last executing test programs:

3.876664624s ago: executing program 2 (id=339):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20, 0x0, 0x0, 0x0, 0xffffffff}}, 0x120)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x14c)
fcntl$setlease(r3, 0x400, 0x1)
fcntl$getflags(r3, 0x11)
r4 = syz_io_uring_setup(0x3b18, &(0x7f0000000380)={0x0, 0x1ffffe, 0x4, 0x0, 0xfffffffc, 0x0, r2}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffe}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x209c085, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x83}, 0x1c)
recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOGETCMAP(r8, 0x4604, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0xc200)
syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2)
socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

3.090021435s ago: executing program 3 (id=340):
syz_emit_ethernet(0x2056, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2020, 0x3a, 0xff, @private1, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x200, "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"}, {0x0, 0x200, "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"}, {0x1, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0)

3.089770259s ago: executing program 3 (id=341):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000008000000811030000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x2}, &(0x7f0000000140)=0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendto$packet(r0, &(0x7f0000000000)="0503140dd3ec140000004788031c09102c28", 0x12, 0x20000000, &(0x7f0000000140)={0x11, 0x1c, r3, 0x1, 0x0, 0x6, @remote}, 0x14)

3.088549392s ago: executing program 3 (id=342):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0x2de1, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000340), &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_setup(0x5c0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000004, 0x1cd}, &(0x7f0000000300)=<r5=>0x0, &(0x7f00000002c0))
syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0xc8)
connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000100)=0xcf5)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB], 0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)
r9 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0xffff, 0x0, 0x0, r8}, &(0x7f0000000180), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r11=>0xffffffffffffffff})
write(r10, &(0x7f0000000400)="94", 0x1)
r12 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)=0x7f)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r13, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r13, 0x6, 0x21, 0x0, 0x0)
vmsplice(r11, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0xc)
tee(r9, r2, 0x8f5, 0x0)

2.817688313s ago: executing program 1 (id=344):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000500)=@assoc_value={<r8=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r8, 0x0, 0x6}, 0xc)
write$uinput_user_dev(r5, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r5, 0x5501)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000300)="82a54897c7b33114d71d446f73e944ad3141170aa6288e2ecf7966e9e4e6b423f15511686220a9d5eb6eaa4bdf5e9f88366aed25eb1722d73cc728c98a3e218f1b65b90a45eaabbb251fbd96fdd6293a587a53b4fda024efd56f11e784466af014c40ffa019ee7c1e509e30d00ae5603325a3bb7bd360550d2d0a046447b6d7784e97876817a54bec4e309ae4debe65d0cacfed0a15b53f519616c26d2466b13ba6c479492d120e88e3f525e9134503c998d0b437f1ebf4c03e21541ccd9ba497c53ff93c5", 0xc5, 0xfffffffffffffffd)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x200000000000000}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}]}, 0x114}}, 0x4001)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x4e)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2.189824426s ago: executing program 3 (id=346):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x17)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@delqdisc={0x4c, 0x25, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0x0, 0xb}, {0xf, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x4c}}, 0x40040)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_procfs$pagemap(r1, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000000140))
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
r9 = socket$inet(0x2, 0xa, 0x4)
connect$inet(r9, &(0x7f0000000100)={0x1f, 0x0, @multicast1}, 0x29)
io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0)
openat$adsp1(0xffffff9c, &(0x7f0000000280), 0x52042, 0x0)
pread64(r2, &(0x7f0000000380)=""/76, 0x4c, 0x7f)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00\x00', 0x2}], 0x1}, 0x8001)
ioctl$SIOCSIFHWADDR(r10, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})
unshare(0x62040200)

2.039949393s ago: executing program 1 (id=347):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x8, r0}, 0x14)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="220000006d385000fcffffff18560000090000000000000000000000180100002020752500000000002020207b1af8ff00f8ffffffb702000008000000b7030000d4000000850000000600"/92], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x62, &(0x7f0000000400)=""/98, 0x41100, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xe, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r2, r3, r3], 0x0, 0x10, 0x9, @void, @value}, 0x94)
write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20, 0x0, 0x0, 0x0, 0xffffffff}}, 0x120)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0)
r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f00000000c0)={0x8, "53bab9ea1cc27f70d208f2adddd2e861831db579b2c1746e9406fdf5849dda870743fa9db4f5c2df09b40f7fab01f215d7a0bd9c8e87a5c677eb6580167fa645"})

1.949459207s ago: executing program 0 (id=348):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x0, 0x0, 0x0, 0xfffffffe, 0x8}}, 0x4)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)

1.948354463s ago: executing program 0 (id=349):
r0 = socket$inet6(0xa, 0x4, 0x4) (async)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0x8, 0x0, 0xf0}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000300)=@raw=[@ldst={0x2, 0x2, 0x2, 0xa, 0x8, 0x26, 0x4}, @jmp={0x5, 0x1, 0x1, 0xa, 0x7, 0xffffffffffffffc0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000280)='GPL\x00', 0x1, 0x22, &(0x7f0000000380)=""/34, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x4, 0x6, 0xbe5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000007c0)={r4, 0x0, 0x88, 0x0, &(0x7f0000000600)="740306fed6f696f6233ca88a30387c1582157e81506ce2f0541c69f4a81c1dbc8fe7b3d449a89347df1170ae82e8a9784513eaba4e8d39fc14d2183ce2a1614f5e82e88f97e10ebbf30c2741ca5f366e43aca32ec3b2a87a5f0b2ffa60aed8cf8d72503d2a2d55f63b15a11c51424a15e35eb5ebacf6de4fd32add43abf40cb1cc9117ff5338e838", 0x0, 0x800, 0x0, 0xe5, 0x0, &(0x7f00000006c0)="cf17f9958d92eb712197b8e2efafd20519a165e0097dcde4efd1932b27f4e3374cac716afc6d0786553efae484394ab36ab84f01058e785e46afa21c3ebc09c25368ee13490a67d5886fffdd32224f866932a4ac5ea693aaf6ae7982ed8c14cad1d0fd86f668b100154829f99fccb9c5b191d68d76ca51a5318df823cde39a7f4da07b32fe4657fa0cf3949a2e7e69097c67933b648c51979ace03d279fcd3e639f1e926cccfcf7fa3d32cfd1a5773ace6255528ecec179154294f0fb5a2c8b22f8d7d4d132e99ba82e35e07d4456dd8930eb414e628ead687e32b03d1be26dc4c22224c27", 0x0, 0x2, 0x0, 0xb}, 0x4c) (async)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0x7f, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0x401, 0x9, 0x2, 0x1]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000004c0)) (async)
getegid() (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_CONNECT={0x10, 0x3b, 0x0, r0, 0x0, 0x0})
io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, r6, 0x6, {0x1, 0x8000000000000001}, 0x54}, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x105)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x48b, 0x0, 0x0}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0x9f8, 0x0, 0x0})
chdir(&(0x7f00000003c0)='./bus\x00') (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)

1.466822683s ago: executing program 1 (id=350):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000fdffffff0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1805e4ff000000000000000000000000b7080000000000497b9af8ff00cd01657f4c000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000068e0dfa62e20f06323b45deef9cdb85000b537856526a4c754640dc3a6c4b35e47bb7a05243de4ddd596ffa3709b50e764e95b7d212221c4bf7bdee777c417c9004c2ba88f84e94cdba6b712e75c7b22c4cffb2952ec40ad5a27d500c6b53f7797d14ca997f1733800bf711dd770ed4d018f0da22299269b", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x18)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
listen(r4, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x4, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@userxattr, 0x3a}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}], 0x2f})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x0, 0x4}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080)=0x4, 0x4)

1.249582882s ago: executing program 0 (id=351):
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x6b, 0x0, 0x3}) (async)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x6b, 0x0, 0x3})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={0x0, 0x10001, 0x3})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r0=>0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10)
socket(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000005a0000000400058000"/24], 0x18}}, 0x0)
dup3(r3, r2, 0x0) (async)
r5 = dup3(r3, r2, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17)
ioctl$int_in(r1, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x800)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
shutdown(r1, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000019c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r6=>0x0}})
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001980)) (async)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000640)={r6, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x104000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x800]}) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000640)={r6, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x104000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x800]})
openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r7 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r8, 0x4068aea3, &(0x7f0000000400))
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r0, 0x0, @inherit={0x58, 0x0}, @devid=r6}) (async)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r0, 0x0, @inherit={0x58, 0x0}, @devid=r6})

1.147491462s ago: executing program 3 (id=352):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x4, 0x0, 0x0, @void, @value}, 0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x41, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/anycast6\x00')
lseek(r4, 0x7fffffffffffffff, 0x0)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x121001, 0x0)
dup3(r5, r4, 0x80000)

