last executing test programs:

10.166266776s ago: executing program 3 (id=4475):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800037}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r4)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x1c, r5, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r6, r6, 0x2f}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=<r7=>r6, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r6, r7, 0x2f, 0x10, 0x4, @void, @value=r7, @void, @void, r8}, 0x20)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r0, 0x16, 0x0, @val=@netfilter={0x3, 0x0, 0x18}}, 0x20)
r9 = openat$nvram(0xffffff9c, &(0x7f0000000d00), 0x103100, 0x0)
read$FUSE(r9, 0x0, 0x0)

8.328813339s ago: executing program 3 (id=4480):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup3(r0, r1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2567000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00993fff0000004f000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

8.328249667s ago: executing program 3 (id=4481):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000300))
socket$packet(0x11, 0x3, 0x300)
syz_io_uring_setup(0x8ce, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280))
openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="1dfd71d864192bb2e01c945aae35f1bd51ad8c64b9071fa0a870d49a6e01c42b5028df27c3af10b4ba540b149238d64aaca12eacdd5f6d824920e5f9f7adba3df8c68bd4ebac87aebc176fc3322970cc769cb6e9402c692bb1ae6d526f9a40d5ceca3d183e1b80623735b37406cb606a24721ff853cbd0fce590e88a4e4cb6ba6d06360afe3e0cb8cff746b72bbf8438477adaf0e89dcb2155c6eb102009587b99d48eddc10f8e821e38e56e1d7c9a5fbdfece64732d729b7acb350043d5eabc", 0xc0}, {0x0}], 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
signalfd(r2, &(0x7f0000000340)={[0xabed2e56, 0x3]}, 0x8)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000})
r3 = io_uring_setup(0x694d, &(0x7f00000000c0)={0x0, 0x41f0b, 0x0, 0x2, 0x253})
io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b0800014000000003080003000000008920000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0xa4}}, 0x0)
fchdir(0xffffffffffffffff)
mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='hfs\x00', 0x80, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000480)='task\x00')
fchdir(r6)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)

7.143893036s ago: executing program 3 (id=4485):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = timerfd_create(0x0, 0x0)
read(r3, &(0x7f0000000240)=""/123, 0x7b)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xc)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'wg0\x00'}}, 0x1e)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0)
sendmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

5.678513271s ago: executing program 3 (id=4496):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup3(r0, r1, 0x0)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fbdbdf2567000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00993fff0000004f000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

5.580525929s ago: executing program 3 (id=4499):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'batadv_slave_0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xffffffff], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1c, 0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'wg1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x81, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd, 0x4}, {0x3}, @note={0x81}}, {0x6, 0x3, 0x0, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x3}, {0x6, 0xb}}}], 0x54)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000024c0)={0x0, 0x0, <r2=>0x0})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000004c0)={r6, 0x0, 0x4, 0x0, 0x2, [<r7=>0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000180)={r8})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000240)={r6, 0xc89, 0xd, 0xfffffffa, 0x1, [], [0x20000005, 0x5, 0xffffffff, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffff8, 0xa679, 0x1, 0x7f]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000002540)={0x0, r2, r6, 0x0, 0x0, 0x5, &(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002440)={0x2c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x10, 0x157, 0x0, 0x1, [@nested={0xc, 0xa5, 0x0, 0x1, [@nested={0x4, 0x15f}, @nested={0x4, 0x11d}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0xc000)
r11 = syz_open_dev$mtd(&(0x7f0000000100), 0x9, 0x151802)
readv(r11, &(0x7f0000002400)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/179, 0xb3}, {&(0x7f0000001200)=""/191, 0xbf}, {&(0x7f00000012c0)=""/4091, 0xffb}, {&(0x7f00000022c0)=""/147, 0x93}, {&(0x7f0000002380)=""/70, 0x46}], 0x7)

3.818828775s ago: executing program 2 (id=4510):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a0020000000000000000000050014000000000008000400", @ANYRES32=0x0, @ANYBLOB="0c000e"], 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8})
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="8ef82a328805c0aa92abe93065a4ba7861cea1f7f2567926f52ac72f987f5e5d898994976ec3a9475844ff8625577522c828c26d7fe30d5941c65f9b56fc5b63ef35df816430eed2820ad784a35191ce4ceb6896df1c9ee32b5262031022c2a310cdc0cda96e8673eda9bfc7542bd70e000758f223a0b216f49c999a2fa58bac31b1a1beb57037"], 0x7)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x38})
io_setup(0x401, &(0x7f0000000280)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0)
ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x1e, 0x9, 0x2, 0x4, 0x4, 0xffffdffa, 0x2d7b, 0x40000003, 0x5d, 0x5, 0xfffffffa, 0x8, 0x6, 0x880e, 0x5], 0x2, 0x4000007})
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={<r6=>0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10)
shutdown(r5, 0x2)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={r6, 0x8001}, &(0x7f00000000c0)=0x8)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r4, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

3.434166621s ago: executing program 0 (id=4511):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="244f8e21b2a1610f391a0b31d74bf50000abfb69533dfa2fcfb90d3e1f34", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f00000002c0), 0x2, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
getsockopt$packet_buf(r6, 0x107, 0x12, 0x0, &(0x7f0000000200))
sendfile(r0, r5, 0x0, 0x80000000)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]})
ioctl$COMEDI_SETRSUBD(r7, 0x6410)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random=0x400, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x1}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14}}, 0x64}}, 0x80)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

3.423643922s ago: executing program 0 (id=4512):
io_uring_setup(0x310c, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x2, 0x28e})

3.338411793s ago: executing program 0 (id=4513):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000140)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@private2, 0x57, r3})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x8020004, r1, 0x3f})
sendfile64(r4, r4, &(0x7f00000001c0)=0xfffffffffffffffe, 0x3)
openat$nullb(0xffffff9c, &(0x7f0000000000), 0x482100, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x80000300, 0x80000330, 0x5, 0xfffffffc, 0x43d], 0x0, 0x0, 0x0}, 0x98)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000206010100000000000000000a00000005000400020000000900020073797a32000000002c00078008000640000000da08001340000007ff0800134000001000050015000c0000000800124000000005050005000a000000050001000600000011000300686173683a6e65742c6e6574"], 0x78}, 0x1, 0x0, 0x0, 0x80820}, 0x80)
socket$netlink(0x10, 0x3, 0x9)

3.332693987s ago: executing program 0 (id=4514):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000d90ea2d2a9c178e1238c76e20206010200000000000000000000000011000300686173683a69702c706f72740000000012000300686173683a6e65742c706f7274000000050005000a00000005000400000000005cfd020073797a31000000000500010007000000663d84eac66c0988eeb738329f07c235b79cdb363bb342cad7a54f9f06ba2e7ae476c0f6b1062f712154c3ad6add9da3acda5cbc31f6bd65612cb2030a2e9cee6633ca9aa5512bc07a4e33ea7caa27558b91dc339e4acdbf07d17b0f3903aafd43980a00e6f49c5ce93ca3e98f8315c90c6494a05d"], 0x60}}, 0x0)
syz_usb_connect(0x3, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e3aa011a72c8e3920b67c8cec6cf36bd8ebc057a6ab041b9d54b39ca7faac6a74bb7a1fe7bd19ec8c8206a9da3afd7479449"], 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x4, &(0x7f0000000380)={0x8, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x7, 0x143502)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000200)={0x1, r4})
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="480deed3000000000000000000000000369b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140), 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
getrlimit(0x0, 0x0)

2.301616788s ago: executing program 1 (id=4518):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3)
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
setresuid(0xee01, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f0000000140)={<r3=>r1, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x1]}, {0x401, 0x0, 0x6, 0x6}}, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x2})
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

2.108175165s ago: executing program 1 (id=4519):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="244f8e21b2a1610f391a0b31d74bf50000abfb69533dfa2fcfb90d3e1f34", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f00000002c0), 0x2, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
getsockopt$packet_buf(r6, 0x107, 0x12, 0x0, &(0x7f0000000200))
sendfile(r0, r5, 0x0, 0x80000000)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]})
ioctl$COMEDI_SETRSUBD(r7, 0x6410)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random=0x400, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x1}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14}}, 0x64}}, 0x80)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

2.013049121s ago: executing program 1 (id=4520):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
setresuid(0xee01, 0x0, 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x5)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2d, 0x0, 0x0, 0x7fc00100}]})
ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040))
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f00000000c0)=0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x33ecc000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc3f0adf33c97bc065", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0x2877522e7311c3d1)
r5 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000023c0)=""/4095, 0xfff}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x2}, 0x40000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

1.762483406s ago: executing program 2 (id=4521):
openat$vsock(0xffffff9c, &(0x7f0000001000), 0x240000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x15, 0xe, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94)
setresuid(0xee01, 0xee00, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)
r3 = getpid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000fc0)={'\x00', 0x7c, 0x100, 0x9, 0x7, 0x8, r3})
r4 = getpid()
rseq(&(0x7f0000000140), 0x20, 0x0, 0x0)
migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000180)=0x5)
sched_setaffinity(r4, 0x0, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2}) (fail_nth: 2)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

1.647196473s ago: executing program 2 (id=4522):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = timerfd_create(0x0, 0x0)
read(r3, &(0x7f0000000240)=""/123, 0x7b)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xc)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'wg0\x00'}}, 0x1e)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$TIOCSETD(r5, 0x5412, 0x0)
sendmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

1.574744616s ago: executing program 0 (id=4523):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="800000001000390400000000fcdbdf2500000000", @ANYRES32=r0, @ANYBLOB="0dfdffff03010200600012800b00010062726964676500005000028008001b00d7ab000008001b00080000000c002300010000000100000008001c00b00000000c002e00000000000000000006000600830000000c002100f9ffff"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socket$kcm(0x29, 0x5, 0x0)
syz_open_dev$vim2m(0x0, 0x80, 0x2)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x240, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x4, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r4, 0x80041270, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}})
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, &(0x7f00000000c0))
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000e0000000000000000000000000000080000"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000170004000000040000000200000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000fa0000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r7=>0x0)
timer_gettime(r7, &(0x7f00000001c0))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
timer_settime(r7, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r8 = creat(&(0x7f0000000280)='./file1\x00', 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r8, {<r9=>0xffffffffffffffff}}, './file0\x00'})
setreuid(r9, r9)

1.137048354s ago: executing program 0 (id=4524):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, 0x0, 0x0)
fsopen(&(0x7f0000001340)='ubifs\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
prlimit64(0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=r3, @ANYBLOB="0e0b95fb4787d9fb8b6058799be4049b7af374c786c1fb27645ed4cad4dcc93af626f330d8dfc84a95278e2a18111b398609ba9198"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0xfd, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x2b, 0x3, 0xa, 0x0, 0xbd9], 0x70000, 0x43180})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0)
r5 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000240)={&(0x7f00000002c0)=[{0x8001, 0x1ca01, 0x0, 0x0}], 0x1})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0715000008000000440012800c0001006d6163766c616e0034abbd8e087e34f1f9000400aaaaaaaaaa"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRESHEX, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500"], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x1, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x0, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xffff1000, 0xc, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={<r8=>0x0, @empty, @local}, &(0x7f0000000480)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000040000000080000000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="03000000000000000300"/28], 0x50)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_io_uring_setup(0x5aed, &(0x7f0000000500)={0x0, 0x7c6a, 0x100, 0x1, 0x17f}, &(0x7f0000000580), &(0x7f0000000600), &(0x7f0000000640))
ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x889, 0x0, 0xfbe}]})

1.050407048s ago: executing program 1 (id=4525):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x3b, 0xc804, &(0x7f0000000440)={0x2, 0x4e26, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5)
sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008e", 0x6f}], 0x1}}], 0x1, 0x42054)
pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
openat$snapshot(0xffffff9c, &(0x7f0000000280), 0x20002, 0x0)
r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e24, 0x4, @empty, 0x8}, 0x1c)
getsockopt$inet6_int(r3, 0x29, 0x18, 0x0, &(0x7f00000000c0))
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20)

955.307356ms ago: executing program 1 (id=4526):
r0 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}]}, 0x38}}, 0x20000800)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
unshare(0x6a040000)
socket$vsock_stream(0x28, 0x1, 0x0)
exit(0x1ff)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
creat(&(0x7f0000000000)='./file0\x00', 0x101)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}, 0x1, 0x0, 0x0, 0x40094}, 0x48c0)
preadv(r3, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/90, 0x5a}, {&(0x7f0000000640)=""/201, 0xc9}, {&(0x7f0000000740)=""/30, 0x1e}, {&(0x7f0000000780)=""/181, 0xb5}, {&(0x7f0000000840)=""/153, 0x99}, {&(0x7f0000000900)=""/246, 0xf6}, {&(0x7f0000000a00)=""/120, 0x78}], 0x8, 0x5, 0x7)

634.643435ms ago: executing program 2 (id=4527):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x20, 0xc, 0x3, 0x0, 0x0, 0xfffffffd, 0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

420.009501ms ago: executing program 2 (id=4528):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x20, 0xc, 0x3, 0x0, 0x0, 0xfffffffd, 0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

