last executing test programs:

5.137781297s ago: executing program 2 (id=934):
pselect6(0x0, 0x0, &(0x7f0000000200)={0x9, 0xbdd, 0x8001, 0x40, 0x0, 0x5, 0x583}, &(0x7f0000000240)={0x1917, 0x2, 0x3ff, 0xff, 0x6, 0x3, 0x0, 0x7}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xb38, 0x8]}, 0x8})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000c428681d22ddc6347989726d000000070000000900010073797a30000000003c00b4a9fb11fe8bb325107fcbaf9d820000090a000000000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000000c0a01010000000000000000070000000900020073797a3100000000090001"], 0x10c}}, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$sysctl(r0, &(0x7f0000000100)='7\x00', 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={&(0x7f0000000540)="ebeeb39297527fda8085b02fb8a58aaac4d4c0fb259777bd42139b07105601d1ad24c6d9c2563854569dfa8db64fc37aeb483e1a631282e8f784b4d9cb51a3c7f5b9e4e83c00bbf0bc3dc7257d2991f50b66ef5ad0497c6f3dffc5e54bde8a9f428e0daa7ecf2113ce7f400ba04635bd6f470c42a6fe34392449653cdb1395f5adab2eb26df20110fb1002a5dd3de1c9314da2174e0dcfc1f0528366fb37281ed4bd44e4e3b5c282b1a480bf11868ad3d3c3d994ca9c482e6916cfd6b9e6e0", &(0x7f0000000080)=""/65, 0x0, 0x0, 0x6, r2, 0x4}, 0x38)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
gettid()
ioperm(0x0, 0x0, 0x3f)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r3 = openat$drirender128(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040))
r4 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709000000000000000001000000050007000000000008000900ffe400001400200000000000000000000000ffffe000000100000a0000000000060002000100000014001f00"/86], 0x5c}, 0x1, 0x620b}, 0x0)
symlink(&(0x7f0000000000)='./file1\x00', 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x8000)
close(0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="450000280000710000000000000014bbac1414aa00004e223aa89c6717670166f210100889285e81040f4c1a2b469701fdfd5928006d6b711ab0ec4c71a4c1783155d567e9be977a5c96cb83924ee62e0a83d1c5c290a26a85d646cf099137e34fd2d603889ed6256b1b885a2c3f0dd69c08c117bea95ccd823ef3174759a657df808d01a1a2e7f738bc00"/158, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'})

4.201369658s ago: executing program 2 (id=938):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x555281, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
socket$kcm(0x2, 0x7, 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4)
r3 = socket(0x10, 0x0, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, 0x0)
dup(0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040f04010019046164"], 0x7)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="16b9bca1ecdef22cf40dbd1e313458ff9a4a7365e15cef573b9276a99d9202bc36a9a093dbd7133fe73421e87e30d67a51fdead3da712da4a32d55fdc2451e83ff", @ANYRES16, @ANYRESDEC=r4, @ANYRESOCT=r2], 0x14}}, 0x4001)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095", @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES8=r2, @ANYRES32=r3], &(0x7f0000000140)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)

4.122029677s ago: executing program 3 (id=939):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRESDEC=r0], &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), 0x4)
connect$inet6(r2, 0x0, 0x0)
madvise(&(0x7f0000ac2000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f000018e000/0x3000)=nil, 0x3000, 0x1)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141001)
r3 = io_uring_setup(0x1f3c, &(0x7f00000004c0)={0x0, 0xf1c, 0x8, 0x4, 0x4c})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000200)}], 0x2)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=<r4=>0x0)
sched_setaffinity(r4, 0xff7f, &(0x7f00000002c0)=0x3)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0)
dup(r6)
mmap(&(0x7f000049e000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000000})
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9)

3.735230619s ago: executing program 3 (id=942):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0, 0xffffffffffffffff, 0xffffffff}, 0xc)

3.67164452s ago: executing program 3 (id=943):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x2000000)

3.409712002s ago: executing program 3 (id=944):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=4'])
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180200002020702500000000002020207b0a00fe00000000bda106000000000026010000f8ffffffb702000008000000b7030000000000008500000005000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000081c6831f568dbf69c7330a9c35c3e5768e599b09a0febd31547f4e4100"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$nullb(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000)
syz_io_uring_setup(0x6b1a, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800008604"])
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0x10)
socket$inet(0x2, 0x80001, 0x84)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x5a4}}, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x10)
socket$inet6_udp(0xa, 0x2, 0x0)

3.262802761s ago: executing program 0 (id=946):
write$vhost_msg(0xffffffffffffffff, &(0x7f00000000c0)={0x1, {&(0x7f0000000000), 0x0, &(0x7f0000000140)=""/251, 0x3, 0x4}}, 0x44)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='mem_connect\x00', r1}, 0x10)
openat$dlm_control(0xffffff9c, &(0x7f0000000380), 0x410100, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x2, @name="f4e06b0a1e730e142a5c1e8623218cb8167a99b19faf6797ae55586411baebc8"})
syz_80211_inject_frame(&(0x7f0000000000)=@device_a={0x8, 0x2, 0x11, 0x68}, &(0x7f0000000100)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, @default, @void, @void}, 0x1e)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a80)={0x28, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x20)
mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x11d4424, 0x0)
write$sndseq(r0, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c)
r6 = syz_io_uring_setup(0x70bb, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x0, 0x37b}, &(0x7f0000000080), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, 0x0, 0x1)

2.980991569s ago: executing program 1 (id=947):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000040200007b8af0ff0086b5be8b85c7b642b6474cc65830706d000000bfa100000000000007012a98843971a85de60000f8ffffffbfa40000a24d3d9f386d356852fb9a7d9b1384d94f6a7e0e0656644014f55fd9f0aa3ee357f88943fd6241a156afc1f32e569a505f81ce78ce186f952cf98a3da1755c4d44", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000016c0)=[0x1], &(0x7f0000000340)=[{0x2000004, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x3, 0x5, 0xe, 0xa}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
kcmp(0x0, 0x0, 0x2, r1, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r5 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
write$UHID_DESTROY(r5, &(0x7f0000000100), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90)
r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000540)={0x1f, 0x0, @none}, &(0x7f0000000580)=0xe, 0x1800)
preadv(r6, &(0x7f0000000600)=[{&(0x7f0000000680)=""/145, 0x91}, {&(0x7f00000005c0)=""/3, 0x3}, {&(0x7f0000000740)=""/151, 0x97}], 0x3, 0x7, 0x5)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40186f40, 0x20000502)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x27, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000700000000000000ffffff7f85710c000df51dfe85100000ffffffff1838000005000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000056f180010000000180000000600000000000000f1ffffff18110000", @ANYRES32=r7, @ANYBLOB="000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000400000000a7040000010000008500000082000000850000005a000000950000000000000035b1c45c511c68855590585f7a087ec123923680d247820831518e9b943583e08ce219a29032fa4820491e687fae010f16515709b72251563c9d834b426853a12d606306993f8b9f9725"], &(0x7f0000000ac0)='syzkaller\x00', 0x1f37, 0xe4, &(0x7f0000000b00)=""/228, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x7, 0x6}, 0x8, 0x10, &(0x7f0000000c40)={0x8000000, 0xd, 0x36, 0x5}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000c80)=[{0x3, 0x4, 0xf, 0x6}, {0x0, 0x5, 0x7, 0x4}, {0x4, 0x2, 0xf, 0x9}, {0x0, 0x1, 0x2, 0xa}, {0x3, 0x3, 0x8, 0xc}, {0x4, 0x5, 0xf, 0xb}, {0x3, 0x1, 0x1, 0x4}, {0x4, 0x3, 0x6, 0x1}], 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

2.977105009s ago: executing program 2 (id=948):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x58, 0x80000)
connect$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x6, 0x0, 0xab, "05b7ee33187097e55c545ba0aaaf2be3267d688fe9e6ab8c0fe67f466df9aa0a71f11525fa6ae4f941cff5fa617ab757c5c8bd72ff37346c8d6cf17d8caacb", 0x37}, 0x58)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000000c0)={0x0, 0x6d})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766246e6f3d20ebbf577968e95cb696506d4b0f3253241c92b47a527719d9993bc90498f38f6164de665bd8d17c8a3d017b7f4afa959dba", @ANYRESHEX, @ANYBLOB=',\x00'])
r3 = io_uring_setup(0x6cfb, &(0x7f00000001c0)={0x0, 0x0, 0x10})
r4 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000040)={0x0, "f8f44fa604e0937938b160bc0f359ebf496ac2d64cd825060102dda9631d379f"})
r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9)
r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
readv(r4, &(0x7f0000000300)=[{&(0x7f0000000500)=""/255, 0xff}], 0x1)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80)

2.478958971s ago: executing program 0 (id=949):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad", 0x36, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678bbce740629919e060e2db370b881e3a3c21fddc80db1032318707c87")
kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = dup2(r6, r4)
close_range(r7, 0xffffffffffffffff, 0x0)

2.019328453s ago: executing program 0 (id=950):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678bbce740629919e060e2db370b881e3a3c21fddc80db1032318707c87")
kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = dup2(r6, r4)
close_range(r7, 0xffffffffffffffff, 0x0)

2.019072353s ago: executing program 1 (id=951):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x393, 0xff80)

1.997436671s ago: executing program 2 (id=952):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\v\x00'/27], 0x48)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000ac0)=<r1=>0x0)
migrate_pages(r1, 0x5, &(0x7f0000000b00)=0x5, &(0x7f0000000b40)=0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x73, 0xdb, &(0x7f0000000080)="17eadc6e3713b775c3f68ad45a7481f81876040a1754daeef067e0f47ba20c0d2401a2565dbe6c0f5fa0d5d0567272adf67ac69fd48c502619c9fa5fd0db36f8dd2563023bed69dfa9d041e00c9b49ebb73a0e1508f8311420b1c212a5330ef38a6a94c52682608e6477531ba377d4e8da3781", &(0x7f0000000200)=""/219, 0x5, 0x0, 0xcc, 0x41, &(0x7f00000003c0)="498cd06d86f0bc1e3d700ac2a92782bbc49e61ea54f301381b960b353e668a01eff2c978bb9fa5ec2529313ecc44b0cfbf3f3a8a7a3bd50eeff598e365a1ff230b2f4e916749b202e4c3838c02f6f8eb679722cc5ff2bd053f1666f5c4cce90291b8355f3732d1b67a8d77448928d8a7f06b3d928a220aef9dba5b3278a8bd1c050d93d0bf98eb16b21847e7a7e3a00b724873f91c56e11ea305b35efb5b29a23d1a59a436d0ceb716e2118ffddb66716bbccd248b86e6961632b1db8de049b465ead0f65e4f80b9c2b80c40", &(0x7f0000000100)="8f0f7caf2a0c48cb154c1111e3f4c6e8ee0b4b3476c6a61790387090e7a96bc40232932cad32b537dff0877678be1c3900ba9dc45744c88ae6da55289566a79240", 0x0, 0x0, 0xc9}, 0x4c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000d00)='sctp_probe_path\x00', r2}, 0x18)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000680)=""/178, 0xb2, <r3=>0x0, &(0x7f0000000740)=""/238, 0xee}}, 0x10)
r4 = accept4(0xffffffffffffffff, &(0x7f00000008c0)=@ieee802154={0x24, @long}, &(0x7f0000000940)=0x80, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000c80), 0x18ec2000, 0x2000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000000d80))
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)={0x1c, r8, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0)
write$P9_RMKDIR(r5, &(0x7f0000000cc0)={0x14, 0x49, 0x2, {0x8}}, 0x14)
sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x10, 0x3f8, 0x100, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40090}, 0x4040044)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000000)={0x18, 0x1000000, {0x0, @remote, 'syzkaller0\x00'}}, 0x1e)
openat$nullb(0xffffff9c, &(0x7f0000000a80), 0x40, 0x0)
fcntl$notify(r9, 0x402, 0xc)
r10 = getpid()
process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x1c}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20044004}, 0x20)
setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000d40)={@local, @private=0xa010102, 0xffffffffffffffff, "2f9bef02f26dc8edc4f826f905190d8e0c8d4879c32fe6473fb99eb643040f36", 0x7, 0x2, 0x4, 0x400}, 0x3c)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r2, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={r3, 0x9}}, 0x1c)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)

1.888325122s ago: executing program 3 (id=953):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400), 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r1, 0x3000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4020841)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2000011f, &(0x7f0000000300)=ANY=[@ANYBLOB="d1478c30c71dd4ab7db87b0e343b106753acf3ece15d2c997139b95a347200092ee7940380fbe6b65a6dcabde168d798c3f8d2070e0f71c3cc796150af5f46b702b99bc90de6677c2351a2673a7afc9afbae6bf40e9f5473e520b189e21e73304414cbcab0ff50705f2b51ffd83f66b7e79f8b6de6b50380bc70353a22df2f6dfe627b11716bf4d00c5f2a3087"], &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x86, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f, @void, @value}, 0x94)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @broadcast}, &(0x7f0000000080)=0xc)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$clear(0x7, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0xe0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

1.887964721s ago: executing program 1 (id=954):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400e042}, 0x1)
r4 = socket(0x11, 0x800000003, 0x0)
socket(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600))
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x5b823826)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)

1.558765613s ago: executing program 0 (id=955):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1", 0x52, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678bbce740629919e060e2db370b881e3a3c21fddc80db1032318707c87")
kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = dup2(r6, r4)
close_range(r7, 0xffffffffffffffff, 0x0)

1.494014658s ago: executing program 1 (id=956):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad31", 0x37, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678bbce740629919e060e2db370b881e3a3c21fddc80db1032318707c87")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
r5 = dup2(0xffffffffffffffff, r3)
close_range(r5, 0xffffffffffffffff, 0x0)

969.323253ms ago: executing program 0 (id=957):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678bbce740629919e060e2db370b881e3a3c21fddc80db1032318707c87")
kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = dup2(r6, r4)
close_range(r7, 0xffffffffffffffff, 0x0)

872.554355ms ago: executing program 2 (id=958):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = syz_clone(0x800c000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678bbce740629919e060e2db370b881e3a3c21fddc80db1032318707c87")
kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = dup2(r6, r4)
close_range(r7, 0xffffffffffffffff, 0x0)

872.108842ms ago: executing program 3 (id=959):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0x48}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400003367947fcceee986f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000016c0)=[0x1], &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0x6, 0xb}, {0x2002, 0x2, 0xf, 0x7}, {0x3, 0x5, 0xe, 0xa}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x26)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffa0)
r3 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a0494271c16ea336824fc091904d2dc69444c0594859f541ab579f868e88aac6e595e", 0xc3, &(0x7f0000001400), &(0x7f0000001580), &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678bbce740629919e060e2db370b881e3a3c21fddc80db1032318707c870df9b26e59c6b7046d94db8dfdff5c500b0a22125bc73f052675ac2acc964f62ec10c92a140cdf9484f37a5c6f7ba45be530d4d566e2a4c5ffb64ff737dc60c5fede24291ae588a7032a863089f395914e62bd1a2eb5c3b95e34d01e0be6bf05efc0c449bce4edcd92ec6e4894d5e7121a")
kcmp(r3, 0x0, 0x2, r2, r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r6}, 0x10)
r7 = getpid()
process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x18)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
syz_emit_ethernet(0x96, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080049a4008800670000161190787f00d7a20a010100440825300000000794040000010000004e214e230064907802b45040000000000000000713d423bf51a12c8b26f8550683f6c95efcc908363d0d407809864471c3f58ff8231194e766836691261522209c3d7e4043b457ed977e3cdde932ea62a11da02bd9ba00b6aa3b85000007883cee5090df"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
tkill(r3, 0x2c)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)

159.63513ms ago: executing program 0 (id=960):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x58, 0x80000)
connect$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x6, 0x0, 0xab, "05b7ee33187097e55c545ba0aaaf2be3267d688fe9e6ab8c0fe67f466df9aa0a71f11525fa6ae4f941cff5fa617ab757c5c8bd72ff37346c8d6cf17d8caacb", 0x37}, 0x58)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000000c0)={0x0, 0x6d})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766246e6f3d20ebbf577968e95cb696506d4b0f3253241c92b47a527719d9993bc90498f38f6164de665bd8d17c8a3d017b7f4afa959dba", @ANYRESHEX, @ANYBLOB=',\x00'])
r3 = io_uring_setup(0x6cfb, &(0x7f00000001c0)={0x0, 0x0, 0x10})
r4 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000040)={0x0, "f8f44fa604e0937938b160bc0f359ebf496ac2d64cd825060102dda9631d379f"})
r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9)
r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
readv(r4, &(0x7f0000000300)=[{&(0x7f0000000500)=""/255, 0xff}], 0x1)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80)