1.008354049s ago: executing program 1 (id=353):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
dup(r3)
openat$tun(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000002140))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000005dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/78, 0x4f}], 0x20000000000000bb}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

1.007231856s ago: executing program 0 (id=354):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) (async)
preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000002340)=""/75, 0x4b}], 0x1, 0x0, 0x1)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000013c0), 0x800, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) (async)
read(r2, 0x0, 0x0)
ioctl$CDROMRESET(r1, 0x5312)

1.000349438s ago: executing program 0 (id=355):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000500)=@assoc_value={<r8=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r8, 0x0, 0x6}, 0xc)
write$uinput_user_dev(r5, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r5, 0x5501)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000300)="82a54897c7b33114d71d446f73e944ad3141170aa6288e2ecf7966e9e4e6b423f15511686220a9d5eb6eaa4bdf5e9f88366aed25eb1722d73cc728c98a3e218f1b65b90a45eaabbb251fbd96fdd6293a587a53b4fda024efd56f11e784466af014c40ffa019ee7c1e509e30d00ae5603325a3bb7bd360550d2d0a046447b6d7784e97876817a54bec4e309ae4debe65d0cacfed0a15b53f519616c26d2466b13ba6c479492d120e88e3f525e9134503c998d0b437f1ebf4c03e21541ccd9ba497c53ff93c5", 0xc5, 0xfffffffffffffffd)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x200000000000000}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}]}, 0x114}}, 0x4001)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x4e)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

779.445528ms ago: executing program 2 (id=356):
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}})
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
r6 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmmsg$inet(r6, &(0x7f0000003000)=[{{&(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x200048c5)
sendmmsg$inet(r6, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='*', 0x1}], 0x1}}], 0x1, 0x4044009)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
splice(r6, 0x0, r7, 0x0, 0x2, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index})
r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix={0x9, 0x48000000, 0x20363159, 0x3, 0x6, 0xffffffff, 0x6, 0xa6e, 0x0, 0x0, 0x1, 0x2}})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc2c45513, &(0x7f00000000c0)={0x5, 0x6, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
fdatasync(r9)
io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0)
unshare(0x2a020400)
mount$fuse(0x0, &(0x7f0000000280)='./bus/file0\x00', 0x0, 0x800000, 0x0)

509.611727ms ago: executing program 2 (id=357):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x703, 0x0)
vmsplice(r0, 0x0, 0x0, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r1, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, &(0x7f00000001c0)) (async)
r3 = syz_clone(0x20a00900, &(0x7f0000000040)="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", 0x1000, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0))
sched_setscheduler(r3, 0x1, &(0x7f0000001600)=0x10001004)

509.198924ms ago: executing program 2 (id=358):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x0, 0x0, 0x0, 0xfffffffe, 0x8}}, 0x4)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)

459.9199ms ago: executing program 2 (id=359):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
dup(r0)
add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0)
syz_io_uring_setup(0x359, &(0x7f00000002c0)={0x0, 0x58bf, 0x2, 0x0, 0x402c}, &(0x7f0000000100), &(0x7f00000001c0))

299.824451ms ago: executing program 2 (id=360):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x17)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_procfs$pagemap(r0, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000000140))
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
r8 = socket$inet(0x2, 0xa, 0x4)
connect$inet(r8, &(0x7f0000000100)={0x1f, 0x0, @multicast1}, 0x29)
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
openat$adsp1(0xffffff9c, &(0x7f0000000280), 0x52042, 0x0)
pread64(r1, &(0x7f0000000380)=""/76, 0x4c, 0x7f)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00\x00', 0x2}], 0x1}, 0x8001)
ioctl$SIOCSIFHWADDR(r9, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})
unshare(0x62040200)

298.82472ms ago: executing program 3 (id=361):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x8000)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9}, @remote}, @timestamp}}}}, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
write(r1, &(0x7f00000004c0)="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", 0x7f1)
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fchdir(0xffffffffffffffff)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0445609, &(0x7f0000000240)=@mmap={0x6, 0x3, 0x4, 0x2000, 0x7a6b, {0x77359400}, {0x4, 0x0, 0x4, 0x5, 0xfd, 0x8, "9f509ff9"}, 0x8, 0x1, {}, 0x7})
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r5 = dup(r4)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0x69)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/151, 0x97}], 0x1)
close(r2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x4000014)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa810000008848"], 0x89)
sendfile(r4, r6, 0x0, 0x6)
r9 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, r0, 0x57170000)
openat$dsp(0xffffff9c, &(0x7f0000000140), 0x800, 0x0)

148.069381ms ago: executing program 1 (id=362):
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000001010000ff7fdfffcb00000000000000", @ANYRESOCT, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00'/28], 0x48) (async)
r0 = socket$packet(0x11, 0x2, 0x300) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xc0, &(0x7f0000000480)=""/192, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34, @void, @value}, 0x94) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(r1, 0x8, &(0x7f0000000280)) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x0, 0x0, 0x8, 0x0, "0c9e089c01860b471037f43d223b3c1b324debec40e55a07f709417eb48821996aff1c7154e746be4d7686455261c425a7519cc269d04e6205abaabde24a2b12440b329ad5bd35f21907c7988d1300"}, 0xd8) (async)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'crct10dif\x00'}}) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) (async)
msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000ff91b02100"], 0x8, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)