240.815319ms ago: executing program 2 (id=4529):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
unshare(0x28000600)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x702, 0x1, 0x3, 0x7fff, 0x8001, 0x8, 0x2, 0x8]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x50811}, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x1c0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]})
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9dff23f367bef393}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x4)
preadv(r3, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x20000000000003b0, 0x0, 0xd)
r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f00000000c0)={0x1})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001aa80)={0x3534, 0x3f, 0x107, 0x70bd2b, 0x0, {0x19, 0x7c}, [@generic="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", @generic="f6d8d13ff6791b730394c553649c51edb1886cd40736d9c45279cbe310bbcf5b117be5d696561eafc5e4ce659000407740aadd99e5f64c4719632def7e3be9afcd363c54196c4855facb56f3e54ffddd9c31704ab24e416e3415b1e9c9508339bbc49bbc464c839b015b86a71f885441d0288f210ea1df9cbd8090773e8aaf75a276686904247ad5c5a1c11e396f4154ab6092e2371a0fd91c281067d88c0acb29329aa605aa36934a5bf34767327a923572dca29fcd0284f77cf4ed8ee94b34d85be411c362", @typed={0x8, 0xed, 0x0, 0x0, @u32}, @nested={0x103c, 0x118, 0x0, 0x1, [@typed={0x14, 0x13b, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @typed={0x8, 0x122, 0x0, 0x0, @u32=0x2}, @nested={0x1014, 0x135, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @ipv4=@broadcast}, @generic="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", @typed={0x8, 0xba, 0x0, 0x0, @ipv4=@local}]}, @typed={0x8, 0x41, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0xc, 0x152, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x2c1, 0x4, 0x0, 0x1, [@generic="90a8c66a640c1b7717d51b937902aaaa1c8c874f09e459e101ca9b601adaaaea982b8b03e486f925eb63c26bfd1ce9f3eba5dca6ef73339661febf06f1830f6a958e7c73073550c5637e4daa6fe60f5ddf25f846d111e3767693e5a30ebb64a2deda0d34fb6e065edb64068056f3c75ca1cc1113755dc20c13c58fff3d1a9e675abb4451e1571b49bddef02878c7729ebc8d", @generic="475ea23c68cc88356a6fc9c066cd8d33ff36b41d3ead2cfe9c6bde1f8bf33b5a6c353218b7d4946a8de336ff7249553c394e666752054609405eed22d3a0bbeb445474e4a92a6ba85c47401c148addd89841909806294a8de02e2b3d4cef28", @nested={0x1c9, 0x141, 0x0, 0x1, [@generic="d640a7c6466a6e39040804b6aba4d08790b0d54a10a7b22b62b057757fa0619f20050e1b0b7c97e302d33bbd23fc993e3c0e4e08088d93ef148d9347a71ba3fb8beb0525682c0a2f96e3a6885aca211256f79c5b68a9869e935e7d4c14d6eedfeacd032c27c364b20c7aba996cf70b876cc39c8fc0892f3cff60eebdfaea0b056f59167c27c199374a064a3219b4b9fa72d259ba8745332960f7f248be89e623d9d8d6d99656737aa3d2eb5432ef4449997aac28f00961e8262e01cb5db022f3238b5406bc0e6a3cdb180315ccf4b1501c3af13f31076aa8f870", @generic="bf9eaed0eec9a5dcd0266e2bdbf3cf042833672bfb576c7444e5ab6e008e4e72ce8e6e4ac2472799618e30a4fe7d52a435700da55b50359b3461b36bdb18c5aefbe97abbe0b7e5f5ddb640749e6a569ee5830dd67005dc61a19c4491472a868f7fe5b73f9bc8a137aa19afe9935f515cd91687758748af543ddad76522765ecded5bc9d9c05ca876dfc15bb926d87ff7bef37b6739d7e78608c52f4d6c949444569036136fa72389e67492ff6b5e0ba7eed5b1e215488aafbe2297f650f8cd42834a4777e5da8e0b4da8b1770a66d8", @nested={0x4, 0xe9}, @typed={0x8, 0x4f, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0xc9, 0x0, 0x0, @u32=0xfffffff7}, @typed={0x8, 0x155, 0x0, 0x0, @fd=r4}]}]}, @generic="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", @generic="d073cb52d96ef85ae878e1e7f6b318c8968d6dad8aa64a6285fd4065bf388e4b2786bf1ca76027f2fb059fb4af50fb1ffb6ec8e9c6cabb2e5cd7a40f0bea7acc6c550e6b061fe046e6e48ac6ee", @generic="b75692cf2f8c7738835f367688d9d1f5015ec17cf9b7b22fabc69d5baa73c79c8b25aef22f14898840448548892f18c19ff68002eefd8fe7786a671419c5972efe0be2cc6c0ca0e6edba3142cb42f76bc39165eaee7d888d4143b1ac5e52cb6551a1cdba81189452c6815eff38dba08548f2eb39dae90561818d3f44bf1f6abc7ad6a2e017884ff9926adc3df015aa8def541d3d91de3867a2ad9533dd3b47698e64e10e35ca1491808f571e73932531e3dd6d0593995a46b9a7ac59b3951473524889e348ebe268a3d19a0278f639e9790e4f165c9cd4b7926ef8094db153e74bfbc858f93dc448919165866b9ff6a9c52497e82cf14b"]}, 0x3534}, 0x1, 0x0, 0x0, 0x8040}, 0x4040)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r7, &(0x7f0000000400)=""/4096, 0x1000)
ioctl$KVM_RESET_DIRTY_RINGS(r7, 0xaec7)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x4000000)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2805005, 0x0)
pivot_root(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

0s ago: executing program 1 (id=4530):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000d90ea2d2a9c178e1238c76e20206010200000000000000000000000011000300686173683a69702c706f72740000000012000300686173683a6e65742c706f7274000000050005000a00000005000400000000005cfd020073797a31000000000500010007000000663d84eac66c0988eeb738329f07c235b79cdb363bb342cad7a54f9f06ba2e7ae476c0f6b1062f712154c3ad6add9da3acda5cbc31f6bd65612cb2030a2e9cee6633ca9aa5512bc07a4e33ea7caa27558b91dc339e4acdbf07d17b0f3903aafd43980a00e6f49c5ce93ca3e98f8315c90c6494a05d"], 0x60}}, 0x0)
syz_usb_connect(0x3, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e3aa011a72c8e3920b67c8cec6cf36bd8ebc057a6ab041b9d54b39ca7faac6a74bb7a1fe7bd19ec8c8206a9da3afd7479449"], 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x4, &(0x7f0000000380)={0x8, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x7, 0x143502)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000200)={0x1, r4})
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140)=r6, 0x4)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
getrlimit(0x0, 0x0)

kernel console output (not intermixed with test programs):