157.229447ms ago: executing program 1 (id=961):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x29, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x9204, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1)
getpid()
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000440)="5ff17db605ade75363a0530733408850aaf311cbe0", 0x15}, {&(0x7f0000000600)="8882d1dc72424e1fd8dd4b9a691db9a3f2d539b0ed59d1d1b67695f356653c71087b5fe7c96758a0f47f379517352fe067a0c327617260dcd520", 0x3a}, {&(0x7f0000002c40)='E', 0x1}], 0x3}}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @remote}, 0x3, 0x4, 0x3, 0x3}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000640)="806def1e3f07c827ee47041d6c262d277691740a795dd735c33249e4ab6244eaf40be6f98428c2be585f1344c6c265e32c6e637f4c9032e7efb9abdad311f14ae5a44768b4d7ae9201ef594acabf3382ec0e9f8085546c85d4bcc384dcfcbc78ffb0159706d894d28401d209a07ac7ddc4466551db7f3d0546ded0320e2c6f487bfad4888b639c03f14c9f7fe9e49f50a83f073837cf7aa899de2e7abb761402de4bace0df87d5f71ad68a4580f08d11aa10396840c7345b76211e69a5afdf9bb86a321e7ad1bf894e2e38ff0fc399", 0xcf}, {&(0x7f00000007c0)="e66bf0cd6e9415caf00ea9f22e880c30010ca92c1a0e9da0fa308c53ac63abe5804eda180805b7515aa0cc4c849d74f2ca07491422a64d34ae2aeac98c410697bbcc9654b093ba17a2ad3d248b594c25ff85f29d91d7a737b56d4d8144933760e3da", 0x62}], 0x2, &(0x7f00000030c0)=[{0xc8, 0x114, 0x7ff, "9b71c7b24db756cdfd77bbd1f569cc7fe2c6a8c957c4da5b04198c773ebebd32483c9c0c1516ec6bfaf93e270c6133d8cb53af22507dade845a996e7b5c122f9b7411767ea4ecdb455b60e932d2859cca3eb3b33a7342a93fbc60e2ae3218572c4ab33d8932020c73e1980192f445f000000dd1218c7b6cc0242b13520cbd09e644aadc2dc30f2a870549043d87f56450315796c58ff85af84c7bb58a36749991859f348eeef347ca463ed568535cf9938a0e5074aefa34c1cbbe0dd"}, {0x100c, 0x0, 0x81, "213ef32fed7fb38904c14b66c38ffe46cd8add2bdfaa2227018054a0d0f7d5880d0eb821ac273412cd01e9c02cbb514ec622c2b3ad6795d441ee081d183251a6b3f51a0eac8e57bef081a41d947c6b9676527c62cf8b516259ebbfe98ecfb89fc9f7c72a46b4edd033c7aba513d1d0475fd0175c3d291b18482d5df4166d7bb091f1af080e79142325a2464773ff56a4faa78867a75978d170c1817b9acd35968d755ebbfa9116f1c005f71917b8ac4fe4a4a33bd5f918df59d9e7d115af961999c06d7c098ffa6730227ae388b209bb0024b69dc4d9bed254ded067b27d5ea49e059868670b01e36e81d0e7d49be2cc1eaf371a78ef35d1e2b079bf75dd22207ae9cd0c49f2877cf9740f149048c128ad8ae3a20f88381ebb223b1d254cde2d7ecc99a1c4cba4850e6c71220f650ca0791cb8aa5035336414d9aa15db3a58f149f6af165f10127b5590c821261deaa30154c2679349034988f7cbb93f3acaa045a03c46ee1091e91e2581139a218ad0417635ecb69f0113cfb8ba4937ea7807fccc1e98a1d0617cfb2213811f072b5c69c701ce9039f874e0c0140dfac1b6ac71f71f44389cc2455152872a45f2920ff1928eea32394fd323094193252dcf98bbde9de262e25b4cb8252d97f4662c4402df690464be501d60e863924a7300d67055dac530f101179ef8ca0b9a59b188389acba6924a2d8655322c04c068bc02945dc8b834a73376b2db3156d18da4d8ed7c2b7f4269be571b5dbebdd76d78b3d01edf74e5e7088e63bf38b5897d4c64dc029455f96833ed1e27c6646bfe55401c1d80a501d56a03fe4c79901d252afc3e65b290f4cbd01e4aa2ebb56d2cac0be2f483afe647d2080bd45e8e483e80972a23cb1cf11138926a73c6520a70aa98dff998e113eab2ce15b979e70588383f29bf7fcb0037a5a26a04402bb371aede5183d5ae5de8f7e8f685dea88a65582cfeee59eecf8aff1c30103c15f9fd915c07b9bcd59e2009829bcfae5565f5742e69d23bdb0b7efaa379151a43046f16be35b1e7787e78e275bfa630d791a117fb7ef8bd821ea9c372d9207365d9cff03ffe9655c538a93bee8b4d4c44bd6cb8a0a738989eb24d868d4f99ad470668a73e985af9350e3dd0ef7a9541466fe02978d887bba44da4b95d6d3326ea32e722eb69756bfb60fa4ba16fef0f9bff4eca73f05337f89436a64cb3770cef6e3f46a4e50c72fb827b47c9925ab67cfd2e545996c69792381e658e2a47f183db266cff63c4c490e8959646ffdb95d5b8161023b597a4e816474fc6a8bfcf54215e7a8135d9d6dfdb12b2fa32322666489e15af3313ea69f7603280e0c13e1ee254069dcc3b3447ff61731d41b223d63684ced3d33ca573759f33d93b5619e63fdefd71fb876bdcac6cfaf6c68c96394a30cc7f85378078b276edc236d3b32a99474d89f29d3cf61fe1ee14c5604ab8576cdfe2d18c8087fe877d5ff7cde072728c04737f441bfb800d993eb27c30a1ad32aca91e025f5df45f5a30d7dd278cb970b699ceb24dec964fbc5855373fc143e3705a85351bfe458d81a1d49cf4cf03bb505fd0b80c6c9fc8ad5828e5cede7c13183321118bb46440d3632751178de976e22578763a7d7a41adc94e62fc7b01288b4902f719bdf81b82b56ec53f00d30d572c40353ca5bd814a4d132150ec7a4c5ab9e7e769caaaab31fc9c1ee89393f5aaf7a4b6c3d1b0ca683d553e4f865d63ec31c09857255938f3dd9008052e47e11cadcc6b1eb95e286e4992b43d1e6e781d27317b526b13520f64fb06b74aabf80f1d035be5dd61aa5fe347147c3d90f1734c774c8c0c801efd1e25017544b6e8c8e69b8e621fa7080a192fa6224668e7bb6d46ba2026797bb11254cdc03511c4f1e25b067bddd6d7d519d607b5b92dd06b35928c356b955ac19578c89c189134236ef0dbfa53a7817c0cee20e1b13bbb5cf8976956beb92655fdf2d52cd4462451b18e1a479af2342f4df86897876d12efbaad341a8721339e1afd744d2f632313f4be6df37ab844bdf2a57d603e4f9e804880782dd1dc64cefdc52011be2cc0f13fc559e3eb46f275c457539ae6c2e74e41bd3c49fbf01559938546c22badc9624ff684283fbaef7ff2b826debd455704d14471543400adee160862095f7ce9f95200085a2e7ec54c4297226d00e9c0a84231eec4dd3d932a40a485335f92968e4087ab948c6df43c3fd149d8acc885bc9c234101d7bfdbe1456f488c62246558b6f4b196cc937471779fea060a65dd447619db7e2e53c3990bed8a314e007b595dd2cf82544d846f87f5c381f4857016f5fb7162f9db25e073dacf93533e3f2edc3db264d7cc5264087a2376da07f3cd70b4ed773bf94c65072b20f450f724acbe6dfa20b1d6de8cf4523c369013d37d9929da6b380839e5918e994c63fa9ffe51008de4cd9989bcf6e294fe8ed145f41250510e472c19559c156fe0845ca40dc6b7f7b9c33d9ddfa7f681c2c353381264470f42215b3da5edb8f827b2ca9d844507811711b54afb0238584f83abd6a2e13a69d205d9afc2e9617fb500f593b74cf9f5bf74a7a6d17f7ef40c90c27ec84fd8dfd0edc461d1cd47d677208ee532880741fa60ff2d2474f9ac67fbda418c8a32471daa1ea3d86d7e5735b10375fb47d2ffb8dfd8b3a6e12069c8c14074c7d0aa5fdb03734aa294896b0738dd4d57b2835d910a01e53e0f1afd15fb3af9ad75965dd9de527d65b8d53a58879ff9d5297630ca4d13ce653c0ee1da222162593e4aa365b60b987305bcef55c7c536426e74242d13b98446d4b2704b871e579796ba574b9ef3ef86aecc0f6945b223f6822c97eb007c5c674e05acf74e964c5fbafbd27fdbf7dbb8dc1c43b025e7672dd1d23a89fb65182f4a6a183676514be505be3452f3758448c12249177b449d16673a1e5518f84e741a3dfb6678e844d4758842f1b08a003956c6411fb95925cdbed3011f8bdc43548af32693bd7792b677fa5c76fb0eee432dd6030ce3e4d4948c928d759b6f6be5708fec571e72abb72d3596ddf67203f34b6753c85a58cfb44f7c3eeb49f7af8a74dd6118cfbd99e97af3853550e6e32aae58a65f3a6093b0a2262d296d52c4f404a3dc45be64e36fef05f45e1e10acda53c64030da9d7bc02c0dcdf7b33a7a1f69c83ee3da38db2b3de0d71d09399af821a445c38ac74d33d4491f2e18f058f700d142ea70388093ab70a4d3e54ce264926ff9fdee72430acdb41b8355b983cf0a1952d4c3f9650057ab3d7391344baabee4b67c31164f9ce692a302eb7d327a2b5521d7e8c138af66b8486582324eeb898a1d7fc31df60b8c6d42062e4d69a82fd8890473f26c8a15cd16227ac881310c821ad85e5bfcd8bdf9116e2c4609f17b862586b7ba86b5cff565924f4b325547f044ec4db12af8b022f50b849d4483723f73e38bd8201e8d2e4c2bb0aac97cd14a5582a6b4f022f1bceee5347e0b57245bbfa13a7bec1de2e944d848102b31735bd98e48345f2a41efbed437d1b78efabd8e02704e644c6a8ce9d16afddd0ea8d5cf77c028908eaf9a71e21fef77aa121eb941fe8474c3ca3223fd80955510cd3b2aca89690ea909db3bf2e6b3b21e7374491b1f51cc8155701ad28fed2d898cfa6e1a99fa3bd3757bd9512c167b205d2e303e9b88aee6573dde41f6da03e0473abe668a0bb8bbdcfea348e2df999cf036816c160f7cb0065eed1dfd090546c47389aeecda203d5c5057118792f8cc9b25b99029a9400296f24b04e4b08ecb14c59da1cb55d1edefed4b7e8b9ec04c924256bdd592869f81f313a59585d69a4ab35f2d3db1a6dff28e4dd708f4ff546ff8de12fa396b681c4d32eaf423c1392e2867a3850e1079b06f5fdf47b3f69cc05fb3f800f4eb8c60d8ccb4473bc502f54e85e95b3f03b3c8a87833c8198851ec0aee9f3459120b8234cfc1c9031a2602b97ef4a1913416e9f85b905044895ab4a980e92f6cd9fdaffd3a5a02938e05e4b3a424b99b12f98f2367cd0c090d9751cbdd4953752578b34d99e28ac70f9cc4a3f2ba05e9bc822f766cf6324ed204b28a242f9f0a9e632b81d18995c4432c0cea346fdf591a4a6522e242d681d9105f17474da851db77e99ac3e946d33db6b052a2eba6794627943af53781162bba20359d8562030538a63853cdb1d98949d6b0c219dacb9e120dc3f941f3ff2d0672d3b8d320aa3bbcad08b1c7a089250bd78ad03d6ef61129612dbc5e30fe153dbf53ae1f5e0cc3df6f1602ae2b79083d8c054c01aa2aed9caf55e351518bbe3742693211c17c5d91e215d428de92965a9c418c9553257b03c7701a043fd45b3e81c25ab8708eaf17002dd0a4a17c76fdb68d37c91d8f961bed6dd2722bba2289c373b615731de77c8579f4d2cbea18b56c21429e71e303d513242fb9d1027121bb7de4f03e7aac86b55274ec8c875ea040dd54ad99adb4a73f6773b83c47e2b6a1560654c0abdb70ba7ff47130040b650acd31e047e32451f3c2ebf000c2f39ae5e1913d74545f9d64737beb1185f772f4df9c27911abee1364a8035ac4a767a80571cd829577ca470fae1f74bf945f27afb82a4ad40e8980c041a385a9856c031911bfae6aef8a81bac32a00ebfc929025df579742ff9b3cdba948d4debc69b80e3c2219330ca6e8fc2fa79d6282508eaa19770c2685b50202feddc1cdde706527b5486cebe8d9851fa5b0e28010e8966e865e0c680076087600d18579818365c698638bd091cf7f3b92119adf1bc17d7495c115477d1b025fdacbdec533c04c05bc076f883ee8509e2e6f8bceb2874db3a7286827391967f11e3c43116e21349c0c7841a73ab63a57ac1764ccb4dc76a457abfefd2a56a93224d017b3e9b5c31e81784566d5cd89e8da476b80f5eb73dd89b962731d78f13d06aad39e48aaafc190e3b322f7eea6208d315faef778264b5c7fb3243a1e1c7533db7792409a409c1492af589b8d132d0ee610c974f0713d37cc1732cd68de211e3b4b63a79e95e9fe3577d7967a0eb20884567d6359d4b43fd9cec3142d7328904ee79042f98dca374b71afe250858d1f78d6642e9be9022b9c27de0e7eec50d588b0c3d3fcedc1507c4ec8a607776890e399260d6a43ca86b3062aaa5cb4cd70a73a46c28fe810a5a1e8db208b3c5f9268a4f82add8464cf0139b7487b6f624e726cd172aaa3736f2e215328a91c44fb58440a81398a18189e413b18e98d077eded306e54103b205aedddd74f2be487f519eb93f3087d7387886859426ffdcd46767829311a3522c9da11d4b78ce187bdf6359884ca8751c7a8e9e6d7bd51d6c1105ddda618d86a0988a70db35b61bbc56ebc848a14723ba2900e1adaab931ec1ef23ff3234e8a411f116d3c93a015efcf53aaeac6ec9fbc774723b5b9eea6c563490dd51b6f4671c26f369d6b3d213814fe7bef7a9945e4822f80396310d730a5125bc021a50ab1c9f717689039bf8ad674bd666422bd28f7bf3e63d2d310b175c2458fc5688fecaff602c19358e4751e19cc97513a0187a1d87e80228e2b3d643683689ff549ad3bfd2290cd8b051330f27dca191929c16b9621c9211f2d1670d1c58df6f0227b947ed30a88251f2919adeec862b599831af65ae8775299044e16d2798b3633dea800b56de4c52e3c60361a19e0c54a7a84c4da26a379ec44bef0d18abce8b4ed5e21b944a7d38124c0ddbaaa4105e532af95b4c78477daebd40ac57e1bbfd89bff8fe6af37838389579fe82b76f0d833b3922ee62dd0b"}, {0x44, 0x114, 0x5, "f9a4f026bea6bd8251240860b66bbc634e6a944a9d0710cbfb74f163006bdd893dabb1d4c902fcd416e975c316eecc6d90cc47036c14"}, {0x104, 0x10e, 0x80, "5b87294eb9517f335af54799859bb731a3044cbf9235cae5cc6251b715d0951bacf15bfad9403c8551f519220d5c50a0ba17d2e608dd404d66aa7da79a610344c394099b010af96df3fd1b186d571cf193fcf4595c66350706eb0735b4b6be626d624d6f4f1b94641b00de00535186f4920cd4713909941b8b4bd5424789bd7ed7342e8653498c9720b04c501533e993a92c1bf525ff7c7b2fbbe030b94107d0aa775cce72c8a9d4a05f5f2f8512275141daf0467fae0da3309cec92d65e4c0dda7b4464c86341ce5e8fe0fa4f801fe07cad779467cedf2ecb21382175440a5b1ef0ab59cc7e8780fe05d63b0d6e9858865c68e8c3"}, {0xa4, 0x102, 0x7, "8205cb1174e6124e3389c1a9839b4950f97195a5eee25c8410eaaeb5ab8f200756d76041e21c88dd75f6b0ff37c998b2defece042b66f8886c45c43eadcec629beb2cb94702816b4a8d54f371655ea81f1c514b35d2f516a49851ae26db7480bc98a3caa3d03ff7c1a8b20b0d13ea764964400459383caed1b5579d31324af016bbc26a4493170bc1ddd725901ecda11e92600ed6066"}, {0x100c, 0xff, 0x9, "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"}, {0xf8, 0x10f, 0x2, "d582619b15cc780ddc69d6d184517ed8a4b409e34aaa8d0ec26f44381fe469d78e5168159f4473762a4ae3dbd921c719c553871c0cd5ba46c269ecc3c3196019e83dccb4d8822304903186638c951d758cc000e04b942611e7c1bfb610c59c1a32e2ad04e67b7661fee0c4946b8b2d181385ab5fb60f105043ad089a8d8f5103b515776e76627fa91050da4d203bb03be1a4e3ccbb2b6eb563031c7f12630a61aab764f5640574d6cc250c254e60b8e678ff444dce889f875f5bc657b3883f39788390618a0c834566589a632a0a2ed2e51e15336acf9190e9187f9b5c0cd6b0b6110eb78b41e754af57e0"}, {0x4c, 0x118, 0x2, "4be6c43fec67682ffae5682719c0bf2192a8d70fb2163b589416a471cc35c55cbf14946358a02096492243d4521d6d44954d965fd54073c3c510a278103e"}, {0xb0, 0x1, 0x41, "b210701ff5c448c27826c44c74eea5642219e0e298998ba5715196589ac077bc68ffc02b58d75251dea823db90f1d517d55544d0d71738888c148a87538a9b1d842425ce5bb7400eab65c57e305536fe1617cf381e603dde8bab8dd2c9be3e6d44a869d5bbd8fcbaf060c9b9c82a1bbe0974d267ba30c451e9caca4cda1925c5c20f3ed60b2bd6d0d9e59d97c4044244c3c80bf4e2dc9c60ed41d9340410ab5a298267"}, {0xc0, 0x119, 0x3, "078242bb248c45e6b5125c871b9df0242b3a71e2eb23302c8f263d77104c2827963babb9d0c1ed5334fca673bd1c8ad1df795a15d1125df6afff99a28936dcbb0567ed6e26e73e69852cae2f1ee028662ad8a65ae7a6b19340d94fc86f942b8af2db9a93a9a12f0e5ea374b8e91d56e5c298903aa57a7cf864129881db2768ddeb3e50601d09a376026560144ded5bfa745aada527bd596f1c8bafb2d7f865607552b4e2d8ac41db317287d11451884249b5"}], 0x2580}}, {{&(0x7f0000000900)=@pppoe={0x18, 0x0, {0x0, @random="5e5fdcb4fa04", 'veth0\x00'}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="a1b21f80ca8dc736f1ec21d74e36", 0xe}], 0x1, &(0x7f0000000980)=[{0x9c, 0x109, 0x0, "1b3b271487ed3825545546f9d9407a6a445b46703d1c275540c0e73cce663449a8bf4fd257a82cf11612e4ed728882aaec2ae828ad28c33e85e421e9e23070feb52eae9dd2d7a4dcafd574243d60227760b8420dcc5880b5db0e4b3f34e646c7c6418f82bb09d239c8db18a37f349ecaaa6d805e87fefedff34225d04cd2bff0df279d8eb4d7fd5a84d843c2ad"}, {0x68, 0x102, 0x3, "ae7ad83d0107db40d9b778a6fcd97b47ff260d8224b23a76e80b50fbc0ea8e601fc085fd25b56689be74dbe2f017813842741804c553f7a20623f3eaad9561c677e7aed869c7377c1e9c46f4930616ccb1d51b45b3ba300221"}], 0x104}}], 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)
r6 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r7 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
accept4(r6, 0x0, 0x0, 0x0)
sendmmsg$inet6(r7, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000000500000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