69.618777ms ago: executing program 0 (id=363):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000180)={0x0, @frame_sync})
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r1 = userfaultfd(0x801)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$UFFDIO_CONTINUE(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
syz_io_uring_setup(0x4aa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000000), &(0x7f00000001c0))
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r3, 0x5408, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x4004480c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x690a, 0x0, &(0x7f0000000140), 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 1 (id=364):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xfffefffe}, {0x2}, {0x6, 0x1}]})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7f}]}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x20004885)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20654' (ED25519) to the list of known hosts.
[   41.276354][ T5930] cgroup: Unknown subsys name 'net'
[   41.403491][ T5930] cgroup: Unknown subsys name 'cpuset'
[   41.408269][ T5930] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.252597][ T5930] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.452390][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.453028][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.456353][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.458278][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.459988][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.462081][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.462914][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.463568][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.463955][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.464830][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.465240][ T5948] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   44.465446][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.468106][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.470697][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.472437][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   44.473613][ T5948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   44.473737][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.474858][ T5951] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   44.477942][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   44.481094][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.485472][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   44.497949][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   44.502240][ T5950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   44.504522][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   44.621987][ T5941] chnl_net:caif_netlink_parms(): no params data found
[   44.635889][ T5942] chnl_net:caif_netlink_parms(): no params data found
[   44.707157][ T5946] chnl_net:caif_netlink_parms(): no params data found
[   44.765215][ T5952] chnl_net:caif_netlink_parms(): no params data found
[   44.785331][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.790950][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.793990][ T5942] bridge_slave_0: entered allmulticast mode
[   44.797240][ T5942] bridge_slave_0: entered promiscuous mode
[   44.843646][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.845740][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.847813][ T5941] bridge_slave_0: entered allmulticast mode
[   44.850461][ T5941] bridge_slave_0: entered promiscuous mode
[   44.854258][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.856991][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.860074][ T5942] bridge_slave_1: entered allmulticast mode
[   44.863121][ T5942] bridge_slave_1: entered promiscuous mode
[   44.895527][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.898154][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.901137][ T5941] bridge_slave_1: entered allmulticast mode
[   44.904861][ T5941] bridge_slave_1: entered promiscuous mode
[   44.988295][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.994968][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.012181][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.014368][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.016505][ T5946] bridge_slave_0: entered allmulticast mode
[   45.018776][ T5946] bridge_slave_0: entered promiscuous mode
[   45.023126][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.028148][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.049392][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.051560][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.053560][ T5946] bridge_slave_1: entered allmulticast mode
[   45.055634][ T5946] bridge_slave_1: entered promiscuous mode
[   45.110788][ T5942] team0: Port device team_slave_0 added
[   45.113445][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.115476][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.117515][ T5952] bridge_slave_0: entered allmulticast mode
[   45.120163][ T5952] bridge_slave_0: entered promiscuous mode
[   45.138729][ T5941] team0: Port device team_slave_0 added
[   45.141843][ T5942] team0: Port device team_slave_1 added
[   45.143718][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.145871][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.147939][ T5952] bridge_slave_1: entered allmulticast mode
[   45.150375][ T5952] bridge_slave_1: entered promiscuous mode
[   45.163592][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.166794][ T5941] team0: Port device team_slave_1 added
[   45.194979][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.199105][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.212100][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.214855][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.224398][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.230243][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.257571][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.259843][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.269354][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.284479][ T5946] team0: Port device team_slave_0 added
[   45.286826][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.289508][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.298559][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.306736][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.309309][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.318242][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.333010][ T5946] team0: Port device team_slave_1 added
[   45.361487][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.363500][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.370823][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.376294][ T5952] team0: Port device team_slave_0 added
[   45.380356][ T5952] team0: Port device team_slave_1 added
[   45.391051][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.393018][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.400884][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.422220][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.424434][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.434210][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.442813][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.445030][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.453259][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.474697][ T5942] hsr_slave_0: entered promiscuous mode
[   45.477682][ T5942] hsr_slave_1: entered promiscuous mode
[   45.503389][ T5941] hsr_slave_0: entered promiscuous mode
[   45.505577][ T5941] hsr_slave_1: entered promiscuous mode
[   45.507404][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.509814][ T5941] Cannot create hsr debugfs directory
[   45.577234][ T5946] hsr_slave_0: entered promiscuous mode
[   45.579557][ T5946] hsr_slave_1: entered promiscuous mode
[   45.582008][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.584114][ T5946] Cannot create hsr debugfs directory
[   45.593273][ T5952] hsr_slave_0: entered promiscuous mode
[   45.595306][ T5952] hsr_slave_1: entered promiscuous mode
[   45.597373][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.599635][ T5952] Cannot create hsr debugfs directory
[   45.809428][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.816537][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.820104][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.823263][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.850567][ T5952] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.854442][ T5952] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.859797][ T5952] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.863576][ T5952] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.885625][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.889066][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.900205][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.913207][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.929890][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   45.933484][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   45.939284][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.943292][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   45.948208][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   45.973455][ T5941] 8021q: adding VLAN 0 to HW filter on device team0
[   45.978459][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.980724][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.991311][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.993516][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.025235][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.047302][ T5952] 8021q: adding VLAN 0 to HW filter on device team0
[   46.058177][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.060758][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.066482][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.078510][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.080639][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.087702][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.094547][ T5946] 8021q: adding VLAN 0 to HW filter on device team0
[   46.104205][ T5942] 8021q: adding VLAN 0 to HW filter on device team0
[   46.114464][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.116537][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.122830][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.125950][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.132896][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.135243][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.140413][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.143225][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.187625][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.218519][ T5941] veth0_vlan: entered promiscuous mode
[   46.224053][ T5941] veth1_vlan: entered promiscuous mode
[   46.235381][ T5941] veth0_macvtap: entered promiscuous mode
[   46.238375][ T5941] veth1_macvtap: entered promiscuous mode
[   46.250431][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.255185][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.259532][ T5941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.262507][ T5941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.265666][ T5941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.268448][ T5941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.287677][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.293521][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.320833][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.323654][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.326014][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.348962][ T5946] veth0_vlan: entered promiscuous mode
[   46.356364][ T5946] veth1_vlan: entered promiscuous mode
[   46.356597][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.361124][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.361939][ T5952] veth0_vlan: entered promiscuous mode
[   46.378155][ T5952] veth1_vlan: entered promiscuous mode
[   46.395474][ T5941] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.396410][ T5946] veth0_macvtap: entered promiscuous mode
[   46.404710][ T5946] veth1_macvtap: entered promiscuous mode
[   46.416996][ T5942] veth0_vlan: entered promiscuous mode
[   46.426269][ T5952] veth0_macvtap: entered promiscuous mode
[   46.429999][ T5952] veth1_macvtap: entered promiscuous mode
[   46.433708][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.437074][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.441285][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.445972][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.450294][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.453510][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.458485][ T5942] veth1_vlan: entered promiscuous mode
[   46.464406][ T5946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.466894][ T5946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.469868][ T5946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.472353][ T5946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.472695][   T39] audit: type=1800 audit(1736091365.967:2): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="/" dev="9p" ino=154 res=0 errno=0