1: SerialNumber: syz
[  988.648948][ T5827] usb 8-1: config 0 descriptor??
[  988.650012][T17964] usb 5-1: config 0 descriptor??
[  988.694274][ T5827] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  988.699886][ T5827] dvb-usb: bulk message failed: -22 (2/0)
[  988.710931][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  988.717449][T17964] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  988.718412][ T5827] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  988.725610][T17964] dvb-usb: bulk message failed: -22 (2/0)
[  988.728777][ T5827] usb 8-1: media controller created
[  988.749332][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  988.794125][T17964] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  988.803361][T17964] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  988.815896][T17964] usb 5-1: media controller created
[  988.877542][T20030] dvb-usb: bulk message failed: -22 (4/0)
[  988.884284][T20030] cxusb: i2c read failed
[  988.894033][T20030] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3964'.
[  988.902453][T17964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  988.903179][T20033] dvb-usb: bulk message failed: -22 (4/0)
[  988.920785][T20033] cxusb: i2c read failed
[  988.954434][ T5827] cxusb: set interface failed
[  988.959182][ T5827] dvb-usb: bulk message failed: -22 (1/0)
[  988.959254][T20033] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3965'.
[  989.011284][ T5827] DVB: Unable to find symbol mt352_attach()
[  989.022328][ T5827] dvb-usb: bulk message failed: -22 (5/0)
[  989.028575][ T5827] zl10353_read_register: readreg error (reg=127, ret==-121)
[  989.035912][ T5827] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  989.086916][T17964] cxusb: set interface failed
[  989.091073][T17964] dvb-usb: bulk message failed: -22 (1/0)
[  989.105483][ T5827] rc_core: IR keymap rc-dvico-mce not found
[  989.110118][ T5827] Registered IR keymap rc-empty
[  989.115139][ T5827] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0
[  989.130704][ T5827] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input47
[  989.137251][T17964] DVB: Unable to find symbol mt352_attach()
[  989.141383][ T5827] dvb-usb: schedule remote query interval to 100 msecs.
[  989.143777][ T5827] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  989.149559][ T5827] usb 8-1: USB disconnect, device number 40
[  989.150109][T17964] dvb-usb: bulk message failed: -22 (5/0)
[  989.156499][T17964] zl10353_read_register: readreg error (reg=127, ret==-121)
[  989.192417][T17964] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  989.247332][ T5827] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  989.298627][T17964] rc_core: IR keymap rc-dvico-mce not found
[  989.319303][T17964] Registered IR keymap rc-empty
[  989.385052][T17964] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0
[  989.444517][T17964] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input48
[  989.463254][T17964] dvb-usb: schedule remote query interval to 100 msecs.
[  989.466976][T17964] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  989.487903][T17964] usb 5-1: USB disconnect, device number 61
[  989.761801][ T5756] Bluetooth: Frame is too long (len 35, expected len 8)
[  989.846493][T20061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3972'.
[  989.854817][T17964] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  989.928877][ T5756] Bluetooth: Frame is too long (len 35, expected len 8)
[  991.901916][T20082] netlink: 'syz.0.3979': attribute type 2 has an invalid length.
[  991.986055][ T5532] kernel read not supported for file /adsp1 (pid: 5532 comm: kworker/3:3)
[  992.183242][   T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  992.388357][   T24] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  992.392205][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  992.395067][   T24] usb 5-1: Product: syz
[  992.397330][   T24] usb 5-1: Manufacturer: syz
[  992.399870][   T24] usb 5-1: SerialNumber: syz
[  992.828683][   T24] usb 5-1: config 0 descriptor??
[  992.839299][   T24] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  992.842633][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  992.875477][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  992.890255][   T24] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  992.895569][   T24] usb 5-1: media controller created
[  992.915565][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  993.049740][T20082] dvb-usb: bulk message failed: -22 (4/0)
[  993.052396][T20082] cxusb: i2c read failed
[  993.056391][T20082] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3979'.
[  993.110874][   T24] cxusb: set interface failed
[  993.122191][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  993.264819][   T24] DVB: Unable to find symbol mt352_attach()
[  993.268305][   T24] dvb-usb: bulk message failed: -22 (5/0)
[  993.270685][   T24] zl10353_read_register: readreg error (reg=127, ret==-121)
[  993.274382][   T24] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  993.285682][T19450] usb 8-1: new full-speed USB device number 41 using dummy_hcd
[  993.353486][T20096] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[  993.369472][   T24] rc_core: IR keymap rc-dvico-mce not found
[  993.373589][   T24] Registered IR keymap rc-empty
[  993.412582][   T24] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0
[  993.435129][   T24] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input49
[  993.457560][T19450] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  993.467608][T19450] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  993.471170][   T24] dvb-usb: schedule remote query interval to 100 msecs.
[  993.475662][T19450] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  993.482902][T19450] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  993.483097][   T24] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  993.487538][T19450] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  993.537242][T19450] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22
[  993.547586][   T24] usb 5-1: USB disconnect, device number 62
[  993.710289][T20096] lo speed is unknown, defaulting to 1000
[  993.749448][   T24] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  994.316610][T20111] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  994.358522][T20111] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  994.362086][T20111] overlayfs: failed to look up (tracing) for ino (-66)
[  995.423001][   T42] kauditd_printk_skb: 100 callbacks suppressed
[  995.423018][   T42] audit: type=1326 audit(2000000291.306:15535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.2.3987" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0
[  995.870833][T20131] bridge0: port 4(vlan3) entered blocking state
[  995.874036][T20131] bridge0: port 4(vlan3) entered disabled state
[  995.877062][T20131] vlan3: entered allmulticast mode
[  995.878911][T20131] geneve0: entered allmulticast mode
[  995.883151][T20131] vlan3: entered promiscuous mode
[  995.885322][T20131] geneve0: entered promiscuous mode
[  995.946915][T20130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3990'.
[  995.949915][T20130] netlink: 90 bytes leftover after parsing attributes in process `syz.1.3990'.
[  995.953794][T20130] netlink: 90 bytes leftover after parsing attributes in process `syz.1.3990'.
[  996.252672][ T5898] usb 8-1: USB disconnect, device number 41
[  996.348845][T20141] use of bytesused == 0 is deprecated and will be removed in the future,
[  996.357937][T20141] use the actual size instead.
[  996.831576][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3999'.
[  998.024997][T18707] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  998.032138][T18707] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  998.041659][T18707] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  998.047097][T18707] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  998.125919][T20189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4008'.
[  998.189179][T20187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4005'.
[  998.985194][T20196] bridge0: port 2(bridge_slave_1) entered blocking state
[  998.987859][T20196] bridge0: port 2(bridge_slave_1) entered listening state
[  998.990385][T20196] bridge0: port 1(bridge_slave_0) entered blocking state
[  998.993159][T20196] bridge0: port 1(bridge_slave_0) entered listening state
[  999.076750][T20196] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1000.825390][T20213] syzkaller0: entered promiscuous mode
[ 1000.834488][T20213] syzkaller0: entered allmulticast mode
[ 1001.120681][T20223] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1001.297395][T20228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4024'.
[ 1001.315750][T20230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4022'.
[ 1001.345134][T20228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'.
[ 1001.619289][ T5943] usb 8-1: new full-speed USB device number 42 using dummy_hcd
[ 1001.814051][ T5943] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[ 1001.820218][ T5943] usb 8-1: config 0 has no interface number 0
[ 1001.826045][ T5943] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1001.843191][ T5943] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1001.847254][ T5943] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1001.852144][ T5943] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1001.864559][ T5943] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1001.867450][ T5943] usb 8-1: Product: syz
[ 1001.868836][ T5943] usb 8-1: SerialNumber: syz
[ 1001.871716][ T5943] usb 8-1: config 0 descriptor??
[ 1001.885446][ T5943] cm109 8-1:0.8: invalid payload size 0, expected 4
[ 1001.890404][ T5943] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input50
[ 1002.098067][    C2] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1003.153604][ T5756] Bluetooth: Frame is too long (len 35, expected len 8)
[ 1003.476239][    C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1003.476325][ T5827] usb 8-1: USB disconnect, device number 42
[ 1003.479709][    C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1003.491347][ T5827] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1003.637037][T20257] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1003.712615][T20260] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4032'.
[ 1003.716981][T20260] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4032'.
[ 1003.721363][T20260] netlink: 'syz.2.4032': attribute type 5 has an invalid length.
[ 1003.725866][T20260] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4032'.
[ 1004.077487][T20264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4033'.
[ 1004.081641][T20264] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4033'.
[ 1004.085702][T20264] netlink: 'syz.2.4033': attribute type 5 has an invalid length.
[ 1004.089926][T20264] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4033'.
[ 1004.269620][T20267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4034'.
[ 1004.402493][T20269] netlink: 'syz.2.4036': attribute type 2 has an invalid length.
[ 1004.542094][T20272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4035'.
[ 1004.728505][ T5841] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 1004.893627][ T5841] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[ 1004.898837][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[ 1004.902091][ T5841] usb 7-1: Product: syz
[ 1004.903882][ T5841] usb 7-1: Manufacturer: syz
[ 1004.905793][ T5841] usb 7-1: SerialNumber: syz
[ 1004.908814][ T5841] usb 7-1: config 0 descriptor??
[ 1004.921583][ T5841] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[ 1004.924900][ T5841] dvb-usb: bulk message failed: -22 (2/0)
[ 1004.930088][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1004.934842][ T5841] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[ 1004.941155][ T5841] usb 7-1: media controller created
[ 1004.958354][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1005.271902][T20269] dvb-usb: bulk message failed: -22 (4/0)
[ 1005.282211][T20269] cxusb: i2c read failed
[ 1005.492573][ T5841] cxusb: set interface failed
[ 1005.494816][ T5841] dvb-usb: bulk message failed: -22 (1/0)
[ 1005.566626][ T5841] DVB: Unable to find symbol mt352_attach()
[ 1005.572435][ T5841] dvb-usb: bulk message failed: -22 (5/0)
[ 1005.587682][ T5841] zl10353_read_register: readreg error (reg=127, ret==-121)
[ 1005.597711][ T5841] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[ 1005.669305][ T5841] rc_core: IR keymap rc-dvico-mce not found
[ 1005.680612][ T5841] Registered IR keymap rc-empty
[ 1005.767329][ T5841] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[ 1005.794737][ T5841] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input51
[ 1005.807187][ T5841] dvb-usb: schedule remote query interval to 100 msecs.
[ 1005.809622][ T5841] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[ 1005.830205][ T5841] usb 7-1: USB disconnect, device number 48
[ 1006.101833][ T5841] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[ 1006.188330][T20288] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1006.455010][T20299] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1006.700379][T20307] __nla_validate_parse: 4 callbacks suppressed
[ 1006.700399][T20307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4045'.
[ 1006.880592][T20314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4047'.
[ 1006.953790][T20315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4047'.
[ 1007.045071][T20313] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1007.129925][T20317] netlink: 'syz.3.4048': attribute type 4 has an invalid length.
[ 1007.132616][T20317] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4048'.
[ 1007.959386][T20335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4053'.
[ 1008.006746][ T5756] Bluetooth: Frame is too long (len 35, expected len 8)
[ 1008.125414][   T42] audit: type=1326 audit(2000000303.181:15536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20337 comm="syz.0.4056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1008.133725][   T42] audit: type=1326 audit(2000000303.181:15537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20337 comm="syz.0.4056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1008.140829][   T42] audit: type=1326 audit(2000000303.190:15538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20337 comm="syz.0.4056" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1008.149445][   T42] audit: type=1326 audit(2000000303.190:15539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20337 comm="syz.0.4056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1008.156461][   T42] audit: type=1326 audit(2000000303.190:15540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20337 comm="syz.0.4056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1008.169457][   T42] audit: type=1326 audit(2000000303.190:15541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20337 comm="syz.0.4056" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1008.177255][   T42] audit: type=1326 audit(2000000303.190:15542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20337 comm="syz.0.4056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1008.184834][   T42] audit: type=1326 audit(2000000303.190:15543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20337 comm="syz.0.4056" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1008.192572][   T42] audit: type=1326 audit(2000000303.200:15544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20337 comm="syz.0.4056" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1008.200463][   T42] audit: type=1326 audit(2000000303.200:15545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20337 comm="syz.0.4056" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1009.262722][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4067'.
[ 1009.406843][T20373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.421000][T20373] ip6gre1: entered allmulticast mode
[ 1009.444731][T20377] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[ 1009.465845][T20376] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.4061'.
[ 1009.481159][T20376] netlink: 'syz.1.4061': attribute type 1 has an invalid length.
[ 1010.413654][ T2326] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[ 1010.595197][ T2326] usb 8-1: Using ep0 maxpacket: 16
[ 1010.606545][ T2326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1010.615328][ T2326] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1010.620591][ T2326] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1010.629032][ T2326] usb 8-1: Product: syz
[ 1010.634242][ T2326] usb 8-1: Manufacturer: syz
[ 1010.641658][ T2326] usb 8-1: SerialNumber: syz
[ 1010.658044][ T2326] usb 8-1: config 0 descriptor??
[ 1010.677873][ T2326] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1010.692838][ T2326] em28xx 8-1:0.0: DVB interface 0 found: bulk
[ 1011.329325][ T2326] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[ 1011.674553][T19450] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1011.786482][ T2326] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1011.791237][ T2326] em28xx 8-1:0.0: board has no eeprom
[ 1011.831482][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4075'.
[ 1011.838478][T19450] usb 7-1: Using ep0 maxpacket: 32
[ 1011.845900][T19450] usb 7-1: config 0 has an invalid interface number: 119 but max is 0
[ 1011.849111][T19450] usb 7-1: config 0 has no interface number 0
[ 1011.851174][T19450] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1011.855257][T19450] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1011.859289][T19450] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 6657, setting to 1024
[ 1011.863459][T19450] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1011.867305][T19450] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1011.874436][T19450] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1011.877716][T19450] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.880295][T19450] usb 7-1: Product: syz
[ 1011.881650][T19450] usb 7-1: Manufacturer: syz
[ 1011.883130][T19450] usb 7-1: SerialNumber: syz
[ 1011.886262][T19450] usb 7-1: config 0 descriptor??
[ 1011.889257][T20418] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1011.895101][T19450] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input52
[ 1012.353908][    T9] usb 7-1: USB disconnect, device number 49
[ 1012.724064][T20437] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1012.750549][T20437] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 1012.754587][T20437] overlayfs: failed to look up (tracing) for ino (-66)
[ 1013.635229][T20390] em28xx 8-1:0.0: reading from i2c device at 0xe failed (error=-5)
[ 1013.684095][ T2326] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1013.686970][ T2326] em28xx 8-1:0.0: dvb set to bulk mode.
[ 1013.689371][T19450] em28xx 8-1:0.0: Binding DVB extension
[ 1013.706317][ T2326] usb 8-1: USB disconnect, device number 43
[ 1013.712140][ T2326] em28xx 8-1:0.0: Disconnecting em28xx
[ 1013.766325][T19450] em28xx 8-1:0.0: Registering input extension
[ 1013.770694][ T2326] em28xx 8-1:0.0: Closing input extension
[ 1013.802958][T20450] netlink: 'syz.2.4092': attribute type 2 has an invalid length.
[ 1013.884269][ T2326] em28xx 8-1:0.0: Freeing device
[ 1014.089506][T19450] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1014.228515][ T2326] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[ 1014.256197][T19450] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[ 1014.260539][T19450] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[ 1014.264535][T19450] usb 7-1: Product: syz
[ 1014.266494][T19450] usb 7-1: Manufacturer: syz
[ 1014.268650][T19450] usb 7-1: SerialNumber: syz
[ 1014.276754][T19450] usb 7-1: config 0 descriptor??
[ 1014.285341][T19450] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[ 1014.288788][T19450] dvb-usb: bulk message failed: -22 (2/0)
[ 1014.294576][T19450] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1014.299606][T19450] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[ 1014.302892][T19450] usb 7-1: media controller created
[ 1014.315980][T19450] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1014.410739][ T2326] usb 8-1: Using ep0 maxpacket: 16
[ 1014.419545][ T2326] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[ 1014.428699][ T2326] usb 8-1: config 0 has no interface number 0
[ 1014.432703][ T2326] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1014.437776][ T2326] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1014.445352][ T2326] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1014.450209][ T2326] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1014.453984][ T2326] usb 8-1: Product: syz
[ 1014.456315][ T2326] usb 8-1: SerialNumber: syz
[ 1014.469454][ T2326] usb 8-1: config 0 descriptor??
[ 1014.482569][ T2326] cm109 8-1:0.8: invalid payload size 0, expected 4
[ 1014.491215][ T2326] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input54
[ 1014.501413][T20450] dvb-usb: bulk message failed: -22 (4/0)
[ 1014.504048][T20450] cxusb: i2c read failed
[ 1014.507595][T20450] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4092'.
[ 1014.527334][T19450] cxusb: set interface failed
[ 1014.535408][T19450] dvb-usb: bulk message failed: -22 (1/0)
[ 1014.586029][T19450] DVB: Unable to find symbol mt352_attach()
[ 1014.589082][T19450] dvb-usb: bulk message failed: -22 (5/0)
[ 1014.596404][T19450] zl10353_read_register: readreg error (reg=127, ret==-121)
[ 1014.603422][T19450] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[ 1014.677568][T20456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4093'.
[ 1014.709324][T19450] rc_core: IR keymap rc-dvico-mce not found
[ 1014.709389][T19450] Registered IR keymap rc-empty
[ 1014.710737][T19450] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[ 1014.730046][T19450] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input55
[ 1014.765737][T19450] dvb-usb: schedule remote query interval to 100 msecs.
[ 1014.771672][    C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1014.772259][    T9] usb 8-1: USB disconnect, device number 44
[ 1014.774463][    C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1014.774626][T19450] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[ 1014.779340][T19450] usb 7-1: USB disconnect, device number 50
[ 1014.792080][    T9] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1014.897523][T20464] siw: device registration error -23
[ 1014.921617][T19450] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[ 1015.006316][   T42] kauditd_printk_skb: 152 callbacks suppressed
