] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  519.078445][T13998] CPU: 3 UID: 0 PID: 13998 Comm: syz.2.1768 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0
[  519.082562][T13998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  519.086958][T13998] Call Trace:
[  519.088022][T13998]  <TASK>
[  519.088894][T13998]  dump_stack_lvl+0x3d/0x1f0
[  519.090265][T13998]  panic+0x71d/0x800
[  519.091411][T13998]  ? __pfx_panic+0x10/0x10
[  519.092727][T13998]  ? preempt_schedule_thunk+0x1a/0x30
[  519.094306][T13998]  ? preempt_schedule_common+0x44/0xc0
[  519.095931][T13998]  check_panic_on_warn+0xab/0xb0
[  519.097518][T13998]  end_report+0x117/0x180
[  519.098795][T13998]  kasan_report+0xe9/0x110
[  519.100107][T13998]  ? notifier_chain_register+0x3ac/0x420
[  519.101757][T13998]  ? notifier_chain_register+0x3ac/0x420
[  519.103440][T13998]  notifier_chain_register+0x3ac/0x420
[  519.105056][T13998]  blocking_notifier_chain_register+0x76/0xd0
[  519.106865][T13998]  ubi_wl_init+0x1018/0x17b0
[  519.108243][T13998]  ubi_attach+0x1cdd/0x4dc0
[  519.109582][T13998]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  519.111435][T13998]  ? lockdep_init_map_type+0x16d/0x7d0
[  519.113036][T13998]  ? __pfx_ubi_attach+0x10/0x10
[  519.114471][T13998]  ? ubi_attach_mtd_dev+0x1543/0x3590
[  519.116045][T13998]  ubi_attach_mtd_dev+0x158f/0x3590
[  519.117575][T13998]  ? __pfx_ubi_attach_mtd_dev+0x10/0x10
[  519.119192][T13998]  ? __pfx_get_mtd_device+0x10/0x10
[  519.120718][T13998]  ctrl_cdev_ioctl+0x339/0x3d0
[  519.122127][T13998]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  519.123676][T13998]  ? __fget_files+0x206/0x3a0
[  519.125080][T13998]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  519.126796][T13998]  compat_ptr_ioctl+0x6b/0xa0
[  519.128177][T13998]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  519.129747][T13998]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  519.131284][T13998]  __do_fast_syscall_32+0x73/0x120
[  519.133271][T13998]  do_fast_syscall_32+0x32/0x80
[  519.135289][T13998]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  519.137869][T13998] RIP: 0023:0xf7f02579
[  519.139546][T13998] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  519.147301][T13998] RSP: 002b:00000000f4fd455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  519.150710][T13998] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000040186f40
[  519.153144][T13998] RDX: 0000000020000502 RSI: 0000000000000000 RDI: 0000000000000000
[  519.155412][T13998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  519.157773][T13998] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  519.160078][T13998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  519.162396][T13998]  </TASK>
[  519.163947][T13998] Kernel Offset: disabled
[  519.165242][T13998] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:58:30  Registers:
info registers vcpu 0

CPU#0
RAX=00000000013283bb RBX=0000000000000000 RCX=ffffffff8b45af89 RDX=0000000000000000
RSI=ffffffff8b6cd200 RDI=ffffffff8bd28220 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20
R8 =0000000000000001 R9 =ffffed1005686f7d R10=ffff88802b437beb R11=0000000000000000
R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905ff710 R15=0000000000000000
RIP=ffffffff8b45c36f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c328280 CR3=0000000070402000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff88806820a048 RCX=ffffffff822377c1 RDX=0000000000000000
RSI=ffffffff8bd281a0 RDI=ffffffff8da66ce8 RBP=ffff88807ffd6540 RSP=ffffc90006e9f3c0
R8 =0000000000000000 R9 =fffffbfff20bfee2 R10=ffffffff905ff717 R11=0000000000000002
R12=0000000000000001 R13=0000000000000001 R14=ffff8880672c8000 R15=dffffc0000000000
RIP=ffffffff822377d7 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f204a394 CR3=0000000048130000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff853811a5 RDI=ffffffff9aad2ea0 RBP=ffffffff9aad2e60 RSP=ffffc9000740f468
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3130383838666666
R12=0000000000000000 R13=0000000000000000 R14=ffffffff9aad2eb0 R15=0000000000000018
RIP=ffffffff853811cf RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002ed07ffc CR3=000000004c0f6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001f7011641 00000001db710641
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f116c36b00000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4207ecf76fc316c
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ed2586dd86c8612
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000080000002 RBX=0000000000000001 RCX=1ffffffff3503b14 RDX=0000000000000000
RSI=ffffffff8b6f8900 RDI=0000000000000001 RBP=0000000000000002 RSP=ffffc9000345f8d0
R8 =0000000000000001 R9 =ffffed10056e54ae R10=ffff88802b72a577 R11=0000000000000000
R12=ffffffff9aa98520 R13=dffffc0000000000 R14=ffffc9000345fb10 R15=1ffff9200068bf22
RIP=ffffffff8187dc1e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020ac2000 CR3=000000004c0f6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000