[   46.477414][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.485949][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.492072][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.495832][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.500867][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.513247][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.517472][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.519957][ T5950] Bluetooth: hci2: command tx timeout
[   46.521369][ T5309] Bluetooth: hci1: command tx timeout
[   46.521498][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.521514][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.522705][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.523427][ T5944] Bluetooth: hci0: command tx timeout
[   46.529113][ T5950] Bluetooth: hci3: command tx timeout
[   46.539360][ T5952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.542277][ T5952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.545477][ T5952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.548549][ T5952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.565950][ T5942] veth0_macvtap: entered promiscuous mode
[   46.572973][ T5942] veth1_macvtap: entered promiscuous mode
[   46.594189][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.597851][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.623785][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.624411][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.626376][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.630951][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.634441][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.635872][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.637256][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.637263][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.640215][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.642392][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.642988][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.664474][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.667936][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.671558][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.674551][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.677607][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.681373][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.687778][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.691448][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.694004][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.696441][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.698979][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.704572][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.707476][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.760209][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.764883][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.784026][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.786239][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.119170][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.121595][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.123884][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.126285][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.128621][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.131370][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.133668][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.136269][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.138754][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.141559][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.175747][ T6024] ebtables: wrong size: *len 264, entries_size 144, replsz 144
[   47.504958][ T6017] syz.0.1 (6017): drop_caches: 2
[   47.657767][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'.
[   47.660659][ T6041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'.
[   47.667788][ T6041] vlan2: entered allmulticast mode
[   47.889460][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   47.941279][ T6049] netlink: zone id is out of range
[   48.015494][ T6053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7'.
[   48.027710][ T6053] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[   48.045747][    T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   48.048191][    T9] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[   48.054185][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[   48.056791][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[   48.060329][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[   48.064884][    T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   48.068591][    T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   48.075732][    T9] usb 7-1: Product: syz
[   48.077405][    T9] usb 7-1: Manufacturer: syz
[   48.094692][    T9] cdc_wdm 7-1:1.0: skipping garbage
[   48.096271][    T9] cdc_wdm 7-1:1.0: skipping garbage
[   48.097805][    T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[   48.150974][ T1013] libceph: connect (1)[c::]:6789 error -101
[   48.156438][ T1013] libceph: mon0 (1)[c::]:6789 connect error
[   48.237082][    C3] IPv4: Oversized IP packet from 172.20.20.24
[   48.297276][ T6057] netlink: 'syz.3.9': attribute type 10 has an invalid length.
[   48.311136][    T9] usb 7-1: USB disconnect, device number 2
[   48.349195][ T6058] openvswitch: netlink: Missing key (keys=40, expected=100)
[   48.420012][ T5972] libceph: connect (1)[c::]:6789 error -101
[   48.422857][ T5972] libceph: mon0 (1)[c::]:6789 connect error
[   48.517466][ T6050] ceph: No mds server is up or the cluster is laggy
[   48.599320][ T5950] Bluetooth: hci3: command tx timeout
[   48.599411][ T5944] Bluetooth: hci2: command tx timeout
[   48.599534][ T5309] Bluetooth: hci0: command tx timeout
[   48.599565][ T5309] Bluetooth: hci1: command tx timeout
[   48.699078][ T5979] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   49.018958][ T5979] usb 8-1: Using ep0 maxpacket: 16
[   49.022100][ T5979] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   49.027415][ T5979] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[   49.037747][ T5979] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.040116][ T5979] usb 8-1: Product: syz
[   49.041328][ T5979] usb 8-1: Manufacturer: syz
[   49.042804][ T5979] usb 8-1: SerialNumber: syz
[   49.055677][ T5979] usb 8-1: config 0 descriptor??
[   49.061733][ T5979] appledisplay 8-1:0.0: Could not find int-in endpoint
[   49.064915][ T5979] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[   49.127633][ T6072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.184365][ T5979] kernel write not supported for file bpf-prog (pid: 5979 comm: kworker/0:2)
[   50.679557][ T5944] Bluetooth: hci3: command tx timeout
[   50.681755][ T5944] Bluetooth: hci2: command tx timeout
[   50.685090][ T5944] Bluetooth: hci1: command tx timeout
[   50.687895][ T5944] Bluetooth: hci0: command tx timeout
[   51.418460][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   51.640150][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'.
[   51.780415][  T831] usb 8-1: USB disconnect, device number 2
[   52.232606][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   52.235381][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   52.429334][   T39] audit: type=1800 audit(1736091371.897:3): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.22" name="/" dev="9p" ino=154 res=0 errno=0
[   52.758944][ T5950] Bluetooth: hci1: command tx timeout
[   52.760566][ T5950] Bluetooth: hci2: command tx timeout
[   52.762194][ T5950] Bluetooth: hci3: command tx timeout
[   52.763764][ T5944] Bluetooth: hci0: command tx timeout
[   53.058251][ T6129] netlink: 'syz.3.26': attribute type 1 has an invalid length.
[   53.113705][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'.
[   53.130374][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'.
[   53.190817][ T6129] syz.3.26 (6129): /proc/6128/oom_adj is deprecated, please use /proc/6128/oom_score_adj instead.
[   54.558195][ T6155] syz.2.32: attempt to access beyond end of device
[   54.558195][ T6155] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[   54.562941][ T6155] FAT-fs (nbd2): unable to read boot sector
[   55.158698][ T6170] netlink: 'syz.3.35': attribute type 4 has an invalid length.
[   57.120761][ T6200] 9pnet: bogus RREAD count (69 > 41)
[   57.123376][   T39] audit: type=1800 audit(1736091376.617:4): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.42" name="/" dev="9p" ino=154 res=0 errno=0
[   57.234462][ T5985] IPVS: starting estimator thread 0...
[   57.330226][ T6210] IPVS: using max 39 ests per chain, 93600 per kthread
[   57.926912][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'.
[   57.929580][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.49'.
[   57.934244][ T6224] vlan2: entered allmulticast mode
[   58.038998][   T56] libceph: connect (1)[c::]:6789 error -101
[   58.041006][   T56] libceph: mon0 (1)[c::]:6789 connect error
[   58.309128][   T56] libceph: connect (1)[c::]:6789 error -101
[   58.313451][   T56] libceph: mon0 (1)[c::]:6789 connect error
[   58.544288][ T6241] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   58.766391][ T6224] ceph: No mds server is up or the cluster is laggy
[   58.956422][ T6282] 9pnet: bogus RREAD count (69 > 41)
[   58.958457][   T39] audit: type=1800 audit(1736091378.447:5): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.59" name="/" dev="9p" ino=154 res=0 errno=0
[   59.275844][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'.
[   59.278461][ T6303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'.
[   59.283073][ T6303] vlan2: entered allmulticast mode
[   59.293784][ T1013] libceph: connect (1)[c::]:6789 error -101
[   59.296348][ T1013] libceph: mon0 (1)[c::]:6789 connect error
[   59.309584][   T56] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   59.319028][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   59.448937][   T56] usb 5-1: device descriptor read/64, error -71
[   59.478928][    T9] usb 8-1: Using ep0 maxpacket: 8
[   59.481707][    T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.484626][    T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[   59.487177][    T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   59.490429][    T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   59.493744][    T9] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   59.496344][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.502107][    T9] hub 8-1:1.0: bad descriptor, ignoring hub
[   59.503864][    T9] hub 8-1:1.0: probe with driver hub failed with error -5
[   59.506373][    T9] cdc_wdm 8-1:1.0: skipping garbage
[   59.507921][    T9] cdc_wdm 8-1:1.0: skipping garbage
[   59.511955][    T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   59.513705][    T9] cdc_wdm 8-1:1.0: Unknown control protocol
[   59.549171][ T5988] libceph: connect (1)[c::]:6789 error -101
[   59.551586][ T5988] libceph: mon0 (1)[c::]:6789 connect error
[   59.696925][ T6310] 9pnet: bogus RREAD count (69 > 41)
[   59.699062][   T56] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   59.699306][   T39] audit: type=1800 audit(1736091379.187:6): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.67" name="/" dev="9p" ino=154 res=0 errno=0
[   59.828930][   T56] usb 5-1: device descriptor read/64, error -71
[   59.949100][   T56] usb usb5-port1: attempt power cycle
[   60.038971][ T5988] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   60.070011][ T1013] libceph: connect (1)[c::]:6789 error -101
[   60.071912][ T1013] libceph: mon0 (1)[c::]:6789 connect error
[   60.099288][ T5985] usb 8-1: USB disconnect, device number 3
[   60.109225][ T6303] ceph: No mds server is up or the cluster is laggy
[   60.219363][ T5988] usb 6-1: unable to get BOS descriptor or descriptor too short
[   60.225024][ T5988] usb 6-1: unable to read config index 0 descriptor/start: -71
[   60.226975][ T5988] usb 6-1: can't read configurations, error -71
[   60.262263][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'.
[   60.265892][ T6328] netlink: 72 bytes leftover after parsing attributes in process `syz.2.69'.
[   60.308983][   T56] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   60.329792][   T56] usb 5-1: device descriptor read/8, error -71
[   60.368320][ T6337] netlink: 104 bytes leftover after parsing attributes in process `syz.2.72'.
[   60.371949][ T6337] netlink: 104 bytes leftover after parsing attributes in process `syz.2.72'.
[   60.375098][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'.
[   60.543164][ T6346] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.598990][   T56] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   60.619396][   T56] usb 5-1: device descriptor read/8, error -71
[   60.729151][   T56] usb usb5-port1: unable to enumerate USB device
[   60.812824][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'.
[   60.817908][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.77'.
[   60.835502][   T56] libceph: connect (1)[c::]:6789 error -101
[   60.837340][   T56] libceph: mon0 (1)[c::]:6789 connect error
[   61.099122][   T56] libceph: connect (1)[c::]:6789 error -101
[   61.101057][   T56] libceph: mon0 (1)[c::]:6789 connect error