[ 1015.006335][   T42] audit: type=1326 audit(2000000309.619:15698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20465 comm="syz.0.4098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1015.025197][   T42] audit: type=1326 audit(2000000309.638:15699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20465 comm="syz.0.4098" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1015.033888][   T42] audit: type=1326 audit(2000000309.647:15700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20465 comm="syz.0.4098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1015.042458][   T42] audit: type=1326 audit(2000000309.647:15701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20465 comm="syz.0.4098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1015.050118][   T42] audit: type=1326 audit(2000000309.647:15702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20465 comm="syz.0.4098" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1015.060346][   T42] audit: type=1326 audit(2000000309.647:15703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20465 comm="syz.0.4098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1015.069212][   T42] audit: type=1326 audit(2000000309.647:15704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20465 comm="syz.0.4098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1015.076778][   T42] audit: type=1326 audit(2000000309.647:15705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20465 comm="syz.0.4098" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1015.096017][   T42] audit: type=1326 audit(2000000309.713:15706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20465 comm="syz.0.4098" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1015.113967][   T42] audit: type=1326 audit(2000000309.722:15707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20465 comm="syz.0.4098" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1015.133261][ T5756] Bluetooth: Frame is too long (len 35, expected len 8)
[ 1015.425305][    C3] bridge0: port 1(bridge_slave_0) entered learning state
[ 1015.428588][    C3] bridge0: port 2(bridge_slave_1) entered learning state
[ 1016.053093][T20479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4102'.
[ 1016.748203][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4105'.
[ 1016.752104][T20490] netlink: 'syz.2.4105': attribute type 14 has an invalid length.
[ 1016.761613][T18707] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1016.768416][T20490] openvswitch: netlink: Key 32 has unexpected len 8 expected 2
[ 1016.771982][T18707] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1016.776546][T18707] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1016.779662][T18707] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1016.888131][T20496] netlink: 'syz.1.4108': attribute type 2 has an invalid length.
[ 1016.912013][T20496] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4108'.
[ 1017.009596][T20489] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[ 1017.183443][T20506] netlink: 'syz.3.4112': attribute type 39 has an invalid length.
[ 1017.204050][T20506] hsr_slave_0 (unregistering): left promiscuous mode
[ 1017.242300][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4112'.
[ 1017.271533][T20513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4112'.
[ 1017.405578][T20516] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4114'.
[ 1017.911915][T20524] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.4116'.
[ 1017.946247][T20526] FAULT_INJECTION: forcing a failure.
[ 1017.946247][T20526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1017.954391][T20526] CPU: 0 UID: 0 PID: 20526 Comm: syz.2.4117 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1017.954414][T20526] Tainted: [L]=SOFTLOCKUP
[ 1017.954419][T20526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1017.954427][T20526] Call Trace:
[ 1017.954432][T20526]  <TASK>
[ 1017.954438][T20526]  dump_stack_lvl+0x100/0x190
[ 1017.954546][T20526]  should_fail_ex.cold+0x5/0xa
[ 1017.954584][T20526]  _copy_from_iter+0x1f4/0x1690
[ 1017.954627][T20526]  ? __asan_memset+0x23/0x50
[ 1017.954666][T20526]  ? __pfx__copy_from_iter+0x10/0x10
[ 1017.954683][T20526]  ? __pfx___alloc_skb+0x10/0x10
[ 1017.954759][T20526]  netlink_sendmsg+0x808/0xda0
[ 1017.954843][T20526]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1017.954878][T20526]  ? apparmor_socket_sendmsg+0x15b/0x270
[ 1017.954907][T20526]  ____sys_sendmsg+0xa4d/0xbe0
[ 1017.954925][T20526]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1017.954944][T20526]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1017.954967][T20526]  ___sys_sendmsg+0x190/0x1e0
[ 1017.954986][T20526]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1017.955011][T20526]  ? find_held_lock+0x2b/0x80
[ 1017.955065][T20526]  __sys_sendmsg+0x160/0x210
[ 1017.955080][T20526]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1017.955097][T20526]  ? __pfx_ksys_write+0x10/0x10
[ 1017.955159][T20526]  __do_fast_syscall_32+0xe7/0x970
[ 1017.955199][T20526]  ? lockdep_hardirqs_on+0x78/0x100
[ 1017.955219][T20526]  do_fast_syscall_32+0x32/0x70
[ 1017.955238][T20526]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1017.955256][T20526] RIP: 0023:0xf705efec
[ 1017.955275][T20526] Code: Unable to access opcode bytes at 0xf705efc2.
[ 1017.955281][T20526] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1017.955294][T20526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300
[ 1017.955302][T20526] RDX: 0000000004040060 RSI: 0000000000000000 RDI: 0000000000000000
[ 1017.955310][T20526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1017.955317][T20526] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1017.955324][T20526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1017.955339][T20526]  </TASK>
[ 1018.236331][T20536] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[ 1018.339508][T20536] lo speed is unknown, defaulting to 1000
[ 1018.558832][T20546] netlink: 'syz.3.4124': attribute type 2 has an invalid length.
[ 1018.844744][T12939] usb 8-1: new high-speed USB device number 45 using dummy_hcd
[ 1019.031888][T12939] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[ 1019.035582][T12939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[ 1019.038874][T12939] usb 8-1: Product: syz
[ 1019.040406][T12939] usb 8-1: Manufacturer: syz
[ 1019.042141][T12939] usb 8-1: SerialNumber: syz
[ 1019.045552][T12939] usb 8-1: config 0 descriptor??
[ 1019.068252][T12939] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[ 1019.071804][T12939] dvb-usb: bulk message failed: -22 (2/0)
[ 1019.077423][T12939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1019.081153][T12939] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[ 1019.083771][T12939] usb 8-1: media controller created
[ 1019.093086][T12939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1019.291231][T20546] dvb-usb: bulk message failed: -22 (4/0)
[ 1019.294198][T20546] cxusb: i2c read failed
[ 1019.299098][T20546] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4124'.
[ 1019.333701][T12939] cxusb: set interface failed
[ 1019.338747][T12939] dvb-usb: bulk message failed: -22 (1/0)
[ 1019.397075][T12939] DVB: Unable to find symbol mt352_attach()
[ 1019.402186][T12939] dvb-usb: bulk message failed: -22 (5/0)
[ 1019.407282][T12939] zl10353_read_register: readreg error (reg=127, ret==-121)
[ 1019.424306][T12939] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[ 1019.667013][T20564] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1019.678557][T12939] rc_core: IR keymap rc-dvico-mce not found
[ 1019.684596][T12939] Registered IR keymap rc-empty
[ 1019.696013][T12939] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0
[ 1019.714422][T12939] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input56
[ 1019.727124][T12939] dvb-usb: schedule remote query interval to 100 msecs.
[ 1019.735509][T12939] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[ 1019.747349][T12939] usb 8-1: USB disconnect, device number 45
[ 1019.833779][T12939] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[ 1020.119147][T20580] input: syz0 as /devices/virtual/input/input57
[ 1020.543547][   T42] kauditd_printk_skb: 110 callbacks suppressed
[ 1020.543629][   T42] audit: type=1326 audit(2000000314.804:15818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.3.4136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1020.570407][   T42] audit: type=1326 audit(2000000314.832:15819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.3.4136" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1020.580098][   T42] audit: type=1326 audit(2000000314.841:15820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.3.4136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1020.591492][   T42] audit: type=1326 audit(2000000314.850:15821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.3.4136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1020.603189][   T42] audit: type=1326 audit(2000000314.860:15822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.3.4136" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1020.614673][   T42] audit: type=1326 audit(2000000314.878:15823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.3.4136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1020.624066][   T42] audit: type=1326 audit(2000000314.888:15824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.3.4136" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1020.637014][   T42] audit: type=1326 audit(2000000314.897:15825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.3.4136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1020.646246][   T42] audit: type=1326 audit(2000000314.907:15826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.3.4136" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1020.658762][   T42] audit: type=1326 audit(2000000314.916:15827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.3.4136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[ 1020.930892][T20591] overlayfs: failed to clone upperpath
[ 1021.078103][    T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1021.239417][    T9] usb 5-1: Using ep0 maxpacket: 32
[ 1021.244677][    T9] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[ 1021.253059][    T9] usb 5-1: config 0 has no interface number 0
[ 1021.263780][    T9] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1021.273706][    T9] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1021.284142][    T9] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 6657, setting to 1024
[ 1021.289191][    T9] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1021.295169][    T9] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1021.301239][T20603] __nla_validate_parse: 2 callbacks suppressed
[ 1021.301252][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4142'.
[ 1021.302675][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1021.310155][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.312998][    T9] usb 5-1: Product: syz
[ 1021.315620][    T9] usb 5-1: Manufacturer: syz
[ 1021.317241][    T9] usb 5-1: SerialNumber: syz
[ 1021.323352][    T9] usb 5-1: config 0 descriptor??
[ 1021.326317][T20589] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1021.331995][    T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input58
[ 1021.458048][    C2] bcm5974 5-1:0.119: trackpad urb failed: -1
[ 1021.853264][T15567] usb 5-1: USB disconnect, device number 63
[ 1022.305845][T20636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4149'.
[ 1022.346553][T20638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4151'.
[ 1022.367177][T20635] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4150'.
[ 1022.376098][T20635] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4150'.
[ 1022.380373][T20635] netlink: 'syz.3.4150': attribute type 5 has an invalid length.
[ 1022.383810][T20635] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4150'.
[ 1022.874677][T20650] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[ 1022.878265][T20650] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1022.915601][T20650] vhci_hcd vhci_hcd.0: Device attached
[ 1023.053697][T20650] geneve2: entered allmulticast mode
[ 1023.201950][T20650] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[ 1023.217982][ T5943] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1023.279878][T19450] usb 42-1: SetAddress Request (62) to port 0
[ 1023.284331][T19450] usb 42-1: new SuperSpeed USB device number 62 using vhci_hcd
[ 1023.330716][T20650] lo speed is unknown, defaulting to 1000
[ 1023.386460][ T5943] usb 5-1: Using ep0 maxpacket: 16
[ 1023.392359][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1023.396583][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1023.401745][ T5943] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1023.404973][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.411403][ T5943] usb 5-1: config 0 descriptor??
[ 1023.724673][T20663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1023.727714][T20663] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1023.737706][T20663] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1023.856830][T20651] vhci_hcd: connection reset by peer
[ 1023.862677][T15952] vhci_hcd vhci_hcd.2: stop threads
[ 1023.865036][T15952] vhci_hcd vhci_hcd.2: release socket
[ 1023.873206][T15952] vhci_hcd vhci_hcd.2: disconnect device
[ 1023.994554][ T5943] usbhid 5-1:0.0: can't add hid device: -71
[ 1023.996741][ T5943] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1024.001047][ T5943] usb 5-1: USB disconnect, device number 64
[ 1024.100625][T20674] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4161'.
[ 1024.103924][T20674] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4161'.
[ 1024.107618][T20674] netlink: 'syz.2.4161': attribute type 5 has an invalid length.
[ 1024.111010][T20674] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4161'.
[ 1025.656431][T20703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4170'.
[ 1026.317416][ T5756] Bluetooth: Frame is too long (len 35, expected len 8)
[ 1026.622668][T20725] team0: No ports can be present during mode change
[ 1026.955487][  T846] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1027.128184][  T846] usb 5-1: too many configurations: 9, using maximum allowed: 8
[ 1027.134460][  T846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1027.140276][  T846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1027.148168][  T846] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1027.151762][  T846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1027.155900][  T846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1027.163561][  T846] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1027.167588][  T846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1027.171697][  T846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1027.176331][  T846] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1027.180490][  T846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1027.184251][  T846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1027.188244][  T846] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1027.192031][  T846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1027.195387][  T846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1027.202830][  T846] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1027.210644][  T846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1027.221697][  T846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1027.228598][  T846] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1027.234406][  T846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1027.239125][  T846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1027.246104][  T846] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1027.251805][  T846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1027.258054][  T846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1027.265337][  T846] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1027.271973][  T846] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1027.277873][  T846] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1027.281165][  T846] usb 5-1: Product: syz
[ 1027.283089][  T846] usb 5-1: Manufacturer: syz
[ 1027.285261][  T846] usb 5-1: SerialNumber: syz
[ 1027.289828][  T846] usb 5-1: config 0 descriptor??
[ 1027.302194][  T846] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[ 1027.435895][ T5756] Bluetooth: Frame is too long (len 35, expected len 8)
[ 1027.554036][T20741] overlayfs: failed to clone lowerpath
[ 1027.879662][    C3] usb 5-1: yurex_control_callback - control failed: -71
[ 1027.883958][T10310] usb 5-1: USB disconnect, device number 65
[ 1027.907363][T10310] yurex 5-1:0.0: USB YUREX #0 now disconnected
[ 1028.515811][T20749] __nla_validate_parse: 1 callbacks suppressed
[ 1028.515836][T20749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4183'.
[ 1028.638130][T20749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4183'.
[ 1028.676452][T19450] usb 42-1: device descriptor read/8, error -110
[ 1029.328204][ T5943] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1029.440931][ T5756] Bluetooth: Frame is too long (len 35, expected len 8)
[ 1029.487335][T19450] usb usb42-port1: attempt power cycle
[ 1029.492247][ T5943] usb 5-1: Using ep0 maxpacket: 8
[ 1029.510103][ T5943] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1029.532378][ T5943] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1029.546139][ T5943] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1029.556630][ T5943] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1029.569890][ T5943] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1029.573745][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1029.597075][ T5943] usbtmc 5-1:16.0: bulk endpoints not found
[ 1029.821231][T20761] could not allocate digest TFM handle md5
[ 1030.025037][T20767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1030.036802][T20767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1030.045028][T20767] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1030.055344][T20767] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1030.058744][T20767] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1030.066357][T20767] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1030.073436][T20767] bond0 (unregistering): Released all slaves
[ 1030.133484][T19450] usb usb42-port1: unable to enumerate USB device
[ 1030.378522][T20775] netlink: 'syz.1.4191': attribute type 2 has an invalid length.
[ 1030.423711][T20775] : entered promiscuous mode
[ 1030.435488][T20775] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4191'.
[ 1030.825868][T20779] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[ 1030.958635][T20779] lo speed is unknown, defaulting to 1000
[ 1031.318582][T20786] 
: renamed from bond_slave_0 (while UP)
[ 1031.524709][T20792] could not allocate digest TFM handle md5
[ 1032.214108][T20811] can0: slcan on ttyS3.
[ 1032.252633][T20834] fuse: fd is not a fuse device
[ 1032.261224][T20834] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4204'.
[ 1032.272393][T20834] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4204'.
[ 1032.278703][T20834] netlink: 'syz.1.4204': attribute type 5 has an invalid length.
[ 1032.286975][T20834] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4204'.
[ 1032.333216][T20771] block nbd0: shutting down sockets
[ 1032.376462][T12939] usb 8-1: new high-speed USB device number 46 using dummy_hcd
[ 1032.452856][    T9] usb 5-1: USB disconnect, device number 66
[ 1032.545331][T20811] can0 (unregistered): slcan off ttyS3.
[ 1032.557262][   T42] kauditd_printk_skb: 1 callbacks suppressed
[ 1032.557283][   T42] audit: type=1326 audit(2000000326.052:15829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20839 comm="syz.1.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1032.566990][T12939] usb 8-1: Using ep0 maxpacket: 16
[ 1032.581841][   T42] audit: type=1326 audit(2000000326.052:15830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20839 comm="syz.1.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1032.585614][T20845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4206'.
[ 1032.601109][T12939] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1032.604934][T12939] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1032.614571][   T42] audit: type=1326 audit(2000000326.071:15831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20839 comm="syz.1.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1032.621790][T12939] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1032.625128][T12939] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.628549][   T42] audit: type=1326 audit(2000000326.071:15832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20839 comm="syz.1.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1032.641347][T12939] usb 8-1: config 0 descriptor??
[ 1032.782524][   T42] audit: type=1326 audit(2000000326.071:15833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20839 comm="syz.1.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1032.808979][T20850] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4206'.
[ 1032.827044][   T42] audit: type=1326 audit(2000000326.071:15834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20839 comm="syz.1.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1032.876928][   T42] audit: type=1326 audit(2000000326.071:15835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20839 comm="syz.1.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1032.893597][   T42] audit: type=1326 audit(2000000326.071:15836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20839 comm="syz.1.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1032.903162][   T42] audit: type=1326 audit(2000000326.117:15837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20839 comm="syz.1.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1033.029507][ T5756] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[ 1033.034824][ T5756] CPU: 3 UID: 0 PID: 5756 Comm: kworker/u34:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1033.034859][ T5756] Tainted: [L]=SOFTLOCKUP
[ 1033.034866][ T5756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1033.034910][ T5756] Workqueue: hci1 hci_rx_work
[ 1033.034978][ T5756] Call Trace:
[ 1033.034994][ T5756]  <TASK>
[ 1033.035007][ T5756]  dump_stack_lvl+0x100/0x190
[ 1033.035083][ T5756]  sysfs_warn_dup.cold+0x1c/0x28
[ 1033.035139][ T5756]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1033.035238][ T5756]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1033.035289][ T5756]  ? find_held_lock+0x2b/0x80
[ 1033.035316][ T5756]  ? kobject_add_internal+0x25f/0x930
[ 1033.035369][ T5756]  ? kobject_add_internal+0x25f/0x930
[ 1033.035421][ T5756]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1033.035448][ T5756]  kobject_add_internal+0x2c8/0x930
[ 1033.035507][ T5756]  kobject_add+0x16a/0x1e0
[ 1033.035560][ T5756]  ? __pfx_kobject_add+0x10/0x10
[ 1033.035615][ T5756]  ? class_to_subsys+0x10f/0x150
[ 1033.035668][ T5756]  ? kobject_put+0xb9/0x640
[ 1033.035710][ T5756]  ? _raw_spin_unlock+0x28/0x50
[ 1033.035763][ T5756]  device_add+0x294/0x1970
[ 1033.035796][ T5756]  ? __pfx_dev_set_name+0x10/0x10
[ 1033.035888][ T5756]  ? __pfx_device_add+0x10/0x10
[ 1033.035918][ T5756]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1033.036017][ T5756]  hci_conn_add_sysfs+0x1a3/0x260