25.617998ms ago: executing program 2 (id=962):
socket(0x10, 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0)
pipe2(&(0x7f0000000000), 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x40000000000})

0s ago: executing program 1 (id=963):
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x764)

kernel console output (not intermixed with test programs):

.669018][ T6313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   85.671826][ T6313] Call Trace:
[   85.672889][ T6313]  <TASK>
[   85.673702][ T6313]  dump_stack_lvl+0x16c/0x1f0
[   85.674941][ T6313]  should_fail_ex+0x497/0x5b0
[   85.676175][ T6313]  strncpy_from_user+0x3b/0x2a0
[   85.677432][ T6313]  getname_flags.part.0+0x8f/0x550
[   85.678693][ T6313]  getname_flags+0x93/0xf0
[   85.679860][ T6313]  user_path_at+0x24/0x60
[   85.680994][ T6313]  __ia32_sys_mount+0x1fb/0x310
[   85.682288][ T6313]  ? __pfx___ia32_sys_mount+0x10/0x10
[   85.683714][ T6313]  __do_fast_syscall_32+0x73/0x120
[   85.685059][ T6313]  do_fast_syscall_32+0x32/0x80
[   85.686350][ T6313]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   85.687997][ T6313] RIP: 0023:0xf741e579
[   85.689074][ T6313] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   85.694076][ T6313] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[   85.696257][ T6313] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0
[   85.698313][ T6313] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000020000280
[   85.700379][ T6313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   85.702441][ T6313] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   85.704518][ T6313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   85.706595][ T6313]  </TASK>
[   85.880855][ T6315] loop7: detected capacity change from 0 to 16384
[   86.101004][ T6315] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.105628][ T6315] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.108242][ T6315] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.110803][ T6315] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.128186][ T6315] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.136078][ T6315] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.145576][ T6315] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.148012][ T6315] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.179266][ T6315] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.189775][ T6315] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.235801][ T6315] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.241031][ T6315] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.254678][ T6315] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.258138][ T6315] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.273287][ T6315] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.278942][ T6315] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.292649][ T6315] ldm_validate_partition_table(): Disk read failed.
[   86.300862][ T6315] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.313090][ T6315] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.332003][ T6315] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.335792][ T6315] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.360721][ T6315] Dev loop7: unable to read RDB block 0
[   86.375735][ T6315]  loop7: unable to read partition table
[   86.381707][ T6315] loop_reread_partitions: partition scan of loop7 (K‹>¤i)ßí/480�• #Ð	…$qÝZ”©þ•I‘ŠçýÎ[†u±@3bÏàôüÏûj!5MMñ]
z) failed (rc=-5)
[   88.281761][   T34] sched: DL replenish lagged too much
[   91.902763][   T65] Bluetooth: hci5: Frame reassembly failed (-84)
[   92.044581][ T6356] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(46892692984438) <= P.seqno(0) <= S.SWH(46892692984512)) and (P.ackno exists or LAWL(59945875963999) <= P.ackno(59945875964000) <= S.AWH(59945875964000), sending SYNC...
[   93.915159][ T5355] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  102.318117][   T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  102.321386][   T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  102.323629][   T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  102.326353][   T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  102.329281][   T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  102.332129][   T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  102.370459][ T5355] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  102.378485][ T5355] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  102.381357][ T5355] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  102.383791][ T5355] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  102.387018][ T5355] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  102.389147][ T5355] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  102.961131][ T5355] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  102.964147][ T5355] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  102.967074][ T5355] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  102.974538][ T5355] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  102.976652][ T5355] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  102.978771][ T5355] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  103.509159][   T66] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  103.512102][   T66] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  103.514685][   T66] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  103.518553][   T66] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  103.520682][   T66] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  103.522623][   T66] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  104.405165][   T66] Bluetooth: hci0: command tx timeout
[  104.475063][   T66] Bluetooth: hci5: command tx timeout
[  105.035615][   T66] Bluetooth: hci6: command tx timeout
[  105.595176][   T66] Bluetooth: hci7: command tx timeout
[  106.475156][   T66] Bluetooth: hci0: command tx timeout
[  106.558658][   T66] Bluetooth: hci5: command tx timeout
[  107.115418][   T66] Bluetooth: hci6: command tx timeout
[  107.675607][   T66] Bluetooth: hci7: command tx timeout
[  108.555129][   T66] Bluetooth: hci0: command tx timeout
[  108.635072][   T66] Bluetooth: hci5: command tx timeout
[  109.195110][   T66] Bluetooth: hci6: command tx timeout
[  109.755189][   T66] Bluetooth: hci7: command tx timeout
[  110.635097][   T66] Bluetooth: hci0: command tx timeout
[  110.715072][   T66] Bluetooth: hci5: command tx timeout
[  111.275116][   T66] Bluetooth: hci6: command tx timeout
[  111.835093][   T66] Bluetooth: hci7: command tx timeout
[  132.243152][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  132.245515][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  141.671957][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'.
[  142.297513][ T6376] chnl_net:caif_netlink_parms(): no params data found
[  142.308401][ T6378] chnl_net:caif_netlink_parms(): no params data found
[  142.330391][ T1104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.333162][ T1104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  142.383501][ T6381] chnl_net:caif_netlink_parms(): no params data found
[  142.413913][ T6384] chnl_net:caif_netlink_parms(): no params data found
[  142.496593][ T1104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.500110][ T1104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  142.517183][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.519466][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.521349][ T6376] bridge_slave_0: entered allmulticast mode
[  142.523345][ T6376] bridge_slave_0: entered promiscuous mode
[  142.572679][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.574587][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.576588][ T6376] bridge_slave_1: entered allmulticast mode
[  142.578723][ T6376] bridge_slave_1: entered promiscuous mode
[  142.596329][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.598381][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.600350][ T6378] bridge_slave_0: entered allmulticast mode
[  142.602348][ T6378] bridge_slave_0: entered promiscuous mode
[  142.635328][ T1104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.638046][ T1104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  142.662701][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.665675][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.667599][ T6378] bridge_slave_1: entered allmulticast mode
[  142.669577][ T6378] bridge_slave_1: entered promiscuous mode
[  142.709516][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.712175][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.714836][ T6384] bridge_slave_0: entered allmulticast mode
[  142.719273][ T6384] bridge_slave_0: entered promiscuous mode
[  142.731351][ T6378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.740851][ T1104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.743540][ T1104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  142.759310][ T6381] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.761639][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.764008][ T6381] bridge_slave_0: entered allmulticast mode
[  142.767487][ T6381] bridge_slave_0: entered promiscuous mode
[  142.771189][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.774243][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.776660][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.778972][ T6384] bridge_slave_1: entered allmulticast mode
[  142.781524][ T6384] bridge_slave_1: entered promiscuous mode
[  142.793050][ T6378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.808944][ T6381] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.810791][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.812552][ T6381] bridge_slave_1: entered allmulticast mode
[  142.814431][ T6381] bridge_slave_1: entered promiscuous mode
[  142.829432][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.840892][ T6384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.871174][ T6384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.878260][ T6378] team0: Port device team_slave_0 added
[  142.880964][ T6381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.912308][ T6381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.925098][ T6378] team0: Port device team_slave_1 added
[  142.938848][ T6376] team0: Port device team_slave_0 added
[  142.942507][ T6384] team0: Port device team_slave_0 added
[  142.959945][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.961837][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.969950][ T6378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.975545][ T6376] team0: Port device team_slave_1 added
[  142.978644][ T6384] team0: Port device team_slave_1 added
[  142.982532][ T6381] team0: Port device team_slave_0 added
[  142.985264][ T6381] team0: Port device team_slave_1 added
[  142.987323][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.989774][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.999176][ T6378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.052740][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.054577][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.061130][ T6376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.083525][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.085444][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.091973][ T6384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.095563][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.097368][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.103928][ T6384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.107769][ T6381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.109832][ T6381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.117455][ T6381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.121419][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.123234][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.131415][ T6376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.144162][ T6381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.146978][ T6381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.153769][ T6381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.184770][ T1104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.187651][ T1104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  143.236232][ T6378] hsr_slave_0: entered promiscuous mode
[  143.238215][ T6378] hsr_slave_1: entered promiscuous mode
[  143.240035][ T6378] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.242043][ T6378] Cannot create hsr debugfs directory
[  143.275617][ T6384] hsr_slave_0: entered promiscuous mode
[  143.277495][ T6384] hsr_slave_1: entered promiscuous mode
[  143.279245][ T6384] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.281189][ T6384] Cannot create hsr debugfs directory
[  143.284403][ T6376] hsr_slave_0: entered promiscuous mode
[  143.286935][ T6376] hsr_slave_1: entered promiscuous mode
[  143.288707][ T6376] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.290713][ T6376] Cannot create hsr debugfs directory
[  143.341361][ T6381] hsr_slave_0: entered promiscuous mode
[  143.343755][ T6381] hsr_slave_1: entered promiscuous mode
[  143.345773][ T6381] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.347742][ T6381] Cannot create hsr debugfs directory
[  143.377513][ T1104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.380222][ T1104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  143.519581][ T1104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.522637][ T1104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  143.634288][ T1104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.637886][ T1104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  143.739190][ T1104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.741946][ T1104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  143.842877][ T1104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.845639][ T1104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  143.990551][ T1104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.993317][ T1104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  144.107378][ T1104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.110054][ T1104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  144.238695][ T1104] bridge_slave_1: left allmulticast mode
[  144.240310][ T1104] bridge_slave_1: left promiscuous mode
[  144.242679][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.246914][ T1104] bridge_slave_0: left allmulticast mode
[  144.248387][ T1104] bridge_slave_0: left promiscuous mode
[  144.249896][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.254190][ T1104] bridge_slave_1: left allmulticast mode
[  144.256619][ T1104] bridge_slave_1: left promiscuous mode
[  144.258140][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.261424][ T1104] bridge_slave_0: left allmulticast mode
[  144.262918][ T1104] bridge_slave_0: left promiscuous mode
[  144.264405][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.781260][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.786565][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.789941][ T1104] bond0 (unregistering): Released all slaves
[  144.848956][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.852488][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.856008][ T1104] bond0 (unregistering): Released all slaves
[  144.916491][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.920240][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.923570][ T1104] bond0 (unregistering): Released all slaves
[  144.970037][ T6378] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  145.062508][ T6378] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  145.068930][ T6378] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  145.104309][ T6378] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  145.196853][ T6378] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.206201][ T6378] 8021q: adding VLAN 0 to HW filter on device team0
[  145.229182][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.230920][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.242742][ T6378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  145.246184][ T6378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.250898][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.253324][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.331933][ T6378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.381568][ T6378] veth0_vlan: entered promiscuous mode
[  145.385815][ T6378] veth1_vlan: entered promiscuous mode
[  145.400185][ T6378] veth0_macvtap: entered promiscuous mode
[  145.407621][ T6378] veth1_macvtap: entered promiscuous mode
[  145.418401][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.421152][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.423688][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.426566][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.429135][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.431826][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.434356][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.437186][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.439731][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.442335][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.445637][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.464734][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.468395][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.471571][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.474901][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.477674][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.480093][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.482353][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.484684][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.488169][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.491597][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.495967][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.513642][ T6378] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.517981][ T6378] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.520839][ T6378] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.523690][ T6378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.549835][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.551969][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.583945][  T210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.587297][  T210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.925253][ T1104] hsr_slave_0: left promiscuous mode
[  145.934595][ T1104] hsr_slave_1: left promiscuous mode
[  145.937429][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.939782][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.942446][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.944501][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.954269][ T1104] hsr_slave_0: left promiscuous mode
[  145.956631][ T1104] hsr_slave_1: left promiscuous mode
[  145.958681][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.960693][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.963010][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.965984][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.970275][ T1104] hsr_slave_0: left promiscuous mode