[   61.133899][ T6362] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   61.497593][ T6381] tipc: Started in network mode
[   61.499327][ T6381] tipc: Node identity 4, cluster identity 4711
[   61.501395][ T6381] tipc: Node number set to 4
[   61.609517][ T5988] libceph: connect (1)[c::]:6789 error -101
[   61.612000][ T5988] libceph: mon0 (1)[c::]:6789 connect error
[   61.642079][ T6352] ceph: No mds server is up or the cluster is laggy
[   61.753374][ T6385] syz.3.87: attempt to access beyond end of device
[   61.753374][ T6385] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[   61.757511][ T6385] syz.3.87: attempt to access beyond end of device
[   61.757511][ T6385] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0
[   61.761293][ T6385] Mount JFS Failure: -5
[   62.070313][ T6391] block nbd1: shutting down sockets
[   62.145148][ T6398] virtiofs: Unknown parameter 'usrquota'
[   62.702353][ T6422] AppArmor: change_hat: Invalid input '0'
[   62.810297][ T6427] netlink: 'syz.3.101': attribute type 2 has an invalid length.
[   62.820034][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.101'.
[   62.900687][ T6430] Zero length message leads to an empty skb
[   63.138028][ T6435] vivid-000: =================  START STATUS  =================
[   63.141492][ T6435] vivid-000: Test Pattern: 75% Colorbar
[   63.143450][ T6435] vivid-000: Fill Percentage of Frame: 100
[   63.145253][ T6435] vivid-000: Horizontal Movement: No Movement
[   63.147016][ T6435] vivid-000: Vertical Movement: No Movement
[   63.148727][ T6435] vivid-000: OSD Text Mode: All
[   63.150348][ T6435] vivid-000: Show Border: false
[   63.151785][ T6435] vivid-000: Show Square: false
[   63.153224][ T6435] vivid-000: Sensor Flipped Horizontally: false
[   63.155044][ T6435] vivid-000: Sensor Flipped Vertically: false
[   63.159612][ T6435] vivid-000: Insert SAV Code in Image: false
[   63.161527][ T6435] vivid-000: Insert EAV Code in Image: false
[   63.163269][ T6435] vivid-000: Insert Video Guard Band: false
[   63.164960][ T6435] vivid-000: Reduced Framerate: false
[   63.166497][ T6435] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[   63.168673][ T6435] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[   63.172480][ T6435] vivid-000: Enable Capture Cropping: true
[   63.174193][ T6435] vivid-000: Enable Capture Composing: true
[   63.175907][ T6435] vivid-000: Enable Capture Scaler: true
[   63.177540][ T6435] vivid-000: Timestamp Source: End of Frame
[   63.184752][ T6435] vivid-000: Colorspace: sRGB
[   63.186474][ T6435] vivid-000: Transfer Function: Default
[   63.188217][ T6435] vivid-000: Y'CbCr Encoding: Default
[   63.190408][ T6435] vivid-000: HSV Encoding: Hue 0-179
[   63.191967][ T6435] vivid-000: Quantization: Default
[   63.193548][ T6435] vivid-000: Apply Alpha To Red Only: false
[   63.195264][ T6435] vivid-000: Standard Aspect Ratio: 4x3
[   63.196870][ T6435] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[   63.199264][ T6435] vivid-000: DV Timings: 640x480p59 inactive
[   63.201690][ T6435] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[   63.203933][ T6435] vivid-000: Maximum EDID Blocks: 2
[   63.205499][ T6435] vivid-000: Limited RGB Range (16-235): false
[   63.207265][ T6435] vivid-000: Rx RGB Quantization Range: Automatic
[   63.209936][ T6435] vivid-000: Power Present: 0x00000001
[   63.211587][ T6435] tpg source WxH: 640x360 (Y'CbCr)
[   63.213126][ T6435] tpg field: 1
[   63.214132][ T6435] tpg crop: 640x360@0x0
[   63.215336][ T6435] tpg compose: 640x360@0x0
[   63.218773][ T6435] tpg colorspace: 8
[   63.219999][ T6435] tpg transfer function: 0/0
[   63.221378][ T6435] tpg Y'CbCr encoding: 0/0
[   63.222675][ T6435] tpg quantization: 0/0
[   63.223869][ T6435] tpg RGB range: 0/2
[   63.225018][ T6435] vivid-000: ==================  END STATUS  ==================
[   64.522671][ T6478] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   64.687336][ T6482] __nla_validate_parse: 1 callbacks suppressed
[   64.687346][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'.
[   64.979167][   T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   65.138257][ T6484] : entered promiscuous mode
[   65.147688][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[   65.151218][   T25] usb 5-1: unable to read config index 0 descriptor/start: -71
[   65.154087][   T25] usb 5-1: can't read configurations, error -71
[   65.228925][ T5981] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   65.379208][ T5981] usb 8-1: Using ep0 maxpacket: 16
[   65.383341][ T5981] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[   65.385737][ T5981] usb 8-1: config 0 has no interface number 0
[   65.389118][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.119'.
[   65.391908][ T5981] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 240, changing to 11
[   65.396116][ T5981] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 9790, setting to 1024
[   65.401382][ T5981] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   65.404033][ T5981] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   65.406473][ T5981] usb 8-1: Product: syz
[   65.407800][ T5981] usb 8-1: SerialNumber: syz
[   65.416297][ T5981] usb 8-1: config 0 descriptor??
[   65.419425][ T6489] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   65.424309][ T5981] cm109 8-1:0.8: invalid payload size 1024, expected 4
[   65.438016][ T5981] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input5
[   65.670090][ T6501] syz.2.121 uses obsolete (PF_INET,SOCK_PACKET)
[   65.721509][    C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[   65.721571][ T6063] usb 8-1: USB disconnect, device number 4
[   65.724102][    C2] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[   65.741586][ T6063] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   66.068264][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[   66.070886][ T6517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'.
[   66.075599][ T6517] vlan2: entered allmulticast mode
[   66.510340][ T5988] libceph: connect (1)[c::]:6789 error -101
[   66.517715][ T5988] libceph: mon0 (1)[c::]:6789 connect error
[   66.789115][ T5988] libceph: connect (1)[c::]:6789 error -101
[   66.790947][ T5988] libceph: mon0 (1)[c::]:6789 connect error
[   66.881958][ T6541] tmpfs: Cannot change global quota limit on remount
[   66.905317][ T6522] ceph: No mds server is up or the cluster is laggy
[   66.957691][ T6543] process 'syz.2.133' launched './file0' with NULL argv: empty string added
[   66.982663][ T6543] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0
[   67.704451][ T6569] pim6reg: entered allmulticast mode
[   67.706502][ T6569] pim6reg: left allmulticast mode
[   68.141139][ T6582] netlink: 'syz.1.142': attribute type 11 has an invalid length.
[   69.094869][ T6601] Bluetooth: MGMT ver 1.23
[   69.626796][ T6623] netlink: 'syz.1.152': attribute type 10 has an invalid length.
[   69.638632][ T6623] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   70.294342][ T6632] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[   70.296995][ T6632] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[   70.345324][ T6633] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[   70.348930][ T6633] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[   70.389998][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'.
[   70.390839][ T6644] kernel read not supported for file /! (pid: 6644 comm: syz.2.158)
[   70.393466][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'.
[   70.398212][   T39] audit: type=1800 audit(1736091389.887:7): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.158" name=217F dev="mqueue" ino=12509 res=0 errno=0
[   70.408008][ T6644] 9pnet: Could not find request transport: fo=
[   70.413699][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'.
[   70.466294][   T39] audit: type=1326 audit(1736091389.957:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000
[   70.473221][   T39] audit: type=1326 audit(1736091389.957:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000
[   70.479382][   T39] audit: type=1326 audit(1736091389.957:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f0f579 code=0x7ffc0000
[   70.485352][   T39] audit: type=1326 audit(1736091389.957:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000
[   70.493511][   T39] audit: type=1326 audit(1736091389.957:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000
[   70.499831][   T39] audit: type=1326 audit(1736091389.957:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f0f579 code=0x7ffc0000
[   70.505909][   T39] audit: type=1326 audit(1736091389.957:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000
[   70.512040][   T39] audit: type=1326 audit(1736091389.957:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000
[   70.518600][   T39] audit: type=1326 audit(1736091389.957:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f0f579 code=0x7ffc0000
[   70.529553][ T6658] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   70.696889][ T6663] syz.2.163: attempt to access beyond end of device
[   70.696889][ T6663] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0
[   70.701568][ T6663] XFS (nbd2): SB validate failed with error -5.
[   70.761670][ T1412] ieee802154 phy0 wpan0: encryption failed: -22
[   70.763714][ T1412] ieee802154 phy1 wpan1: encryption failed: -22
[   71.831607][ T6698] netlink: 'syz.2.172': attribute type 1 has an invalid length.
[   71.838982][ T6698] bond1: entered promiscuous mode
[   71.840501][ T6698] bond1: entered allmulticast mode
[   71.849882][ T6698] batadv1: entered promiscuous mode
[   71.851999][ T6698] batadv1: entered allmulticast mode
[   71.855051][ T6698] 8021q: adding VLAN 0 to HW filter on device batadv1
[   71.859625][ T6698] bond1: (slave batadv1): making interface the new active one
[   71.862844][ T6698] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   72.339020][   T62] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   72.520871][   T62] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.524047][   T62] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.526805][   T62] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.530842][   T62] usb 8-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[   72.534048][   T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.537261][   T62] usb 8-1: config 0 descriptor??
[   72.731274][ T6721] tmpfs: Unknown parameter 'nr_b“ĄCks'
[   72.910684][   T62] usbhid 8-1:0.0: can't add hid device: -71
[   72.912621][   T62] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[   72.916579][   T62] usb 8-1: USB disconnect, device number 5
[   72.944179][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'.
[   72.947501][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.181'.
[   73.184226][ T5988] libceph: connect (1)[c::]:6789 error -101
[   73.186514][ T5988] libceph: mon0 (1)[c::]:6789 connect error
[   73.378498][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'.
[   73.381999][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'.
[   73.472365][   T56] libceph: connect (1)[c::]:6789 error -101
[   73.474238][   T56] libceph: mon0 (1)[c::]:6789 connect error
[   73.874908][ T6733] ceph: No mds server is up or the cluster is laggy
[   74.009426][   T62] libceph: connect (1)[c::]:6789 error -101
[   74.012103][   T62] libceph: mon0 (1)[c::]:6789 connect error
[   74.014232][   T62] libceph: connect (1)[c::]:6789 error -101
[   74.015982][   T62] libceph: mon0 (1)[c::]:6789 connect error
[   74.257928][ T6743] ceph: No mds server is up or the cluster is laggy
[   74.269179][   T62] libceph: connect (1)[c::]:6789 error -101
[   74.272123][   T62] libceph: mon0 (1)[c::]:6789 connect error
[   74.349001][ T5981] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   74.426453][ T6767] netlink: 'syz.3.189': attribute type 5 has an invalid length.
[   74.485916][ T6767] netlink: 48 bytes leftover after parsing attributes in process `syz.3.189'.
[   74.499045][ T5981] usb 5-1: Using ep0 maxpacket: 16
[   74.502184][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.505753][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.509353][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   74.519351][ T5981] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   74.521997][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.539578][ T5981] usb 5-1: config 0 descriptor??
[   74.953136][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.955966][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.172704][ T5981] usbhid 5-1:0.0: can't add hid device: -71
[   75.175298][ T5981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   75.179576][ T5981] usb 5-1: USB disconnect, device number 8
[   75.577295][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'.
[   75.580835][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.194'.
[   75.717700][ T6797] netlink: 'syz.0.196': attribute type 10 has an invalid length.
[   75.830112][   T56] libceph: connect (1)[c::]:6789 error -101
[   75.832042][   T56] libceph: mon0 (1)[c::]:6789 connect error
[   76.089599][   T56] libceph: connect (1)[c::]:6789 error -101
[   76.092573][   T56] libceph: mon0 (1)[c::]:6789 connect error
[   76.153884][ T6809] 9pnet_fd: Insufficient options for proto=fd
[   76.412008][ T6799] ceph: No mds server is up or the cluster is laggy
[   76.662838][ T6827] netlink: 'syz.1.201': attribute type 10 has an invalid length.