[ 1033.036044][ T5756]  le_conn_complete_evt+0x11eb/0x1f60
[ 1033.036114][ T5756]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1033.036169][ T5756]  ? hci_event_packet+0x186/0xcd0
[ 1033.036200][ T5756]  ? hci_event_packet+0x186/0xcd0
[ 1033.036259][ T5756]  hci_le_enh_conn_complete_evt+0x23d/0x3b0
[ 1033.036319][ T5756]  ? skb_pull_data+0x15f/0x1e0
[ 1033.036406][ T5756]  hci_le_meta_evt+0x34a/0x5f0
[ 1033.036467][ T5756]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[ 1033.036525][ T5756]  hci_event_packet+0x51c/0xcd0
[ 1033.036581][ T5756]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1033.036616][ T5756]  ? __pfx_hci_event_packet+0x10/0x10
[ 1033.036685][ T5756]  ? kcov_remote_start+0x384/0x670
[ 1033.036738][ T5756]  ? lockdep_hardirqs_on+0x78/0x100
[ 1033.036779][ T5756]  hci_rx_work+0x451/0xfc0
[ 1033.036841][ T5756]  process_one_work+0xa23/0x1940
[ 1033.036937][ T5756]  ? __pfx_process_one_work+0x10/0x10
[ 1033.036976][ T5756]  ? __pfx_hci_rx_work+0x10/0x10
[ 1033.037033][ T5756]  worker_thread+0x5ef/0xe50
[ 1033.037072][ T5756]  ? kthread+0x13a/0x450
[ 1033.037124][ T5756]  ? __pfx_worker_thread+0x10/0x10
[ 1033.037178][ T5756]  kthread+0x370/0x450
[ 1033.037204][ T5756]  ? __pfx_kthread+0x10/0x10
[ 1033.037259][ T5756]  ret_from_fork+0x72b/0xd50
[ 1033.037306][ T5756]  ? __pfx_ret_from_fork+0x10/0x10
[ 1033.037333][ T5756]  ? __switch_to+0x800/0x10f0
[ 1033.037390][ T5756]  ? __pfx_kthread+0x10/0x10
[ 1033.037444][ T5756]  ret_from_fork_asm+0x1a/0x30
[ 1033.037484][ T5756]  </TASK>
[ 1033.164608][ T5756] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1033.175815][ T5756] Bluetooth: hci1: failed to register connection device
[ 1033.538060][   T42] audit: type=1326 audit(2000000326.960:15838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20839 comm="syz.1.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1033.643693][T20862] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1034.043137][T12939] usbhid 8-1:0.0: can't add hid device: -71
[ 1034.045570][T12939] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1034.050923][T12939] usb 8-1: USB disconnect, device number 46
[ 1034.068108][T20879] bridge0: port 3(dummy0) entered disabled state
[ 1034.071191][T20879] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1034.074804][T20879] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1034.081697][T20879] bridge0: entered allmulticast mode
[ 1034.200664][ T5532] IPVS: starting estimator thread 0...
[ 1034.307773][T20885] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1034.492563][T20891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4214'.
[ 1035.344131][T20875] Bluetooth: hci1: command 0x0406 tx timeout
[ 1035.417304][T20905] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4219'.
[ 1035.428511][T20905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4219'.
[ 1035.736705][T20913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4222'.
[ 1035.778785][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4222'.
[ 1035.946164][T20918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4224'.
[ 1036.005203][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4224'.
[ 1036.049374][ T5532] usb 8-1: new high-speed USB device number 47 using dummy_hcd
[ 1036.113874][ T5756] Bluetooth: hci0: command 0x0406 tx timeout
[ 1036.122317][T18908] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1036.988987][T20924] devpts: Bad value for 'max'
[ 1036.991563][T20924] overlayfs: failed to resolve './bus': -2
[ 1037.075327][ T5532] usb 8-1: Using ep0 maxpacket: 16
[ 1037.081098][ T5532] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1037.087679][ T5532] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1037.094392][ T5532] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1037.100266][ T5532] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1037.111030][ T5532] usb 8-1: config 0 descriptor??
[ 1037.113385][ T5756] Bluetooth: hci1: unexpected event for opcode 0x1405
[ 1037.119054][T20928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4229'.
[ 1037.216896][T20939] input: syz1 as /devices/virtual/input/input59
[ 1037.368844][T20941] netlink: 'syz.1.4232': attribute type 9 has an invalid length.
[ 1037.415492][T20942] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1037.612296][ T5532] usbhid 8-1:0.0: can't add hid device: -71
[ 1037.617473][ T5532] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1037.623750][ T5532] usb 8-1: USB disconnect, device number 47
[ 1037.860708][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4233'.
[ 1038.135840][T20945] bond2: Unable to set down delay as MII monitoring is disabled
[ 1038.231607][T20945] bond2 (unregistering): Released all slaves
[ 1040.126270][T20993] bond3: Unable to set down delay as MII monitoring is disabled
[ 1040.144422][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4250'.
[ 1040.260661][T20993] bond3 (unregistering): Released all slaves
[ 1040.412806][T21000] binder: 20999:21000 ioctl c0306201 800003c0 returned -14
[ 1040.464763][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4251'.
[ 1040.554602][T20875] Bluetooth: Frame is too long (len 35, expected len 8)
[ 1040.625910][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880268c6800: rx timeout, send abort
[ 1041.170335][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880268c6800: abort rx timeout. Force session deactivation
[ 1041.230445][T21019] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4257'.
[ 1041.236712][T21019] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4257'.
[ 1041.264744][T21019] netlink: 'syz.3.4257': attribute type 5 has an invalid length.
[ 1041.276513][T21019] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4257'.
[ 1042.158999][T21025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4259'.
[ 1042.517119][   T24] usb 8-1: new full-speed USB device number 48 using dummy_hcd
[ 1042.547484][T20875] Bluetooth: Frame is too long (len 35, expected len 8)
[ 1042.687703][   T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1042.691440][   T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1042.695786][   T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1042.700052][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1042.926683][   T24] usb 8-1: usb_control_msg returned -32
[ 1042.929342][   T24] usbtmc 8-1:16.0: can't read capabilities
[ 1043.370414][T21037] netlink: 'syz.1.4263': attribute type 2 has an invalid length.
[ 1043.379348][T21037] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4263'.
[ 1043.519471][ T5943] usb 8-1: USB disconnect, device number 48
[ 1043.876439][T21042] bond0: Unable to set down delay as MII monitoring is disabled
[ 1043.885384][T21042] bond0 (unregistering): Released all slaves
[ 1043.919731][T21044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4265'.
[ 1044.129298][T21049] bridge_slave_0: left allmulticast mode
[ 1044.131594][T21049] bridge_slave_0: left promiscuous mode
[ 1044.137264][T21049] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1044.158068][T21049] bridge_slave_1: left allmulticast mode
[ 1044.163406][T21049] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1044.173031][T21049] team0: Port device team_slave_1 removed
[ 1044.176662][T21049] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1044.180198][T21049] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1044.191505][T21050] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4267'.
[ 1044.192543][T21049] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1044.198604][T21049] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1044.206879][T21049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1044.216538][T21050] vlan0: entered promiscuous mode
[ 1044.229726][T21050] team0: Port device vlan0 added
[ 1044.246128][T21049] tipc: Enabled bearer <eth:team0>, priority 0
[ 1044.465247][T21060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4270'.
[ 1044.652229][ T5943] usb 8-1: new high-speed USB device number 49 using dummy_hcd
[ 1044.750493][T20875] Bluetooth: Frame is too long (len 35, expected len 8)
[ 1044.822804][ T5943] usb 8-1: Using ep0 maxpacket: 32
[ 1044.828406][ T5943] usb 8-1: config 0 has an invalid interface number: 119 but max is 0
[ 1044.832892][ T5943] usb 8-1: config 0 has no interface number 0
[ 1044.835046][ T5943] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1044.847293][ T5943] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1044.863651][ T5943] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 6657, setting to 1024
[ 1044.870120][ T5943] usb 8-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1044.873552][T21072] fuse: fd is not a fuse device
[ 1044.880315][ T5943] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1044.884959][T21072] netlink: 'syz.1.4274': attribute type 5 has an invalid length.
[ 1044.894694][ T5943] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1044.898238][ T5943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.900958][ T5943] usb 8-1: Product: syz
[ 1044.902586][ T5943] usb 8-1: Manufacturer: syz
[ 1044.904611][ T5943] usb 8-1: SerialNumber: syz
[ 1044.914983][ T5943] usb 8-1: config 0 descriptor??
[ 1044.917558][T21055] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1044.930264][ T5943] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input60
[ 1045.013354][    C1] bcm5974 8-1:0.119: trackpad urb failed: -1
[ 1045.439892][  T846] usb 8-1: USB disconnect, device number 49
[ 1045.738522][T21081] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[ 1046.620024][T21093] __nla_validate_parse: 3 callbacks suppressed
[ 1046.620045][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4279'.
[ 1046.627084][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4279'.
[ 1046.751916][T21097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4280'.
[ 1046.756106][T21097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4280'.
[ 1047.202537][T21102] bond2: Unable to set down delay as MII monitoring is disabled
[ 1047.210821][T21102] bond2 (unregistering): Released all slaves
[ 1047.229545][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4281'.
[ 1047.983436][T21112] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[ 1048.310022][T21120] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4287'.
[ 1048.314145][T21120] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4287'.
[ 1048.318777][T21120] netlink: 'syz.2.4287': attribute type 5 has an invalid length.
[ 1048.325144][T21120] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4287'.
[ 1048.597580][T21127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1050.025431][T21137] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4293'.
[ 1050.089356][T21142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4292'.
[ 1050.190911][T21146] FAULT_INJECTION: forcing a failure.
[ 1050.190911][T21146] name failslab, interval 1, probability 0, space 0, times 0
[ 1050.195846][T21146] CPU: 1 UID: 0 PID: 21146 Comm: syz.2.4295 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1050.195890][T21146] Tainted: [L]=SOFTLOCKUP
[ 1050.195896][T21146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1050.195906][T21146] Call Trace:
[ 1050.195913][T21146]  <TASK>
[ 1050.195920][T21146]  dump_stack_lvl+0x100/0x190
[ 1050.195945][T21146]  should_fail_ex.cold+0x5/0xa
[ 1050.195994][T21146]  should_failslab+0xc2/0x120
[ 1050.196029][T21146]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[ 1050.196050][T21146]  ? __alloc_skb+0x140/0x710
[ 1050.196071][T21146]  __alloc_skb+0x140/0x710
[ 1050.196086][T21146]  ? __alloc_skb+0x5b7/0x710
[ 1050.196106][T21146]  ? __pfx___alloc_skb+0x10/0x10
[ 1050.196157][T21146]  ? genl_rcv_msg+0x4be/0x800
[ 1050.196202][T21146]  netlink_ack+0x117/0xb80
[ 1050.196234][T21146]  netlink_rcv_skb+0x333/0x420
[ 1050.196258][T21146]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1050.196274][T21146]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1050.196307][T21146]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1050.196334][T21146]  genl_rcv+0x28/0x40
[ 1050.196357][T21146]  netlink_unicast+0x585/0x850
[ 1050.196386][T21146]  ? __pfx_netlink_unicast+0x10/0x10
[ 1050.196416][T21146]  netlink_sendmsg+0x8b0/0xda0
[ 1050.196444][T21146]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1050.196471][T21146]  ? apparmor_socket_sendmsg+0x15b/0x270
[ 1050.196501][T21146]  ____sys_sendmsg+0xa4d/0xbe0
[ 1050.196524][T21146]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1050.196549][T21146]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1050.196584][T21146]  ___sys_sendmsg+0x190/0x1e0
[ 1050.196609][T21146]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1050.196644][T21146]  ? find_held_lock+0x2b/0x80
[ 1050.196679][T21146]  __sys_sendmsg+0x160/0x210
[ 1050.196698][T21146]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1050.196722][T21146]  ? __pfx_ksys_write+0x10/0x10
[ 1050.196786][T21146]  __do_fast_syscall_32+0xe7/0x970
[ 1050.196813][T21146]  ? lockdep_hardirqs_on+0x78/0x100
[ 1050.196840][T21146]  do_fast_syscall_32+0x32/0x70
[ 1050.196866][T21146]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1050.196888][T21146] RIP: 0023:0xf705efec
[ 1050.196910][T21146] Code: Unable to access opcode bytes at 0xf705efc2.
[ 1050.196918][T21146] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1050.196935][T21146] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003700
[ 1050.196945][T21146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1050.196955][T21146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1050.196964][T21146] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1050.196974][T21146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1050.196996][T21146]  </TASK>
[ 1050.309237][   T42] kauditd_printk_skb: 13 callbacks suppressed
[ 1050.309258][   T42] audit: type=1326 audit(2000000342.662:15852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.1.4294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1050.322049][   T42] audit: type=1326 audit(2000000342.662:15853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.1.4294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1050.343138][   T42] audit: type=1326 audit(2000000342.672:15854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.1.4294" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1050.379415][   T42] audit: type=1326 audit(2000000342.672:15855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.1.4294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1050.391419][   T42] audit: type=1326 audit(2000000342.672:15856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.1.4294" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1050.407914][   T42] audit: type=1326 audit(2000000342.672:15857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.1.4294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1050.427751][   T42] audit: type=1326 audit(2000000342.672:15858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.1.4294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1050.437519][   T42] audit: type=1326 audit(2000000342.672:15859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.1.4294" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1050.447313][   T42] audit: type=1326 audit(2000000342.672:15860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.1.4294" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1050.457610][   T42] audit: type=1326 audit(2000000342.681:15861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.1.4294" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6feefec code=0x7ffc0000
[ 1051.488982][T21174] vxcan0: tx address claim with dlc 0
[ 1051.510395][T21174] overlayfs: failed to clone lowerpath
[ 1051.655463][T12939] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1052.634671][T12939] usb 5-1: Using ep0 maxpacket: 32
[ 1052.643343][T12939] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[ 1052.647504][T12939] usb 5-1: config 0 has no interface number 0
[ 1052.650692][T12939] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1052.656824][T12939] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1052.662121][T12939] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 6657, setting to 1024
[ 1052.668494][T12939] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1052.673571][T12939] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1052.685067][T12939] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1052.695960][T12939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1052.699828][T12939] usb 5-1: Product: syz
[ 1052.701617][T12939] usb 5-1: Manufacturer: syz
[ 1052.705289][T12939] usb 5-1: SerialNumber: syz
[ 1052.711381][T21177] netlink: 'syz.3.4303': attribute type 2 has an invalid length.
[ 1053.211745][ T5943] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[ 1053.380676][ T5943] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[ 1053.384723][ T5943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[ 1053.387505][ T5943] usb 8-1: Product: syz
[ 1053.389316][ T5943] usb 8-1: Manufacturer: syz
[ 1053.391155][ T5943] usb 8-1: SerialNumber: syz
[ 1053.401117][ T5943] usb 8-1: config 0 descriptor??
[ 1053.409550][ T5943] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[ 1053.412400][ T5943] dvb-usb: bulk message failed: -22 (2/0)
[ 1053.423953][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1053.432959][ T5943] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[ 1053.437176][ T5943] usb 8-1: media controller created
[ 1053.448394][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1053.467141][T12939] usb 5-1: config 0 descriptor??
[ 1053.679050][T21165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1053.687155][T21177] dvb-usb: bulk message failed: -22 (4/0)
[ 1053.694079][T12939] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input61
[ 1053.694387][T21177] cxusb: i2c read failed
[ 1053.727639][T21177] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4303'.
[ 1053.804675][ T5943] cxusb: set interface failed
[ 1053.807080][ T5943] dvb-usb: bulk message failed: -22 (1/0)
[ 1053.866960][ T5943] DVB: Unable to find symbol mt352_attach()
[ 1053.870027][ T5943] dvb-usb: bulk message failed: -22 (5/0)
[ 1053.872730][ T5943] zl10353_read_register: readreg error (reg=127, ret==-121)
[ 1053.877082][ T5943] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[ 1053.970366][ T5943] rc_core: IR keymap rc-dvico-mce not found
[ 1053.973132][ T5943] Registered IR keymap rc-empty
[ 1053.976683][ T5943] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0
[ 1053.984978][ T5943] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input62
[ 1053.994539][ T5943] dvb-usb: schedule remote query interval to 100 msecs.
[ 1053.997599][ T5943] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[ 1054.013947][ T5943] usb 8-1: USB disconnect, device number 50
[ 1054.074495][T21199] 8021q: adding VLAN 0 to HW filter on device team0
[ 1054.093039][T21199] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1054.210746][T21203] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4307'.
[ 1054.240504][ T5943] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[ 1054.250679][T19827] usb 5-1: USB disconnect, device number 67
[ 1054.334022][T21201] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[ 1054.709975][T21208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4309'.
[ 1054.773005][T21205] bond3: Unable to set down delay as MII monitoring is disabled
[ 1054.843689][T21205] bond3 (unregistering): Released all slaves
[ 1054.875952][T21213] netlink: 'syz.0.4311': attribute type 2 has an invalid length.
[ 1055.177329][T12939] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 1055.200016][T21218] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[ 1055.355440][T21218] lo speed is unknown, defaulting to 1000
[ 1055.367379][T12939] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[ 1055.376016][T12939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[ 1055.384468][T12939] usb 5-1: Product: syz
[ 1055.388921][T12939] usb 5-1: Manufacturer: syz
[ 1055.393598][T12939] usb 5-1: SerialNumber: syz
[ 1055.403686][T12939] usb 5-1: config 0 descriptor??
[ 1055.414422][T12939] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[ 1055.419020][T12939] dvb-usb: bulk message failed: -22 (2/0)
[ 1055.425292][T12939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1055.434453][T12939] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[ 1055.444472][T12939] usb 5-1: media controller created
[ 1055.465033][T12939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1055.734639][T21213] dvb-usb: bulk message failed: -22 (4/0)
[ 1055.737508][T21213] cxusb: i2c read failed
[ 1055.741486][T21213] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4311'.
[ 1055.767146][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'.
[ 1055.897435][T21235] vxcan0: tx address claim with dlc 0
[ 1055.901744][T21236] tracefs: Bad value for 'mode'
[ 1056.054441][T21238] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1056.121146][T21238] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 1056.126325][T21238] overlayfs: failed to look up (tracing) for ino (-66)
[ 1056.602300][T21231] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1056.811928][T12939] cxusb: set interface failed
[ 1056.822919][T12939] dvb-usb: bulk message failed: -22 (1/0)
[ 1056.898835][T12939] DVB: Unable to find symbol mt352_attach()
[ 1056.901322][T12939] dvb-usb: bulk message failed: -22 (5/0)
[ 1056.903577][T12939] zl10353_read_register: readreg error (reg=127, ret==-121)
[ 1056.906783][T12939] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[ 1056.983240][T12939] rc_core: IR keymap rc-dvico-mce not found
[ 1056.985431][T12939] Registered IR keymap rc-empty
[ 1056.990658][T12939] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0
[ 1057.107390][T21249] binder: 21247:21249 ioctl c01c5868 0 returned -22
[ 1057.490925][T19827] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1057.512117][T12939] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input63
[ 1057.518188][T12939] dvb-usb: schedule remote query interval to 100 msecs.
[ 1057.522057][T12939] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[ 1057.531553][T12939] usb 5-1: USB disconnect, device number 68
[ 1057.597402][T12939] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[ 1057.650322][T21258] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1057.677945][T19827] usb 7-1: Using ep0 maxpacket: 32
[ 1057.797172][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4322'.
[ 1057.797669][T21262] bond3: Unable to set down delay as MII monitoring is disabled
[ 1057.964927][T21262] bond3 (unregistering): Released all slaves
[ 1058.206346][T21267] netlink: 'syz.0.4324': attribute type 2 has an invalid length.
[ 1058.479378][T12939] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 1058.557671][T19827] usb 7-1: config 0 has an invalid interface number: 119 but max is 0
[ 1058.565667][T19827] usb 7-1: config 0 has no interface number 0
[ 1058.568759][T19827] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1058.573164][T19827] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1058.586343][T19827] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 6657, setting to 1024