[  145.972148][ T1104] hsr_slave_1: left promiscuous mode
[  145.976547][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.978668][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.981196][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.983202][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.039103][ T1104] veth1_macvtap: left promiscuous mode
[  146.040910][ T1104] veth0_macvtap: left promiscuous mode
[  146.042485][ T1104] veth1_vlan: left promiscuous mode
[  146.043985][ T1104] veth0_vlan: left promiscuous mode
[  146.048982][ T1104] veth1_macvtap: left promiscuous mode
[  146.050593][ T1104] veth0_macvtap: left promiscuous mode
[  146.052120][ T1104] veth1_vlan: left promiscuous mode
[  146.054094][ T1104] veth0_vlan: left promiscuous mode
[  146.057869][ T1104] veth1_macvtap: left promiscuous mode
[  146.059507][ T1104] veth0_macvtap: left promiscuous mode
[  146.061072][ T1104] veth1_vlan: left promiscuous mode
[  146.062665][ T1104] veth0_vlan: left promiscuous mode
[  146.724565][ T1104] team0 (unregistering): Port device team_slave_1 removed
[  146.785577][ T1104] team0 (unregistering): Port device team_slave_0 removed
[  147.949852][ T1104] team0 (unregistering): Port device team_slave_1 removed
[  148.009111][ T1104] team0 (unregistering): Port device team_slave_0 removed
[  149.002426][ T1104] team0 (unregistering): Port device team_slave_1 removed
[  149.079657][ T1104] team0 (unregistering): Port device team_slave_0 removed
[  149.716383][ T6520] netlink: 'syz.2.228': attribute type 4 has an invalid length.
[  149.725764][ T6521] netlink: 'syz.2.228': attribute type 4 has an invalid length.
[  149.849788][ T6381] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.853398][ T6381] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  149.942001][ T6381] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.944707][ T6381] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  150.120483][ T6381] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.124094][ T6381] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  150.224100][ T6381] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.227107][ T6381] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  150.359865][ T6381] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  150.368240][ T6381] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  150.374168][ T6381] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  150.384685][ T6381] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  150.403244][ T6384] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  150.436830][ T6384] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  150.440344][ T6384] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  150.444882][ T6384] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  150.453187][ T6376] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  150.456217][ T6376] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  150.460169][ T6376] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  150.463197][ T6376] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  150.553841][ T6384] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.562497][ T6381] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.584705][ T6384] 8021q: adding VLAN 0 to HW filter on device team0
[  150.591821][ T6381] 8021q: adding VLAN 0 to HW filter on device team0
[  150.600427][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.602304][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.630257][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.633443][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.635387][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.638565][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.640414][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.642846][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.644677][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.680122][ T6376] 8021q: adding VLAN 0 to HW filter on device team0
[  150.698560][ T6384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  150.701258][ T6384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.710397][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.712262][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.735841][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.737729][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.776921][ T6376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.831401][ T6384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.883969][ T6384] veth0_vlan: entered promiscuous mode
[  150.888792][ T6384] veth1_vlan: entered promiscuous mode
[  150.912365][ T6384] veth0_macvtap: entered promiscuous mode
[  150.917422][ T6376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.921753][ T6384] veth1_macvtap: entered promiscuous mode
[  150.927539][ T6381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.949169][ T1104] bridge_slave_1: left allmulticast mode
[  150.950706][ T1104] bridge_slave_1: left promiscuous mode
[  150.952219][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.956139][ T1104] bridge_slave_0: left allmulticast mode
[  150.957623][ T1104] bridge_slave_0: left promiscuous mode
[  150.959142][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.315558][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.320221][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.324323][ T1104] bond0 (unregistering): Released all slaves
[  151.330609][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.334100][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.337736][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.341137][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.343810][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.347288][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.350524][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.356469][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.359176][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.361803][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.364465][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.368439][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.372022][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.381047][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.385784][ T6384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.388043][ T6384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.390297][ T6384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.392551][ T6384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.454351][ T6376] veth0_vlan: entered promiscuous mode
[  151.474005][ T6381] veth0_vlan: entered promiscuous mode
[  151.492266][ T6376] veth1_vlan: entered promiscuous mode
[  151.506317][ T6381] veth1_vlan: entered promiscuous mode
[  151.567317][ T6381] veth0_macvtap: entered promiscuous mode
[  151.570842][ T6381] veth1_macvtap: entered promiscuous mode
[  151.575394][  T210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.581648][  T210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.584865][ T6376] veth0_macvtap: entered promiscuous mode
[  151.604793][ T1104] hsr_slave_0: left promiscuous mode
[  151.607277][ T1104] hsr_slave_1: left promiscuous mode
[  151.609249][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.611186][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.618958][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.621182][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.639727][ T1104] veth1_macvtap: left promiscuous mode
[  151.641207][ T1104] veth0_macvtap: left promiscuous mode
[  151.642686][ T1104] veth1_vlan: left promiscuous mode
[  151.644182][ T1104] veth0_vlan: left promiscuous mode
[  152.194339][ T1104] team0 (unregistering): Port device team_slave_1 removed
[  152.254941][ T1104] team0 (unregistering): Port device team_slave_0 removed
[  152.721128][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.723905][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.726673][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.730482][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.734409][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.738402][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.746357][ T6381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.770222][ T6376] veth1_macvtap: entered promiscuous mode
[  152.773940][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.779206][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.781787][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.784444][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.787385][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.790096][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.793331][ T6381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.798571][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.803839][ T6381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.806478][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.808764][ T6381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.811013][ T6381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.813938][ T6381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.835881][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.839436][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.842723][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.847365][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.849944][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.852607][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.858056][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.861830][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.868025][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.893571][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.901171][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.905170][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.907857][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.910343][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.915799][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.918254][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.920914][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.924156][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.928131][ T6376] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.930513][ T6376] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.932794][ T6376] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.937087][ T6376] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.985542][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.997653][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.028915][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.031029][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.034809][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.037688][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.081173][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.083252][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.552133][ T1104] Bluetooth: hci2: Frame reassembly failed (-84)
[  154.046218][ T6641] ubi0: attaching mtd0
[  154.055378][ T6641] ubi0: scanning is finished
[  154.057186][ T6641] ubi0: empty MTD device detected
[  154.165082][ T6641] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  154.177447][ T6641] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  154.179389][ T6641] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  154.181190][ T6641] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  154.183164][ T6641] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  154.204152][ T6641] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  154.217969][ T6641] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2411134550
[  154.225050][ T6641] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  154.229041][ T6642] ubi0: detaching mtd0
[  154.234308][ T6642] ubi0: mtd0 is detached
[  154.855292][ T6643] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  154.857337][ T6643] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  154.866717][ T6643] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  154.871771][ T6643] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  154.881744][ T6643] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  154.926496][ T6643] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  154.937496][ T6643] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  154.939814][ T6643] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  154.944122][ T6643] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  154.948810][ T6643] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  154.950412][ T6643] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  154.953669][ T6643] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  154.957344][ T6643] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  154.958932][ T6643] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  154.961569][ T6643] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  155.013652][ T6657] 9pnet_fd: Insufficient options for proto=fd
[  155.195205][   T66] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  156.235149][   T66] Bluetooth: hci1: command 0x0c1a tx timeout
[  156.511126][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'.
[  156.875113][   T66] Bluetooth: hci0: command 0x0c1a tx timeout
[  156.955463][   T66] Bluetooth: hci6: command 0x0c1a tx timeout
[  156.957110][   T66] Bluetooth: hci5: command 0x0c1a tx timeout
[  157.026790][ T6721] 9pnet_fd: Insufficient options for proto=fd
[  157.035205][   T66] Bluetooth: hci7: command 0x0c1a tx timeout
[  157.305701][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.252'.
[  157.310654][ T6738] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  157.312955][ T6738] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  157.328470][ T6738] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  157.331361][ T6738] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  157.334134][ T6738] geneve2: entered allmulticast mode
[  158.294752][ T6757] 9pnet_fd: Insufficient options for proto=fd
[  158.325375][   T66] Bluetooth: hci1: command 0x0c1a tx timeout
[  158.835402][ T2790] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  158.955687][   T66] Bluetooth: hci0: command 0x0c1a tx timeout
[  159.005110][ T2790] usb 6-1: Using ep0 maxpacket: 8
[  159.008338][ T2790] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  159.013404][ T2790] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  159.016871][ T2790] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  159.021600][ T2790] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  159.028136][ T2790] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  159.030963][ T2790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.035307][   T66] Bluetooth: hci5: command 0x0c1a tx timeout
[  159.036897][   T66] Bluetooth: hci6: command 0x0c1a tx timeout
[  159.125106][ T5355] Bluetooth: hci7: command 0x0c1a tx timeout
[  159.295773][   T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  159.392711][ T2790] usb 6-1: usb_control_msg returned -71
[  159.394287][ T2790] usbtmc 6-1:16.0: can't read capabilities
[  159.407383][ T2790] usb 6-1: USB disconnect, device number 5
[  159.465088][   T30] usb 5-1: Using ep0 maxpacket: 8
[  159.470119][   T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  159.472733][   T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  159.475414][   T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  159.478039][   T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  159.481465][   T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  159.483898][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.620849][ T6774] 9pnet_fd: Insufficient options for proto=fd
[  159.700893][   T30] usb 5-1: usb_control_msg returned -71
[  159.702433][   T30] usbtmc 5-1:16.0: can't read capabilities
[  159.708629][   T30] usb 5-1: USB disconnect, device number 6
[  160.275605][ T2790] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  160.395522][ T5355] Bluetooth: hci1: command 0x0c1a tx timeout
[  160.797537][ T2790] usb 6-1: Using ep0 maxpacket: 8
[  160.801815][ T2790] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  160.804459][ T2790] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  160.807098][ T2790] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  160.809701][ T2790] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  160.813118][ T2790] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  160.848282][ T2790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.038760][ T5355] Bluetooth: hci0: command 0x0c1a tx timeout
[  161.115105][ T5355] Bluetooth: hci6: command 0x0c1a tx timeout
[  161.116816][ T2790] usb 6-1: usb_control_msg returned -71
[  161.117866][ T5355] Bluetooth: hci5: command 0x0c1a tx timeout
[  161.118300][ T2790] usbtmc 6-1:16.0: can't read capabilities
[  161.136985][ T2790] usb 6-1: USB disconnect, device number 6
[  161.195212][   T66] Bluetooth: hci7: command 0x0c1a tx timeout
[  162.060772][ T6822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.273'.
[  162.069383][ T6822] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  162.072623][ T6822] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  162.076414][ T6822] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  162.078720][ T6822] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  162.128118][ T6822] geneve2: entered allmulticast mode
[  162.237993][ T6455] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  162.615097][ T6455] usb 8-1: Using ep0 maxpacket: 8
[  162.617787][ T6455] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  162.620399][ T6455] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  162.622976][ T6455] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  162.625799][ T6455] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  162.631126][ T6455] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  162.633490][ T6455] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.849197][ T6455] usb 8-1: usb_control_msg returned -71
[  162.851588][ T6455] usbtmc 8-1:16.0: can't read capabilities
[  162.862028][ T6455] usb 8-1: USB disconnect, device number 5
[  162.949033][ T6843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.276'.
[  163.808829][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.279'.
[  163.812835][ T6863] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  163.815453][ T6863] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  163.817904][ T6863] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  163.820346][ T6863] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  163.823384][ T6863] geneve2: entered allmulticast mode
[  165.815093][   T57] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  166.102950][ T6910] 9pnet_fd: Insufficient options for proto=fd
[  166.155192][   T57] usb 7-1: Using ep0 maxpacket: 8
[  166.161176][   T57] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  166.163761][   T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  166.166709][   T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  166.169151][   T57] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.172554][   T57] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  166.176367][   T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.420967][   T57] usb 7-1: usb_control_msg returned -71