[   76.666988][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.669658][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.677766][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.679904][ T6827] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.682534][ T6827] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.684611][ T6827] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.693891][ T6827] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   76.699226][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'.
[   76.707893][ T6827] bridge_slave_1: left allmulticast mode
[   76.711987][ T6827] bridge_slave_1: left promiscuous mode
[   76.741927][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.863753][ T6827] bridge_slave_0: left promiscuous mode
[   76.865717][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.997696][ T6827] bond0: (slave bridge0): Releasing backup interface
[   77.951315][ T6851] 9pnet: bogus RREAD count (69 > 41)
[   77.954351][   T39] kauditd_printk_skb: 12 callbacks suppressed
[   77.954499][   T39] audit: type=1800 audit(1736091397.447:29): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.209" name="/" dev="9p" ino=154 res=0 errno=0
[   78.081153][ T6863] trusted_key: syz.0.212 sent an empty control message without MSG_MORE.
[   78.805462][ T6876] syz.2.217 (6876) used greatest stack depth: 20608 bytes left
[   79.054732][ T6885] warning: `syz.2.220' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.110760][ T6894] 9pnet_fd: Insufficient options for proto=fd
[   79.515194][ T6911] raw_sendmsg: syz.2.227 forgot to set AF_INET. Fix it!
[   79.675457][ T6927] fuse: Bad value for 'fd'
[   79.727374][ T6929] capability: warning: `syz.1.235' uses deprecated v2 capabilities in a way that may be insecure
[   79.730700][ T6929] Illegal XDP return value 2317777718 on prog  (id 43) dev N/A, expect packet loss!
[   80.470449][ T6952] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   80.472427][ T6952] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   80.476251][ T6952] vhci_hcd vhci_hcd.0: Device attached
[   80.481786][ T6947] loop7: detected capacity change from 0 to 16384
[   80.503233][ T6953] vhci_hcd: connection closed
[   80.507428][   T11] vhci_hcd: stop threads
[   80.511847][   T11] vhci_hcd: release socket
[   80.513406][   T11] vhci_hcd: disconnect device
[   80.823695][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'.
[   80.856132][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'.
[   80.858756][ T6974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.245'.
[   81.002576][   T30] cfg80211: failed to load regulatory.db
[   81.063841][  T831] libceph: connect (1)[c::]:6789 error -101
[   81.065676][  T831] libceph: mon0 (1)[c::]:6789 connect error
[   81.092001][ T5951] Bluetooth: hci0: command 0x0406 tx timeout
[   81.319264][  T831] libceph: connect (1)[c::]:6789 error -101
[   81.321179][  T831] libceph: mon0 (1)[c::]:6789 connect error
[   81.704115][ T6982] ceph: No mds server is up or the cluster is laggy
[  111.871926][ T7004] xt_TCPMSS: Only works on TCP SYN packets
[  111.888813][ T7006] macvlan1: entered promiscuous mode
[  111.895972][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'.
[  111.915051][ T7006] macvlan1 (unregistering): left promiscuous mode
[  112.495334][ T7019] /dev/nbd1: Can't lookup blockdev
[  112.923408][ T5944] Bluetooth: hci0: unexpected event for opcode 0x1003
[  113.268611][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'.
[  113.271384][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.259'.
[  113.503851][    T9] libceph: connect (1)[c::]:6789 error -101
[  113.505621][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  113.769123][    T9] libceph: connect (1)[c::]:6789 error -101
[  113.770894][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  114.083323][ T7074] netlink: 'syz.0.264': attribute type 2 has an invalid length.
[  114.087476][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'.
[  114.154041][ T7049] ceph: No mds server is up or the cluster is laggy
[  114.412556][ T5988] libceph: connect (1)[c::]:6789 error -101
[  114.414376][ T5988] libceph: mon0 (1)[c::]:6789 connect error
[  114.670509][ T5988] libceph: connect (1)[c::]:6789 error -101
[  114.681159][ T5988] libceph: mon0 (1)[c::]:6789 connect error
[  114.716379][ T7082] ceph: No mds server is up or the cluster is laggy
[  115.041060][   T39] audit: type=1326 audit(1736091434.537:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  115.048694][   T39] audit: type=1326 audit(1736091434.537:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  115.059152][   T39] audit: type=1326 audit(1736091434.537:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.267" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf714e579 code=0x7ffc0000
[  115.066360][   T39] audit: type=1326 audit(1736091434.537:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  115.072605][   T39] audit: type=1326 audit(1736091434.537:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  115.078454][   T39] audit: type=1326 audit(1736091434.537:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.267" exe="/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf714e579 code=0x7ffc0000
[  115.095299][   T39] audit: type=1326 audit(1736091434.537:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  115.101762][   T39] audit: type=1326 audit(1736091434.537:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  115.107751][   T39] audit: type=1326 audit(1736091434.537:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.267" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf714e579 code=0x7ffc0000
[  115.115191][   T39] audit: type=1326 audit(1736091434.537:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  115.279148][ T7115] input: syz1 as /devices/virtual/input/input8
[  115.598970][  T831] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  115.729003][  T831] usb 5-1: device descriptor read/64, error -71
[  115.988976][  T831] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  116.119095][  T831] usb 5-1: device descriptor read/64, error -71
[  116.229165][  T831] usb usb5-port1: attempt power cycle
[  116.359762][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'.
[  116.568942][  T831] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  116.599611][  T831] usb 5-1: device descriptor read/8, error -71
[  116.839047][  T831] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  116.871149][  T831] usb 5-1: device descriptor read/8, error -71
[  116.979899][  T831] usb usb5-port1: unable to enumerate USB device
[  117.000790][ T5944] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  117.003381][ T5944] Bluetooth: hci0: Injecting HCI hardware error event
[  117.006742][ T5944] Bluetooth: hci0: hardware error 0x00
[  117.020348][ T7125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.557757][ T7140] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  118.139269][ T7166] tmpfs: Bad value for 'mpol'
[  118.442660][ T7189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.290'.
[  118.657898][ T5988] libceph: connect (1)[c::]:6789 error -101
[  118.689712][ T5988] libceph: mon0 (1)[c::]:6789 connect error
[  118.979638][ T5988] libceph: connect (1)[c::]:6789 error -101
[  118.981453][ T5988] libceph: mon0 (1)[c::]:6789 connect error
[  119.078988][ T5944] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  119.247979][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'.
[  119.251045][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'.
[  119.282592][ T7196] ceph: No mds server is up or the cluster is laggy
[  119.548965][    T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  119.709001][    T8] usb 7-1: Using ep0 maxpacket: 8
[  119.711791][    T8] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  119.714156][    T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  119.717013][    T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  119.720074][    T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  119.722948][    T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  119.726614][    T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  119.729541][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.934132][    T8] usb 7-1: GET_CAPABILITIES returned 0
[  119.935752][    T8] usbtmc 7-1:16.0: can't read capabilities
[  120.140515][ T7222] usbtmc 7-1:16.0: usbtmc488_ioctl_trigger returned -90
[  120.143715][ T7221] usbtmc 7-1:16.0: usbtmc488_ioctl_trigger returned -90
[  120.476608][ T7253] random: crng reseeded on system resumption
[  121.197772][ T5951] Bluetooth: hci3: command 0x0405 tx timeout
[  121.220101][ T7272] netlink: 44 bytes leftover after parsing attributes in process `syz.3.310'.
[  121.436563][ T7278] can0: slcan on ttyS3.
[  122.129883][ T7270] can0 (unregistered): slcan off ttyS3.
[  122.396637][ T5988] usb 7-1: USB disconnect, device number 3
[  123.121810][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'.
[  124.068986][ T5988] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  124.169484][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'.
[  124.177245][ T7383] syzkaller0: entered promiscuous mode
[  124.178953][ T7383] syzkaller0: entered allmulticast mode
[  124.198969][ T5988] usb 8-1: device descriptor read/64, error -71
[  124.439079][ T5988] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  124.568964][ T5988] usb 8-1: device descriptor read/64, error -71
[  124.680349][ T5988] usb usb8-port1: attempt power cycle
[  124.880703][ T7381] orangefs_mount: mount request failed with -4
[  124.898952][   T62] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  125.029002][ T5988] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  125.048932][   T62] usb 5-1: Using ep0 maxpacket: 8
[  125.050291][ T5988] usb 8-1: device descriptor read/8, error -71
[  125.052146][   T62] usb 5-1: config 7 has an invalid interface number: 161 but max is 0
[  125.055850][   T62] usb 5-1: config 7 has no interface number 0
[  125.058173][   T62] usb 5-1: config 7 interface 161 has no altsetting 0
[  125.062344][   T62] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59
[  125.065714][   T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.068627][   T62] usb 5-1: Product: syz
[  125.070017][   T62] usb 5-1: Manufacturer: syz
[  125.071375][   T62] usb 5-1: SerialNumber: syz
[  125.299020][ T5988] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  125.319332][ T5988] usb 8-1: device descriptor read/8, error -71
[  125.439339][ T5988] usb usb8-port1: unable to enumerate USB device
[  125.842120][ T7395] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  126.118819][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.122520][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.125435][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.128597][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.132978][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.135165][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.137356][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.140312][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.143069][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.145865][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.148613][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.151461][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.154277][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.157476][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.160641][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.163389][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.166149][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.169259][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.173397][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.176182][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.178979][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.181723][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.184510][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.187253][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.190357][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.193421][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.196205][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.199260][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.202219][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.205034][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.207826][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.210651][  T831] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  126.216751][  T831] hid-generic 0000:0000:0000.0002: hidraw1: <UNKNOWN> HID vffffff.ff Device [syz0] on syz0
[  126.468964][ T5981] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  126.620134][ T5981] usb 7-1: config 0 has no interfaces?
[  126.621812][ T5981] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  126.624418][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.628100][ T5981] usb 7-1: config 0 descriptor??
[  127.485376][   T62] hub 5-1:7.161: bad descriptor, ignoring hub
[  127.498980][   T62] hub 5-1:7.161: probe with driver hub failed with error -5
[  127.502086][   T62] cypress_m8 5-1:7.161: HID->COM RS232 Adapter converter detected
[  127.510283][   T62] cyphidcom ttyUSB0: required endpoint is missing
[  127.515061][   T39] kauditd_printk_skb: 26 callbacks suppressed