[ 1058.591503][T19827] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1058.597795][T19827] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1058.606365][T19827] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1058.610622][T19827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1058.613608][T19827] usb 7-1: Product: syz
[ 1058.615365][T19827] usb 7-1: Manufacturer: syz
[ 1058.617346][T19827] usb 7-1: SerialNumber: syz
[ 1058.623097][T19827] usb 7-1: config 0 descriptor??
[ 1058.626571][T21251] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1058.633882][T19827] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input64
[ 1058.648322][T12939] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[ 1058.664395][T12939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[ 1058.667691][T12939] usb 5-1: Product: syz
[ 1058.669248][T12939] usb 5-1: Manufacturer: syz
[ 1058.670881][T12939] usb 5-1: SerialNumber: syz
[ 1058.684101][T12939] usb 5-1: config 0 descriptor??
[ 1058.693996][T12939] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[ 1058.696616][T12939] dvb-usb: bulk message failed: -22 (2/0)
[ 1058.701216][T12939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1058.709365][T12939] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[ 1058.714396][T12939] usb 5-1: media controller created
[ 1058.736969][T12939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1058.922569][T21267] dvb-usb: bulk message failed: -22 (4/0)
[ 1058.925097][T21267] cxusb: i2c read failed
[ 1058.928610][T21267] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4324'.
[ 1058.960579][T12939] cxusb: set interface failed
[ 1058.962808][T12939] dvb-usb: bulk message failed: -22 (1/0)
[ 1058.999311][T12939] DVB: Unable to find symbol mt352_attach()
[ 1059.002291][T12939] dvb-usb: bulk message failed: -22 (5/0)
[ 1059.005254][T12939] zl10353_read_register: readreg error (reg=127, ret==-121)
[ 1059.008401][T12939] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[ 1059.076829][T19827] usb 7-1: USB disconnect, device number 51
[ 1059.184967][T12939] rc_core: IR keymap rc-dvico-mce not found
[ 1059.187421][T12939] Registered IR keymap rc-empty
[ 1059.190606][T12939] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0
[ 1059.199090][T12939] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input65
[ 1059.210108][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'.
[ 1059.222753][T12939] dvb-usb: schedule remote query interval to 100 msecs.
[ 1059.226921][T12939] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[ 1059.284071][T12939] usb 5-1: USB disconnect, device number 69
[ 1059.383396][T12939] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[ 1059.619270][T21293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4332'.
[ 1059.760020][T21296] overlay: ./file0 is not a directory
[ 1060.982391][T20875] Bluetooth: hci2: unexpected event for opcode 0x080f
[ 1061.009161][T15567] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[ 1061.172127][T15567] usb 8-1: Using ep0 maxpacket: 16
[ 1061.183491][T15567] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1061.194644][T15567] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1061.209374][T21333] could not allocate digest TFM handle md5
[ 1061.215396][   T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1061.284955][T21336] could not allocate digest TFM handle md5
[ 1061.316835][T15567] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1061.350277][T15567] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.375196][   T24] usb 5-1: Using ep0 maxpacket: 32
[ 1061.379658][   T24] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[ 1061.383341][   T24] usb 5-1: config 0 has no interface number 0
[ 1061.386568][   T24] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1061.392046][   T24] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1061.396911][   T24] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 6657, setting to 1024
[ 1061.402114][   T24] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1061.407441][   T24] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1061.415533][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1061.420355][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1061.423932][   T24] usb 5-1: Product: syz
[ 1061.425656][   T24] usb 5-1: Manufacturer: syz
[ 1061.427637][   T24] usb 5-1: SerialNumber: syz
[ 1061.432508][   T24] usb 5-1: config 0 descriptor??
[ 1061.435986][T21325] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1061.444611][   T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input66
[ 1061.866103][T15567] usb 8-1: config 0 descriptor??
[ 1061.885054][ T5841] usb 5-1: USB disconnect, device number 70
[ 1061.949143][T21344] fuse: Bad value for 'fd'
[ 1061.955674][T21344] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4346'.
[ 1061.959409][T21344] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4346'.
[ 1061.962616][T21344] netlink: 'syz.1.4346': attribute type 5 has an invalid length.
[ 1061.966571][T21344] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4346'.
[ 1062.145586][T21356] netlink: 'syz.2.4349': attribute type 2 has an invalid length.
[ 1062.246560][T21361] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1062.422489][    T9] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1062.441679][T15567] usbhid 8-1:0.0: can't add hid device: -71
[ 1062.444707][T15567] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1062.451835][T15567] usb 8-1: USB disconnect, device number 51
[ 1062.645207][T21369] Invalid ELF header magic: != ELF
[ 1062.669470][T21370] FAULT_INJECTION: forcing a failure.
[ 1062.669470][T21370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1062.675993][T21370] CPU: 3 UID: 0 PID: 21370 Comm: syz.0.4352 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1062.676036][T21370] Tainted: [L]=SOFTLOCKUP
[ 1062.676047][T21370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1062.676063][T21370] Call Trace:
[ 1062.676075][T21370]  <TASK>
[ 1062.676088][T21370]  dump_stack_lvl+0x100/0x190
[ 1062.676126][T21370]  should_fail_ex.cold+0x5/0xa
[ 1062.676156][T21370]  _copy_to_user+0x32/0xd0
[ 1062.676194][T21370]  simple_read_from_buffer+0xcb/0x170
[ 1062.676238][T21370]  proc_fail_nth_read+0x1af/0x230
[ 1062.676270][T21370]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1062.676302][T21370]  ? rw_verify_area+0xce/0x6d0
[ 1062.676336][T21370]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1062.676368][T21370]  vfs_read+0x1e4/0xb40
[ 1062.676410][T21370]  ? __pfx_vfs_read+0x10/0x10
[ 1062.676443][T21370]  ? find_held_lock+0x2b/0x80
[ 1062.676472][T21370]  ? __fget_files+0x215/0x3d0
[ 1062.676514][T21370]  ? __fget_files+0x21f/0x3d0
[ 1062.676563][T21370]  ksys_read+0x12a/0x250
[ 1062.676600][T21370]  ? __pfx_ksys_read+0x10/0x10
[ 1062.676645][T21370]  do_int80_emulation+0x14b/0x720
[ 1062.676689][T21370]  asm_int80_emulation+0x1a/0x20
[ 1062.676716][T21370] RIP: 0023:0xf71071eb
[ 1062.676741][T21370] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1062.676766][T21370] RSP: 002b:00000000f537b4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1062.676790][T21370] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f537b5d0
[ 1062.676806][T21370] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 1062.676821][T21370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1062.676835][T21370] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1062.676850][T21370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1062.676890][T21370]  </TASK>
[ 1062.762966][T21369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4351'.
[ 1062.977431][    T9] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[ 1062.982052][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[ 1062.985537][    T9] usb 7-1: Product: syz
[ 1062.987319][    T9] usb 7-1: Manufacturer: syz
[ 1062.990005][    T9] usb 7-1: SerialNumber: syz
[ 1063.009041][    T9] usb 7-1: config 0 descriptor??
[ 1063.037535][    T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[ 1063.041286][    T9] dvb-usb: bulk message failed: -22 (2/0)
[ 1063.076569][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1063.084108][    T9] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[ 1063.088788][    T9] usb 7-1: media controller created
[ 1063.099175][T21376] could not allocate digest TFM handle md5
[ 1063.145620][T21380] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1063.146671][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1063.278124][T21356] dvb-usb: bulk message failed: -22 (4/0)
[ 1063.281232][T21356] cxusb: i2c read failed
[ 1063.331695][T21356] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4349'.
[ 1063.395698][    T9] cxusb: set interface failed
[ 1063.397820][    T9] dvb-usb: bulk message failed: -22 (1/0)
[ 1063.418833][   T24] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[ 1063.600384][   T24] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1063.605531][   T24] usb 8-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1063.615425][   T24] usb 8-1: string descriptor 0 read error: -22
[ 1063.617977][   T24] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[ 1063.621852][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1063.777465][T21391] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4357'.
[ 1063.784065][T21391] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4357'.
[ 1063.788374][T21391] netlink: 'syz.1.4357': attribute type 5 has an invalid length.
[ 1063.791586][T21391] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4357'.
[ 1063.860227][    T9] DVB: Unable to find symbol mt352_attach()
[ 1063.863406][    T9] dvb-usb: bulk message failed: -22 (5/0)
[ 1063.866899][    T9] zl10353_read_register: readreg error (reg=127, ret==-121)
[ 1063.873182][    T9] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[ 1063.954299][    T9] rc_core: IR keymap rc-dvico-mce not found
[ 1063.958784][    T9] Registered IR keymap rc-empty
[ 1063.967586][    T9] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[ 1063.988524][    T9] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input67
[ 1063.996665][    T9] dvb-usb: schedule remote query interval to 100 msecs.
[ 1063.999253][    T9] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[ 1064.062841][    T9] usb 7-1: USB disconnect, device number 52
[ 1064.098193][T21380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1064.122784][T21380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1064.356918][   T24] usb 8-1: 1:1: cannot get freq at ep 0x1
[ 1064.404226][   T24] usb 8-1: USB disconnect, device number 52
[ 1064.457525][ T9701] udevd[9701]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1064.505971][    T9] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[ 1064.848282][T19450] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1064.861260][    T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 1064.997844][    T9] usb 7-1: device descriptor read/64, error -71
[ 1065.019116][T19450] usb 5-1: Using ep0 maxpacket: 16
[ 1065.022491][T19450] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1065.026241][T19450] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1065.033834][T19450] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1065.037010][T19450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.041476][T19450] usb 5-1: config 0 descriptor??
[ 1065.043977][T21413] tipc: Started in network mode
[ 1065.048911][T21413] tipc: Node identity 669527b59065, cluster identity 4711
[ 1065.058605][T21413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1065.066028][T21413] syzkaller0: entered promiscuous mode
[ 1065.068923][T21413] syzkaller0: entered allmulticast mode
[ 1065.078748][T21413] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1065.122012][T21413] syzkaller0: mtu greater than device maximum
[ 1065.130250][T21412] tipc: Resetting bearer <eth:syzkaller0>
[ 1065.233486][T21412] tipc: Disabling bearer <eth:syzkaller0>
[ 1065.254267][    T9] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1065.284247][T21417] netlink: 'syz.1.4367': attribute type 2 has an invalid length.
[ 1065.294448][T21417] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4367'.
[ 1065.345669][T21409] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1065.361655][T19450] usbhid 5-1:0.0: can't add hid device: -71
[ 1065.364069][T19450] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1065.370203][T19450] usb 5-1: USB disconnect, device number 71
[ 1065.393252][    T9] usb 7-1: device descriptor read/64, error -71
[ 1065.450821][T21421] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[ 1065.512130][    T9] usb usb7-port1: attempt power cycle
[ 1065.875026][    T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 1065.896323][    T9] usb 7-1: device descriptor read/8, error -71
[ 1066.153383][    T9] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 1066.174618][    T9] usb 7-1: device descriptor read/8, error -71
[ 1066.291766][    T9] usb usb7-port1: unable to enumerate USB device
[ 1066.935093][T21442] fuse: fd is not a fuse device
[ 1067.805976][T21451] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4377'.
[ 1067.811974][T21451] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4377'.
[ 1067.815082][T21451] netlink: 'syz.2.4377': attribute type 5 has an invalid length.
[ 1067.817795][T21451] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4377'.
[ 1068.179764][ T2326] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1068.481642][ T2326] usb 7-1: Using ep0 maxpacket: 16
[ 1069.873283][ T2326] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1070.347230][ T2326] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1070.353311][ T2326] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1070.357809][ T2326] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.368859][ T2326] usb 7-1: config 0 descriptor??
[ 1070.372333][T21465] overlayfs: failed to resolve 'euid<00000000000000000000': -2
[ 1070.666618][T21481] bridge0: port 3(dummy0) entered blocking state
[ 1070.669305][T21481] bridge0: port 3(dummy0) entered forwarding state
[ 1070.672208][T21481] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1070.675075][T21481] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1070.677528][T21481] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1070.680047][T21481] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1070.708347][T21481] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1070.755579][ T2326] usbhid 7-1:0.0: can't add hid device: -71
[ 1070.757654][ T2326] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1070.764059][ T2326] usb 7-1: USB disconnect, device number 57
[ 1071.519767][T21491] fuse: Bad value for 'fd'
[ 1071.537735][   T24] usb 8-1: new high-speed USB device number 53 using dummy_hcd
[ 1071.585422][T21497] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4393'.
[ 1071.588955][T21497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4393'.
[ 1071.594243][T21497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4393'.
[ 1071.597551][T21497] 8021q: VLANs not supported on wg0
[ 1071.708752][   T24] usb 8-1: Using ep0 maxpacket: 8
[ 1071.714345][   T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1071.718781][   T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1071.722859][   T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1071.727475][   T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1071.733010][   T24] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1071.737051][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1071.751854][   T24] hub 8-1:1.0: bad descriptor, ignoring hub
[ 1071.761093][   T24] hub 8-1:1.0: probe with driver hub failed with error -5
[ 1071.764416][   T24] cdc_wdm 8-1:1.0: skipping garbage
[ 1071.770025][   T24] cdc_wdm 8-1:1.0: skipping garbage
[ 1071.771747][   T24] cdc_wdm 8-1:1.0: skipping garbage
[ 1071.779533][   T24] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1071.781478][   T24] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1071.784935][T21505] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1072.430895][T21485] usb 8-1: reset high-speed USB device number 53 using dummy_hcd
[ 1072.626919][T21485] usb 8-1: device firmware changed
[ 1072.633538][T21485] cdc_wdm 8-1:1.0: Error autopm - -16
[ 1072.633663][ T2326] usb 8-1: USB disconnect, device number 53
[ 1072.796605][T21526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4403'.
[ 1072.798575][ T2326] usb 8-1: new high-speed USB device number 54 using dummy_hcd
[ 1072.801675][T21526] dummy0: left allmulticast mode
[ 1072.806230][T21526] dummy0: left promiscuous mode
[ 1072.808911][T21526] bridge0: port 3(dummy0) entered disabled state
[ 1072.818594][T21526] bridge_slave_1: left promiscuous mode
[ 1072.821956][T21526] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1072.828726][T21526] bridge_slave_0: left allmulticast mode
[ 1072.838668][T21526] bridge_slave_0: left promiscuous mode
[ 1072.841644][T21526] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1072.913610][T21528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4403'.
[ 1072.969560][ T2326] usb 8-1: Using ep0 maxpacket: 8
[ 1072.973692][ T2326] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1072.978086][ T2326] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1072.983056][ T2326] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1072.988875][ T2326] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1073.002648][ T2326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1073.018367][ T2326] hub 8-1:1.0: bad descriptor, ignoring hub
[ 1073.025123][ T2326] hub 8-1:1.0: probe with driver hub failed with error -5
[ 1073.031757][ T2326] cdc_wdm 8-1:1.0: skipping garbage
[ 1073.038641][ T2326] cdc_wdm 8-1:1.0: skipping garbage
[ 1073.040487][ T2326] cdc_wdm 8-1:1.0: skipping garbage
[ 1073.044993][ T2326] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1073.358963][    T9] usb 8-1: USB disconnect, device number 54
[ 1073.527338][T21538] can: request_module (can-proto-0) failed.
[ 1073.533526][T21538] 9p: Bad value for 'wfdno'
[ 1073.608541][T21541] overlayfs: failed to clone upperpath
[ 1073.746051][T21546] bond0: Unable to set down delay as MII monitoring is disabled
[ 1073.760836][T21546] bond0 (unregistering): Released all slaves
[ 1073.873436][T21557] netlink: 'syz.2.4412': attribute type 2 has an invalid length.
[ 1074.000921][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4408'.
[ 1074.157196][ T2326] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 1074.467164][ T2326] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[ 1074.480423][ T2326] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[ 1074.490975][ T2326] usb 7-1: Product: syz
[ 1074.492701][ T2326] usb 7-1: Manufacturer: syz
[ 1074.498601][ T2326] usb 7-1: SerialNumber: syz
[ 1074.514374][ T2326] usb 7-1: config 0 descriptor??
[ 1074.529088][ T2326] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[ 1074.540365][ T2326] dvb-usb: bulk message failed: -22 (2/0)
[ 1074.548677][ T2326] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1074.554845][ T2326] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[ 1074.557921][ T2326] usb 7-1: media controller created
[ 1074.597872][ T2326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1074.814661][T21557] dvb-usb: bulk message failed: -22 (4/0)
[ 1074.817088][T21557] cxusb: i2c read failed
[ 1074.834641][T21557] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4412'.
[ 1074.864999][ T2326] cxusb: set interface failed
[ 1074.874835][ T2326] dvb-usb: bulk message failed: -22 (1/0)
[ 1074.908684][ T2326] DVB: Unable to find symbol mt352_attach()
[ 1074.911471][ T2326] dvb-usb: bulk message failed: -22 (5/0)
[ 1074.919605][ T2326] zl10353_read_register: readreg error (reg=127, ret==-121)
[ 1074.930841][ T2326] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[ 1075.203067][ T2326] rc_core: IR keymap rc-dvico-mce not found
[ 1075.206319][ T2326] Registered IR keymap rc-empty
[ 1075.213688][ T2326] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[ 1075.228671][ T2326] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input68
[ 1075.273292][ T2326] dvb-usb: schedule remote query interval to 100 msecs.
[ 1075.291328][ T2326] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[ 1075.318336][ T2326] usb 7-1: USB disconnect, device number 58
[ 1075.382369][ T2326] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[ 1075.583102][T21578] syzkaller0: entered promiscuous mode
[ 1075.585021][T21578] syzkaller0: entered allmulticast mode
[ 1076.004119][T21592] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4423'.
[ 1076.008141][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4423'.
[ 1076.030998][T21592] team0: Port device team_slave_0 removed
[ 1076.081635][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4423'.
[ 1076.112524][T21596] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[ 1076.196670][ T2326] usb 8-1: new high-speed USB device number 55 using dummy_hcd
[ 1076.358125][ T2326] usb 8-1: Using ep0 maxpacket: 32
[ 1076.363052][ T2326] usb 8-1: config 0 has no interfaces?
[ 1076.368721][ T2326] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1076.372707][ T2326] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1076.377132][ T2326] usb 8-1: Product: syz
[ 1076.380009][ T2326] usb 8-1: Manufacturer: syz
[ 1076.382080][ T2326] usb 8-1: SerialNumber: syz
[ 1076.385430][ T2326] usb 8-1: config 0 descriptor??
[ 1076.684526][T21600] bond2: Unable to set down delay as MII monitoring is disabled
[ 1076.733292][T21600] bond2 (unregistering): Released all slaves
[ 1077.155606][    T9] usb 8-1: USB disconnect, device number 55
[ 1077.459057][T21606] __nla_validate_parse: 1 callbacks suppressed
[ 1077.459083][T21606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4426'.
[ 1077.618540][T21612] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[ 1079.100919][T21634] loop5: detected capacity change from 0 to 7
[ 1079.107704][    C2] blk_print_req_error: 163 callbacks suppressed
[ 1079.107720][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1079.113182][    C2] buffer_io_error: 199 callbacks suppressed
[ 1079.113193][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1079.118199][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1079.121243][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1079.124717][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1079.128395][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1079.136454][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1079.139682][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1079.142877][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1079.146217][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1079.149190][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1079.152314][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1079.155303][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1079.158926][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1079.161616][T21634] ldm_validate_partition_table(): Disk read failed.