[  166.426268][   T57] usbtmc 7-1:16.0: can't read capabilities
[  166.468461][   T57] usb 7-1: USB disconnect, device number 7
[  166.607324][   T11] Bluetooth: hci2: Frame reassembly failed (-84)
[  167.589476][ T6949] 9pnet_fd: Insufficient options for proto=fd
[  167.640139][ T6950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.305'.
[  167.644183][ T6950] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  167.646887][ T6950] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  167.649253][ T6950] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  167.651545][ T6950] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  167.653948][ T6950] geneve2: entered allmulticast mode
[  168.636066][   T66] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  168.735034][ T5355] Bluetooth: hci2: command 0x1003 tx timeout
[  169.142592][ T6983] 9pnet_fd: Insufficient options for proto=fd
[  169.457890][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.308'.
[  170.225348][   T65] Bluetooth: hci2: Frame reassembly failed (-84)
[  171.007554][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.314'.
[  172.095082][ T7060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'.
[  172.235126][ T4780] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  173.064590][ T7075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.323'.
[  173.881956][ T7090] 9pnet_fd: Insufficient options for proto=fd
[  173.968042][ T1139] Bluetooth: hci2: Frame reassembly failed (-84)
[  173.969839][ T1139] Bluetooth: hci2: Frame reassembly failed (-84)
[  173.971574][ T1139] Bluetooth: hci2: Frame reassembly failed (-84)
[  174.769601][ T7115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.333'.
[  175.995142][   T66] Bluetooth: hci2: command 0x1003 tx timeout
[  175.997828][ T4780] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  179.727461][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.366'.
[  181.917805][ T7298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.373'.
[  185.661276][   T39] kauditd_printk_skb: 20 callbacks suppressed
[  185.661292][   T39] audit: type=1326 audit(1728126532.455:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000
[  185.672644][   T39] audit: type=1326 audit(1728126532.455:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000
[  185.680111][   T39] audit: type=1326 audit(1728126532.455:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.395" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f41579 code=0x7ffc0000
[  185.690849][   T39] audit: type=1326 audit(1728126532.455:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000
[  185.698431][   T39] audit: type=1326 audit(1728126532.455:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000
[  185.704676][   T39] audit: type=1326 audit(1728126532.455:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.395" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7f41579 code=0x7ffc0000
[  185.749299][   T39] audit: type=1326 audit(1728126532.455:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000
[  185.754952][   T39] audit: type=1326 audit(1728126532.455:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000
[  185.763316][   T39] audit: type=1326 audit(1728126532.455:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.395" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f41579 code=0x7ffc0000
[  185.770085][   T39] audit: type=1326 audit(1728126532.455:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000
[  185.874434][ T7397] Bluetooth: MGMT ver 1.23
[  190.629368][ T7549] 9pnet_fd: Insufficient options for proto=fd
[  192.013569][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.432'.
[  193.595897][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  193.598413][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  194.528255][ T7653] capability: warning: `syz.3.447' uses 32-bit capabilities (legacy support in use)
[  195.276932][ T7657] FAULT_INJECTION: forcing a failure.
[  195.276932][ T7657] name failslab, interval 1, probability 0, space 0, times 0
[  195.280194][ T7657] CPU: 3 UID: 0 PID: 7657 Comm: syz.1.449 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  195.282870][ T7657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  195.285677][ T7657] Call Trace:
[  195.286567][ T7657]  <TASK>
[  195.287347][ T7657]  dump_stack_lvl+0x16c/0x1f0
[  195.288609][ T7657]  should_fail_ex+0x497/0x5b0
[  195.289869][ T7657]  ? fs_reclaim_acquire+0xae/0x160
[  195.291209][ T7657]  should_failslab+0xc2/0x120
[  195.292456][ T7657]  __kmalloc_cache_noprof+0x6b/0x310
[  195.293846][ T7657]  ? fuse_get_tree+0x78/0x600
[  195.295085][ T7657]  fuse_get_tree+0x78/0x600
[  195.296274][ T7657]  ? security_capable+0x7e/0x260
[  195.297582][ T7657]  vfs_get_tree+0x8f/0x380
[  195.298752][ T7657]  path_mount+0x6e1/0x1f10
[  195.299927][ T7657]  ? kmem_cache_free+0x152/0x4b0
[  195.301241][ T7657]  ? __pfx_path_mount+0x10/0x10
[  195.302526][ T7657]  ? putname+0x12e/0x170
[  195.303645][ T7657]  __ia32_sys_mount+0x292/0x310
[  195.304931][ T7657]  ? __pfx___ia32_sys_mount+0x10/0x10
[  195.306341][ T7657]  __do_fast_syscall_32+0x73/0x120
[  195.307692][ T7657]  do_fast_syscall_32+0x32/0x80
[  195.308971][ T7657]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  195.310724][ T7657] RIP: 0023:0xf742e579
[  195.311821][ T7657] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  195.316891][ T7657] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  195.319076][ T7657] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000180
[  195.321143][ T7657] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000020000600
[  195.323218][ T7657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  195.325367][ T7657] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  195.327413][ T7657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  195.329503][ T7657]  </TASK>
[  195.507797][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.448'.
[  196.113262][ T7676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.452'.
[  199.616355][ T7755] FAULT_INJECTION: forcing a failure.
[  199.616355][ T7755] name failslab, interval 1, probability 0, space 0, times 0
[  199.622902][ T7755] CPU: 1 UID: 0 PID: 7755 Comm: syz.0.474 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  199.626485][ T7755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  199.630081][ T7755] Call Trace:
[  199.631213][ T7755]  <TASK>
[  199.632227][ T7755]  dump_stack_lvl+0x16c/0x1f0
[  199.633855][ T7755]  should_fail_ex+0x497/0x5b0
[  199.635475][ T7755]  ? fs_reclaim_acquire+0xae/0x160
[  199.637229][ T7755]  should_failslab+0xc2/0x120
[  199.638831][ T7755]  __kmalloc_cache_noprof+0x6b/0x310
[  199.640630][ T7755]  ? netlbl_mgmt_add_common+0x987/0x1830
[  199.642525][ T7755]  ? nla_strscpy+0x140/0x190
[  199.644094][ T7755]  netlbl_mgmt_add_common+0x987/0x1830
[  199.645960][ T7755]  netlbl_mgmt_add+0x24d/0x3b0
[  199.647597][ T7755]  ? __pfx_netlbl_mgmt_add+0x10/0x10
[  199.649401][ T7755]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  199.651888][ T7755]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  199.654379][ T7755]  genl_family_rcv_msg_doit+0x202/0x2f0
[  199.656250][ T7755]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  199.658319][ T7755]  ? bpf_lsm_capable+0x9/0x10
[  199.659927][ T7755]  ? security_capable+0x7e/0x260
[  199.661630][ T7755]  genl_rcv_msg+0x565/0x800
[  199.663182][ T7755]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.664894][ T7755]  ? __pfx_netlbl_mgmt_add+0x10/0x10
[  199.666702][ T7755]  ? __pfx___lock_acquire+0x10/0x10
[  199.668470][ T7755]  netlink_rcv_skb+0x165/0x410
[  199.670103][ T7755]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.671814][ T7755]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  199.673621][ T7755]  ? down_read+0xc9/0x330
[  199.675105][ T7755]  ? __pfx_down_read+0x10/0x10
[  199.676744][ T7755]  ? netlink_deliver_tap+0x1ae/0xcf0
[  199.678552][ T7755]  genl_rcv+0x28/0x40
[  199.679910][ T7755]  netlink_unicast+0x53c/0x7f0
[  199.681553][ T7755]  ? __pfx_netlink_unicast+0x10/0x10
[  199.683339][ T7755]  ? __phys_addr_symbol+0x30/0x80
[  199.685053][ T7755]  ? __check_object_size+0x488/0x710
[  199.686850][ T7755]  netlink_sendmsg+0x8b8/0xd70
[  199.688470][ T7755]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.690260][ T7755]  ? lock_acquire+0x2f/0xb0
[  199.691812][ T7755]  ____sys_sendmsg+0x9ae/0xb40
[  199.693456][ T7755]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.695253][ T7755]  ? get_compat_msghdr+0x11b/0x170
[  199.696990][ T7755]  ? __pfx___lock_acquire+0x10/0x10
[  199.698785][ T7755]  ___sys_sendmsg+0x135/0x1e0
[  199.700389][ T7755]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.702171][ T7755]  ? lock_acquire+0x2f/0xb0
[  199.703722][ T7755]  ? __fget_files+0x40/0x3f0
[  199.705322][ T7755]  ? fdget+0x176/0x210
[  199.706702][ T7755]  __sys_sendmsg+0x117/0x1f0
[  199.708289][ T7755]  ? __pfx___sys_sendmsg+0x10/0x10
[  199.710090][ T7755]  ? __fget_files+0x244/0x3f0
[  199.711696][ T7755]  __do_fast_syscall_32+0x73/0x120
[  199.713449][ T7755]  do_fast_syscall_32+0x32/0x80
[  199.715105][ T7755]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  199.717256][ T7755] RIP: 0023:0xf73fe579
[  199.718357][ T7755] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  199.724794][ T7755] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  199.727602][ T7755] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000480
[  199.730248][ T7755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  199.732896][ T7755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  199.735549][ T7755] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  199.738202][ T7755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  199.740851][ T7755]  </TASK>
[  199.995076][ T6455] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  200.155070][ T6455] usb 5-1: Using ep0 maxpacket: 8
[  200.159150][ T6455] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  200.162351][ T6455] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  200.175297][ T6455] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  200.180445][ T6455] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  200.184733][ T6455] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  200.188333][ T6455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.419876][ T6455] usb 5-1: usb_control_msg returned -71
[  200.422036][ T6455] usbtmc 5-1:16.0: can't read capabilities
[  200.425382][ T6455] usb 5-1: USB disconnect, device number 7
[  200.525168][ T5387] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  200.965165][ T5387] usb 6-1: Using ep0 maxpacket: 8
[  200.967706][ T5387] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  200.970358][ T5387] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  200.972884][ T5387] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  200.975508][ T5387] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  200.979215][ T5387] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  200.981674][ T5387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.194505][ T5387] usb 6-1: usb_control_msg returned -71
[  201.196146][ T5387] usbtmc 6-1:16.0: can't read capabilities
[  201.206091][ T5387] usb 6-1: USB disconnect, device number 7
[  201.215539][ T7785] input: syz0 as /devices/virtual/input/input6
[  201.217410][ T7785] input: failed to attach handler leds to device input6, error: -6
[  201.505312][ T5876] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  201.665399][ T5876] usb 7-1: Using ep0 maxpacket: 8
[  201.669068][ T5876] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  201.672412][ T5876] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  201.676002][ T5876] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  201.679675][ T5876] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  201.684118][ T5876] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  201.687328][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.894941][ T5876] usb 7-1: usb_control_msg returned -71
[  201.897202][ T5876] usbtmc 7-1:16.0: can't read capabilities
[  201.904077][ T5876] usb 7-1: USB disconnect, device number 8
[  202.102100][ T4780] Bluetooth: hci6: ACL packet for unknown connection handle 201
[  202.297199][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.485'.
[  202.304218][ T7810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.484'.
[  203.258935][ T7832] bridge0: port 3(syz_tun) entered blocking state
[  203.268887][ T7832] bridge0: port 3(syz_tun) entered disabled state
[  203.270806][ T7832] syz_tun: entered allmulticast mode
[  203.273312][ T7832] syz_tun: entered promiscuous mode
[  203.275541][ T7832] bridge0: port 3(syz_tun) entered blocking state
[  203.277495][ T7832] bridge0: port 3(syz_tun) entered forwarding state
[  203.413017][   T39] kauditd_printk_skb: 44 callbacks suppressed
[  203.413029][   T39] audit: type=1326 audit(1728126550.205:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.0.493" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0
[  203.849590][ T7853] kAFS: unparsable volume name
[  203.885160][   T11] Bluetooth: hci2: Frame reassembly failed (-84)
[  204.028208][ T7860] dccp_close: ABORT with 32 bytes unread
[  204.165062][ T4780] Bluetooth: hci6: command 0x0c1a tx timeout
[  205.129623][ T7897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.503'.
[  205.915131][ T4780] Bluetooth: hci2: command 0x1003 tx timeout
[  205.917778][   T66] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  206.528753][ T7929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.510'.
[  206.715074][   T56] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  206.885062][   T56] usb 8-1: Using ep0 maxpacket: 8
[  206.890331][   T56] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  206.892866][   T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  206.895728][   T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  206.898427][   T56] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  206.902032][   T56] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  206.904516][   T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.071574][   T63] IPVS: starting estimator thread 0...
[  207.141586][   T56] usb 8-1: usb_control_msg returned -71
[  207.143101][   T56] usbtmc 8-1:16.0: can't read capabilities
[  207.150531][   T56] usb 8-1: USB disconnect, device number 6
[  207.165423][ T7942] IPVS: using max 36 ests per chain, 86400 per kthread
[  207.267092][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.513'.
[  208.476994][   T11] Bluetooth: hci2: Frame reassembly failed (-84)
[  208.545129][   T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  208.715305][   T56] usb 8-1: Using ep0 maxpacket: 32
[  208.722868][   T56] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  208.728400][   T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.734313][   T56] usb 8-1: config 0 descriptor??
[  208.747324][   T56] gspca_main: nw80x-2.14.0 probing 055f:d001
[  208.894370][   T39] audit: type=1326 audit(1728126555.685:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.1.522" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x0
[  208.998108][ T7984] netlink: 104 bytes leftover after parsing attributes in process `syz.1.522'.
[  209.016163][ T7984] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  209.018642][ T7984] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  209.022190][ T7984] vhci_hcd vhci_hcd.0: Device attached
[  209.027653][ T7985] vhci_hcd: cannot find a urb of seqnum 1024 max seqnum 0
[  209.030682][ T1104] vhci_hcd: stop threads
[  209.031906][ T1104] vhci_hcd: release socket
[  209.033123][ T1104] vhci_hcd: disconnect device
[  209.269706][   T56] gspca_nw80x: reg_r err -71
[  209.271036][   T56] nw80x 8-1:0.0: probe with driver nw80x failed with error -71
[  209.289014][   T56] usb 8-1: USB disconnect, device number 7
[  209.562359][ T7994] kAFS: unparsable volume name
[  210.555150][ T4780] Bluetooth: hci2: command 0x1003 tx timeout
[  210.557628][   T66] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  210.646220][   T66] Bluetooth: hci5: Malformed Event: 0x2f
[  210.658865][ T8020] binder: 8016:8020 ioctl 541b 0 returned -22
[  212.021431][   T11] Bluetooth: hci2: Frame reassembly failed (-84)
[  212.023400][   T11] Bluetooth: hci2: Frame reassembly failed (-84)
[  212.031341][   T11] Bluetooth: hci2: Frame reassembly failed (-84)
[  212.108480][   T65] Bluetooth: hci3: Frame reassembly failed (-84)
[  213.149404][ T8087] IPVS: rr: TCP 172.20.20.170:0 - no destination available
[  214.075418][   T66] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  214.075446][ T5355] Bluetooth: hci2: command 0x1003 tx timeout
[  214.155201][   T66] Bluetooth: hci3: command 0x1003 tx timeout
[  214.158399][ T4780] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  214.615064][   T35] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  214.783587][   T35] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  214.786169][   T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.788822][   T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  214.792199][   T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.800258][ T8099] process 'syz.3.551' launched './file0' with NULL argv: empty string added
[  214.803300][   T35] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  214.828121][   T35] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  214.845127][   T35] usb 7-1: Product: syz
[  214.849194][   T35] usb 7-1: Manufacturer: syz
[  214.879355][   T35] cdc_wdm 7-1:1.0: skipping garbage
[  214.881206][   T35] cdc_wdm 7-1:1.0: skipping garbage
[  214.888919][   T35] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  214.890988][   T35] cdc_wdm 7-1:1.0: Unknown control protocol
[  214.976604][ T8141] IPVS: rr: TCP 172.20.20.170:0 - no destination available
[  215.088344][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  215.090219][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  215.092067][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  215.093917][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  215.096132][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  215.098121][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  215.100144][   T35] usb 7-1: USB disconnect, device number 9
[  215.101901][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  215.101912][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  215.101919][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  215.323574][ T8116] netlink: 40 bytes leftover after parsing attributes in process `syz.2.553'.
[  216.136241][ T8157] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  217.275966][ T8202] Illegal XDP return value 4294967282 on prog  (id 62) dev N/A, expect packet loss!
[  217.513869][ T8208] FAULT_INJECTION: forcing a failure.
[  217.513869][ T8208] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.518355][ T8208] CPU: 1 UID: 0 PID: 8208 Comm: syz.2.575 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  217.522012][ T8208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  217.525733][ T8208] Call Trace:
[  217.526912][ T8208]  <TASK>
[  217.527952][ T8208]  dump_stack_lvl+0x16c/0x1f0
[  217.529616][ T8208]  should_fail_ex+0x497/0x5b0
[  217.531236][ T8208]  _copy_to_user+0x30/0xc0
[  217.532792][ T8208]  fanotify_read+0x66f/0x2400
[  217.534188][ T8208]  ? __pfx___lock_acquire+0x10/0x10
[  217.535718][ T8208]  ? __pfx_aa_file_perm+0x10/0x10