[  127.515075][   T39] audit: type=1326 audit(1736091447.007:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.0.345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  127.529571][   T62] usb 5-1: USB disconnect, device number 13
[  127.531913][   T39] audit: type=1326 audit(1736091447.007:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.0.345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  127.537386][   T62] cypress_m8 5-1:7.161: device disconnected
[  127.542234][   T39] audit: type=1326 audit(1736091447.007:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.0.345" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf714e579 code=0x7ffc0000
[  127.552752][ T7425] bridge0: port 3(netdevsim0) entered blocking state
[  127.556628][ T7425] bridge0: port 3(netdevsim0) entered disabled state
[  127.560026][ T7425] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  127.564896][ T7425] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  127.567158][   T39] audit: type=1326 audit(1736091447.027:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.0.345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  127.568685][ T7425] bridge0: port 3(netdevsim0) entered blocking state
[  127.578115][ T7425] bridge0: port 3(netdevsim0) entered forwarding state
[  127.578919][   T39] audit: type=1326 audit(1736091447.027:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.345" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf714e579 code=0x7ffc0000
[  127.589079][   T39] audit: type=1326 audit(1736091447.027:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.0.345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  127.596732][   T39] audit: type=1326 audit(1736091447.037:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.0.345" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf714e579 code=0x7ffc0000
[  127.603504][   T39] audit: type=1326 audit(1736091447.037:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.0.345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  127.611978][   T39] audit: type=1326 audit(1736091447.037:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.0.345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  127.619038][   T39] audit: type=1326 audit(1736091447.037:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.345" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf714e598 code=0x7ffc0000
[  127.644861][ T7425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.720944][ T7425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.783736][ T7425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.836825][ T7425] bridge0: port 3(netdevsim0) entered disabled state
[  127.850873][ T7425] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  127.853349][ T7425] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  127.856137][ T7425] bridge0: port 3(netdevsim0) entered disabled state
[  127.859986][ T7425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.958737][ T7425] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.969632][ T7425] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.974535][ T7425] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.980895][ T7425] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.522665][ T7446] overlay: Unknown parameter 'userxattr:mask'
[  129.130298][    T9] usb 7-1: USB disconnect, device number 4
[  129.601758][ T7479] ucma_write: process 328 (syz.2.359) changed security contexts after opening file descriptor, this is not allowed.
[  130.306833][ T7501] ------------[ cut here ]------------
[  130.309096][ T7501] WARNING: CPU: 1 PID: 7501 at mm/page_table_check.c:209 __page_table_check_ptes_set+0x28d/0x3e0
[  130.312102][ T7501] Modules linked in:
[  130.313365][ T7501] CPU: 1 UID: 0 PID: 7501 Comm: syz.0.363 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[  130.317533][ T7501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  130.320709][ T7501] RIP: 0010:__page_table_check_ptes_set+0x28d/0x3e0
[  130.322611][ T7501] Code: ff 48 83 fd 1d 74 1d e8 c1 ee 91 ff 83 ed 1a bf 01 00 00 00 89 ee e8 f2 f0 91 ff 83 fd 01 0f 87 64 fe ff ff e8 a4 ee 91 ff 90 <0f> 0b 90 e9 56 fe ff ff e8 96 ee 91 ff 48 8b 1c 24 31 ff bd 01 00
[  130.328104][ T7501] RSP: 0018:ffffc900045af440 EFLAGS: 00010287
[  130.329939][ T7501] RAX: 00000000000593bb RBX: ffff88804dd4d980 RCX: ffffc90007871000
[  130.332248][ T7501] RDX: 0000000000080000 RSI: ffffffff8207610c RDI: 0000000000000005
[  130.334522][ T7501] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
[  130.336805][ T7501] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000001
[  130.339193][ T7501] R13: ffff88804e18b0c0 R14: 0000000000000004 R15: 1ffff920008b5e8a
[  130.341508][ T7501] FS:  0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:00000000f5140b40
[  130.344061][ T7501] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  130.345986][ T7501] CR2: 00000000f4cbbda4 CR3: 0000000059fa8000 CR4: 0000000000352ef0
[  130.348273][ T7501] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  130.350633][ T7501] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  130.352912][ T7501] Call Trace:
[  130.353889][ T7501]  <TASK>
[  130.354769][ T7501]  ? __warn+0xea/0x3c0
[  130.355978][ T7501]  ? __page_table_check_ptes_set+0x28d/0x3e0
[  130.357720][ T7501]  ? report_bug+0x3c0/0x580
[  130.359133][ T7501]  ? handle_bug+0x54/0xa0
[  130.360409][ T7501]  ? exc_invalid_op+0x17/0x50
[  130.361778][ T7501]  ? asm_exc_invalid_op+0x1a/0x20
[  130.363249][ T7501]  ? __page_table_check_ptes_set+0x28c/0x3e0
[  130.365003][ T7501]  ? __page_table_check_ptes_set+0x28d/0x3e0
[  130.366735][ T7501]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[  130.368570][ T7501]  ? flush_tlb_mm_range+0x187/0x330
[  130.370164][ T7501]  ? __folio_rmap_sanity_checks+0x1a6/0x540
[  130.371920][ T7501]  ? const_folio_flags+0x5b/0x100
[  130.373409][ T7501]  try_to_migrate_one+0x1b3b/0x3310
[  130.374954][ T7501]  ? __pfx_try_to_migrate_one+0x10/0x10
[  130.376567][ T7501]  ? folio_lock_anon_vma_read+0x2fe/0xd40
[  130.378253][ T7501]  ? __pfx___might_resched+0x10/0x10
[  130.379875][ T7501]  ? __pfx_try_to_migrate_one+0x10/0x10
[  130.381478][ T7501]  rmap_walk_anon+0x2ca/0x710
[  130.382846][ T7501]  try_to_migrate+0x2ba/0x300
[  130.384243][ T7501]  ? __pfx_try_to_migrate+0x10/0x10
[  130.385752][ T7501]  ? __pfx_try_to_migrate_one+0x10/0x10
[  130.387355][ T7501]  ? __pfx_folio_not_mapped+0x10/0x10
[  130.389011][ T7501]  ? __pfx_folio_lock_anon_vma_read+0x10/0x10
[  130.390773][ T7501]  ? __pfx_invalid_migration_vma+0x10/0x10
[  130.392440][ T7501]  ? folio_get_anon_vma+0xdd/0x760
[  130.393945][ T7501]  migrate_pages_batch+0x9b5/0x3150
[  130.395479][ T7501]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  130.397387][ T7501]  ? __pfx_migrate_pages_batch+0x10/0x10
[  130.399133][ T7501]  ? __pfx_walk_pgd_range+0x10/0x10
[  130.400669][ T7501]  migrate_pages_sync+0x109/0x8f0
[  130.402136][ T7501]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  130.404043][ T7501]  ? queue_pages_test_walk+0x279/0x410
[  130.405645][ T7501]  ? __pfx_migrate_pages_sync+0x10/0x10
[  130.407261][ T7501]  migrate_pages+0x1a46/0x21f0
[  130.408670][ T7501]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  130.410644][ T7501]  ? __pfx_migrate_pages+0x10/0x10
[  130.412132][ T7501]  ? do_mbind+0x4dd/0xe90
[  130.413394][ T7501]  ? __pfx_lock_release+0x10/0x10
[  130.414873][ T7501]  ? up_write+0x1b2/0x520
[  130.416142][ T7501]  do_mbind+0x6d2/0xe90
[  130.417363][ T7501]  ? __pfx_do_mbind+0x10/0x10
[  130.418749][ T7501]  ? lock_acquire.part.0+0x11b/0x380
[  130.420359][ T7501]  ? __pfx_get_nodes+0x10/0x10
[  130.421778][ T7501]  kernel_mbind+0x1e8/0x200
[  130.423099][ T7501]  ? __pfx_kernel_mbind+0x10/0x10
[  130.424671][ T7501]  __do_fast_syscall_32+0x73/0x120
[  130.426176][ T7501]  do_fast_syscall_32+0x32/0x80
[  130.427609][ T7501]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  130.429552][ T7501] RIP: 0023:0xf714e579
[  130.430735][ T7501] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  130.436194][ T7501] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 0000000000000112
[  130.438581][ T7501] RAX: ffffffffffffffda RBX: 0000000020001000 RCX: 0000000000800000
[  130.440924][ T7501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  130.443184][ T7501] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  130.445451][ T7501] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  130.447705][ T7501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  130.450051][ T7501]  </TASK>
[  130.450951][ T7501] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  130.453032][ T7501] CPU: 1 UID: 0 PID: 7501 Comm: syz.0.363 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[  130.456040][ T7501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  130.459113][ T7501] Call Trace:
[  130.460081][ T7501]  <TASK>
[  130.460937][ T7501]  dump_stack_lvl+0x3d/0x1f0
[  130.462288][ T7501]  panic+0x71d/0x800
[  130.463420][ T7501]  ? __pfx_panic+0x10/0x10
[  130.464719][ T7501]  ? show_trace_log_lvl+0x29d/0x3d0
[  130.466235][ T7501]  ? __page_table_check_ptes_set+0x28d/0x3e0
[  130.467966][ T7501]  check_panic_on_warn+0xab/0xb0
[  130.469401][ T7501]  __warn+0xf6/0x3c0
[  130.470540][ T7501]  ? __page_table_check_ptes_set+0x28d/0x3e0
[  130.472275][ T7501]  report_bug+0x3c0/0x580
[  130.473522][ T7501]  handle_bug+0x54/0xa0
[  130.474735][ T7501]  exc_invalid_op+0x17/0x50
[  130.476053][ T7501]  asm_exc_invalid_op+0x1a/0x20
[  130.477454][ T7501] RIP: 0010:__page_table_check_ptes_set+0x28d/0x3e0
[  130.479348][ T7501] Code: ff 48 83 fd 1d 74 1d e8 c1 ee 91 ff 83 ed 1a bf 01 00 00 00 89 ee e8 f2 f0 91 ff 83 fd 01 0f 87 64 fe ff ff e8 a4 ee 91 ff 90 <0f> 0b 90 e9 56 fe ff ff e8 96 ee 91 ff 48 8b 1c 24 31 ff bd 01 00
[  130.484818][ T7501] RSP: 0018:ffffc900045af440 EFLAGS: 00010287
[  130.486567][ T7501] RAX: 00000000000593bb RBX: ffff88804dd4d980 RCX: ffffc90007871000
[  130.488928][ T7501] RDX: 0000000000080000 RSI: ffffffff8207610c RDI: 0000000000000005
[  130.491212][ T7501] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
[  130.493499][ T7501] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000001
[  130.495772][ T7501] R13: ffff88804e18b0c0 R14: 0000000000000004 R15: 1ffff920008b5e8a
[  130.498042][ T7501]  ? __page_table_check_ptes_set+0x28c/0x3e0
[  130.499746][ T7501]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[  130.501563][ T7501]  ? flush_tlb_mm_range+0x187/0x330
[  130.503067][ T7501]  ? __folio_rmap_sanity_checks+0x1a6/0x540
[  130.504806][ T7501]  ? const_folio_flags+0x5b/0x100
[  130.506263][ T7501]  try_to_migrate_one+0x1b3b/0x3310
[  130.507752][ T7501]  ? __pfx_try_to_migrate_one+0x10/0x10
[  130.509331][ T7501]  ? folio_lock_anon_vma_read+0x2fe/0xd40
[  130.510981][ T7501]  ? __pfx___might_resched+0x10/0x10
[  130.512517][ T7501]  ? __pfx_try_to_migrate_one+0x10/0x10
[  130.514106][ T7501]  rmap_walk_anon+0x2ca/0x710
[  130.515495][ T7501]  try_to_migrate+0x2ba/0x300
[  130.516867][ T7501]  ? __pfx_try_to_migrate+0x10/0x10
[  130.518384][ T7501]  ? __pfx_try_to_migrate_one+0x10/0x10
[  130.519976][ T7501]  ? __pfx_folio_not_mapped+0x10/0x10
[  130.521470][ T7501]  ? __pfx_folio_lock_anon_vma_read+0x10/0x10
[  130.523223][ T7501]  ? __pfx_invalid_migration_vma+0x10/0x10
[  130.524923][ T7501]  ? folio_get_anon_vma+0xdd/0x760
[  130.526402][ T7501]  migrate_pages_batch+0x9b5/0x3150
[  130.527912][ T7501]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  130.529798][ T7501]  ? __pfx_migrate_pages_batch+0x10/0x10
[  130.531372][ T7501]  ? __pfx_walk_pgd_range+0x10/0x10
[  130.532794][ T7501]  migrate_pages_sync+0x109/0x8f0
[  130.534221][ T7501]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  130.536114][ T7501]  ? queue_pages_test_walk+0x279/0x410
[  130.537654][ T7501]  ? __pfx_migrate_pages_sync+0x10/0x10
[  130.539178][ T7501]  migrate_pages+0x1a46/0x21f0
[  130.540485][ T7501]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  130.542335][ T7501]  ? __pfx_migrate_pages+0x10/0x10
[  130.543805][ T7501]  ? do_mbind+0x4dd/0xe90
[  130.545048][ T7501]  ? __pfx_lock_release+0x10/0x10
[  130.546492][ T7501]  ? up_write+0x1b2/0x520
[  130.547711][ T7501]  do_mbind+0x6d2/0xe90
[  130.548869][ T7501]  ? __pfx_do_mbind+0x10/0x10
[  130.550227][ T7501]  ? lock_acquire.part.0+0x11b/0x380
[  130.551781][ T7501]  ? __pfx_get_nodes+0x10/0x10
[  130.553172][ T7501]  kernel_mbind+0x1e8/0x200
[  130.554510][ T7501]  ? __pfx_kernel_mbind+0x10/0x10
[  130.555972][ T7501]  __do_fast_syscall_32+0x73/0x120
[  130.557453][ T7501]  do_fast_syscall_32+0x32/0x80
[  130.558870][ T7501]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  130.560658][ T7501] RIP: 0023:0xf714e579
[  130.561804][ T7501] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  130.567278][ T7501] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 0000000000000112
[  130.569567][ T7501] RAX: ffffffffffffffda RBX: 0000000020001000 RCX: 0000000000800000
[  130.571832][ T7501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  130.574019][ T7501] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  130.576247][ T7501] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  130.578446][ T7501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  130.580649][ T7501]  </TASK>
[  130.582180][ T7501] Kernel Offset: disabled
[  130.583827][ T7501] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:37:29  Registers:
info registers vcpu 0