[ 1079.166337][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1079.169495][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1079.224654][T21636] loop5: detected capacity change from 7 to 0
[ 1079.229675][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1079.234614][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1079.238232][T21634] Dev loop5: unable to read RDB block 0
[ 1079.240216][T21634]  loop5: unable to read partition table
[ 1079.242954][T21634] loop5: partition table beyond EOD, truncated
[ 1079.245988][T21634] loop_reread_partitions: partition scan of loop5 (íðÉ�Ôn/C>|¶×n˜èªÐ˨“Ò,l¤-"@Iy}˜“c¤9¬ás„GQäªa§üG%xÔ?) failed (rc=-5)
[ 1079.354065][T21641] tmpfs: Bad value for 'mpol'
[ 1079.440727][T21645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4439'.
[ 1079.542915][T21646] could not allocate digest TFM handle md5
[ 1079.791136][T21652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4440'.
[ 1079.795118][T21652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4440'.
[ 1079.800593][T21652] netlink: 'syz.1.4440': attribute type 15 has an invalid length.
[ 1079.820385][T21652] overlayfs: failed to resolve './cgroup': -2
[ 1080.459900][T21661] overlayfs: failed to resolve './file1': -2
[ 1080.550090][T21668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4445'.
[ 1080.717447][T21676] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4447'.
[ 1080.724305][T21676] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1080.783786][T21682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4449'.
[ 1081.297722][T20875] Bluetooth: hci0: unexpected event for opcode 0x040d
[ 1081.600085][T21698] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1081.608491][T21698] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1081.608491][T21698] 
[ 1081.746957][T21704] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[ 1081.757209][T21704] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[ 1083.311407][T21740] vxcan0: tx address claim with dlc 1
[ 1083.319984][T21740] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1083.354672][T21740] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 1083.359812][T21740] overlayfs: failed to look up (tracing) for ino (-66)
[ 1083.535990][T21741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4469'.
[ 1083.554236][T21739] bond3: Unable to set down delay as MII monitoring is disabled
[ 1083.739143][T21739] bond3 (unregistering): Released all slaves
[ 1083.739332][T21737] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4470'.
[ 1083.748552][T21737] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4470'.
[ 1083.758024][T21737] netlink: 'syz.2.4470': attribute type 5 has an invalid length.
[ 1083.763839][T21737] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4470'.
[ 1085.751810][ T5841] libceph: connect (1)[c::]:6789 error -101
[ 1085.783803][T21767] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 1085.786070][T21767] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1085.794357][T21767] vhci_hcd vhci_hcd.0: Device attached
[ 1085.831902][ T5841] libceph: mon0 (1)[c::]:6789 connect error
[ 1086.103436][    T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 1086.124284][ T2326] usb 44-1: SetAddress Request (67) to port 0
[ 1086.128617][ T2326] usb 44-1: new SuperSpeed USB device number 67 using vhci_hcd
[ 1086.136318][T21769] vhci_hcd: connection closed
[ 1086.141997][T12256] vhci_hcd vhci_hcd.3: stop threads
[ 1086.147265][T12256] vhci_hcd vhci_hcd.3: release socket
[ 1086.150141][T12256] vhci_hcd vhci_hcd.3: disconnect device
[ 1086.157744][ T2326] usb 44-1: enqueue for inactive port 0
[ 1086.273649][    T9] usb 5-1: Using ep0 maxpacket: 32
[ 1086.278324][    T9] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[ 1086.281991][    T9] usb 5-1: config 0 has no interface number 0
[ 1086.285648][    T9] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1086.291055][    T9] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1086.296336][    T9] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 6657, setting to 1024
[ 1086.301054][    T9] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1086.306185][    T9] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1086.314566][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1086.319584][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.323309][    T9] usb 5-1: Product: syz
[ 1086.325128][    T9] usb 5-1: Manufacturer: syz
[ 1086.327807][    T9] usb 5-1: SerialNumber: syz
[ 1086.334447][    T9] usb 5-1: config 0 descriptor??
[ 1086.339155][T21768] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1086.347427][    T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input69
[ 1086.492441][T21760] ceph: No mds server is up or the cluster is laggy
[ 1086.530576][ T5841] libceph: connect (1)[c::]:6789 error -101
[ 1086.539850][ T5841] libceph: mon0 (1)[c::]:6789 connect error
[ 1086.625958][ T2326] usb usb44-port1: attempt power cycle
[ 1086.950070][ T5943] usb 5-1: USB disconnect, device number 72
[ 1087.278886][ T2326] usb usb44-port1: unable to enumerate USB device
[ 1087.717099][T21785] bond0: Unable to set down delay as MII monitoring is disabled
[ 1087.724077][T21785] bond0 (unregistering): Released all slaves
[ 1088.094421][T21790] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[ 1088.683657][T21802] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4488'.
[ 1088.771267][T21802] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4488'.
[ 1089.121878][T21815] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4494'.
[ 1089.131998][T21815] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4494'.
[ 1089.159600][   T42] kauditd_printk_skb: 35 callbacks suppressed
[ 1089.159621][   T42] audit: type=1800 audit(2000000379.018:15897): pid=21815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4494" name="nullb0" dev="tmpfs" ino=2824 res=0 errno=0
[ 1089.202520][ T5943] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1089.322260][T21817] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4495'.
[ 1089.365212][ T5943] usb 5-1: Using ep0 maxpacket: 32
[ 1089.371961][ T5943] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[ 1089.390418][ T5943] usb 5-1: config 0 has no interface number 0
[ 1089.399666][ T5943] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1089.412721][ T5943] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1089.418231][ T5943] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 6657, setting to 1024
[ 1089.424364][ T5943] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1089.430132][ T5943] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1089.440426][ T5943] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1089.445202][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.449558][ T5943] usb 5-1: Product: syz
[ 1089.451453][ T5943] usb 5-1: Manufacturer: syz
[ 1089.453578][ T5943] usb 5-1: SerialNumber: syz
[ 1089.460142][ T5943] usb 5-1: config 0 descriptor??
[ 1089.463940][T21807] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1089.474298][ T5943] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input70
[ 1089.641943][T21826] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size.
[ 1089.729099][T21826] ksmbd: Unknown IPC event: 3, ignore.
[ 1089.782923][T21832] netlink: 'syz.1.4500': attribute type 1 has an invalid length.
[ 1089.793405][T21832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4500'.
[ 1089.994063][ T5756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1090.008475][ T5756] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1090.026058][ T5756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1090.030911][ T5756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1090.041756][ T5756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1090.048689][ T5841] usb 5-1: USB disconnect, device number 73
[ 1090.236498][T21847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4503'.
[ 1090.450878][T21836] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[ 1090.608987][T21836] lo speed is unknown, defaulting to 1000
[ 1091.156457][T21836] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1091.160057][T21836] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1091.163568][T21836] bridge_slave_0: entered allmulticast mode
[ 1091.174226][T21836] bridge_slave_0: entered promiscuous mode
[ 1091.179470][T21836] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1091.182826][T21836] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1091.186381][T21836] bridge_slave_1: entered allmulticast mode
[ 1091.190531][T21836] bridge_slave_1: entered promiscuous mode
[ 1091.216983][T21836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1091.228376][T21836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1091.273993][T21836] team0: Port device team_slave_0 added
[ 1091.294503][T21836] team0: Port device team_slave_1 added
[ 1091.329511][T21836] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1091.333153][T21836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1091.346556][T21836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1091.364741][T21836] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1091.368890][T21836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1091.381232][T21836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1091.430785][   T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.502756][T21836] hsr_slave_0: entered promiscuous mode
[ 1091.506131][T21836] hsr_slave_1: entered promiscuous mode
[ 1091.509598][T21836] debugfs: 'hsr0' already exists in 'hsr'
[ 1091.512734][T21836] Cannot create hsr debugfs directory
[ 1091.523766][   T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.622083][   T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.691590][ T5943] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[ 1091.700203][   T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.752650][T21882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4511'.
[ 1091.885087][ T5943] usb 7-1: Using ep0 maxpacket: 16
[ 1091.892146][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1091.897340][ T5943] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1091.902525][ T5943] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1091.907651][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.915573][ T5943] usb 7-1: config 0 descriptor??
[ 1091.930201][   T13] bridge_slave_1: left allmulticast mode
[ 1091.932326][   T13] bridge_slave_1: left promiscuous mode
[ 1091.935147][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1091.943528][   T13] bridge_slave_0: left allmulticast mode
[ 1091.945518][   T13] bridge_slave_0: left promiscuous mode
[ 1091.947757][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1092.161995][    T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1092.243723][ T1202] smc: removing ib device syz1
[ 1092.246937][   T13] bond0 (unregistering): (slave 
3
0
): Releasing backup interface
[ 1092.255002][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1092.269447][   T13] bond0 (unregistering): Released all slaves
[ 1092.283099][T20875] Bluetooth: hci3: command tx timeout
[ 1092.294501][   T13] bond1 (unregistering): (slave 
): Releasing active interface
[ 1092.319390][   T13] bond1 (unregistering): Released all slaves
[ 1092.322095][    T9] usb 5-1: Using ep0 maxpacket: 32
[ 1092.323594][    T9] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[ 1092.327487][    T9] usb 5-1: config 0 has no interface number 0
[ 1092.329896][    T9] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1092.333546][    T9] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1092.338134][    T9] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 6657, setting to 1024
[ 1092.342976][    T9] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1092.343896][   T13] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface
[ 1092.347466][    T9] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1092.357693][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1092.361689][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.367322][   T13] bond2 (unregistering): Released all slaves
[ 1092.370281][    T9] usb 5-1: Product: syz
[ 1092.372059][    T9] usb 5-1: Manufacturer: syz
[ 1092.374459][    T9] usb 5-1: SerialNumber: syz
[ 1092.381797][    T9] usb 5-1: config 0 descriptor??
[ 1092.387729][T21889] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1092.394076][    T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input71
[ 1092.447661][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1092.462879][T21898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4516'.
[ 1092.517358][ T1202] smbdirect: ib_dev[syz1] removed
[ 1092.562324][T21879] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1092.710345][ T5943] usbhid 7-1:0.0: can't add hid device: -71
[ 1092.713754][ T5943] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1092.722534][ T5943] usb 7-1: USB disconnect, device number 59
[ 1092.809536][T21903] could not allocate digest TFM handle md5
[ 1092.984672][ T2326] usb 5-1: USB disconnect, device number 74
[ 1093.089564][T21914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4519'.
[ 1093.253343][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1093.650004][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4523'.
[ 1094.088363][T21944] netlink: 'syz.0.4524': attribute type 2 has an invalid length.
[ 1094.126112][   T13] tipc: Left network mode
[ 1094.399419][T21836] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1094.405821][ T5943] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1094.447091][T21836] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1094.450981][T21836] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1094.481894][T21836] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1094.496550][T21836] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1094.503812][T21952] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[ 1094.507412][T20875] Bluetooth: hci3: command tx timeout
[ 1094.507528][   T13] IPVS: stopping master sync thread 17561 ...
[ 1094.530737][   T13] IPVS: stopping backup sync thread 16327 ...
[ 1094.539013][T21836] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1094.543250][T21836] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1094.563630][T21836] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1094.570660][T21952] lo speed is unknown, defaulting to 1000
[ 1094.599391][ T5943] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[ 1094.603088][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[ 1094.606506][ T5943] usb 5-1: Product: syz
[ 1094.608294][ T5943] usb 5-1: Manufacturer: syz
[ 1094.610900][ T5943] usb 5-1: SerialNumber: syz
[ 1094.619073][ T5943] usb 5-1: config 0 descriptor??
[ 1094.624099][ T5943] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[ 1094.627179][ T5943] dvb-usb: bulk message failed: -22 (2/0)
[ 1094.641820][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1094.645996][ T5943] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[ 1094.648412][ T5943] usb 5-1: media controller created
[ 1094.656773][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1094.841480][T21944] dvb-usb: bulk message failed: -22 (4/0)
[ 1094.845353][T21944] cxusb: i2c read failed
[ 1094.850145][T21944] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4524'.
[ 1094.954087][ T5943] cxusb: set interface failed
[ 1094.956406][ T5943] dvb-usb: bulk message failed: -22 (1/0)
[ 1095.006893][ T5943] DVB: Unable to find symbol mt352_attach()
[ 1095.009144][ T5943] dvb-usb: bulk message failed: -22 (5/0)
[ 1095.011347][ T5943] zl10353_read_register: readreg error (reg=127, ret==-121)
[ 1095.014060][ T5943] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[ 1095.043382][T21836] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1095.068473][ T5943] rc_core: IR keymap rc-dvico-mce not found
[ 1095.072071][ T5943] Registered IR keymap rc-empty
[ 1095.076371][ T5943] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0
[ 1095.097439][ T5943] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input72
[ 1095.099942][T21836] 8021q: adding VLAN 0 to HW filter on device team0
[ 1095.109984][ T5943] dvb-usb: schedule remote query interval to 100 msecs.
[ 1095.113436][ T5943] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[ 1095.120410][ T5943] usb 5-1: USB disconnect, device number 75
[ 1095.143079][   T13] hsr_slave_1: left promiscuous mode
[ 1095.149384][T21972] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[ 1095.150297][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1095.158210][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1095.164841][T21972] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1095.172475][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1095.175132][T21972] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[ 1095.181011][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1095.187542][T21972] overlayfs: conflicting lowerdir path
[ 1095.191060][ T5943] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[ 1095.208188][   T13] veth1_vlan: left promiscuous mode
[ 1095.212428][   T13] veth0_vlan: left promiscuous mode
[ 1095.421107][ T2326] ==================================================================
[ 1095.421122][ T2326] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bd6/0x1d60
[ 1095.421144][ T2326] Read of size 8 at addr ffffc90004768008 by task kworker/1:2/2326
[ 1095.421155][ T2326] 
[ 1095.421163][ T2326] CPU: 1 UID: 0 PID: 2326 Comm: kworker/1:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1095.421181][ T2326] Tainted: [L]=SOFTLOCKUP
[ 1095.421186][ T2326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1095.421210][ T2326] Workqueue: events_power_efficient fb_flashcursor
[ 1095.421229][ T2326] Call Trace:
[ 1095.421234][ T2326]  <TASK>
[ 1095.421240][ T2326]  dump_stack_lvl+0x100/0x190
[ 1095.421255][ T2326]  print_report+0x13d/0x4b0
[ 1095.421273][ T2326]  ? _raw_spin_lock_irqsave+0x52/0x60
[ 1095.421292][ T2326]  ? sys_imageblit+0x1bd6/0x1d60
[ 1095.421306][ T2326]  kasan_report+0xdf/0x1c0
[ 1095.421328][ T2326]  ? sys_imageblit+0x1bd6/0x1d60
[ 1095.421347][ T2326]  sys_imageblit+0x1bd6/0x1d60
[ 1095.421369][ T2326]  ? __pfx_sys_imageblit+0x10/0x10
[ 1095.421387][ T2326]  ? trace_kmalloc+0xeb/0x110
[ 1095.421406][ T2326]  ? __kmalloc_noprof+0x343/0x820
[ 1095.421418][ T2326]  ? rcu_is_watching+0x12/0xc0
[ 1095.421433][ T2326]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[ 1095.421453][ T2326]  soft_cursor+0x524/0xa10
[ 1095.421472][ T2326]  ? fbcon_fill_cursor_mask+0x22b/0x2d0
[ 1095.421494][ T2326]  bit_cursor+0xca1/0x1490
[ 1095.421514][ T2326]  ? __pfx_bit_cursor+0x10/0x10
[ 1095.421534][ T2326]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1095.421551][ T2326]  ? get_color+0x1da/0x450
[ 1095.421566][ T2326]  ? __pfx_bit_cursor+0x10/0x10
[ 1095.421583][ T2326]  fb_flashcursor+0x338/0x430
[ 1095.421599][ T2326]  process_one_work+0xa23/0x1940
[ 1095.421619][ T2326]  ? __pfx_process_one_work+0x10/0x10
[ 1095.421637][ T2326]  ? __pfx_fb_flashcursor+0x10/0x10
[ 1095.421653][ T2326]  worker_thread+0x5ef/0xe50
[ 1095.421671][ T2326]  ? __pfx_worker_thread+0x10/0x10
[ 1095.421686][ T2326]  ? kthread+0x13a/0x450
[ 1095.421700][ T2326]  ? __pfx_worker_thread+0x10/0x10
[ 1095.421715][ T2326]  kthread+0x370/0x450
[ 1095.421729][ T2326]  ? __pfx_kthread+0x10/0x10
[ 1095.421743][ T2326]  ret_from_fork+0x72b/0xd50
[ 1095.421757][ T2326]  ? __pfx_ret_from_fork+0x10/0x10
[ 1095.421770][ T2326]  ? __switch_to+0x800/0x10f0
[ 1095.421788][ T2326]  ? __pfx_kthread+0x10/0x10
[ 1095.421803][ T2326]  ret_from_fork_asm+0x1a/0x30
[ 1095.421822][ T2326]  </TASK>
[ 1095.421827][ T2326] 
[ 1095.421830][ T2326] The buggy address belongs to a vmalloc virtual mapping
[ 1095.421843][ T2326] Memory state around the buggy address:
[ 1095.421850][ T2326]  ffffc90004767f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1095.421858][ T2326]  ffffc90004767f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1095.421871][ T2326] >ffffc90004768000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1095.421878][ T2326]                       ^
[ 1095.421884][ T2326]  ffffc90004768080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1095.421892][ T2326]  ffffc90004768100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1095.421899][ T2326] ==================================================================
[ 1095.421926][ T2326] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1095.421937][ T2326] CPU: 1 UID: 0 PID: 2326 Comm: kworker/1:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1095.421953][ T2326] Tainted: [L]=SOFTLOCKUP
[ 1095.421958][ T2326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1095.421979][ T2326] Workqueue: events_power_efficient fb_flashcursor
[ 1095.421997][ T2326] Call Trace:
[ 1095.422001][ T2326]  <TASK>
[ 1095.422006][ T2326]  dump_stack_lvl+0x100/0x190
[ 1095.422019][ T2326]  vpanic+0x552/0x970
[ 1095.422031][ T2326]  ? __pfx_vpanic+0x10/0x10
[ 1095.422042][ T2326]  ? mark_held_locks+0x40/0x70
[ 1095.422061][ T2326]  ? irqentry_exit+0x24d/0xa00
[ 1095.422080][ T2326]  ? sys_imageblit+0x1bd6/0x1d60
[ 1095.422092][ T2326]  panic+0xd1/0xe0
[ 1095.422103][ T2326]  ? __pfx_panic+0x10/0x10
[ 1095.422116][ T2326]  ? check_panic_on_warn+0x1f/0x90
[ 1095.422134][ T2326]  check_panic_on_warn.cold+0x19/0x34
[ 1095.422146][ T2326]  end_report.part.0+0x3a/0x90
[ 1095.422163][ T2326]  kasan_report.cold+0xe/0x18
[ 1095.422181][ T2326]  ? sys_imageblit+0x1bd6/0x1d60
[ 1095.422195][ T2326]  sys_imageblit+0x1bd6/0x1d60
[ 1095.422210][ T2326]  ? __pfx_sys_imageblit+0x10/0x10
[ 1095.422223][ T2326]  ? trace_kmalloc+0xeb/0x110
[ 1095.422239][ T2326]  ? __kmalloc_noprof+0x343/0x820
[ 1095.422250][ T2326]  ? rcu_is_watching+0x12/0xc0
[ 1095.422264][ T2326]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[ 1095.422283][ T2326]  soft_cursor+0x524/0xa10
[ 1095.422301][ T2326]  ? fbcon_fill_cursor_mask+0x22b/0x2d0
[ 1095.422320][ T2326]  bit_cursor+0xca1/0x1490
[ 1095.422339][ T2326]  ? __pfx_bit_cursor+0x10/0x10
[ 1095.422359][ T2326]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1095.422378][ T2326]  ? get_color+0x1da/0x450
[ 1095.422393][ T2326]  ? __pfx_bit_cursor+0x10/0x10
[ 1095.422412][ T2326]  fb_flashcursor+0x338/0x430
[ 1095.422433][ T2326]  process_one_work+0xa23/0x1940
[ 1095.422458][ T2326]  ? __pfx_process_one_work+0x10/0x10
[ 1095.422479][ T2326]  ? __pfx_fb_flashcursor+0x10/0x10
[ 1095.422495][ T2326]  worker_thread+0x5ef/0xe50
[ 1095.422512][ T2326]  ? __pfx_worker_thread+0x10/0x10
[ 1095.422528][ T2326]  ? kthread+0x13a/0x450
[ 1095.422541][ T2326]  ? __pfx_worker_thread+0x10/0x10
[ 1095.422556][ T2326]  kthread+0x370/0x450
[ 1095.422570][ T2326]  ? __pfx_kthread+0x10/0x10
[ 1095.422584][ T2326]  ret_from_fork+0x72b/0xd50
[ 1095.422597][ T2326]  ? __pfx_ret_from_fork+0x10/0x10
[ 1095.422610][ T2326]  ? __switch_to+0x800/0x10f0
[ 1095.422660][ T2326]  ? __pfx_kthread+0x10/0x10
[ 1095.422675][ T2326]  ret_from_fork_asm+0x1a/0x30
[ 1095.422694][ T2326]  </TASK>
[ 1095.423707][ T2326] Kernel Offset: disabled