[  217.537491][ T8208]  ? __pfx_fanotify_read+0x10/0x10
[  217.539285][ T8208]  ? find_held_lock+0x2d/0x110
[  217.540958][ T8208]  ? copy_compat_iovec_from_user+0x138/0x180
[  217.543073][ T8208]  ? import_ubuf+0x1a4/0x200
[  217.544740][ T8208]  ? __pfx_woken_wake_function+0x10/0x10
[  217.546700][ T8208]  ? bpf_lsm_file_permission+0x9/0x10
[  217.548588][ T8208]  ? security_file_permission+0x71/0x210
[  217.550543][ T8208]  ? __pfx_fanotify_read+0x10/0x10
[  217.552340][ T8208]  vfs_readv+0x6bf/0x890
[  217.553774][ T8208]  ? find_held_lock+0x2d/0x110
[  217.555185][ T8208]  ? __pfx_vfs_readv+0x10/0x10
[  217.556629][ T8208]  ? find_held_lock+0x2d/0x110
[  217.557898][ T8208]  ? __pfx_lock_release+0x10/0x10
[  217.559212][ T8208]  ? trace_lock_acquire+0x14a/0x1d0
[  217.560898][ T8208]  ? __fget_files+0x244/0x3f0
[  217.562591][ T8208]  ? do_readv+0x137/0x370
[  217.564133][ T8208]  do_readv+0x137/0x370
[  217.565652][ T8208]  ? __pfx_do_readv+0x10/0x10
[  217.567312][ T8208]  ? __secure_computing+0x273/0x3f0
[  217.569179][ T8208]  __do_fast_syscall_32+0x73/0x120
[  217.571016][ T8208]  do_fast_syscall_32+0x32/0x80
[  217.572749][ T8208]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  217.574990][ T8208] RIP: 0023:0xf7f4f579
[  217.576444][ T8208] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  217.583235][ T8208] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000091
[  217.586240][ T8208] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000020000180
[  217.589037][ T8208] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  217.591830][ T8208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  217.594617][ T8208] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  217.597390][ T8208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  217.600171][ T8208]  </TASK>
[  219.374197][ T8254] FAULT_INJECTION: forcing a failure.
[  219.374197][ T8254] name failslab, interval 1, probability 0, space 0, times 0
[  219.377957][ T8254] CPU: 1 UID: 0 PID: 8254 Comm: syz.2.585 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  219.381272][ T8254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  219.384632][ T8254] Call Trace:
[  219.385593][ T8254]  <TASK>
[  219.386414][ T8254]  dump_stack_lvl+0x16c/0x1f0
[  219.388013][ T8254]  should_fail_ex+0x497/0x5b0
[  219.389544][ T8254]  ? fs_reclaim_acquire+0xae/0x160
[  219.391044][ T8254]  should_failslab+0xc2/0x120
[  219.392323][ T8254]  __kmalloc_noprof+0xcb/0x410
[  219.393598][ T8254]  ? __pfx_d_absolute_path+0x10/0x10
[  219.394993][ T8254]  tomoyo_encode2+0x100/0x3e0
[  219.396213][ T8254]  tomoyo_realpath_from_path+0x1a7/0x710
[  219.398015][ T8254]  tomoyo_check_open_permission+0x2a7/0x3b0
[  219.399586][ T8254]  ? __lock_acquire+0x163e/0x3ce0
[  219.400908][ T8254]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  219.402587][ T8254]  ? __pfx___lock_acquire+0x10/0x10
[  219.403951][ T8254]  ? __pfx_hook_file_open+0x10/0x10
[  219.405326][ T8254]  ? path_get+0x61/0x80
[  219.406420][ T8254]  tomoyo_file_open+0xcf/0x100
[  219.407673][ T8254]  security_file_open+0x64c/0x9d0
[  219.409007][ T8254]  do_dentry_open+0x57c/0x1530
[  219.410273][ T8254]  ? inode_permission+0xdd/0x5f0
[  219.411580][ T8254]  vfs_open+0x82/0x3f0
[  219.412671][ T8254]  ? may_open+0x1f2/0x400
[  219.413830][ T8254]  path_openat+0x1e6a/0x2d60
[  219.415061][ T8254]  ? __pfx_path_openat+0x10/0x10
[  219.416369][ T8254]  ? __pfx___lock_acquire+0x10/0x10
[  219.417757][ T8254]  do_filp_open+0x1dc/0x430
[  219.418964][ T8254]  ? __pfx_do_filp_open+0x10/0x10
[  219.420286][ T8254]  ? find_held_lock+0x2d/0x110
[  219.421561][ T8254]  ? _raw_spin_unlock+0x28/0x50
[  219.422848][ T8254]  ? alloc_fd+0x2d7/0x6c0
[  219.423987][ T8254]  do_sys_openat2+0x17a/0x1e0
[  219.425273][ T8254]  ? __pfx_do_sys_openat2+0x10/0x10
[  219.426651][ T8254]  ? __fget_files+0x244/0x3f0
[  219.427892][ T8254]  __ia32_compat_sys_openat+0x16e/0x210
[  219.429348][ T8254]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  219.430954][ T8254]  ? ksys_write+0x1ad/0x260
[  219.432155][ T8254]  __do_fast_syscall_32+0x73/0x120
[  219.433509][ T8254]  do_fast_syscall_32+0x32/0x80
[  219.434789][ T8254]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  219.436437][ T8254] RIP: 0023:0xf7f4f579
[  219.437514][ T8254] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  219.442487][ T8254] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  219.444648][ T8254] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000020000040
[  219.446712][ T8254] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000
[  219.448771][ T8254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  219.450841][ T8254] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  219.452894][ T8254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  219.454975][ T8254]  </TASK>
[  219.456728][ T8254] ERROR: Out of memory at tomoyo_realpath_from_path.
[  219.471635][ T8256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  219.478903][ T8256] overlayfs: failed to resolve './file0': -2
[  219.925360][ T6455] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  220.428327][ T6455] usb 8-1: Using ep0 maxpacket: 8
[  220.433008][ T6455] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  220.436374][ T6455] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  220.439235][ T6455] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  220.442036][ T6455] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  220.445560][ T6455] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  220.448178][ T6455] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.676923][ T6455] usb 8-1: usb_control_msg returned -71
[  220.678676][ T6455] usbtmc 8-1:16.0: can't read capabilities
[  220.683391][ T6455] usb 8-1: USB disconnect, device number 8
[  220.725328][ T5599] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  221.139669][ T5599] usb 6-1: Using ep0 maxpacket: 8
[  221.145972][ T5599] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  221.148514][ T5599] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  221.151058][ T5599] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  221.153616][ T5599] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.158944][ T5599] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  221.161326][ T5599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.174429][ T8293] 9pnet_fd: Insufficient options for proto=fd
[  221.372752][ T5599] usb 6-1: usb_control_msg returned -71
[  221.375399][ T5599] usbtmc 6-1:16.0: can't read capabilities
[  221.384266][ T5599] usb 6-1: USB disconnect, device number 8
[  222.150815][ T8316] netlink: 64 bytes leftover after parsing attributes in process `syz.2.601'.
[  222.162499][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'.
[  222.286159][ T8323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'.
[  222.288483][ T8323] netlink: 'syz.2.604': attribute type 7 has an invalid length.
[  222.290467][ T8323] netlink: 'syz.2.604': attribute type 8 has an invalid length.
[  222.305058][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'.
[  222.810904][   T65] Bluetooth: hci2: Frame reassembly failed (-84)
[  222.812623][  T105] Bluetooth: hci2: Frame reassembly failed (-84)
[  222.851566][   T66] Bluetooth: hci3: sending frame failed (-49)
[  222.854742][ T4780] Bluetooth: hci3: Opcode 0x1003 failed: -49
[  223.291729][   T65] Bluetooth: hci4: Frame reassembly failed (-84)
[  224.601108][ T8395] netlink: 68 bytes leftover after parsing attributes in process `syz.0.620'.
[  224.665310][ T8398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.621'.
[  224.875147][   T66] Bluetooth: hci2: command 0x1003 tx timeout
[  224.877885][ T5355] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  224.917444][ T8410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.625'.
[  224.928627][ T8410] overlayfs: failed to resolve './file1': -2
[  224.931644][ T8408] netlink: 64 bytes leftover after parsing attributes in process `syz.1.624'.
[  224.934779][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'.
[  225.025168][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'.
[  225.214912][ T8425] FAULT_INJECTION: forcing a failure.
[  225.214912][ T8425] name failslab, interval 1, probability 0, space 0, times 0
[  225.218333][ T8425] CPU: 0 UID: 0 PID: 8425 Comm: syz.1.630 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  225.221199][ T8425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  225.224006][ T8425] Call Trace:
[  225.224908][ T8425]  <TASK>
[  225.225700][ T8425]  dump_stack_lvl+0x16c/0x1f0
[  225.226955][ T8425]  should_fail_ex+0x497/0x5b0
[  225.228198][ T8425]  ? fs_reclaim_acquire+0xae/0x160
[  225.229552][ T8425]  should_failslab+0xc2/0x120
[  225.230799][ T8425]  __kmalloc_cache_noprof+0x6b/0x310
[  225.232186][ T8425]  ? input_allocate_device+0x44/0x350
[  225.233612][ T8425]  input_allocate_device+0x44/0x350
[  225.234990][ T8425]  uinput_ioctl_handler.isra.0+0x897/0x1d70
[  225.236552][ T8425]  ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[  225.238222][ T8425]  ? trace_lock_acquire+0x14a/0x1d0
[  225.239594][ T8425]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  225.241164][ T8425]  ? __pfx_uinput_compat_ioctl+0x10/0x10
[  225.242650][ T8425]  __do_compat_sys_ioctl+0x259/0x2b0
[  225.244054][ T8425]  __do_fast_syscall_32+0x73/0x120
[  225.245430][ T8425]  do_fast_syscall_32+0x32/0x80
[  225.246723][ T8425]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  225.248396][ T8425] RIP: 0023:0xf742e579
[  225.249515][ T8425] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  225.254392][ T8425] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  225.256538][ T8425] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000084009422
[  225.258598][ T8425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  225.260649][ T8425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  225.262715][ T8425] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  225.264788][ T8425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  225.266863][ T8425]  </TASK>
[  225.355476][ T5355] Bluetooth: hci4: command 0x1003 tx timeout
[  225.357686][ T4780] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  225.508138][   T45] Bluetooth: hci2: Frame reassembly failed (-84)
[  226.527255][ T8451] netlink: 'syz.0.637': attribute type 1 has an invalid length.
[  226.974135][ T8466] capability: warning: `syz.3.642' uses deprecated v2 capabilities in a way that may be insecure
[  227.515308][ T4780] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  228.160446][ T8476] FAULT_INJECTION: forcing a failure.
[  228.160446][ T8476] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  228.163856][ T8476] CPU: 1 UID: 0 PID: 8476 Comm: syz.2.644 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  228.166626][ T8476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  228.169415][ T8476] Call Trace:
[  228.170304][ T8476]  <TASK>
[  228.171091][ T8476]  dump_stack_lvl+0x16c/0x1f0
[  228.172341][ T8476]  should_fail_ex+0x497/0x5b0
[  228.173603][ T8476]  _copy_from_user+0x30/0xf0
[  228.174808][ T8476]  get_compat_msghdr+0xa8/0x170
[  228.176181][ T8476]  ? __pfx_get_compat_msghdr+0x10/0x10
[  228.178039][ T8476]  ? __pfx___lock_acquire+0x10/0x10
[  228.179816][ T8476]  ___sys_sendmsg+0x1b0/0x1e0
[  228.181124][ T8476]  ? __pfx____sys_sendmsg+0x10/0x10
[  228.182530][ T8476]  ? lock_acquire+0x2f/0xb0
[  228.183748][ T8476]  ? __fget_files+0x40/0x3f0
[  228.185023][ T8476]  ? fdget+0x176/0x210
[  228.186123][ T8476]  __sys_sendmsg+0x117/0x1f0
[  228.187365][ T8476]  ? __pfx___sys_sendmsg+0x10/0x10
[  228.188732][ T8476]  ? __fget_files+0x244/0x3f0
[  228.190012][ T8476]  __do_fast_syscall_32+0x73/0x120
[  228.191375][ T8476]  do_fast_syscall_32+0x32/0x80
[  228.192680][ T8476]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  228.194366][ T8476] RIP: 0023:0xf7f4f579
[  228.195455][ T8476] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  228.201479][ T8476] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  228.201495][ T8476] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080
[  228.201502][ T8476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  228.208402][ T8476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  228.210517][ T8476] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  228.210526][ T8476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  228.210539][ T8476]  </TASK>
[  228.988434][ T8494] __nla_validate_parse: 4 callbacks suppressed
[  228.988447][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'.
[  228.993768][ T8494] netlink: 'syz.0.648': attribute type 19 has an invalid length.
[  229.007987][ T8494] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  229.010405][ T8494] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  229.012710][ T8494] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  229.015099][ T8494] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  229.018201][ T8494] vxlan0: entered promiscuous mode
[  229.480176][ T8513] netlink: 68 bytes leftover after parsing attributes in process `syz.1.653'.
[  229.663433][ T8518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.654'.
[  230.075212][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'.
[  232.440007][ T8583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.668'.
[  232.480637][ T1139] Bluetooth: hci2: Frame reassembly failed (-84)
[  233.589523][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'.
[  233.607943][ T8598] netlink: 'syz.2.672': attribute type 1 has an invalid length.
[  233.619412][ T8598] netlink: 205 bytes leftover after parsing attributes in process `syz.2.672'.
[  233.621842][ T8598] netlink: 205 bytes leftover after parsing attributes in process `syz.2.672'.
[  233.655933][ T8601] warning: `syz.0.673' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  233.854470][ T8606] FAULT_INJECTION: forcing a failure.
[  233.854470][ T8606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  233.854498][ T8606] CPU: 0 UID: 0 PID: 8606 Comm: syz.1.675 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  233.854514][ T8606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  233.854520][ T8606] Call Trace:
[  233.854524][ T8606]  <TASK>
[  233.854528][ T8606]  dump_stack_lvl+0x16c/0x1f0
[  233.854549][ T8606]  should_fail_ex+0x497/0x5b0
[  233.854568][ T8606]  _copy_to_user+0x30/0xc0
[  233.854580][ T8606]  __htab_map_lookup_and_delete_batch+0x180c/0x2840
[  233.854600][ T8606]  ? __fget_files+0x23a/0x3f0
[  233.854615][ T8606]  ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10
[  233.854633][ T8606]  ? __pfx_htab_map_lookup_and_delete_batch+0x10/0x10
[  233.854647][ T8606]  bpf_map_do_batch+0x294/0x640
[  233.854661][ T8606]  __sys_bpf+0x4b96/0x5780
[  233.854675][ T8606]  ? ksys_write+0x21e/0x260
[  233.854687][ T8606]  ? __pfx___sys_bpf+0x10/0x10
[  233.854701][ T8606]  ? vfs_write+0x14d/0x1140
[  233.854713][ T8606]  ? __mutex_unlock_slowpath+0x164/0x650
[  233.854734][ T8606]  ? fput+0x30/0x390
[  233.854748][ T8606]  ? ksys_write+0x1ad/0x260
[  233.854758][ T8606]  ? __pfx_ksys_write+0x10/0x10
[  233.854771][ T8606]  __ia32_sys_bpf+0x76/0xe0
[  233.854785][ T8606]  __do_fast_syscall_32+0x73/0x120
[  233.854801][ T8606]  do_fast_syscall_32+0x32/0x80
[  233.854814][ T8606]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  233.854829][ T8606] RIP: 0023:0xf742e579
[  233.854838][ T8606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  233.854848][ T8606] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[  233.854860][ T8606] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 0000000020000800
[  233.854867][ T8606] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000
[  233.854873][ T8606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  233.854880][ T8606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  233.854886][ T8606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  233.854897][ T8606]  </TASK>
[  234.555329][ T5355] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  234.756448][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.679'.
[  234.929259][ T8632] 9pnet_fd: Insufficient options for proto=fd
[  235.996498][   T45] Bluetooth: hci2: Frame reassembly failed (-84)
[  236.292704][ T8675] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  236.652313][ T8684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.691'.
[  236.956608][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.692'.
[  237.438554][ T8698] netlink: 76 bytes leftover after parsing attributes in process `syz.0.695'.
[  238.075322][ T4780] Bluetooth: hci2: command 0x1003 tx timeout
[  238.077679][ T5355] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  238.156255][ T8712] FAULT_INJECTION: forcing a failure.
[  238.156255][ T8712] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.181353][ T8712] CPU: 3 UID: 0 PID: 8712 Comm: syz.0.698 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  238.184809][ T8712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  238.188353][ T8712] Call Trace:
[  238.189471][ T8712]  <TASK>
[  238.190446][ T8712]  dump_stack_lvl+0x16c/0x1f0
[  238.192033][ T8712]  should_fail_ex+0x497/0x5b0
[  238.193554][ T8712]  _copy_to_user+0x30/0xc0
[  238.194635][ T8712]  simple_read_from_buffer+0xd0/0x160
[  238.195955][ T8712]  proc_fail_nth_read+0x198/0x270
[  238.197252][ T8712]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  238.198674][ T8712]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  238.200098][ T8712]  vfs_read+0x1ce/0xbd0
[  238.201207][ T8712]  ? __fget_files+0x23a/0x3f0
[  238.202428][ T8712]  ? fdget_pos+0x24c/0x360
[  238.203585][ T8712]  ? __pfx_lock_release+0x10/0x10
[  238.204904][ T8712]  ? trace_lock_acquire+0x14a/0x1d0
[  238.206247][ T8712]  ? __pfx_vfs_read+0x10/0x10
[  238.207480][ T8712]  ? __pfx___mutex_lock+0x10/0x10
[  238.209159][ T8712]  ? __fget_files+0x244/0x3f0
[  238.210718][ T8712]  ksys_read+0x12f/0x260
[  238.212132][ T8712]  ? __pfx_ksys_read+0x10/0x10
[  238.213668][ T8712]  __do_fast_syscall_32+0x73/0x120
[  238.214995][ T8712]  do_fast_syscall_32+0x32/0x80
[  238.216257][ T8712]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  238.217894][ T8712] RIP: 0023:0xf73fe579
[  238.218891][ T8712] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  238.223858][ T8712] RSP: 002b:00000000f56e65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  238.226001][ T8712] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56e6620
[  238.228145][ T8712] RDX: 000000000000000f RSI: 00000000f73ebff4 RDI: 0000000000000000
[  238.230759][ T8712] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  238.233374][ T8712] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  238.235438][ T8712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  238.237485][ T8712]  </TASK>
[  238.830880][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.704'.
[  240.075312][ T4780] Bluetooth: hci2: sending frame failed (-49)
[  240.088859][ T5355] Bluetooth: hci2: Opcode 0x1003 failed: -49
[  240.654130][ T8774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.712'.
[  241.963012][ T8810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.719'.
[  242.008711][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'.
[  242.966378][ T1139] Bluetooth: hci2: Frame reassembly failed (-84)
[  242.979674][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'.
[  243.902123][ T1139] Bluetooth: hci3: Frame reassembly failed (-84)