CPU#0
RAX=00000000002e0fbf RBX=0000000000000000 RCX=ffffffff8b1a5819 RDX=0000000000000000
RSI=ffffffff8b4cd300 RDI=ffffffff8bb17100 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20
R8 =0000000000000001 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000
R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce7d0 R15=0000000000000000
RIP=ffffffff8b1a6bff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020a96000 CR3=0000000059948000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002cc00000000 0000000400000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85143ef5 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc900045aeda8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007
R12=0000000000000000 R13=0000000000000020 R14=ffffffff85143e90 R15=0000000000000000
RIP=ffffffff85143f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f4cbbda4 CR3=0000000059fa8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000000011c021 RBX=0000000000000002 RCX=ffffffff8b1a5819 RDX=0000000000000000
RSI=ffffffff8b4cd300 RDI=ffffffff8bb17100 RBP=ffffed1003a55000 RSP=ffffc9000048fe08
R8 =0000000000000001 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000000
R12=0000000000000002 R13=ffff88801d2a8000 R14=ffffffff901ce7d0 R15=0000000000000000
RIP=ffffffff8b1a6bff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055a0afe1a3d8 CR3=0000000073936000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000167b53 RBX=0000000000000003 RCX=ffffffff8b1a5819 RDX=0000000000000000
RSI=ffffffff8b4cd300 RDI=ffffffff8bb17100 RBP=ffffed1003a55488 RSP=ffffc9000049fe08
R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000
R12=0000000000000003 R13=ffff88801d2aa440 R14=ffffffff901ce7d0 R15=0000000000000000
RIP=ffffffff8b1a6bff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f50c5da4 CR3=000000000db7e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009800000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000