VM DIAGNOSIS:
22:22:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000010200 RBX=0000000000000000 RCX=ffffffff81ad2d63 RDX=ffff888000202540
RSI=ffffffff81ad2dab RDI=ffffffff9467ce00 RBP=0000000000000000 RSP=ffffc90000007fd0
R8 =0000000000000001 R9 =fffffbfff28cf9c0 R10=ffffffff9467ce07 R11=ffffc90000007ff8
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81ad2dac RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096bf5000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f53db46c CR3=0000000067333000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a00545 RDI=ffffffff9b9e11a0 RBP=ffffffff9b9e1160 RSP=ffffc9000dccf328
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032333254
R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b6e11f4 R15=ffffffff85a004e0
RIP=ffffffff85a0056f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096cf5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000333efff8 CR3=000000005fe84000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81ad2d63 RDX=ffff888024be4a80
RSI=ffffffff81ad2dab RDI=ffffffff9467ce00 RBP=0000000000000000 RSP=ffffc90000538fd0
R8 =0000000000000001 R9 =fffffbfff28cf9c0 R10=ffffffff9467ce07 R11=ffffc90000538ff8
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81ad2dac RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096df5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000000e992000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81ad2d63 RDX=ffff88801cbf2540
RSI=ffffffff81ad2dab RDI=ffffffff9467ce00 RBP=0000000000000000 RSP=ffffc900005e8fd0
R8 =0000000000000001 R9 =fffffbfff28cf9c0 R10=ffffffff9467ce07 R11=ffffc900005e8ff8
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81ad2dac RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096ef5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f71a8850 CR3=0000000067333000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000