[  245.035250][ T5355] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  245.186013][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.733'.
[  245.915747][   T66] Bluetooth: hci3: command 0x1003 tx timeout
[  245.918554][ T4780] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  246.280917][ T8898] FAULT_INJECTION: forcing a failure.
[  246.280917][ T8898] name failslab, interval 1, probability 0, space 0, times 0
[  246.284337][ T8898] CPU: 3 UID: 0 PID: 8898 Comm: syz.3.740 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  246.287088][ T8898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  246.289856][ T8898] Call Trace:
[  246.290734][ T8898]  <TASK>
[  246.291515][ T8898]  dump_stack_lvl+0x16c/0x1f0
[  246.292768][ T8898]  should_fail_ex+0x497/0x5b0
[  246.294009][ T8898]  ? fs_reclaim_acquire+0xae/0x160
[  246.295362][ T8898]  should_failslab+0xc2/0x120
[  246.296607][ T8898]  kmem_cache_alloc_node_noprof+0x71/0x310
[  246.298148][ T8898]  ? __alloc_skb+0x2b3/0x380
[  246.299381][ T8898]  __alloc_skb+0x2b3/0x380
[  246.300567][ T8898]  ? __pfx___alloc_skb+0x10/0x10
[  246.301900][ T8898]  netlink_alloc_large_skb+0x69/0x130
[  246.303358][ T8898]  netlink_sendmsg+0x689/0xd70
[  246.304636][ T8898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  246.306058][ T8898]  ____sys_sendmsg+0x9ae/0xb40
[  246.307328][ T8898]  ? __pfx_____sys_sendmsg+0x10/0x10
[  246.308722][ T8898]  ? get_compat_msghdr+0x11b/0x170
[  246.310082][ T8898]  ? __pfx___lock_acquire+0x10/0x10
[  246.311451][ T8898]  ___sys_sendmsg+0x135/0x1e0
[  246.312684][ T8898]  ? __pfx____sys_sendmsg+0x10/0x10
[  246.314052][ T8898]  ? lock_acquire+0x2f/0xb0
[  246.315258][ T8898]  ? __fget_files+0x40/0x3f0
[  246.316471][ T8898]  ? fdget+0x176/0x210
[  246.317563][ T8898]  __sys_sendmsg+0x117/0x1f0
[  246.318793][ T8898]  ? __pfx___sys_sendmsg+0x10/0x10
[  246.320142][ T8898]  ? __fget_files+0x244/0x3f0
[  246.321385][ T8898]  __do_fast_syscall_32+0x73/0x120
[  246.322732][ T8898]  do_fast_syscall_32+0x32/0x80
[  246.324001][ T8898]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  246.325661][ T8898] RIP: 0023:0xf7f41579
[  246.326735][ T8898] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  246.331716][ T8898] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  246.333880][ T8898] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000200
[  246.335928][ T8898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  246.337984][ T8898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  246.340024][ T8898] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  246.342077][ T8898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  246.344118][ T8898]  </TASK>
[  246.702890][  T210] Bluetooth: hci2: Frame reassembly failed (-84)
[  246.946153][ T5351] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  247.095078][ T5351] usb 8-1: Using ep0 maxpacket: 8
[  247.097773][ T5351] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  247.100866][ T5351] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  247.103843][ T5351] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  247.108132][ T5351] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  247.112047][ T5351] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  247.114814][ T5351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.329379][ T5351] usb 8-1: usb_control_msg returned -71
[  247.331980][ T5351] usbtmc 8-1:16.0: can't read capabilities
[  247.339910][ T5351] usb 8-1: USB disconnect, device number 9
[  247.738148][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.748'.
[  248.715224][ T5355] Bluetooth: hci2: command 0x1003 tx timeout
[  248.718316][ T4780] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  249.996470][   T45] Bluetooth: hci2: Frame reassembly failed (-84)
[  251.382932][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.386073][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.388257][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.390190][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.392120][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.394066][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.396056][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.398505][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4
[  251.400453][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.404779][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2
[  251.408371][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.410799][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.413515][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.416378][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.419062][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.421645][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.424229][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.426632][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.428604][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.430661][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.432630][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.434681][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.437222][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.439228][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.441297][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.443220][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.446153][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.448208][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.450175][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.452199][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.454346][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.456687][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.460843][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.462885][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.464890][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.468257][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.470347][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.472497][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.474648][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.476968][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.478993][ T5385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  251.487368][ T5385] hid-generic 0000:0000:0000.0003: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  252.005165][   T66] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  252.538203][ T9030] sctp: [Deprecated]: syz.0.771 (pid 9030) Use of int in max_burst socket option deprecated.
[  252.538203][ T9030] Use struct sctp_assoc_value instead
[  252.634444][ T9042] netlink: 'syz.0.773': attribute type 17 has an invalid length.
[  252.833520][ T9050] netlink: 56 bytes leftover after parsing attributes in process `syz.0.775'.
[  253.160894][ T1139] Bluetooth: hci2: Frame reassembly failed (-84)
[  255.038918][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  255.040683][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  255.197850][ T4780] Bluetooth: hci2: command 0x1003 tx timeout
[  255.202129][   T66] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  255.314503][ T9111] netlink: 56 bytes leftover after parsing attributes in process `syz.0.787'.
[  256.072306][ T9128] netlink: 'syz.2.794': attribute type 10 has an invalid length.
[  256.074933][ T9128] bridge0: port 3(team0) entered blocking state
[  256.090602][ T9128] bridge0: port 3(team0) entered disabled state
[  256.092513][ T9128] team0: entered allmulticast mode
[  256.094737][ T9128] team_slave_0: entered allmulticast mode
[  256.112159][ T9128] team_slave_1: entered allmulticast mode
[  256.133361][ T9128] team0: entered promiscuous mode
[  256.136027][ T9128] team_slave_0: entered promiscuous mode
[  256.141321][ T9128] team_slave_1: entered promiscuous mode
[  256.180615][ T9128] bridge0: port 3(team0) entered blocking state
[  256.182359][ T9128] bridge0: port 3(team0) entered forwarding state
[  256.393319][   T75] Bluetooth: hci2: Frame reassembly failed (-84)
[  256.588683][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'.
[  257.745148][ T5385] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  257.823204][ T9172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.803'.
[  257.905118][ T5385] usb 5-1: Using ep0 maxpacket: 8
[  257.912989][ T5385] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  257.924052][ T5385] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  257.935474][ T5385] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  257.947937][ T5385] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  257.952372][ T5385] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  257.955478][ T5385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.178044][ T5385] usb 5-1: usb_control_msg returned -71
[  258.179546][ T5385] usbtmc 5-1:16.0: can't read capabilities
[  258.194410][ T5385] usb 5-1: USB disconnect, device number 8
[  258.395864][   T66] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  260.644055][   T56] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  260.727407][   T65] Bluetooth: hci2: Frame reassembly failed (-84)
[  260.742176][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'.
[  260.815052][   T56] usb 6-1: Using ep0 maxpacket: 8
[  260.818398][   T56] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  260.821010][   T56] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  260.823693][   T56] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  260.826864][   T56] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  260.830490][   T56] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  260.832916][   T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.994742][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'.
[  261.045927][ T9226] dccp_close: ABORT with 32 bytes unread
[  261.053015][   T56] usb 6-1: usb_control_msg returned -71
[  261.054489][   T56] usbtmc 6-1:16.0: can't read capabilities
[  261.063375][   T56] usb 6-1: USB disconnect, device number 9
[  261.485088][   T56] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  261.635115][   T56] usb 7-1: Using ep0 maxpacket: 8
[  261.637648][   T56] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  261.640125][   T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  261.642630][   T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  261.645432][   T56] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  261.648756][   T56] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  261.651064][   T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.856621][   T56] usb 7-1: usb_control_msg returned -71
[  261.858099][   T56] usbtmc 7-1:16.0: can't read capabilities
[  261.864515][   T56] usb 7-1: USB disconnect, device number 10
[  262.795298][   T66] Bluetooth: hci2: command 0x1003 tx timeout
[  262.795399][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.819'.
[  262.798391][ T4780] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  263.100452][ T9258] FAULT_INJECTION: forcing a failure.
[  263.100452][ T9258] name failslab, interval 1, probability 0, space 0, times 0
[  263.103698][ T9258] CPU: 2 UID: 0 PID: 9258 Comm: syz.2.824 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  263.106432][ T9258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  263.109223][ T9258] Call Trace:
[  263.110107][ T9258]  <TASK>
[  263.110893][ T9258]  dump_stack_lvl+0x16c/0x1f0
[  263.112148][ T9258]  should_fail_ex+0x497/0x5b0
[  263.113406][ T9258]  ? fs_reclaim_acquire+0xae/0x160
[  263.114764][ T9258]  should_failslab+0xc2/0x120
[  263.116010][ T9258]  __kmalloc_node_noprof+0xd1/0x440
[  263.117397][ T9258]  ? __kvmalloc_node_noprof+0xad/0x1a0
[  263.118837][ T9258]  __kvmalloc_node_noprof+0xad/0x1a0
[  263.120225][ T9258]  io_uring_setup+0x9b8/0x3750
[  263.121505][ T9258]  ? __pfx_io_uring_setup+0x10/0x10
[  263.122875][ T9258]  ? __fget_files+0x244/0x3f0
[  263.124127][ T9258]  ? ksys_write+0x1ad/0x260
[  263.125345][ T9258]  ? __pfx_ksys_write+0x10/0x10
[  263.126625][ T9258]  __ia32_sys_io_uring_setup+0x97/0x140
[  263.128069][ T9258]  __do_fast_syscall_32+0x73/0x120
[  263.129420][ T9258]  do_fast_syscall_32+0x32/0x80
[  263.130695][ T9258]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  263.132361][ T9258] RIP: 0023:0xf7f4f579
[  263.133446][ T9258] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  263.138423][ T9258] RSP: 002b:00000000f56d651c EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[  263.140604][ T9258] RAX: ffffffffffffffda RBX: 0000000000003667 RCX: 0000000020000100
[  263.142656][ T9258] RDX: 00000000f722d2f4 RSI: 0000000000000001 RDI: 00000000f56d657c
[  263.144714][ T9258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  263.146761][ T9258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  263.148822][ T9258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  263.150879][ T9258]  </TASK>
[  264.295848][ T9274] IPVS: rr: TCP 172.20.20.170:0 - no destination available
[  264.555112][   T56] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  264.715063][   T56] usb 8-1: Using ep0 maxpacket: 8
[  264.720190][   T56] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  264.722693][   T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  264.735069][   T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  264.737599][   T56] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  264.740918][   T56] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  264.743236][   T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.962874][   T56] usb 8-1: usb_control_msg returned -71
[  264.966710][   T56] usbtmc 8-1:16.0: can't read capabilities
[  264.972403][   T56] usb 8-1: USB disconnect, device number 10
[  265.505093][ T9301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.832'.
[  265.796749][  T210] Bluetooth: hci2: Frame reassembly failed (-84)
[  265.929245][ T9315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'.
[  265.932078][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'.
[  265.941205][ T9315] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 19968 - 0
[  265.945103][ T9315] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 19968 - 0
[  265.950714][ T9315] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 19968 - 0
[  265.953619][ T9315] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 19968 - 0
[  265.957165][ T9315] geneve3: entered allmulticast mode
[  266.015064][ T6455] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  266.185022][ T6455] usb 6-1: Using ep0 maxpacket: 8
[  266.187881][ T6455] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  266.191763][ T6455] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  266.194343][ T6455] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  266.196984][ T6455] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  266.200430][ T6455] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  266.202790][ T6455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.415436][ T6455] usb 6-1: usb_control_msg returned -71
[  266.417628][ T6455] usbtmc 6-1:16.0: can't read capabilities
[  266.422343][ T6455] usb 6-1: USB disconnect, device number 10
[  267.835145][   T66] Bluetooth: hci2: command 0x1003 tx timeout
[  267.845561][ T4780] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  267.922949][ T9343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.844'.
[  268.030065][ T9345] veth0_vlan: left promiscuous mode
[  268.031734][ T9345] FAULT_INJECTION: forcing a failure.
[  268.031734][ T9345] name failslab, interval 1, probability 0, space 0, times 0
[  268.036065][ T9345] CPU: 0 UID: 0 PID: 9345 Comm: syz.3.845 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  268.038818][ T9345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  268.041610][ T9345] Call Trace:
[  268.042493][ T9345]  <TASK>
[  268.043272][ T9345]  dump_stack_lvl+0x16c/0x1f0
[  268.044536][ T9345]  should_fail_ex+0x497/0x5b0
[  268.046148][ T9345]  ? fs_reclaim_acquire+0xae/0x160
[  268.047824][ T9345]  should_failslab+0xc2/0x120
[  268.049378][ T9345]  __kmalloc_cache_noprof+0x6b/0x310
[  268.051169][ T9345]  ? netdevice_event+0x368/0xa10
[  268.052507][ T9345]  netdevice_event+0x368/0xa10
[  268.053793][ T9345]  ? __pfx_netdevice_event+0x10/0x10
[  268.055191][ T9345]  ? __pfx_del_netdev_default_ips_join+0x10/0x10
[  268.056866][ T9345]  ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10
[  268.058661][ T9345]  ? __pfx_add_default_gids+0x10/0x10
[  268.060079][ T9345]  ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10
[  268.061820][ T9345]  ? __pfx_add_netdev_ips+0x10/0x10
[  268.063190][ T9345]  ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10
[  268.064908][ T9345]  ? cfg802154_netdev_notifier_call+0x391/0xa00
[  268.066560][ T9345]  notifier_call_chain+0xb9/0x410
[  268.067902][ T9345]  ? __pfx_netdevice_event+0x10/0x10
[  268.069318][ T9345]  call_netdevice_notifiers_info+0xbe/0x140
[  268.070970][ T9345]  __dev_notify_flags+0x12d/0x2e0
[  268.072307][ T9345]  ? __pfx___dev_notify_flags+0x10/0x10
[  268.073789][ T9345]  ? __pfx___dev_change_flags+0x10/0x10
[  268.075245][ T9345]  ? __mutex_trylock_common+0xea/0x250
[  268.076689][ T9345]  ? __pfx___mutex_trylock_common+0x10/0x10
[  268.078248][ T9345]  dev_change_flags+0x10c/0x160
[  268.079549][ T9345]  dev_ifsioc+0x9c8/0x10b0
[  268.080737][ T9345]  ? __pfx_dev_ifsioc+0x10/0x10
[  268.082026][ T9345]  ? dev_ioctl+0x213/0x10c0
[  268.083227][ T9345]  ? __pfx___mutex_lock+0x10/0x10
[  268.084582][ T9345]  ? __pfx_lock_release+0x10/0x10
[  268.085918][ T9345]  ? netdev_name_node_lookup_rcu+0xf0/0x140
[  268.087482][ T9345]  dev_ioctl+0x224/0x10c0
[  268.088938][ T9345]  sock_do_ioctl+0x19e/0x280
[  268.090301][ T9345]  ? __pfx_sock_do_ioctl+0x10/0x10
[  268.091865][ T9345]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  268.093338][ T9345]  compat_sock_ioctl+0x318/0x7e0
[  268.094737][ T9345]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  268.096182][ T9345]  ? __fget_files+0x244/0x3f0
[  268.097636][ T9345]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  268.099098][ T9345]  __do_compat_sys_ioctl+0x259/0x2b0
[  268.100500][ T9345]  __do_fast_syscall_32+0x73/0x120
[  268.101876][ T9345]  do_fast_syscall_32+0x32/0x80
[  268.103175][ T9345]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  268.104868][ T9345] RIP: 0023:0xf7f41579
[  268.105954][ T9345] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  268.112121][ T9345] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  268.112138][ T9345] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008914
[  268.112145][ T9345] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  268.112153][ T9345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  268.112159][ T9345] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  268.112166][ T9345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  268.112179][ T9345]  </TASK>
[  268.115483][ T9345] veth0_vlan: entered promiscuous mode
[  268.143694][ T9354] syz.2.846 uses obsolete (PF_INET,SOCK_PACKET)
[  268.196868][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.847'.
[  268.199202][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'.
[  268.356519][ T9363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.848'.
[  268.555082][ T5385] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  268.705090][ T5385] usb 7-1: Using ep0 maxpacket: 8
[  268.709373][ T5385] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  268.711965][ T5385] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  268.714514][ T5385] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  268.718000][ T5385] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  268.721392][ T5385] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  268.723758][ T5385] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.955626][ T5385] usb 7-1: usb_control_msg returned -71
[  268.957186][ T5385] usbtmc 7-1:16.0: can't read capabilities
[  268.976177][ T5385] usb 7-1: USB disconnect, device number 11
[  270.437676][ T9409] netlink: 'syz.2.862': attribute type 4 has an invalid length.
[  270.449631][ T9409] netlink: 'syz.2.862': attribute type 4 has an invalid length.
[  270.538684][ T9410] mmap: syz.2.862 (9410) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  270.966848][ T9420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.864'.
[  270.969928][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'.
[  270.976361][ T9420] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 19968 - 0
[  270.978674][ T9420] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 19968 - 0
[  270.981297][ T9420] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 19968 - 0
[  270.984118][ T9420] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 19968 - 0
[  270.987737][ T9420] geneve3: entered allmulticast mode
[  272.435097][ T5599] usb 7-1: new low-speed USB device number 12 using dummy_hcd
[  272.585718][ T9462] binder: 9461:9462 ioctl c0306201 20000180 returned -22
[  272.605096][ T5599] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  272.607769][ T5599] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  272.610789][ T5599] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  272.613658][ T5599] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  272.616383][ T5599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.625556][ T9453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  272.628324][ T5599] hub 7-1:1.0: bad descriptor, ignoring hub
[  272.629976][ T5599] hub 7-1:1.0: probe with driver hub failed with error -5
[  272.632006][ T5599] cdc_wdm 7-1:1.0: skipping garbage
[  272.636811][ T5599] cdc_wdm 7-1:1.0: skipping garbage
[  272.638745][ T5599] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  272.640709][ T5599] cdc_wdm 7-1:1.0: Unknown control protocol
[  272.897149][ T6455] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  272.954791][    C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  272.956587][    C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  273.068245][ T6455] usb 8-1: Using ep0 maxpacket: 8
[  273.071140][ T6455] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  273.073680][ T6455] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  273.076181][ T6455] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  273.089453][ T6455] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  273.092899][ T6455] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  273.095226][ T6455] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.249793][    C2] Adjusting tsc more than 11% (5229282 vs 7162514)
[  273.380540][ T9477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.879'.
[  273.382884][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'.
[  273.406266][ T6455] usb 8-1: usb_control_msg returned -71
[  273.408015][ T6455] usbtmc 8-1:16.0: can't read capabilities
[  273.437755][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  273.439489][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  273.441464][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  273.443502][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  273.449204][ T6455] usb 8-1: USB disconnect, device number 11
[  274.076716][    T9] usb 7-1: USB disconnect, device number 12
[  274.272007][ T9497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.883'.
[  274.590499][ T9508] vlan2: entered allmulticast mode
[  274.591983][ T9508] veth1_to_team: entered allmulticast mode
[  274.601299][ T9508] veth1_to_team: left allmulticast mode
[  274.757523][ T9508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.887'.
[  275.213683][ T9523] netlink: 36 bytes leftover after parsing attributes in process `syz.3.890'.
[  275.230392][ T9523] netlink: 'syz.3.890': attribute type 10 has an invalid length.
[  275.257866][ T9523] team0: Port device wlan1 added
[  275.516147][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.891'.
[  275.518619][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'.
[  275.721840][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.892'.
[  276.246981][ T9534] ipvlan2: entered promiscuous mode
[  278.115637][ T9570] __nla_validate_parse: 1 callbacks suppressed
[  278.115657][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'.
[  279.601839][ T9591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.904'.
[  279.604212][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'.
[  280.683322][   T66] Bluetooth: hci2: sending frame failed (-49)
[  280.687381][ T4780] Bluetooth: hci2: Opcode 0x1003 failed: -49
[  281.715166][ T9643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.914'.
[  283.032996][ T9661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.919'.
[  283.909817][ T9685] IPVS: rr: TCP 172.20.20.170:0 - no destination available
[  285.348198][   T56] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  285.531627][   T56] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.534274][   T56] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  285.536588][   T56] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  285.539667][   T56] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  285.542484][   T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.545580][ T9716] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  285.550374][   T56] hub 6-1:1.0: bad descriptor, ignoring hub
[  285.554128][   T56] hub 6-1:1.0: probe with driver hub failed with error -5
[  285.556018][   T56] cdc_wdm 6-1:1.0: skipping garbage
[  285.557307][   T56] cdc_wdm 6-1:1.0: skipping garbage
[  285.566499][   T56] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  285.567985][   T56] cdc_wdm 6-1:1.0: Unknown control protocol
[  285.763869][ T9740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.934'.
[  285.775475][ T9740] netlink: 'syz.2.934': attribute type 10 has an invalid length.
[  285.789284][ T9740] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[  285.791520][ T9740] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  285.794220][ T9740] team0: Port device wlan1 added
[  286.568878][ T4780] Bluetooth: hci5: unexpected event for opcode 0x0419
[  286.885205][ T5599] usb 6-1: USB disconnect, device number 11
[  287.456113][ T9776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.472947][ T9776] option changes via remount are deprecated (pid=9775 comm=syz.0.946)
[  288.903007][ T9803] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  288.905743][ T9803] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  288.908080][ T9803] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  288.910977][ T9803] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  288.916787][ T9803] vxlan0: entered promiscuous mode
[  288.918318][ T9803] vxlan0: entered allmulticast mode
[  288.946150][ T9803] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  288.948518][ T9803] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  288.952454][ T9803] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  288.955584][ T9803] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.688304][   T43] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0xffff888021f92000 pfn:0x21f92
[  290.691186][ T4780] Bluetooth: hci7: unknown advertising packet type: 0x65
[  290.691244][ T4780] Bluetooth: hci7: Malformed LE Event: 0x02
[  290.691374][   T43] flags: 0xfff00000010001(locked|reclaim|node=0|zone=1|lastcpupid=0x7ff)
[  290.698260][   T43] raw: 00fff00000010001 ffffc9000069f608 ffffc9000069f608 ffffffff8b5d54a2
[  290.701415][   T43] raw: ffff888021f92000 0000000000000000 00000002ffffffff 0000000000000000
[  290.704749][   T43] page dumped because: VM_BUG_ON_PAGE(!((__builtin_constant_p(PAGE_CLAIMED) && __builtin_constant_p((uintptr_t)(&page->private) != (uintptr_t)((void *)0)) && (uintptr_t)(&page->private) != (uintptr_t)((void *)0) && __builtin_constant_p(*(const unsigned long *)(&page->private))) ? const_test_bit(PAGE_CLAIMED, &page->private) : _test_bit(PAGE_CLAIMED, &page->private)))
[  290.715410][   T43] page_owner tracks the page as allocated
[  290.718010][   T43] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12800(GFP_NOWAIT|__GFP_NORETRY), pid 114, tgid 114 (kswapd1), ts 290651847937, free_ts 254835441089
[  290.724274][   T43]  post_alloc_hook+0x2d1/0x350
[  290.726151][   T43]  get_page_from_freelist+0x101e/0x3070
[  290.728111][   T43]  __alloc_pages_noprof+0x223/0x25c0
[  290.729684][   T43]  alloc_pages_mpol_noprof+0x2c9/0x610
[  290.731113][   T43]  z3fold_zpool_malloc+0x853/0x14f0
[  290.732499][   T43]  zswap_store+0xda1/0x1fe0
[  290.733733][   T43]  swap_writepage+0x3b6/0x990
[  290.735259][   T43]  pageout+0x3b2/0xaa0
[  290.737387][   T43]  shrink_folio_list+0x3025/0x42d0
[  290.740866][   T43]  evict_folios+0x6d6/0x1970
[  290.744732][   T43]  try_to_shrink_lruvec+0x612/0x9b0
[  290.747019][   T43]  shrink_one+0x3e3/0x7b0
[  290.748854][   T43]  shrink_node+0x2452/0x39d0
[  290.750560][   T43]  balance_pgdat+0xc19/0x18f0
[  290.752290][   T43]  kswapd+0x5ea/0xbf0
[  290.753728][   T43]  kthread+0x2c1/0x3a0
[  290.755199][   T43] page last free pid 29 tgid 29 stack trace:
[  290.757430][   T43]  free_unref_page+0x5f4/0xdc0
[  290.759123][   T43]  __folio_put+0x30d/0x3d0
[  290.766167][   T43]  free_page_and_swap_cache+0x249/0x2c0
[  290.768252][   T43]  tlb_remove_table_rcu+0x89/0xe0
[  290.771723][   T43]  rcu_core+0x79d/0x14d0
[  290.773311][   T43]  handle_softirqs+0x213/0x8f0
[  290.775025][   T43]  run_ksoftirqd+0x3a/0x60
[  290.777845][   T43]  smpboot_thread_fn+0x661/0xa30
[  290.779238][   T43]  kthread+0x2c1/0x3a0
[  290.780524][   T43]  ret_from_fork+0x45/0x80
[  290.781802][   T43]  ret_from_fork_asm+0x1a/0x30
[  290.783150][   T43] ------------[ cut here ]------------
[  290.784583][   T43] kernel BUG at mm/z3fold.c:1293!
[  290.790933][   T43] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  290.793552][   T43] CPU: 0 UID: 0 PID: 43 Comm: kcompactd0 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  290.796291][   T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  290.799079][   T43] RIP: 0010:z3fold_page_migrate+0xea1/0x12d0
[  290.800629][   T43] Code: bc 93 ff 48 c7 c6 60 4c 5d 8b 48 89 ef e8 e7 6a d9 ff 90 0f 0b e8 ff bb 93 ff 48 c7 c6 c0 4c 5d 8b 48 89 ef e8 d0 6a d9 ff 90 <0f> 0b e8 e8 bb 93 ff 49 8b 6c 24 08 31 ff 48 89 eb 83 e3 01 48 89
[  290.805559][   T43] RSP: 0018:ffffc9000069f480 EFLAGS: 00010293
[  290.807132][   T43] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  290.809197][   T43] RDX: ffff88801e574880 RSI: ffffffff81f8ebd0 RDI: ffff88801e574cc4
[  290.811214][   T43] RBP: ffffea000087e480 R08: 0000000000000001 R09: 0000000000000001
[  290.813257][   T43] R10: ffffffff901cce8f R11: ffffffff815f48be R12: ffffea0000ae6600
[  290.815270][   T43] R13: ffffffff8b5d54a0 R14: ffffea000087e4a8 R15: ffffea000087e498
[  290.817378][   T43] FS:  0000000000000000(0000) GS:ffff88802b400000(0000) knlGS:0000000000000000
[  290.820375][   T43] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  290.822070][   T43] CR2: 0000000033914000 CR3: 000000005dca6000 CR4: 0000000000352ef0
[  290.824123][   T43] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  290.826159][   T43] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  290.828213][   T43] Call Trace:
[  290.829079][   T43]  <TASK>
[  290.829842][   T43]  ? die+0x31/0x80
[  290.830810][   T43]  ? do_trap+0x232/0x430
[  290.831902][   T43]  ? z3fold_page_migrate+0xea1/0x12d0
[  290.833285][   T43]  ? z3fold_page_migrate+0xea1/0x12d0
[  290.834653][   T43]  ? do_error_trap+0xf4/0x230
[  290.835871][   T43]  ? z3fold_page_migrate+0xea1/0x12d0
[  290.837331][   T43]  ? handle_invalid_op+0x34/0x40
[  290.838660][   T43]  ? z3fold_page_migrate+0xea1/0x12d0
[  290.840028][   T43]  ? exc_invalid_op+0x2e/0x50
[  290.841257][   T43]  ? asm_exc_invalid_op+0x1a/0x20
[  290.842561][   T43]  ? select_task_rq_fair+0x36e/0x44e0
[  290.843945][   T43]  ? z3fold_page_migrate+0xea0/0x12d0
[  290.845357][   T43]  ? z3fold_page_migrate+0xea1/0x12d0
[  290.846742][   T43]  move_to_new_folio+0x449/0x700
[  290.848383][   T43]  migrate_pages_batch+0x206a/0x31b0
[  290.850130][   T43]  ? __pfx_compaction_free+0x10/0x10
[  290.851488][   T43]  ? __pfx_migrate_pages_batch+0x10/0x10
[  290.852957][   T43]  migrate_pages_sync+0x4c9/0x8f0
[  290.854269][   T43]  ? __pfx_compaction_alloc+0x10/0x10
[  290.855656][   T43]  ? __pfx_compaction_free+0x10/0x10
[  290.857040][   T43]  ? __pfx_migrate_pages_sync+0x10/0x10
[  290.858486][   T43]  ? isolate_movable_page+0x3b/0x7f0
[  290.859856][   T43]  migrate_pages+0x19ee/0x21f0
[  290.861068][   T43]  ? __pfx_compaction_alloc+0x10/0x10
[  290.862400][   T43]  ? __pfx_compaction_free+0x10/0x10
[  290.863675][   T43]  ? __pfx_migrate_pages+0x10/0x10
[  290.865021][   T43]  ? __pfx_isolate_migratepages_block+0x10/0x10
[  290.866637][   T43]  compact_zone+0x1f68/0x4280
[  290.867984][   T43]  ? __pfx_compact_zone+0x10/0x10
[  290.869301][   T43]  ? lock_acquire.part.0+0x11b/0x380
[  290.870667][   T43]  compact_node+0x1a2/0x2d0
[  290.871854][   T43]  ? __pfx_compact_node+0x10/0x10
[  290.873174][   T43]  ? kcompactd+0x55f/0xde0
[  290.873259][ T4780] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  290.874339][   T43]  ? __pfx_extfrag_for_order+0x10/0x10
[  290.876538][ T4780] Bluetooth: hci5: Injecting HCI hardware error event
[  290.878223][   T43]  kcompactd+0x76e/0xde0
[  290.880081][ T4780] Bluetooth: hci5: hardware error 0x00
[  290.881232][   T43]  ? __pfx_kcompactd+0x10/0x10
[  290.883960][   T43]  ? __pfx_autoremove_wake_function+0x10/0x10
[  290.885575][   T43]  ? lockdep_hardirqs_on+0x7c/0x110
[  290.886943][   T43]  ? __kthread_parkme+0x148/0x220
[  290.888392][   T43]  ? __pfx_kcompactd+0x10/0x10
[  290.889644][   T43]  kthread+0x2c1/0x3a0
[  290.890711][   T43]  ? _raw_spin_unlock_irq+0x23/0x50
[  290.892063][   T43]  ? __pfx_kthread+0x10/0x10
[  290.893285][   T43]  ret_from_fork+0x45/0x80
[  290.894453][   T43]  ? __pfx_kthread+0x10/0x10
[  290.895661][   T43]  ret_from_fork_asm+0x1a/0x30
[  290.896930][   T43]  </TASK>
[  290.897958][   T43] Modules linked in:
[  290.899553][   T43] ---[ end trace 0000000000000000 ]---
[  290.901146][   T43] RIP: 0010:z3fold_page_migrate+0xea1/0x12d0
[  290.902710][   T43] Code: bc 93 ff 48 c7 c6 60 4c 5d 8b 48 89 ef e8 e7 6a d9 ff 90 0f 0b e8 ff bb 93 ff 48 c7 c6 c0 4c 5d 8b 48 89 ef e8 d0 6a d9 ff 90 <0f> 0b e8 e8 bb 93 ff 49 8b 6c 24 08 31 ff 48 89 eb 83 e3 01 48 89
[  290.908660][   T43] RSP: 0018:ffffc9000069f480 EFLAGS: 00010293
[  290.910269][   T43] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  290.912339][   T43] RDX: ffff88801e574880 RSI: ffffffff81f8ebd0 RDI: ffff88801e574cc4
[  290.914394][   T43] RBP: ffffea000087e480 R08: 0000000000000001 R09: 0000000000000001
[  290.916721][   T43] R10: ffffffff901cce8f R11: ffffffff815f48be R12: ffffea0000ae6600
[  290.918983][   T43] R13: ffffffff8b5d54a0 R14: ffffea000087e4a8 R15: ffffea000087e498
[  290.921052][   T43] FS:  0000000000000000(0000) GS:ffff88802b400000(0000) knlGS:0000000000000000
[  290.923358][   T43] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  290.925094][   T43] CR2: 0000000033914000 CR3: 000000000db7c000 CR4: 0000000000352ef0
[  290.927578][   T43] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  290.929611][   T43] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  290.931660][   T43] Kernel panic - not syncing: Fatal exception
[  290.933851][   T43] Kernel Offset: disabled
[  290.934994][   T43] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:10:37  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff816a9d5d RDX=1ffffffff34b66ea
RSI=0000000000000004 RDI=ffffc9000288f770 RBP=ffffc9000288f938 RSP=ffffc9000288f800
R8 =0000000000000001 R9 =fffff52000511eee R10=0000000000000003 R11=0000000000000000
R12=ffffffff9a5b3738 R13=0000000000002957 R14=0000000000000000 R15=ffff888058e00000
RIP=ffffffff848de8d7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000033914000 CR3=000000005dca6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009c00000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888040e52be8 RCX=ffffffff81f9dd46 RDX=0000000000000000
RSI=0000000000000004 RDI=ffff888040e52be8 RBP=ffff888040e52ba0 RSP=ffffc9000c997590
R8 =0000000000000000 R9 =ffffed10081ca57d R10=ffff888040e52beb R11=0000000000000000
R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81f9dd69 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7410760 CR3=000000000db7c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff816936be RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff901cce88 RBP=0000000000000000 RSP=ffffc900072f7bc8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000001c9f R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff81edf83a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563622fd9280 CR3=000000004491c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008220202 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8f071920 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4154414600544549 55510029646c253d 646970282064253a 29287338342e253a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4154414600544549 5551000c41490018 414c550d0541001f 0c0d561d110b001f
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=50dd289750dd2897 50dd289750dd2897 50dd289750dd2897 50dd289750dd2897 50dd289750dd2897 50dd289750dd2897 50dd289750dd2897 50dd289750dd2897
ZMM22=2366368e2366368e 2366368e2366368e 2366368e2366368e 2366368e2366368e 2366368e2366368e 2366368e2366368e 2366368e2366368e 2366368e2366368e
ZMM23=dde84267dde84267 dde84267dde84267 dde84267dde84267 dde84267dde84267 dde84267dde84267 dde84267dde84267 dde84267dde84267 dde84267dde84267
ZMM24=8afee92d8afee92d 8afee92d8afee92d 8afee92d8afee92d 8afee92d8afee92d 8afee92d8afee92d 8afee92d8afee92d 8afee92d8afee92d 8afee92d8afee92d
ZMM25=dcb83e21dcb83e21 dcb83e21dcb83e21 dcb83e21dcb83e21 dcb83e21dcb83e21 dcb83e21dcb83e21 dcb83e21dcb83e21 dcb83e21dcb83e21 dcb83e21dcb83e21
ZMM26=d888457dd888457d d888457dd888457d d888457dd888457d d888457dd888457d d888457dd888457d d888457dd888457d d888457dd888457d d888457dd888457d
ZMM27=5071bf675071bf67 5071bf675071bf67 5071bf675071bf67 5071bf675071bf67 5071bf675071bf67 5071bf675071bf67 5071bf675071bf67 5071bf675071bf67
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=1509000015090000 1509000015090000 1509000015090000 1509000015090000 1509000015090000 1509000015090000 1509000015090000 1509000015090000
info registers vcpu 3

CPU#3
RAX=00000000001b7054 RBX=0000000000000003 RCX=ffffffff8b12f709 RDX=ffffed10056e7026
RSI=ffffffff8bb120a0 RDI=ffffffff816407fc RBP=ffffed1003767488 RSP=ffffc90000497e08
R8 =0000000000000000 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000001
R12=0000000000000003 R13=ffff88801bb3a440 R14=ffffffff901cce88 R15=0000000000000000
RIP=ffffffff8b130aef RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7456108 CR3=000000005dca6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000